https://forum.defcon.org/ Random pile of deep toughts about hacking, life and travel... with a touch of spicy rum. en Fri, 01 May 2026 05:11:38 GMT vBulletin 60 https://forum.defcon.org/images/misc/rss.png https://forum.defcon.org/ https://forum.defcon.org/node/255668 Fri, 01 May 2026 01:47:45 GMT sudo fstrim / Over time, SSD performance can degrade due to the way they handle data deletion and storage. Linux offers a feature called TRIM to address this issue. TRIM is a command that allows the operating system to inform the SSD which blocks of data are no longer in use, enabling the drive... sudo fstrim /
Over time, SSD performance can degrade due to the way they handle data deletion and storage. Linux offers a feature called TRIM to address this issue. TRIM is a command that allows the operating system to inform the SSD which blocks of data are no longer in use, enabling the drive to perform internal garbage collection more efficiently.

Intelligence analysts should be self-conscious about their reasoning processes. They should think about how they make judgments and reach conclusions, not just about the judgments and conclusions themselves. — Psychology of Intelligence Analysis by Richard J. Heuer, Jr.

################################################## ########

Some years ago I was having a great chat with a friend of mine in which we discussed how does one know if we are listening to great music?
We arrived at the general conclusion that we can be sure that we found something great (people, art, music, food), if every time that we got in touch with it we discovered some hidden new good or enlightening/surprising aspect of it that we couldn't grasp at first sight. "Psychology of Intelligence Analysis" from Heuer is one of those books that I have to read again every five years or so, every time hits different and I suspect that the book hasn't changed at all since its publication on 1999.

I periodically revisit also my own definition of Hacker, because I think is a good mental exercise to determine my approximate position in the path.

I have come to the conclusion that, to tamper with a system that other people made I must understand it first profoundly, and then try to use it in ways different from those the original creator originally intended. I'm obliged to understand the programming logic that the creator of the system had in his mind while creating it.

So I must understand others thoughts , but what happens if I don't really understand my internal chain of thoughts and the neuronal paths that derive into judgements and actions?
then
I am a slave of my own faulty programming;

As an eternal student of Hacking and Intelligence disciplines, it is my duty then to be permanently aware of my own internal structures of analysis to be able to understand others and find the hack, the vulnerability, the path that nobody has taken and mark it with bright paint to be known and fixed.

I have functional CPTSD from several years now, and until recently something appeared clearly to me (I saw it as if a deep mist disappeared suddenly and revealed a whole map that filled the horizon in front of me) : that sadly the struggle to understand it and heal... it has made me a better hacking/intelligence professional.

I'm still on the way, I keep studying and making a LOT of mistakes,
I haven't found satori/enlightenment...
But something has changed in these months, I know that (maybe) even the most uncomfortable obstacle in your path could be used as a tool if you only take the time to understand it and it will teach you some really hard shit that you won't have listened otherwise.

So as Daisuke Aramaki said to Major Motoko Kusanagui in Ghost in the Shell:

"When we see our uniqueness as a virtue... only then do we find peace".

See you on the road Gl1d3r... ]]> Br3thr3n 0f th3 C04st D3lt4 M1cr0 https://forum.defcon.org/node/255668 https://forum.defcon.org/node/255600 Sat, 11 Apr 2026 02:15:25 GMT "The visions are clear now. I see possible futures, all at once.
Our enemies are all around us, and in so many futures they prevail...
But I do see a way, there is a narrow way through."
Paul Atreides, Dune.

###################

-No Kid, computers do NOT "think", they process.
(one of my trainers at CERT UNAM)

###############


This past two months has been really interesting/challenging, and I had to self reflect and meditate a lot on what I do for a living and the future of it.

There has been two events that marked this times of change deeply:

• The first one is that I resigned from my manager position, I was able to see the end of the road beforehand, -almost in a premonition-, so I decided to step off CERT/CTI and IR to study again and prepare myself ...
• The second one: the other side of the coin, one of my closest friends (a proficient cybersecurity professional, with one of the highest job ethic standards that I know, and that's a LOT)... was laid off unceremoniously.

AI isn't coming anymore, it is here and it's consequences will be felt everywhere.

How we should face this times of change?? ... I think the main attitude that will make a difference relies on what Doctorow calls "process knowledge", that is the deep root bare-foot understanding of a tradecraft that can only come from real experience (over and over), it is not a checklist and it can not be summarized on manuals or playbooks, so hence it can not be automated into AI. Once you have the nuances of the "know how" you will have to combine it with the will and ability to think deeply and critically on the specific characteristics of each organization, each case, each business logic, each setting... and make a thoughtful and reasoned decision, I think only the people who have this tools will survive the AI tsunami.

For those companies that despise or ignore the "process knowledge" of their employees, the end lies inevitably ahead. They either will be consumed by the hype vortex of AI and will implement it without any real deep analysis, eventually having to rollback to chaos, or they will be left behind. They will NOT be able to survive the change that it's coming.

To make matters more difficult, and add some fog to the already muddy landscape, we have some ridiculous opinions like the CEO of nvidia (among all the other "AI bros" clowns like Altman) that stated: "If I was a student I will first focus on AI" , "you don't need to code anymore", and a whole lot of similar vocal farts that come from the same pile of shit: let's turn the user ignorant and dependent.

Marc Vidal shares some insights on a path, he states in his you tube channel an astonishing reflection: if we follow the ignorance road that the "AI bros" are suggesting, we will be cutting the same stairway on which we are stepping, in one generation there will be no more seniors that have the "know how"/"process knowledge" to make real decisions. The training on cybersecurity will be harder: Yes, but it is essential now more than ever because we have to be in-depth proficient in two knowledge fields at the same time. The cybersecurity professional will have to be double prepared, in cybersecurity AND in AI.

There is only a thin path to ride this wild horse: integration of real live process knowledge to THINK and decide critically on AI output. Nothing more.

As "Mua'dib" said: There is a narrow way through.

See you around Glider... 👾]]> Br3thr3n 0f th3 C04st D3lt4 M1cr0 https://forum.defcon.org/node/255600 https://forum.defcon.org/node/255356 Wed, 28 Jan 2026 00:55:11 GMT The Kraken is a malformed monster. The kraken (/ˈkræ.kən/ (https://en.wikipedia.org/wiki/Help:IPA/English); from Norwegian (https://en.wikipedia.org/wiki/Norwegian_language): kraken, /ˈkrɑː.kən/ (https://en.wikipedia.org/wiki/Help:IPA/English)) is a legendary... The Kraken is a malformed monster.

The kraken (/ˈkræ.kən/; from Norwegian: kraken, /ˈkrɑː.kən/) is a legendary sea monster of enormous size, per its etymology something akin to a cephalopod.... It is believed that the legend of the Kraken may have originated from sightings of giant squid, which may grow to 10.5 metres (34 ft) in length. The word "kraken" in English derives from Norwegian. According to a Norwegian dictionary, the root meaning of krake is "malformed or overgrown, crooked tree".
​
The Kraken tentacles are everywhere now... I received this job offer to "build and train cutting-edge AI models" into Cyber Threat Intelligence, the objective of the AI model is to eventually drain my knowledge and leave me without a job. Nothing new. The company that advertises this offer has several hundred more positions, all of them are to train AI models into several and diverse fields of knowledge, from IT trough cybersecurity, chemistry, finances, writing, cinematography, translation... oddly the page of the organization uses the logos of prestigious universities like Berkeley, Stanford, Carnegie Melon, Oxford among others.

In a nutshell you get paid to be slowly drain your hard earned knowledge. To follow that path of self-deprecation the organization asks for a obligatory interview with the applicant, the interviewer is AI (sounds kind of sadly cool actually).

But the real hideous, disgusting caveat is in the small letters of their Terms of Use & Privacy.

"Alignerr is a global platform for flexible AI training work. Through the Services, you may have the opportunity to participate in an AI-conducted, video-recorded interview (the “Interview”). Among other things, the Interview may help us determine if you are qualified to become a member of the Alignerr Community. You hereby grant us an unlimited, irrevocable, worldwide, royalty-free, sublicenseable through multiple tiers, perpetual right to use, reuse, modify, display, publish and disseminate the Interview and your name, audio, photographic, video, and other likeness of you, as well as any materials you make available for the purposes of the Interview including in each case, any portion thereof (collectively, the “Interview Materials”) for any purpose. Alignerr and its successors, licensees and assigns shall own all right, title and interest in and to the Interview and have your permission to record the Interview, download, broadcast, distribute, exhibit, evaluate, make derivative works of and otherwise fully exploit the Interview, and allow others to do all of the foregoing, in any and all media now known or hereafter devised including, without limitation, via the internet, mobile and handheld devices, all other forms of digital transmission and exhibition throughout the world in perpetuity."

That is a blood-signed contract with the devil.

I wonder if some of the grandsons of that poor bastards that sign that devil's contract, will see (50 years from now) their AI-bot-ancestors advertising with their grandfather faces and voices over and over trough history, will they still remember the day that they sold their souls, knowledge, face, voice, biometrics for $35 dlls an hour.. for PERPETUITY!!!?!

I wonder if it's something really broken here, have we slowly but inevitably summoned the crooked monster that will devour us all?

Unmistakably something has changed since I got into technology and hacking more than ten years ago.

As the scene dialogue between Captain Sparrow and Barbosa next to the Kraken goes:

B. -The problem with being the last of anything is being by there be nothing left at all.
S. -Sometimes things come back mate, we're living proof you and me.
B. -Aye but that's a game of long odds ain't it?, there's never a guarantee of coming back. Passing on that's dead certain.
S. -Summoning the Brethren in court then it is?
B. -I really hope that.
S. -That's a sad commentary in and of itself.
B. -The world used to be a bigger place.
S. - The world still the same... it's just less in it.

Gliders, hold fast and prepare. Do not gift your hard earned knowledge and go gently into the dark abyss of AI. Use it and not let it use you.

The Kraken has emerged.

Only together we will survive.


🐙☠]]> Br3thr3n 0f th3 C04st D3lt4 M1cr0 https://forum.defcon.org/node/255356