In today's episode of "Can It Run Doom": DNS fucking TXT records.
Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.
RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.
Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.
blog: https://blog.rice.is/post/doom-over-dns/
repo: https://github.com/resumex/doom-over-dns
Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.
It was always DNS.
that regex scares me to this day.
(also love that some of the characters are missing on this Mac.. weird)
I have finally un-flared my cloud, and it only took an undisclosed amount of hours of dns rabbit hole (because I’m deranged enough to host my own resolver for this)
I had to install the kitty terminal emulator for him 😸
#kitty #CatsOfMastodon #FediCats
The two hardest problems in Computer Science are:
"Aruff! I'm here to guard your arts! And chase around the pesky pixels!
"
A heart-meltingly adorable pixel art of Archie, my g-shep character, by @cantdoxthedrox
Also, my fluffy dragon was super excited when they got theirs 
Anna's Archive backed up Spotify. They got 99.9% of metadata, and 300TB of music representing 86 million tracks - original 160kbps OGG for tracks with popularity>0, and re-encoded 75kbps for popularity=0. absolutely wild project.
the metadata in particular is a hugely useful data source. MusicBrainz catalogues 5 million unique ISRCs (like ISBNs but for music releases), whereas this archive has a whopping 186 million.