Blog

252 posts from 1996 to present

Browse the full archive by year

2026

A Party-Invite Phish, Watched Live

14 min read

Ten days after the Punchbowl phish, a Partiful-themed invite arrived the same way: from a real, compromised Gmail account, blind-copied to its contacts. This one runs on a different kit, a PHP fake Google sign-in with a live operator panel, reached through a QR-code redirect the operator can repoint at will. A honeypot run watched the operator check a password in 12 seconds and take over a test account in about a minute. Here is the chain, the timing, and signatures for hunting it.

Continue reading

[luad] Introducing luad 0.1.0

5 min read

luad is an early-alpha Rust CLI and library for inspecting compiled Lua extracted from firmware: bytecode profiles, disassembly, byte-level evidence, and structured exports.

Continue reading

A VoidProxy AiTM Analysis

12 min read

A party invitation arrived from a friend's real, DKIM-validated Gmail account. It passed every authentication check because it genuinely came from her, after her account was taken over by an Adversary-in-the-Middle phishing kit that reverse-proxies Google sign-in and walks straight through two-factor. Here is the full chain, a controlled honeypot result, attribution to the VoidProxy framework, defanged indicators, and detection guidance.

Continue reading

Cyrinx 2.0: Data over Sound at 39 kbps

4 min read

Cyrinx is now open source and live at cyrinx.org. It's a research modem that moves real data through the air as sound, from a laptop speaker to a phone microphone, with no radio, no pairing, and no network. Byte-verified at 36.6 kbps between a MacBook and a Pixel 7a.

Continue reading

Detailing a phishing attack: Nyasher

16 min read

A phishing email landed on a mailing list I'm on. Google had scanned the attachment and called it safe. It wasn't: behind it was a live Browser-in-the-Middle kit that steals your Google session in real time and walks straight through two-factor. Here's what was hiding behind the blob URL, and how it builds on what other researchers have found.

Continue reading

[rcsd.info] Who does the district pay? Now you can look it up

4 min read

A new Vendor Spending page, under Budget, indexes a decade-plus of district checks: search any vendor, see year-by-year totals, browse by category. And it answers the obvious question — did we really triple our spending? Mostly no: the big swings are bond construction and pass-through, not baseline operating.

Continue reading

Cyrinx: Open Source Acoustic Modem

9 min read

We just shipped the first fully symmetrical, closed-loop 2x2 MIMO acoustic transport protocol. By combining analytical SVD spatial solvers, orthogonal Zadoff-Chu pilots, and dynamic Total Harmonic Distortion (THD) sensing, we are laying the protocol and signal processing groundwork for 24 kbps over sound.

Continue reading

[Network Weather] What your router knows but won't tell you

12 min read

A while back my home network started acting strange. Not broken, exactly. Just a low-grade wrongness. Video calls would glitch for a few seconds and come back. Large file uploads would stall and resume. Speed tests mostly looked fine. Occasional ones didn't. Every tool I pointed at the problem said "looks ok to me."...

Continue reading

[Network Weather] Passive Mesh Topology Discovery from Orbi Beacon Frames

6 min read

I was pulling apart a Netgear Orbi WiFi 7 mesh system for Network Weatherhttps://networkweather.com and found an undocumented 31-byte Qualcomm vendor IE in the 5 GHz beacons from each mesh node. In these captures, one six-byte field appears to encode the node's current upstream parent, another matches the BSSID of the radio sending the beacon, and the parent field changes when the mesh re-parents...

Continue reading

AI-Assisted Networking

3 min read

I connected with a friend yesterday about his job search. He's a scientist with 20+ years of experience leading drug development teams, recently laid off because his company is winding down. Tough market right now. Biotech capital has gotten scared and shifted toward late-stage assets, which means a lot of very qualified people are looking....

Continue reading

2025

What Makes a Great Leader

1 min read

A great leader inspires a team with possibility, vision, agency, and genuine caring for their people at every level. They are willing to fearlessly dive into the details and roll up their sleeves alongside their team when needed to get the job done. They actively solicit feedback and critique to improve and create a culture where it's safe to speak up. When a hard call needs to get made, they own...

Continue reading

Rust vs Swift 6

3 min read

I re-coded a Rust library in Swift 6 this week and was surprised to see it was a third the size. It ended up with no third party dependencies beyond the system Frameworks, whereas the Rust crate pulled in several third party crates that in turn pulled in innumerable other libraries - creating a situation with multiple versions of the same library ultimately needing to be included....

Continue reading

Introducing Network Weather

2 min read

Folks; thanks for all the kind comments on my transition last week. It's time to start sharing what I'm working on now - fixing employees' remote & hybrid connectivity....

Continue reading

2024

Commercial Pilot License

2 min read

After seven+ months of work, studying my ass off for my written, and a retest after I went long on my first power-off 180, I've finally achieved a life long goal of becoming a Commercially-rated airplane pilot....

Continue reading

Browse the full archive by year