Fellows

https://cyberplace.social/@fellows

Interested in all things digital, even though I often wish for simpler times.

Public Key

npub1x6rdj7gu3magc9j29a042njygsjx9hg3husmk45sjf9n7rhx85fqs0qtcd

NIP-05 Address

fellows_at_cyberplace.social@momostr.pink

Profile Code

nprofile1qqsrdpke0ywga75vze9z7h64fezygfrzm5gm7gdm26gfyjelpmnr6yssdm5p9

Author Public Key

npub1x6rdj7gu3magc9j29a042njygsjx9hg3husmk45sjf9n7rhx85fqs0qtcd

Show more details

Last Notes

2025-03-08 17:41:31

- reply

I was thinking about records the other day. Then my mind went to laser discs. I was recounting going to a demonstration with my Dad of one of the first retail production laser disc systems. The movie that was demoed was “True Lies” and it was on a laser disc which was about the same size as a standard record. I remember at the time being in awe because the picture and sound were out of this world.

2025-03-04 13:43:12

- reply

is this being abused for file sharing?

2025-02-26 20:09:47

I’ve been seeing an increase in the number of malicious emails using infogram[.]com in the lure url.
Apparently infogram[.]com is trusted by over 10M+ users worldwide. I wonder if they include malicious threat actors in that count?
Infogram[.]com says you can use their service for charts, maps, Infographics, Reports, and More. I guess phishing is “more”. Since the service has a free tier that lets you publish online, you can see why it’s perfect for your budding threat actor.
#ThreatIntel
https://cyberplace.social/system/media_attachments/files/114/071/999/268/240/541/original/f5f89e0c657d6e68.png
https://cyberplace.social/system/media_attachments/files/114/071/999/581/703/994/original/d313524c059da43f.png
https://cyberplace.social/system/media_attachments/files/114/071/999/905/320/029/original/6c484bd4de92bb1c.png

2025-02-22 00:13:51

- reply

Thanks for the info! From their site: “The Logo API is offered as a free, legacy product and is unsupported at this time”. Good chance that means it’s not monitored for abuse! Hopefully they’ll EOL it before December 1st.

2025-02-21 22:24:31

- reply

I have to watch the entire season again. Too much times passed since it originally came out that I need a refresher.

2025-02-21 21:44:31

Recently I’ve seen a number of good looking malicious emails pretending to be from various orgs, all with included company logos.
Looking over the HTML of the emails I noticed an image URL common to all of them, logo.clearbit[.]com. It was in the image tag for logo.
It’s a company logo API that uses logo.clearbit[.]com/“domain.whatever” for logo creation.
Might be a domain you want to start filtering for, as the API is clearly being abused thanks to it being absolutely free.
#ThreatIntel

2025-02-19 19:31:38

- reply

that doesn’t seem very humane

2025-02-19 00:21:33

- reply

it had a good run

2025-02-18 15:20:54

If you haven’t noticed malicious emails abusing Microsoft Library Description files (.library-ms), watch out and block them.
From Microsoft “Library description files are XML files that define libraries. Libraries aggregate items from local and remote storage locations into a single view in Windows Explorer.”
Threat actors, in an effort to evade detection, use them as a way of connecting their target to a remote share directly via File Explorer.
https://learn.microsoft.com/en-us/windows/win32/shell/library-schema-entry
#ThreatIntel

2025-02-14 15:49:47

Over the past few days, I’ve noticed a variety of malicious emails with different styles. All of these emails use the lure URL link.shoppermeet[.]net.
Link attempts to redirect users to a Microsoft 365 phishing page for credential harvesting. The threat actor even tries to include company images and logos to make the email appear more legitimate.
#ThreatIntel

2025-02-06 23:07:44

- reply

I guess it’s no Starfield

2025-02-06 20:13:36

If you still haven’t applied Microsoft Office patches since January 2024, now might be a good time to
https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks/

2025-02-04 18:26:22

- reply

aside from graphics, is the gameplay any good?

2025-02-02 03:22:37

- reply

I think this fits the quintessential definition of “first world problem”

2025-01-28 18:41:11

Not sure if you’ve heard of Pixpa[.]com. They label themselves as “an easy, all-in-one portfolio website builder for photographers & creators…”
I’ve recently seen threat actors use Pixpa as a trusted domain within links in malicious email campaigns. Watch out as the service isn’t always photography.
#ThreatIntel
https://cyberplace.social/system/media_attachments/files/113/907/444/434/064/115/original/aaa7fc6b9d3b776a.png

2025-01-24 21:05:51

- reply

I cracked out my Nintendo Switch the other day after seeing your post about the Switch 2. As a guy born in the first half of the 1980s, maybe it’s the nostalgia, but I like the gameplay of stuff like Mario Wonder. I bet the Switch 2 outsells everything - I’m in for one.
The fact that the X/S is trailing the One in sales doesn’t seem too surprising

2025-01-24 20:43:23

- reply

wow that’s neat, and kinda terrifying.
I wonder what my neighbours would think if I started flying that over their homes. I had to write a test and get licensed just to be able to fly my drone here!

2025-01-24 20:08:20

- reply

is that vehicle something that exists in the physical world?

2025-01-21 19:34:52

- reply

I gave it a try, didn’t like it, added no value. The bar was low but they didn’t make it over.

2025-01-21 19:14:28

If you’re not blocking SVG (Scalable Vector Graphic) attachments in email messages you might want to.
I have observed something I haven’t yet seen. Malicious email messages where the attachment the threat actor wants the target to open is a to SVG file pretending to be an agreement.
The SVG file when loaded makes a HTTP call to load a remote image, it also contains a transparent layer which links to the malicious website.
Looks to be an attempt at evading detection.
#ThreatIntel

2025-01-19 18:59:23

- reply

no need to go to the theater with events so expertly scripted.

2025-01-16 16:58:00

- reply

He must be playing TMNT

2025-01-16 01:24:43

- reply

thanks for this Kevin, I have passed the info around to some MSPs I have friends working at.

2025-01-04 18:14:59

- reply

Those graphics look pretty amazing. Is this game like WWII Online? (If you’ve ever played that one) I used to play WWII Online as a teen on my old Power Mac G4 and Power Mac G5.

2025-01-03 23:19:31

- reply

your last comment is too funny! In reading the Reddit post I was thinking to myself, ‘What CEO would have the time to engage in actively reading Reddit and black listing partners who comment on their product’s security woes.’ It made me question the post’s validity lol - I will do as you suggest and check out the forums, I’m in need of a laugh.

2025-01-03 22:55:50

- reply

what’s interesting from that Reddit post is the comments surrounding the CEO - apparently blacklisting partners who mention security issues involving their products on Reddit. Hopefully that’s untrue, but most likely isn’t. I can only imagine if you represented a 3CX partner! :)

2025-01-03 22:42:04

- reply

Difficult to tell from that Reddit post what’s going on. Multiple people reporting seeing a higher number of unauthorized attempts over the holidays. Others indicating trunks being abused with high number of international calls until the SIP trunks were shutdown by the provider.
Sounds like this is malicious actors abusing 3CX systems for international calls, and not a supply chain attack like last time?

2025-01-02 21:55:16

- reply

Fair enough. I hope they all manage to land safely into new roles elsewhere. Speaking of landing and expertise, what’s going on with MS Flight Simulator 2025? I’ve missed seeing your posts featuring its wackiness :)

2025-01-02 21:41:50

- reply

what do you personally feel is the leading cause of these layoffs Kevin?

2024-12-20 18:53:11

- reply

thanks for this post, I laughed out loud!

2024-12-13 21:22:33

- reply

worst “feature” ever. Turned that off on mine. I guess if anything it’s good for a laugh.

2024-12-07 22:07:02

- reply

perhaps they’re distributing Azure now to carry the load of the game, Microsoft thanks you for your contribution.

2024-12-02 18:53:02

- reply

well done video. Maybe it was an old Enron video to begin with

2024-12-02 18:42:26

- reply

so are they legitimately back or is this a joke?

2024-11-23 23:32:08

- reply

the cloud really does ruin everything

2024-11-22 23:00:24

- reply

wow, someone really shit the bed - then rolled in it!

2024-11-22 21:16:47

- reply

I think I saw somewhere that they built it with the notion there would only be 200,000 players online at a time. So based on what you know, do you think the existing implementation could even handle 200,000 simultaneous players without issue?

2024-11-19 21:41:50

- reply

this stuff is great, please keep it coming! I’m pretty sure the person who coded that demon pilot coded the November Exchange SU 🤣

2024-11-19 19:09:48

- reply

are you sure you’re not trying to watch a Mike Tyson fight on Netflix?

2024-11-19 18:55:35

- reply

you should check and make sure it’s not installing Windows Server 2025!

2024-11-19 18:08:07

- reply

I’m strapping in to find out how many of your passengers need their inflight 🤮 bag 🫣

2024-11-15 15:54:41

- reply

I’ve based some of the games I’ve played on your toots. Is STALKER 2 a game worth trying?

2024-11-14 15:57:39

PSA: The Microsoft Exchange SU for November appears to have borked the Transport Rules service. Many reports started coming in on the Official Microsoft Exchange Team Blog in the comments section for this SU.
I know software can be hard, but this is looking to be yet another bad SU from Microsoft for Exchange.
https://techcommunity.microsoft.com/blog/exchange/released-november-2024-exchange-server-security-updates/4293125?after=MjQuOXwyLjF8aXwxMHwxMzI6MXxpbnQsNDI5Mzc0Myw0Mjk2ODU2&topicRepliesSort=postTimeAsc

2024-10-19 14:30:23

- reply

it’s just a little headset, it can’t hurt anything :)

2024-10-10 00:27:31

- reply

Too funny! Best summary in a while. However, I think I enjoyed the Patch Tuesday song the best. This is a great use of Ai, made me laugh.

2024-10-09 15:42:12

- reply

Have you guys ever watched videos by Samtime?
I watched this one last week. Seeing this post made me think of this. I find his videos pretty funny - don’t judge :)
https://youtu.be/No-Y7i-UamI?si=JmTB-_NxAHcCNOTK

2024-09-26 23:17:45

- reply

if it doesn’t have a crappy graphic you made with Paint, I tend not to worry!

2024-09-22 03:29:38

- reply

first Logitech instead of specially designed controls. Now Microsoft Excel, instead of specially designed software. What’s next? Tinkertoys?

2024-09-20 20:48:36

- reply

So were you at one time an actor before your current life?

2024-09-19 21:12:35

- reply

based on your past flying, I’m pretty sure they just 💩 in their seat!

2024-09-08 02:01:21

- reply

My iPhone 15 Pro Max has about the same cycle count as yours. However, I’m on the optimized charging option - 93% battery health.
https://cyberplace.social/system/media_attachments/files/113/099/464/899/123/958/original/81d4b7d5ec65acbb.png

2024-09-03 20:00:23

- reply

that should be an Xbox achievement for your gamerscore!

2024-08-12 17:15:20

- reply

Very sorry for your loss Kevin.

2024-08-07 18:35:40

- reply

what do you Kevin or anyone else think about the upcoming “Friend” one? If you’re a fan of Black Mirror (I am) you’d like the product video they made for it. I’m assuming this Friend one is more of a Rabbit deal than an Humane Ai Pin. Smells scammy to me.
www.friend.com

2024-08-05 14:27:00

- reply

I hope they make a movie out of the crash like “The Big Short”.

2024-05-22 23:28:50

- reply

this is one of the reasons I just abandoned Microsoft Surface. I was set to be ordering a number of them for employees and now will no longer be doing so.