Patryk Krawaczyński @agresor@infosec.exchange (@nfsec_pl) header
Patryk Krawaczyński @agresor@infosec.exchange (@nfsec_pl) profile picture

A-dvanced G-enetic R-esearch E-arly S-imulated O-n R-eality

Polska
Joined January 2016
Photo by Patryk Krawaczyński @agresor@infosec.exchange (@nfsec_pl)Photo by Patryk Krawaczyński @agresor@infosec.exchange (@nfsec_pl)
A Program Is Secure If … • It does what it’s supposed to • It doesn’t do anything else - Casey Schaufler
1
6
Kontrola modułów i protokołów sieciowych na przykładzie SCTP ( nfsec.pl/security/6734 ) #linux #security youtube.com/watch?v=8TLr4p0w…
1
129
Patryk Krawaczyński @[email protected] retweeted
The world’s largest residential proxy network runs on consent, TLS and vibes. The TV is always watching and apparently it is also available for contract work in surveillance or data acquisition? Bright Data sells access to a residential proxy network, the kind customers use to route requests through real home IP addresses instead of datacenter IPs that Cloudflare, DataDome and HUMAN are trained to block. The supply comes from an SDK embedded in consumer apps. So: CTV games, messengers, mobile apps and screensavers. With consent somewhere upstream, the device becomes an exit node. The TV is perfect for this job. It is plugged in, on WiFi, often unattended and barely supervised. It also asks for consent through a privacy policy and a remote-control UI, which is one way to make “informed choice” look like an endurance sport. One config flag tells the SDK to ignore whether the screen is on. Another tells it to ignore whether the user is on a call. In this economy, watching TV counts as downtime. blog.includesecurity.com/202…
14
107
19
589
175,142
Patryk Krawaczyński @[email protected] retweeted
3
17
3
128
2,700
Patryk Krawaczyński @[email protected] retweeted
"Dad, what was it like playing CTFs before AI?"
26
273
35
1,691
181,968
Patryk Krawaczyński @[email protected] retweeted
another day, another universal linux LPE
0e78b6737119a3141e466464ee2748eb84a61750958d0cb5824febbdadd875be poc.c
40
326
57
2,479
542,802
Copy Fail (CVE-2026-31431): 732 bajty do przejęcia kontroli nad systemem ( nfsec.pl/security/6718 ) #linux #kernel #exploit youtube.com/watch?v=-RuJTJga…
1
210
Patryk Krawaczyński @[email protected] retweeted
This hits really hard! 😢
253
5,527
356
17,751
625,456
Darmowa fotka przy subskrypcji. Możemy popisać na priv.
3
101
🇵🇱 Poland blocked what officials described as its strongest cyberattack on the energy sector in years. ESET links it to Russia-aligned Sandworm, which used a new DynoWiper malware to target ⚡ power plants and renewable energy systems in late Dec 2025. 🔗Details → thehackernews.com/2026/01/ne…
5
41
3
160
16,833