an00b

Candy Tierlist: GOAT Tier: Reese's, KitKat, Dove, M&M's, Nerds, Butterfinger You Love to See It Tier: Money, Jolly Ranchers, krackel, Skittles, Sour Patch Kids, Twix, Mr. Goodbar, Snickers, Pretzels Unc Got Good Taste Actually Tier: Heath, Almond Joy, Mounds, Rolo Candy Tier: Milky Way, Flavored Tootsie Rolls, Mike & Ikes, Twizzlers, the sour rope ones, Laffy Taffy Stop Reinventing the Wheel Tier: basically every non-classic variation of Reese's, Kit Kat, M&M's, or Snickers Olive Garden Tier: Andes and Kisses Unc Tier: Caramels, Werther's Originals, York, Tootsie Rolls, 100 Grand Good Idea, Bad Execution Tier: Crunch, 3 Musketeers I'm an adult now tier: Fun Dip, Ring Pop, Smarties, Life Savers, SweetTarts, Air Heads, Fruit by the Foot Ew, Gross Tier: Runts, Hershey's, Hershey's Cookies and Creme, Hot Tamales, Chewy Lemonhead, Good and Plenty, Milk Duds, Tootsie Pops, Creme Egg I think I've just always avoided these so I don't really care to even have an opinion on them tier: Baby Ruth, Junior Mints, PayDay, Warheads, Gobstoppers Stop Being Weird Man Tier: Apple, Hubba Bubba, Toothbrush, Raisinettes, Raising New Ones Have Not Been Made Since 1995 Tier: Candy Corn, the random ones in orange and black wrapping, the random ones in strawberry wrapping, the krabby patty gummy wtf are these tier: I don't really know what they are either so we're both kind of blind here

candy tierlist (most of these are vaguely from memory)

Faith Generative AI answers prayers. That's why we should be terrified of it.

The most profound threat posed by generative AI is the fervent belief it engenders. Its most ardent believers are in a cult, whether we want to say so or not. We might as well say so.

We’re Suing ICE for Its $2 Million Spyware Contract 404 Media has filed a lawsuit against ICE for access to its contract with Paragon, a company that sells powerful spyware for breaking into phones and accessing encrypted messaging apps.

NEW: 404 Media is suing ICE. We have filed a lawsuit demanding the agency release its $2 million contract with Paragon, a company that makes powerful spyware to break into phones and read messages from encrypted chat apps www.404media.co/were-suing-i...

The Trump regime is adept at leveraging actual long-simmering policy issues in decades-long morass in congress, "Doing Something" that kinda super fucks it all up in a totally new way, then basking in opponents insisting everything was fine before – which voters know it wasn't.

Sick hack though...

YouTube video by nayyyr Real Analysis vs Abstract Algebra

Genuine question for the math people out there - do you think your undergrad Real Analysis or Abstract Algebra class was harder? Some people are commenting on a video I made over a year ago saying "acktually you should have used a harder abstract problem to make this fair 🤓" and it's bothering me.

curse of ra on any developers that encrypt the data within the https traffic, not making my life or yours any easier 𓀀 𓀁 𓀂 𓀃 𓀄 𓀅 𓀆 𓀇 𓀈 𓀉 𓀊 𓀋 𓀌 𓀍 𓀎 𓀏 𓀐 𓀑 𓀒 𓀓 𓀔 𓀕 𓀖𓀗

wondering if I could be the Sajam of infosec and make the same videos every 6-12 months about
- why certifications aren't everything
- why ctfs are good and bad
- responsible disclosure
- something something AI
- etc.

I suppose it could always be blog format but just talking is way easier 🤷‍♂️

Pentagon Document: U.S. Wants to “Suppress Dissenting Arguments” Using AI Propaganda The U.S. is interested in acquiring machine-learning technology to carry out AI-generated propaganda campaigns overseas.

"Computer science isn't political!", they said. "I'm just going to develop AI products for startup cash and to draw cute girls", they said. "You're over reacting and making everything political", they said.

We need ethics training in engineering.

Gotta get yourself a pack of Indomie or Buldak instant noodles for those draining days

Ah, good call out, I knew I was missing something about sites vs origins, which is why I only acknowledged it but didn't talk about it. I'll make edits later today, thanks!

GET IT TWISTED 🌪 , NEVER DO DYNAMIC ANALYSIS ✅ . PLEASE OPEN IDA 🕵️‍♀️. RELABELING SYMBOLS IS AN INVESTMENT 🎰 AND AN INVESTMENT ONLY 🤑 . YOU WILL PROFIT 💰 , YOU WILL WIN ❗ . YOU WILL DO ALL OF THAT 💯 , YOU UNDERSTAND ⁉ YOU WILL BE SECURE 💵 📈 AND REBUILD YOUR FUCKING LIFE 🤯 .

Client-Side Alphabet Soup: SOP, CORS, CSRF, XSS, CSP When James Kettle says HTTP/1.1 must die, he has a good reason. When I say HTTP must die, I just don't want to deal with it.

new blog after who knows how long - a deep dive into how a bunch of web protections fit together and also an example of how you can mess that up so bad you find CSRF in a GraphQL API

notateamserver.xyz/blog/cors-xs...

another fun ccdc qualifier event
pastebin.com/srwy8Df0

An Objectively Opinionated Look at Report Writing (for Penetration Testing) | root@nayyyr:~/blog# Turns out that paying attention in English class and not relying on ChatGPT for everything can pay off

Finally got around to writing a new blog post - this one's all about writing pentest reports, mainly because I don't think any certifications really do the topic justice right now

notateamserver.xyz/blog/pentest...

GET IT TWISTED 🌪 , ROLL YOUR OWN CRYPTO ✅ . PLEASE START ROLLING YOUR CRYPTO 👍. CUSTOM ENCRYPTION IS AN INVESTMENT 🎰 AND AN INVESTMENT ONLY 🤑 . YOU WILL PROFIT 💰 , YOU WILL WIN ❗ . YOU WILL DO ALL OF THAT 💯 , YOU UNDERSTAND ⁉ YOU WILL BE SECURE 💵 📈 AND REBUILD YOUR ******* LIFE 🤯 .

2024 has been the best year of music for me, this is awesome