@nazokiyoubinbou @Viss Exactly

[cr0w@infosec.exchange]

@Viss I'm almost impressed by the evil creativity though. Almost.

[staticrocket@defcon.social]

@cR0w @Viss as far as creativity goes, this is pretty lackluster. I want to see those goofs try to trademark intrinsic names when this failes. Just full on nuclear. Prove that wonderful "Birth and Death of JavaScript" talk wrong here and now.

[viss@mastodon.social]

@StaticRocket @cR0w you mean do a disney and try to copyright the happy birthday song?

[staticrocket@defcon.social]

@Viss @cR0w yeah, give everyone another reason to run and hide at the name Oracle. (Shout out that disclaimer on the oracle linux wiki that was quietly removed a while back...)

[badsamurai@infosec.exchange]

@Viss @cR0w blocking (or limiting access to) downloads from oracle owned software and the Oracle/Oraclecloud login pages should be top of mind for every org.

Treat them like the ransomware operators they are.

Edit: Block them in your SEG too.

[h2onolan@infosec.exchange]

@Viss just gimme a damn soundblaster 16 on irq 9

[viss@mastodon.social]

@badsamurai @cR0w oh man, how fucking glorious would it be to get them inserted into the cloudflare, azureedge, fastly, cloudfront and akamai cdns as malware distribution hosts? could you imagine how awesome it would be to see all the huge cloud providers just all blacklist oracle as outright malicious at the same time?

i wonder who has a centralized list they're all imbibing...

[badsamurai@infosec.exchange]

@Viss @cR0w make an AI bot friendly (only?) domain hosting Oracle indicators and let slop do the rest?

[viss@mastodon.social]

@badsamurai @cR0w oh thats ...
hmm..

are you a websockets guy?

i have an idea.

[badsamurai@infosec.exchange]

@Viss @cR0w yes. And for extra lulz, put it on a cloudflare worker.

[viss@mastodon.social]

@badsamurai @cR0w i wonder if it is possible to hit any of the frontier LLMs using websockets in such a way that it emulates an api query... here's my thinking:
- setup a bullshit site
- load it up with the indicators you mentioned
- have a websocket call that functions as essentially an api call to an llm to ask about the state of oracle software, tell it to speak to oracle properties/ASNs hosting malware
- pipe the response back and render it on the site
- let the ourobouros begin

[viss@mastodon.social]

@badsamurai @cR0w the websocket component simply functioning as a proxy of sorts, querying an llm without a bunch of http referrer data being sent to the llm site, but the viewer/scraper visually having no clue that the content its seeing is being llm generated on the fly

this of course will likely get picked up by llm scrapers (we should encourage this)

its like.. sammy is my hero all over again

except this time, its altman, and its lolballs. not kamkar and js hilarity

[badsamurai@infosec.exchange]

@Viss @cR0w perfect. Except the snakes want to be left out. They prefer bipedal centipede.

[viss@mastodon.social]

@badsamurai @cR0w huehuehuerobouros :D

[olmst3ad@hachyderm.io]

@Viss tldr, if you don't want to patch it yourself Fedora already has the driver *probably* https://asus-linux.org/guides/cirrus-amps/

[jgrg@mstdn.science]

@cR0w @Viss This was started by Deno to invalidate Oracle's trademark: https://deno.com/blog/deno-v-oracle

[jgrg@mstdn.science]

@cR0w @Viss Posts about the case on Deno's blog. I hope they succeed! https://deno.com/blog?tag=freejavascript

[viss@mastodon.social]

@jgrg @cR0w oh hell yes

[ppxl@social.tchncs.de]

@Viss but consider this:

Playing Quake2 in a wasm browser 🤪

[julienw@pouet.chapril.org]

@Viss I remember Quake 1 on my P90. Wasn't super smooth but worked. I was so amazed by the demo, this first gigantic lava boss made in real 3d. Amazing !