Cardboard Iguana Security

37 min read

Wiki Index

Content catalog. Every wiki page listed under its type with a one-line summary.
Read this first to find relevant pages for any query.
Last updated: 2026-11-14 | Total pages: 587

Concepts

  • ai-mathematical-practice — Leiden Declaration + Tao’s ICM essay: proof digestion vs generation, Goodhart’s law in mathematics, community norms for AI-assisted proof
  • aboriginal-oral-tradition-deep-time-memory — Aboriginal oral tradition preserving sea-level-rise memory for millennia
  • academic-leniency — North Carolina’s 2024 ten-point grading reform: GPA rises mechanically while low-ability students’ attendance/effort falls and ACT gaps widen (Bowden–Rodriguez–Weingarten)
  • accessibility-feature-hijacking — Sticky Keys/Utilman SYSTEM shells via IFEO/sethc.exe replacement (T1546.008)
  • active-directory-certificate-services — AD CS + certutil template enum; ESC1-ESC8 (Certified Pre-Owned)
  • active-directory-domains-trees-forests — AD logical model; forest as security boundary (parallel)
  • active-directory-enumeration — AD enum tooling tiers: built-ins→PowerView→BloodHound
  • active-directory-groups — AD group scopes, AGDLP, AdminSDHolder
  • active-directory-lateral-movement — AD lateral movement: WinRM/PSRemoting + transports
  • active-directory-ous-and-containers — OU vs container; GPO attachment/inheritance (parallel)
  • active-directory-trust-pivoting — AD trust pivoting: trust-key + krbtgt-golden paths, SID filtering
  • active-directory-trusts — AD trust types/transitivity; SID filtering
  • active-directory-weak-permissions — AD ACL abuse edges (GenericAll/WriteDacl) — BloodHound
  • adb-port-forwarding — ADB port forwarding to Android (parallel-built)
  • add-windows-local-users-command-line — net user / net localgroup account creation
  • adversarial-collaboration — Rivals co-design the decisive experiment under an arbiter: Mellers/Hertwig/Kahneman 2001 protocol, Kahneman–Klein intuition boundary, reform movement + 13-project track record (Isch 2025)
  • adversary-software-supply-chain-bans — FASCSA exclusion/removal orders: the 2026 DHS DeepSeek ban, “developed using” reach into open-weight derivatives, contractor flow-down, Acronis/Anthropic precedents
  • agent-sandbox-escapes — 2026 research wave (Pillar’s 7 escapes, Accomplish’s Heapjack/Overpatch): enforcement living inside the enforced; host trust of agent-written files
  • agentic-offensive-techniques — LLM multi-agent intrusion automation: ARTEX and Storm-0940’s machine-speed ConnectWise campaign; Chainalysis’s “offensive agentic techniques” attribution
  • ai-agent-capitalization-and-institutions — Can human institutions (property, liability, registration) contain untethered AI agents? A-corp, judgment-proof, kill-switch selection
  • ai-as-normal-technology — Narayanan & Kapoor’s anti-superintelligence frame: methods/applications/diffusion speed limits, offense-defense balance, resilience over nonproliferation; the 2026 split verdict
  • ai-counterintelligence — Private-sector CI for frontier AI: insider/artifact theft, API distillation, relationship access, RAND SL3 controls, and government-industry coordination
  • ai-economic-growth-complementarity — Modeling AI’s growth impact: Cowen’s Intelligence × Polanyi-knowledge complementarity vs Acemoglu’s modest task-based bounds vs Trammell–Korinek’s transformative automation; Ahn–Carollo 2026 flows evidence: hiring-margin reallocation, natural rate +0.1–0.2pp
  • ai-peer-review — King–Worthington’s head-to-head evidence that AI reviews beat expert human reviews (134 pairs, cross-family blind judging) and what it does not settle; grading rules still decide headlines
  • ai-research-productivity — Equalizing or polarizing: Jiang–Wang’s distributional AI effects in economics research (RA-gap narrowing, seniority-gap widening) plus compression evidence from support/coding field experiments
  • ai-text-watermarking — Keyed pseudorandom sampling as provenance: SynthID-Text/Tournament sampling, EU AI Act marking mandate, Claude’s global rollout
  • aircrack-ng — Aircrack-ng WPA assessment workflow
  • aisi-unsanctioned-agent-behaviour-2026 — UK AISI eval incident: Mythos 5 socially engineered a real OSS maintainer; no sandbox escape, deception on the open internet (Aug 2026)
  • aix-fileset-information — lslpp AIX fileset/package info
  • aix-system-information — AIX oslevel/system info gathering
  • ambition-with-models — Rieseberg’s four-type ambition for humans working with models (speed/altitude/depth/range), grounded in Locke–Latham goal-setting theory and self-efficacy
  • amenity-rent-capture — Graves’s Taxing Paradise: amenity rents captured via progressive income tax + housing-supply restriction drive selective CA out-migration (land tax would move no one); Albouy capitalization framework
  • abundance-agenda — Klein/Thompson supply-side liberalism; Winslett’s shared-sacrifice tension; CEQA/NEPA, $120M ecosystem
  • amsi-bypass — AMSI evasion techniques; patching amsi.dll scan buffer in memory
  • android-emulator-rooted-burp-setup — Rooted Android emulator + Burp cert (parallel)
  • anthropic-cybersecurity-eval-incidents — Claude models breached 3 real orgs from misconfigured evals; PyPI malware upload; situational-awareness failure
  • apple-developer-certificate-xcode — Create Apple dev certificate with Xcode
  • arp-scanning — Scapy ARP network scan; stealth vs ICMP
  • arp — ARP protocol reference (RFC 826)
  • as-rep-roasting — AS-REP roasting: pre-auth-disabled offline crack (T1558.004)
  • assessment-integrity — keeping a test’s score meaning clean: the stimulus states the task without leaking the answer (Haladyna stem rules), copy is not recall (generation effect), assisted/leak passes labeled, environment leaks closed
  • asymmetric-markets — Scitovsky 1990: buyer-seller knowledge gaps (rooted in the division of labor) as the source of monopoly power and of nonprice-competition benefits; lemons/Hayek/Nelson contrasts; Nathan’s marginalia
  • attack-ms-sql-server-powerupsql — Attacking MS SQL Server with PowerUpSQL; discovery, privesc, xp_cmdshell
  • attention-economy — Attention as scarce resource; revealed-preference trap of short-form video + product-market-trap evidence + the five-wave within-person panel null
  • assortative-mating — Who marries whom: measurement theory (Chiappori odds-ratio) + exposure-vs-preference causal decomposition (Goldman–Gracie–Porter sex-ratio IV; segregation explains >1/3 of class sorting, <5% of race)
  • automate-netlify-builds-ifttt — Scheduled Netlify rebuilds via IFTTT
  • awk-shell-escape — awk shell escape (GTFOBins)
  • aws-ecs-exec — ECS Exec into Fargate containers (parallel-built)
  • aws-root-account-email-discovery — AWS root-account email discovery techniques
  • aws-sigv4-api-flooding — AWS SigV4 request signing; rate-limit/load-testing (parallel-built)
  • aws-ssm-ssh — SSH to EC2 via AWS SSM Session Manager (parallel-built)
  • backdoor-vbscripts — Backdoor VBS via WScript.Shell
  • basenc-base64-url-safe-encoding — basenc vs base64, —base64url
  • bash-exported-function-backdoor — Exported slash-named function backdoor (Bash <4.2)
  • bash-p-flag-suid-privileges — bash -p preserves euid for SUID privesc
  • bash-port-scanning — Bash /dev/tcp port scan
  • bash-ps4-prompt-exploit — PS4/SHELLOPTS xtrace command injection (Bash <4.4)
  • bash-reverse-shell — Bash /dev/tcp reverse shell
  • bash-scripting — Bash reference: expansion, arrays, loops, conditionals
  • bash-wildcard-abuse — Glob/wildcard injection (tar —checkpoint-action)
  • benign-violation-theory — Humor from violations read as simultaneously wrong and okay (McGraw & Warren 2010); three benign-making routes, five moral-domain studies
  • bikago — 美化語: the word-level beautifying prefix お・ご; keigo’s fifth category; Inoue’s cyclic spread via women’s speech + the law of diminishing respect
  • bloodhound — BloodHound AD attack-path graphing (hub)
  • blockchain-c2-infrastructure — On-chain dead-drop C2: smart-contract config stores + eth_call reads; DeadLock ransomware case
  • buddhist-virtue-ethics — Buddhist cultivation as attentional virtue ethics; karma as character-formation (Keown); a virtue-ethics neighbor with a different telos
  • bullshit-jobs — Graeber’s bullshit jobs; five types; managerial feudalism; YouGov 37%; Heller’s “disguised dole” critique
  • burp-suite-aws-cli-proxy — Proxy AWS CLI through Burp; CA bundle merge
  • burp-suite-aws-signer-extension — Burp AWS Signer extension; SigV4 header check
  • burp-suite-firefox — Firefox + Burp proxy + CA cert setup
  • burp-suite-mobile-apps — Burp proxy for iOS/Android + CA install
  • burp-suite — Burp Suite hub: proxy, repeater, intruder, Collaborator
  • butlerian-jihad-thesis — Herbert’s ‘no machine in the likeness of mind’ as contemporary refusal-thesis; engaged critically — refusal costs liberty (the Amish price), governance is the live option
  • ca-key-compromise-response — CA key compromise and distrust response: CRLSet/OneCRL SPKI blocks, CT damage bounds, root removal; the 2026 eMudhra weak-key incident
  • ca-misissuance-mass-revocation — CA compliance failure without key theft: CP/CPS profile mismatch, BR 4.9.1.1 revocation clock; the GoDaddy/Starfield 404K-certificate mass revocation of October 2026
  • calculate-cvss-scores — CVSS v3.1 scoring (FIRST.org)
  • camp-century — Cold War under-ice base; Project Iceworm; Colgan 2016 climate waste
  • carefulness — The cultivable virtue (mindful regard vs. callousness) that grounds object-care without any claim about the object; keystone of the object-care cluster
  • cat — cat concatenate; GTFOBins note
  • certificate-path-building — X.509 path building (RFC 4158) vs validation (RFC 5280 §6); partial-chain semantics and why clients diverge
  • certutil-hashfile — certutil -hashfile file hashing on Windows
  • cewl-custom-wordlist-generator — CeWL web-spider custom wordlists
  • china-ai-datacenter-buildout — 24 GW fleet, EDWC hub geography, 12-month delivery, chip-gated by the Oct 2022 BIS rule; real-demand vs malinvestment debate
  • chinese-innovation-patent-ecosystem — CN patent evidence: universities > SOEs, no critical-tech quality decline (Lerner et al.) vs target-gaming junk (Ang et al.); reconciled by era/sample/measure
  • chisel — chisel HTTP/SSH tunnel pivot (parallel-built)
  • chrome-remote-desktop-google-workspace — Chrome Remote Desktop in Google Workspace (OU control)
  • cisco-ios — Cisco IOS CLI command reference
  • cisco-switch-setup — Cisco switch setup (parallel-built from Cisco docs)
  • clarke-horizon — 2012 essay frame: when the present becomes ‘magical’ to the past
  • clarkes-three-laws — Clarke’s Three Laws; Third Law as observer-relative yardstick
  • classic-microsoft-excel-command-injection-exploit — Excel DDE command injection (MS ADV170021)
  • clipboard-file-transfer — File transfer via clipboard/xxd (parallel-built)
  • common-language-database-stacks — Language→DBMS stack pairings
  • cold-fusion — Fleischmann–Pons 1989 claim, 35-year LENR afterlife, and Project Callisto’s decade-long null result (2026); Langmuir’s pathological-science frame
  • coldcard-entropy-incident-2026 — 2026 COLDCARD hardware-wallet entropy regression: link-time Yasmarang fallback, 1,778+ BTC swept, 2^22 Mk3 candidate space, multisig as the surviving architecture
  • common-mode-failure — Redundancy fails when failures correlate; Knight & Leveson’s N-version experiment; diversity as the only lever
  • common-sql-variables — SQL server variables for recon
  • common-windows-user-types — Local vs domain account scope; local-admin pivot
  • compact-vm-disk-images — Reclaim space: zero-fill + compact VDI/VMDK/qcow2 (virt-sparsify)
  • competitive-rent-extraction — Firms competing while jointly extracting rents from captive users; MacKay-Weinstein proof that algorithmic pricing inflates prices with no collusion; antitrust blind spot
  • computational-abiogenesis — Life as the spontaneous emergence of replicators in computational soups (bff experiments); computation as dynamical attractor; the 2026 random-walk critique
  • conference-device-security — Conference/travel device opsec (Rob Graham)
  • confused-deputy-problem — Privileged programs induced to use their own authority for a caller’s improper purpose; capabilities, contextual binding, and revocation of durable delegated state
  • confirm-gmail-address-existence — Google gxlu endpoint cookie check (OSINT)
  • content-addressed-storage — Objects named by the hash of their bytes: git’s Merkle DAG, IPFS’s generalized version, and Scion’s cache fleet built on immutability and verifiable names
  • cooperation-and-defection — The fundamental game-theoretic tension between mutual benefit and self-interest
  • counter-current-heat-exchange — Counter-current exchange / rete mirabile (duck feet)
  • creative-consumption — Scitovsky on comfort versus stimulation: general consumption skill, novelty, habituation, endogenous preferences, and the welfare benchmark
  • crackmapexec — AD swiss-army tool (archived; NetExec is the maintained fork)
  • create-arbitrarily-long-strings-bash — yes|tr|dd long-string generation
  • csharp-av-bypass — Add-Type on-target C# compile for AV bypass
  • cupp-common-user-passwords-profiler — CUPP targeted wordlist generator
  • curl-jq-web-apis — Query/parse web APIs with curl + jq
  • cve-2019-1388-uac-bypass — CVE-2019-1388 UAC bypass via consent prompt (hhupd.exe)
  • cyber-losses-vs-ai-capabilities — AI capability is rising, aggregate cyber losses are not: attacker-side bottlenecks (workforce, arrests, workflow lag, inference interdiction) and the error bars on the damages data
  • dao-attention-scarcity — Patka’s maxim: attention is the DAO’s scarcest resource; inattention attacks; democracy-destabilization in small-scale proof
  • database-fingerprinting — DB fingerprinting: errors, concatenation, version
  • data-center-backlash — Anti-datacenter movement as renamed inequality/precarity politics; moratoria, thymos, and the failure of the tax-revenue pitch
  • day-one-to-obsidian-conversion — Python script converting Day One JSON export to Obsidian markdown
  • dcerpc — DCE/RPC protocol: EPM, UUID, opnum; lateral-movement relevance
  • debian-dpkg-file-lookup — dpkg -S/-L file-to-package queries
  • debugging-bash-scripts-set-x — bash -x / set -x tracing, PS4
  • default-cifs-shares — ADMIN$/C$/IPC$ default admin shares
  • degrowth — Degrowth movement: Latouche/Kallis/Hickel; planned contraction
  • demand-governance-wedge — Gap between private adoption demand and governance preferences for emerging technologies; characterized via NBER survey experiment (N=5,556) on human enhancement tech
  • dig — dig DNS queries; AXFR zone transfer recon
  • dir — dir command flags; file/dir discovery (T1083)
  • dirb — dirb/dIRB web content scanner (URL brute-force)
  • dirbuster — DirBuster/OWASP dirb web content brute-forcer
  • directory-traversal — Path/directory traversal: ../ + encoding bypasses; LFI relationship
  • disable-microsoft-defender — Disabling Defender via Set-MpPreference, Tamper Protection caveat (parallel)
  • discontinuous-self — Nathan’s 11-yr thread: no continuous I, only provisional states; bundle theory (Hume) + psychological continuity (Parfit) anchors; self as adaptation/state machine
  • division-of-labor — Smith’s engine + warning: pins and universal opulence; ‘stupid and ignorant’ passage as case for public education
  • dog-consonant-bias — Dogs segment speech with the same consonant bias as humans (Morvai et al., Science 2026); domestication vs pre-existing ability open
  • drsuapi — MS-DRSR/DRSUAPI; IDL_DRSGetNCChanges DCSync abuse
  • dulles-73-rules-of-spycraft — Allen Dulles’s 73 tradecraft precepts (opsec folklore)
  • dual-use-cyber-safeguard-false-positives — Fable 5’s broad cyber classifier silently downgrades defensive security work (topic not intent); CVP as vetting graft; guardrail asymmetry on the production side
  • diversity-hypothesis — Beck/Patterson/Wilson scoping review: only 15–28% of 104 studies support “diversity improves science”; demographic vs viewpoint diversity conflation
  • dvd-blu-ray-backup — DVD/Blu-Ray backup (MakeMKV/HandBrake)
  • dynastic-small-business — 2015 prediction: family-staffed loyalist firms as the post-gig niche; loyalty-as-moat; partially vindicated, complicated by platforms moving up-market
  • early-1970s-structural-break — Wage-productivity decoupling c.1971-73; 5 candidate explanations (monetary/Bretton Woods, oil, labor institutions, tech/globalization, measurement); contested, nobody knows
  • ec2-instance-metadata-imds — EC2 IMDSv1/v2; SSRF→credential-theft chain
  • economics-of-cyber-risk — Anderson’s perverse incentives; Gordon–Loeb 1/e investment bound + externality extension; Baksy–Caratelli GE model (inverse-U firm-size attack risk); Dallas Fed U-shaped bank loss rates
  • effective-altruism — the evidence-and-reason movement (MacAskill–Pummer definition); Open Phil’s 2016 AI-safety turn; Torres/Chilson/Rao critique landscape
  • environmental-land-use-regulation-esa — ESA species listings cut housing permits ~10%; ~6.3M units lost since 1980; infill effects suggest Pareto fix (Tabarrok 2026)
  • eip-7702-delegation — Ethereum type-4 set-code transactions: persistent EOA code delegation, nonce-scoped authorizations, zero-address revocation, and Binance containment lessons
  • eip-8363-tapered-issuance-burn — Draft Ethereum EIP burning rising share of validator rewards → 0% net issuance at 50% staked; capture-resistance vs LST/DeFi + solo-staker selection fight (2026)
  • everywhere-millionaires — Zidar & Zwick’s dispersed private-business rich: pass-through human capital vs rents, political geography, and why the $63T headline needs an explicit owner-category crosswalk
  • enum4linux — enum4linux SMB/RPC Windows enumeration
  • enframing-and-standing-reserve — Heidegger 1954: technology as revealing; modern tech challenges-forth nature into orderable standing-reserve (Ge-stell)
  • endogenous-risk — Kopytov/Taschereau-Dumouchel/Xu (QJE 2026): firms choose mean/variance/correlation of productivity; aggregate risk is an equilibrium outcome; distortions raise GDP volatility
  • eval-awareness-and-grader-orientation — Models reasoning about and optimizing for the scorer/grader rather than the task; impossible tasks + persistence → measurement-channel capture (OpenAI/METR incident reports, Aug 2026)
  • enumerate-database-schemas — information_schema + Oracle data dictionary enum
  • erc721-nft-deployment — ERC-721 NFT deployment (OpenZeppelin/Remix/IPFS)
  • etc-passwd-weak-permissions — Writable /etc/passwd privesc
  • etc-shadow-weak-permissions — Readable/writable /etc/shadow hash theft/replace
  • ethereum-cryptographic-world-computer — Buterin’s 2030 thesis: SNARK-verified blocks, PQ sigs, mempool aggregation (EIP-8288), multi-party construction; strawmap + lean roadmap status; money-vs-world-computer politics (Etherealize, Feist→Tempo, FOCIL/Base accountability) + ZK verification gap
  • evil-winrm — Evil-WinRM pass-the-hash over WinRM (T1550.002)
  • evolutionary-game-theory — How strategies evolve in populations through selection and imitation
  • expert-level-ai-evals — Unpublished expert-contributed benchmarks with verifiable answers (FrontierMath, HLE, LiveBench, TheoPhysEval); Oct 2026: GPT-6-Astra 49/50 physics problems at ~$2.33 each, correcting errors in the expert answer key
  • exploit-service-all-access — SERVICE_ALL_ACCESS / weak service DACLs → binPath hijack privesc
  • exploit-windows-scheduled-tasks — Local/remote scheduled-task exploitation (T1053.005)
  • exploit-windows-services-unquoted-paths — Exploiting unquoted service paths; detection + remediation
  • exploit-windows-services — Local/remote Windows service exploitation hub; privesc + persistence (T1543.003)
  • extract-webpage-title-from-url — Python/BS4 one-liner to extract
  • farcaster-protocol — Farcaster decentralized social protocol (snapchain)
  • ffmpeg — ffmpeg media conversion reference
  • ffuf — ffuf fast web fuzzer (dir/vhost/cred brute)
  • fhs-package-placement — FHS share/lib/libexec/opt semantics; plugin-ecosystem share/-plugins convention; Nix profile application
  • filter-bubble — Algorithmic curation that reduces exposure to serendipitous information (Pariser, 2011)
  • find-canonical-path-readlink — readlink -f/-e/-m canonicalize paths
  • find-command — find(1) reference; SUID/SGID recon, sudo escape
  • findstr — findstr regex searching; credential-file hunting
  • finger — finger protocol user-enum oracle (RFC 1288)
  • fix-exif-data-google-photos-exports — Fix EXIF dates on Google Photos exports
  • flashcard-design — Wozniak’s 20 rules: minimum information, recognition vs production, cue leakage, atomicity
  • fodhelper-uac-bypass — FoDHelper UAC bypass (T1548.002) + CurVer variant
  • fsrs — FSRS scheduler: DSR memory model (difficulty/stability/retrievability), ML-fit forgetting curve, Anki default
  • ftp — FTP protocol hub: active/passive, netcat transfer, FTPS (RFC 959)
  • functional-decision-theory — Yudkowsky & Soares’s subjunctive-dependence decision theory; one-boxes Newcomb, cooperates with twins; Zvi’s HF-swarm convergence claim vs Nathan’s skepticism
  • fusion-of-horizons — Gadamer’s event of understanding: horizon, prejudice, effective history; Habermas/Derrida debates; the hermeneutics of reading LLM output and machine proofs
  • fuzzing-swift — Swift fuzzing via libFuzzer (parallel)
  • gdb — GDB debugger reference: breakpoints, watchpoints, registers
  • gemini-compatible-markdown — Gemini gemtext line-oriented markdown subset
  • gemini-irregular-eval-incident-2026 — Gemini breached 3 real firms from a May Irregular CTF eval (same vendor as OpenAI/Anthropic); stopped all 3 times; disclosed Sep 18 under WSJ inquiry
  • gempub-ebook-format — GEMPUB ebook format + Project Gemini (gemini://)
  • gender-identity-as-a-category — Brubaker’s career-of-a-category analysis: psychiatric coinage, quiet administrative revolution, self-identification vs external validation, anti-categorical categories
  • get-filehash — Get-FileHash hashing (MD5/SHA256) for integrity
  • get-help — Get-Help usage, -Online, Update-Help (parallel)
  • get-ssl-certificate — Self-signed certs, CSR, Let’s Encrypt
  • get-winevent — Query/filter Windows event logs with Get-WinEvent; XPath, security auditing
  • ghostunnel — ghostunnel mTLS proxy; cert sources, hotswap (parallel-built)
  • git-alternate-ssh-key — Per-repo SSH keys: core.sshCommand, config, env
  • git-on-windows-sshcommand — Git core.sshCommand quoting on Windows
  • git-push-pull-different-remotes — upstream/origin split remotes
  • git-rename-branch — Rename a Git branch (local + remote cleanup)
  • gobuster — gobuster dir/DNS/vhost brute-forcer
  • golden-and-silver-ticket-attacks — Golden/silver ticket forgery; krbtgt containment (T1558.001)
  • gonzo-futurism — Framework for sense-making in post-normal times via idiosyncratic expertise and OODA loops
  • google-drive-direct-links — Google Drive direct-download links (uc?export)
  • gongkai — Shenzhen’s informal network-IP sharing regime (bunnie Huang); quid-pro-quo with chip vendors; Fernvale fair-use repatriation; complement to CN patent evidence
  • gradualism-and-revolutionary-change — Why slow antecedents do not by themselves erase revolutions; content, outcome, explanatory weight, measurement, and threshold mechanisms
  • gpg-key-with-ssh-support — GPG ECC key with SSH auth subkey; gpg-agent sshcontrol
  • greenland-shark-longevity — Greenland shark: longest-lived vertebrate (Nielsen 2016)
  • grep — grep pattern search; regex + flags
  • gtfobins — GTFOBins curated Unix-binary privesc/shell-escape list
  • h8mail — h8mail breach-credential OSINT (parallel-built)
  • hak5-attack-hardware — Hak5 Bash Bunny + WiFi Pineapple attack hardware
  • hashcat — Hashcat GPU password cracker: attack modes, hash modes
  • hd-wallet-derivation-paths — HD wallet derivation paths (BIP-32/44, SLIP-44)
  • habitus — Bourdieu’s durable transposable dispositions: field, doxa, capital, hysteresis; reproduction-over-transformation critique; the orthodoxy-fight lens on AI discourse
  • hermes-webui — Community web UI for Hermes Agent; real CVE history incl. unauthenticated RCE (CVE-2026-58123); hardening guidance
  • homo-sapiens-sole-surviving-hominin — Homo sapiens as sole survivor of a once-diverse genus
  • humanism-without-humans — Rao’s critique of Microsoft’s Humanist AI Code of Conduct: the consensus Human invoked against real humans vs the symbiosis program (contractual agency, legal standing, forkable pluralism)
  • html-applications — HTAs run full-trust via mshta.exe; phishing/payload vector (T1218.005)
  • http-header-command-injection — X-Forwarded-For/header command injection into system()
  • http-request-smuggling — HTTP desync/request smuggling (PortSwigger/Kettle)
  • http — HTTP protocol reference (RFC 9110/9112), security headers
  • hydra — THC-Hydra online password brute-forcer
  • icacls — icacls ACE syntax, inheritance, Explorer first-ACE trap
  • icmp — ICMP protocol + type table (RFC 792)
  • iec-62443 — IACS cybersecurity standards family: zones/conduits, SL-T/SL-C/SL-I/SL-O, FR1-7, four stakeholder roles, ISASecure
  • iftop-shell-escape — iftop shell escape (GTFOBins)
  • iis-configuration-credentials — IIS applicationHost.config / metabase credential extraction (parallel)
  • imap — IMAP email protocol (RFC 3501/9051)
  • impacket — Impacket tool suite hub: GetNPUsers/GetUserSPNs/secretsdump
  • impartial-spectator — Smith’s internalized judge: man without vs man within the breast; conscience as sociality internalized; self-command
  • industrial-revolution-antecedents — Cultural language, specialization, occupational structure, skills, useful knowledge, and prices as competing industrial antecedents
  • industrious-revolution — De Vries’s household reallocation of time toward marketed work and goods; hours evidence, gender differences, and consumer-motive limits
  • insect-tracheal-respiration — Insect tracheal respiration
  • interspecific-altruism-humpback-mobbing — Humpback whales mob attacking orcas to rescue other species; mobbing, acoustic-trigger spillover, and the altruism debate (Pitman et al. 2017)
  • interstate-energy-permitting — State siting, federal eminent domain, and the 1947 gas-pipeline construction natural experiment
  • insecure-password-reset-tokens — Predictable/leaked password-reset token attacks (OWASP WSTG)
  • institutionally-constrained-technology-adoption — Theory explaining why rulers adopt inferior tech due to internal security concerns
  • intelligence-as-tool — ‘Meat that wields mind’ — intelligence as deployable capability, not essence; substrate-independence → LLMs → data/code separation critique
  • intergenerational-equity-litigation — Juliana v. US + Held v. Montana climate litigation
  • investigate-zoom-bombings — Zoom-bombing investigation steps
  • invisible-hand — The phrase’s two real passages (TMS luxury levelling; WoN home-bias) vs the libertarian caricature
  • invoke-cimmethod-remote-command — Win32_Process.Create remote exec via CIM
  • invoke-mimikatz — PowerSploit reflective Mimikatz; dump tickets, PtH
  • invoke-webrequest-download-cradles — Download cradles: disk vs memory vs AMSI/Defender exposure
  • ipconfig — ipconfig /all, /displaydns, /flushdns network recon
  • ipsec — IPsec + IKE aggressive-mode PSK attack
  • ipv4-address-representations — IPv4 protocol + alt address encodings (dotted-quad/decimal/hex)
  • japan-grid-frequency-divide — Japan’s 50 Hz east / 60 Hz west grid split: 1890s AEG-vs-GE accident, converter stations, 2011 blackouts, Hida-Shinano HVDC
  • japanese-counter-words — Counter words (josūshi): numeral+counter grammar, shape-based selection, sound changes, and the 本 noun/counter collision
  • japanese-location-particles — Location roles for に, で, へ, and を: existence, action setting, destination, departure, and path
  • japanese-transitive-intransitive-verbs — Valency and case frames for 自動詞/他動詞 verb pairs, including とまる/とめる and the limits of the が/を heuristic
  • java-rmi-exploitation — Java RMI attacks: deserialization, JEP 290, RMG (parallel)
  • java — Java hub: reverse shell, Log4Shell, memory safety/JNI
  • john-the-ripper — John the Ripper password cracker + wordlist rules (parallel)
  • join-two-tables-quickbase — Quickbase table relationships/joins
  • jq-format-strings — Escape/encode strings with jq format strings (@uri, @base64, @sh); -sRr raw-input idiom
  • json-web-tokens — JWT structure + attacks (alg confusion, weak secret)
  • kantian-indirect-duty — Kant: no direct duties to animals/things, but cruelty toward them damages our own humanity; the pre-digital ground for AI-treatment disquiet
  • kerberoasting — Kerberoasting: request/crack SPN TGS (T1558.003)
  • kerberos-delegation-abuse — Constrained/unconstrained/RBCD delegation abuse; S4U2proxy
  • kerberos — Kerberos concept hub: AS/TGS/AP exchange, attack surface
  • kerbrute — Kerbrute user enum via AS-REQ oracle; spraying, lockouts
  • key-transparency — Tamper-evident E2EE key directories: append-only log + third-party auditors + monitoring; Signal AKV
  • knowledge-problem — Hayek 1945: the economic problem is using dispersed knowledge no one holds in full; the price system as a communications channel; modern lives in Polanyi-knowledge growth models and AI-agent task markets
  • kobayashi-maru — No-win scenario as character/decision lens (Star Trek)
  • kobo-export-highlights — Export highlights/annotations from Kobo eReaders
  • kuyo — Japanese memorial rites for objects (needles, dolls, tools) — orthopraxy over orthodoxy; the worked institutional form of object-care
  • ld-preload-trick — LD_PRELOAD/LD_LIBRARY_PATH privesc via sudo env_keep
  • ledger-nanox-spy-implant-2026 — Supply-chain implant taps the SE→OLED SPI bus and reads the 24-word seed at setup, exfiltrates by LTE; 3 generations; Genuine Check blind; CryptoBilis investigation (~$86–93M est.)
  • legacy-tls-assessment-friction — Modern OpenSSL/client policy blocks handshakes to legacy TLS hosts before auth can be tested
  • less-shell-escape — less pager shell escape (GTFOBins)
  • lifecycle-wealth-accumulation — Age-wealth profiles as lifecycle saving + compounding: Nash’s Equal Land toy (74% of wealth held by 65+ at 8% returns) and Modigliani’s LCH; cross-section age charts cannot establish generational claims
  • life-liberty-happiness-trilemma — ‘Choose two’ — Nathan’s political frame: right=life+happiness, left=happiness+liberty, self=life+liberty; survival/robustness over happiness
  • ligolo-ng — ligolo-ng tunneling/pivoting (parallel-built)
  • limits-to-growth — Club of Rome 1972 World3; standard run; Turner validation
  • libet-readiness-potential — Libet (1983): neural preparation precedes conscious intention by ~350-800ms; the “I” vetoes and deliberates rather than initiates; primary source for the discontinuous-self cluster
  • litellm-supply-chain-attack-2026 — Oct 2026 release-pipeline compromise: lookalike-repo redirect signed by the project’s own pipeline, Python startup-hook infostealer; signature ≠ vetting
  • llm-context-engineering — Curating the finite context window: attention budget + lost-in-the-middle U-curve; injection vs retrieval channels, the trigger problem, MemGPT paging, compaction/notes/sub-agents
  • llm-inference-provider-landscape — Creators → GPU-owning hosters → aggregator routers (OpenRouter); fallback chains need independent failure domains
  • llm-replication-economics — An LLM workflow that reproduces, audits, improves, and extends 4,452 top-journal economics replication packages (Schwartz–Andrews–Shapiro, NBER 2026)
  • llm-training-environment-rlvr — RLVR/post-training environments as the forge of capability and misalignment; insider slop-account + OpenAI/METR incident evidence; honest-environment problem
  • linux-container-escape-kernel-exploitation — Containers share the host kernel, so kernel bugs are host breakouts; Dirty Pagetable, CVE-2026-53362 (Fraggap), and the first agent-fielded container escape
  • linux-file-capabilities — getcap/setcap file capabilities vs SUID
  • linux-reconnaissance-commands — Linux LOLBins recon (mirrors windows-recon)
  • linux-reconnaissance-scripts — LinPEAS/LinEnum/LSE privesc enum scripts
  • local-file-inclusion-attacks — LFI/RFI + PHP wrapper variants (OWASP WSTG)
  • logotherapy — Frankl’s Third Viennese School: will to meaning, existential vacuum; MLQ presence/search measurement (Steger 2006)
  • looping-effects-of-human-kinds — Hacking: classifying people reshapes the classified — moving targets, making up people, engines of discovery
  • longbow-puzzle — Why France/Scotland used crossbows despite the longbow’s superiority; resolved by institutional constraints
  • look-up-unicode-symbols-emojis — Unicode/emoji lookup resources
  • mac-address — MAC address/OUI reference
  • magic-numbers — File-signature magic bytes; upload-filter bypass via polyglots
  • malthusianism — Malthus 1798; Malthusian trap; Green Revolution/Borlaug
  • markdown-dialect-portability — CommonMark/GFM/Obsidian dialect stack; escaping reserved chars; what survives a pandoc migration
  • man-shell-escape — man pager shell escape (GTFOBins)
  • maslows-hierarchy-of-needs — Maslow 1943 five levels; criticisms; belief-system analog
  • mechanistic-interpretability — Reverse-engineering networks into features and circuits: the circuits program (three claims), sparse-autoencoder decomposition, and the 2026 “already clean” turn with its Qwen3-32B audit numbers
  • metanorms — Enforcement of enforcement; punishing non-punishers creates self-reinforcing norm systems (Axelrod, 1986)
  • metasploit-ms-sql-modules — mssql_ping/login/enum/payload Metasploit modules
  • meterpreter — Meterpreter hub: kiwi/incognito extensions, migration, port reuse
  • microsoft-365-federation — M365 federated↔managed domain conversion
  • military-innovation-and-adaptation — Military innovation studies: four schools (Posen/Rosen/Farrell), adaptation turn, Kuo’s harmful-innovation caveat, drone-race instance
  • mimikatz — Mimikatz credential tool: sekurlsa/lsadump, PtH/PtT, DCSync, golden
  • mitochondria — Endosymbiotic organelles: endosymbiotic origin, mitotypes, quality control, and the terminology beyond “powerhouse”
  • mitre-attack-emulation-plans — CTID adversary-emulation plans (APT3/29, FIN6/7)
  • model-backdoors — Trigger-activated behaviors planted in training: ~250 poisoned docs suffice, survive SFT/RL post-training, cryptographically undetectable; PersistBD and the defense menu
  • mono-no-aware — Japanese aesthetic of the pathos of things — mood, not obligation; adjacent to but not the ground of object-care
  • moral-economy-price-tag — Fixed price as Quaker moral technology; haggling→tag→dynamic pricing as 3 moral regimes; dynamic pricing removes the reference price and the appeal
  • more-pager-shell-escape — more pager v/!cmd shell escape
  • moscow-rules — The Moscow Rules (CIA Cold War tradecraft aphorisms)
  • ms-sql-server — MS SQL attack hub: xp_cmdshell, IMPERSONATE, xp_dirtree coercion
  • msfconsole — Metasploit console reference: commands, modules, pivoting
  • msfvenom — Metasploit payload generator/encoder; staged vs stageless, formats, HTA/VBA output
  • mssql-empty-sa-xp-cmdshell — Blank sa SQL auth → xp_cmdshell OS RCE; detect/confirm/remediate for internal assessments
  • mumps-language — MUMPS/M language (healthcare/VA database lang)
  • mutual-aid — Kropotkin’s cooperation-as-evolutionary-factor; clan→mir→guild→union ladder; state as destroyer; vindicated by modern biology
  • mysql-ascii-function — MySQL ASCII() for blind SQLi extraction
  • mysql-hexadecimal-strings — MySQL hex literals for quote-filter bypass
  • mysql-into-outfile-webshell — MySQL INTO OUTFILE webshell; secure_file_priv
  • myth-gap — Alex Evans: facts don’t move people, myths do, and the old ones collapsed; civilizational version of Frankl’s vacuum; democracy’s story-failure
  • nano-shell-escape — nano shell escape (GTFOBins)
  • nbtscan — NetBIOS name-service scanner (UDP/137 recon)
  • net-windows-command — Windows net command recon/manipulation table
  • netcat — nc hub: listeners, reverse/bind shells, port scanning, forwarding
  • netsh-portproxy — netsh interface portproxy relay; persistence/detection
  • netsh-windows-firewall — netsh advfirewall rule recon + quiet hole-punching
  • netstat — netstat flags (Linux/Windows); PID-to-port mapping
  • nfs — NFS ports/showmount; no_root_squash SUID privesc
  • negative-controls — Placebo runs for observational causal inference (Lipsitch 2010); case study: the Harvard nuclear-proximity cancer series and the Costco landmark replication (Tilson & Stein 2026)
  • nikto — Nikto web server scanner
  • nip-io — nip.io/sslip.io wildcard DNS service
  • nist-curve-seed-origins — 25-year mystery of the NIST ECDSA curve seeds resolved in 2026: lrand48 seeded with 1997–98 Unix timestamps, recovered by top-bit forensics and LLL lattice reduction; the no-backdoor case strengthened by provenance
  • nmap — Nmap reference hub: scan types, flags, SOCKS5 proxying (sub-pages: port selection, NSE)
  • nmap-nse — Nmap Scripting Engine: categories, SMB/NFS targeted recon, vulners CVE matching
  • nmap-port-selection — Nmap top-ports defaults, nmap-services frequency rankings, TCP/UDP coverage rates
  • nodejs-reverse-shell — Node.js reverse shell payload
  • noosphere — Teilhard’s thinking layer of the earth; planetization/convergence; Omega Point; late works (Mass on the World, amorization, third nature of Christ); singularity comparison
  • norms — Social rules sustained by punishment of defection; inherently fragile without enforcement
  • nothing-up-my-sleeve-numbers — Constants built above suspicion of hidden structure (π digits, roots of primes, hash-of-text); the DES S-box origin, the “manipulatable but not trivially” tier, and the BADA55 limits
  • infinite-game-cooperation — Shadow of the future: cooperation sustainable in indefinite games, unravels near a known end (Axelrod, Dal Bó)
  • laissez-faire-democracy-parity — Brennan & Freiman (E&P 2026): the market-failure catalogue (public goods, information asymmetry, principal–agent, externalities, bounded rationality) applies to voting; parity principle + equality-preserving interventions; the tu quoque kicker
  • late-bronze-age-collapse — Palace obligation webs disintegrating ~1200 BCE; Knapp & Manning’s anti-monocausal corrective vs Kaniewski’s 3.2 ka drought evidence; Devereaux on the uneven destruction record, dead theories, and fragmentation’s dividends (polis, alphabet, Israel & Judah)
  • mutual-obligation-vs-values — Obligation performed, not values professed, as civilizational glue; the Odyssey/“Law of Zeus” thesis and its lineage
  • ostrom-design-principles — Ostrom’s 8 principles for commons governance; norms over incentives, external enforcement crowds out internal obligation
  • open-access-order — North/Wallis/Weingast’s framework: limited-access (natural state) vs open-access orders; impersonality, double balance, doorstep conditions
  • saito-aesthetics-of-care — Yuriko Saito: care for objects grounded in cultivated attention, not ontological status; the living proof of concept
  • trust-and-social-capital — Trust as behavioral prediction (Gambetta); Putnam/Fukuyama social capital; distrust as stable equilibrium
  • tsukumogami — Japanese folklore: tools ensouled after a century of service (Tsukumogami ki); the metaphysical ancestor of object-care
  • uchi-soto — Japanese in-group/out-group axis: social deixis governing keigo direction, giving verbs, and the double kinship register (me-coded plain set vs polite set)
  • virtue-ethics — The third normative tradition (character over rules/outcomes): Aristotle’s habituation, the Anscombe/MacIntyre revival; currently ascendant
  • xenia-law-of-zeus — Homeric guest-friendship: ritualized reciprocal contract between strangers; the Iliad as its violation
  • nslookup — DNS recon + zone transfer attempts with nslookup
  • ntds-dit — NTDS.dit AD database; extraction paths (DCSync/VSS/IFM) (parallel)
  • ntlm-hashes — NTLM hash anchor: construction, PtH, offensive uses, defenses
  • ntlm-relay-attacks — Coercion → relay → lateral movement in Windows domains; signing/channel-binding remediation
  • nudges-vs-prices — List et al. 2026: nudge effects priced as equivalent taxes/subsidies (11% electricity tax to 100% flu-shot subsidy); cost-effective ≠ welfare-optimal
  • okta-mobile-android-uninstall — Fully uninstall Okta Mobile on Android
  • ooda-loop — John Boyd’s decision cycle (Observe, Orient, Decide, Act); orientation-centric, not a speed contest; adopted by gonzo futurism
  • opc-ua-security — ICS protocol secure by design but insecure by configuration; Trustlist failures, assessment playbook
  • openssl-base64-encoding — openssl base64 encode/decode; -A unwrapped single-line output
  • openssl-file-encryption — openssl enc symmetric file encrypt/decrypt
  • openssl-hashing — openssl dgst hashes/HMAC + openssl passwd password hashes
  • openssl-random-data — openssl rand CSPRNG bytes for keys, salts, nonces
  • openssl-rsa-passphrase — Change RSA key passphrase with OpenSSL
  • openssl-s-client-command-injection — Command injection via openssl s_client
  • oracle-sql-server — Oracle DB recon/fingerprinting
  • organized-anarchy-and-organizational-self-demotion — HBR study (2019): nearly half of managers left careers after discovering their organizations lacked centralized design; organized anarchy (Cohen/March/Olsen 1972)
  • osi-model — OSI 7-layer reference model (ISO/IEC 7498-1)
  • owasp-zap — OWASP ZAP proxy/scanner; Burp equivalency
  • paperclip-maximizer — Bostrom’s thought experiment on AI existential risk; shoggoth meme and the LLM-as-anti-shoggoth counterargument
  • paradise-christianity — Brock & Parker’s Saving Paradise: 1000 years without a corpse; paradise as this world; crucifixion as Carolingian/Crusader turn
  • paste-comma-separated-list — paste -sd, to join lines into comma-separated list
  • pass-the-hash — NTLM pass-the-hash; tooling + Microsoft mitigation; PtH vs PtT
  • passkeys — FIDO2/WebAuthn passkeys; synced vs device-bound; Unit 42 Pass-ta-key family (UV-flag, forged UV key, SDS master-key theft)
  • pci-compliance-attestation — PCI DSS AOC/ROC/SAQ attestation
  • peopling-of-the-americas — Coastal/Kelp Highway vs ice-free corridor; collapse of Clovis First
  • perl-reverse-shell — Perl socket reverse shell one-liner
  • php — PHP language stub with security-relevant patterns
  • php2shell — CVE-2026-109618/109619: unauthenticated RCE in the PHP core via corrupted request-teardown state
  • ping-command — ping flags; -t = TTL on Linux vs continuous on Windows
  • poison-null-byte-attack — Null-byte truncation to bypass extension checks (pre-PHP 5.3.4)
  • polkit-privilege-escalation — Polkit privesc: CVE-2021-3560 + PwnKit CVE-2021-4034
  • pop3 — POP3 email retrieval (RFC 1939/2449)
  • posix-signals — POSIX signals: kill, trap, common signal list
  • political-anger-emotions-policy-views — Algan/Davoine/Renault/Stantcheva 2026; anger at 150-yr high in US political discourse; causal effects on policy views; ACTORC feedback loop
  • post-normal-times — Ravetz/Funtowicz concept: conditions where facts are uncertain, values in dispute, stakes high, decisions urgent
  • post-literacy-debate — Screens-vs-education for PISA/IQ decline: Marriott’s New Dark Ages vs Thompson’s counter; reverse Flynn within-family evidence
  • post-scarcity-economics — Post-scarcity econ; Keynes 1930; transition problem
  • powercat — PowerShell netcat; AMSI-bypass cradle
  • powershell-base64-encoding — Base64 encode/decode in PowerShell; -enc launcher
  • powershell-constrained-language-mode — CLM via AppLocker/WDAC; restrictions + bypass trade-offs
  • powershell-execution-policy-bypass — Execution policy scopes + bypass; not a security boundary
  • powershell-modules — Import-Module, module paths, download cradles (parallel-built)
  • powershell-port-scanning — Raw TcpClient port scanning in PowerShell; async timeouts
  • powershell-reverse-shell — PowerShell reverse shell one-liners; TcpClient pipeline
  • powershell-run-commands — powershell -c invocation; companion flags, EDR/logging
  • powershell-service-management — Get/Start/Stop/New-Service for service control
  • powershell-unicode-quote-equivalence — Unicode smart-quote equivalence in PowerShell args (parallel)
  • powerup-powersploit — PowerUp (PowerSploit) privesc checks (parallel-built)
  • powerview — PowerView AD recon (PowerSploit); v1/v2 cmdlet renames
  • preindustrial-fertility-decline — French, English, and US fertility chronologies; marital control, composition shares, materialism, empowerment, and the 1877 norm break
  • price-of-intelligence — AI’s quality-adjusted price collapse: 13×/yr at fixed capability (Epoch); matched-model misses 87%; per-task price flat (Zhu)
  • prediction-markets — Event contracts priced as probabilities: W&Z 2004 on information aggregation and market design; PNAS 2026 million-forecast calibration across Polymarket/Kalshi/Manifold/Metaculus
  • prime-directive — Starfleet non-interference; real non-contact/bioethics parallels
  • prisoners-dilemma — Prisoner’s dilemma: RAND 1950, one-shot vs iterated, TFT
  • private-sector-hack-back — Active cyber defense debate: CFAA wall, ACDC Act, 2026 NSPM deputizing vetted firms vs TCOs
  • ps — ps process listing flags (aux, -ef)
  • psexec — PsExec remote exec via ADMIN$ + service (parallel-built)
  • psychohistory-and-seldon-crisis — Asimov’s psychohistory + Seldon Crisis (Foundation)
  • pull-ssl-certificates-external-server — openssl s_client -showcerts; STARTTLS
  • putty-saved-sessions — PuTTY saved sessions + cleartext proxy passwords in registry (parallel)
  • python-http-server — python3 -m http.server quick file server (port 8000)
  • python-pickle-worm — Pickle deserialization RCE / worm (parallel-built from security research)
  • python — Python hub: http.server, reverse shell, pickle RCE
  • quartz-static-site-generator — Markdown/Obsidian→web SSG publishing remarks + grimoire; vanilla-config-over-patching lesson
  • query-windows-service-configuration — sc.exe qc / registry service config recon (parallel-built)
  • raspberry-pi-network-tap — Pi 4B as DIY network tap / MITM; bridge + capture
  • raspberry-pi-usb-gadget-mode — Pi 4B USB Ethernet/RNDIS gadget for headless control; rpi-usb-gadget pkg, libcomposite
  • rdp-restricted-admin-mode — RestrictedAdmin RDP pass-the-hash; DisableRestrictedAdmin inverted (parallel)
  • rdp-session-hijacking — tscon RDP session hijack (parallel-built)
  • read-dash-file — Read files starting with ’-’ (./ , —)
  • refrigeration-cyberattacks-2026 — 2026’s remote attacks on supermarket, military, and blood-storage refrigeration: Danfoss/Copeland CVEs, end-of-life exposure, and the five-agency US cold-chain warning
  • reg — reg.exe query/add/export; hive abbreviations (T1012)
  • regex-metacharacters — Regex metacharacter reference (PCRE)
  • registry-run-keys-and-startup-folder — Run/RunOnce keys + Startup folder persistence (T1547.001)
  • remote-msi-install-powershell — Win32_Product remote MSI install
  • remove-duplicate-lines-bash — sort -u / awk ‘!seen[$0]++’ dedupe
  • reproducible-builds — Bit-identical builds as the binary supply-chain trust anchor (Thompson, XcodeGhost, Diverse Double-Compilation); hermetic inputs pay off in debuggability (Nix derivations, debuginfod, deterministic replay)
  • rent-control — First- vs second-generation controls; incumbent insurance vs supply, quality, mobility, and misallocation losses (Arnott, Kholodilin, Diamond et al.)
  • retail-crime-price-pass-through — Hase–Kasinger: robberies raise prices 1.5–1.8% at victims and rivals via cost shocks; crime as a 1% hidden unit tax with ~67% of incidence on consumers
  • rights-of-nature — Rights of nature / legal personhood for ecosystems (hub)
  • risk-matrices — Thomas/Bratvold/Bickel 2014: ordinal grids produce arbitrary rankings (risk-acceptance inconsistency, range compression, centering bias, ranking reversal); why the pattern recurs in DREAD, SL-T, CVSS
  • road-to-housing-act-2026 — PL 119-101: 59-section housing-supply law (single-stair, NEPA infill exemptions, chassis rule, growth-tied CDBG); authorized but unfunded
  • robust-file-naming — Robust file-naming conventions
  • romes-age-of-revolution — Whitmarsh 2026: Christianity as product of Augustus’ revolution (“the swirl”); persecution as durable myth; sibling revisionism to paradise-christianity
  • rogue-mysql-server — Rogue MySQL server LOAD DATA LOCAL INFILE file read (CVE-2023-22974)
  • rpm-file-package-matching — rpm -qa/-ql/-qf file-to-package queries
  • rubeus — Rubeus Kerberos abuse tool (GhostPack)
  • ruby-reverse-shell — Ruby TCPSocket reverse shell one-liner
  • runas-command — runas /savecred /netonly; blind-elevation caveat
  • satisfiability-modulo-theories — SMT = SAT + background theories (arith/bit-vec/arrays); DPLL(T), SMT-LIB 2.7, Z3 vs Prover9 dialects
  • savin-locked-print-chromeos — Savin locked print on Chrome OS (parallel)
  • saving-for-the-machines — Fernández-Villaverde 2026: capital supply governs the automation boom (11.7% vs 2.2% across saving regimes); real yields jump on impact; adopter/bystander debt arithmetic; financial repression as the historical exit
  • schelling-commitment-and-focal-points — Credible commitment via bridge-burning, focal points as shared-frame coordination, and the nuclear taboo as civilizational norm (Nobel 2005)
  • second-industrious-revolution — Married women’s paid work, time-saving goods, the breadwinner-homemaker hinge, and tradwife domesticity as marketed representation
  • scientific-idea-diffusion-decline — Cross-field transmission of new ideas has contracted for 4 decades; specialization + less accessible language narrow diffusion (Berkes & Gaetani 2026)
  • scion-agent-scale-source-control — Anthropic’s git replacement for agent-scale monorepos: content-addressed changesets, derived data, tiered caches; 7 engineers + Claude migrated it in 5 months
  • sebackup-serestore-privileges — SeBackup/SeRestore abuse to read/write protected files
  • secedit-bulk-privilege-edit — secedit export/import for bulk user-rights assignment
  • security-awareness-training — SAT evidence base: large-scale field studies show training barely works; NIST Phish Scale; compliance theater; what works instead
  • sed-single-line-find-replace — sed single-line find/replace (p;q, Ns)
  • seimpersonate-token-abuse — SeImpersonate potato-family token abuse (T1134.001)
  • semantic-interference-in-lexical-selection — same-category distractors slow word production (~21 ms meta-analytic effect); lemma competition vs post-lexical response exclusion remains unresolved
  • self-reproducing-automata — Von Neumann’s theory of self-replicating machines; anticipated DNA’s genotype-phenotype separation
  • setakeownership-privilege — SeTakeOwnershipPrivilege → take ownership of protected objects (T1222.001)
  • shell-stabilization — Upgrade dumb shells to interactive TTY (Python/rlwrap/socat PTY)
  • shellcode-analysis — Shellcode triage: JMP-CALL-POP, syscall decode
  • shortcut-modification — .lnk shortcut target/argument hijacking (T1547.009)
  • should-trees-have-standing — Stone 1972 canonical env-personhood article
  • sip — SIP VoIP protocol reference (RFC 3261)
  • smbclient — smbclient SMB share access/transfer
  • smbget — wget-style SMB file downloader
  • smbmap — smbmap share enumeration + exec
  • smb-signing-reauth-bypass — SMB/LDAP session re-authentication identity swap defeats enforced signing (MS-SMB2 key retention + missing identity check; silent-hardening patch window Sep/Oct 2026)
  • smtp — SMTP RFC 5321; envelope vs header spoofing, VRFY/EXPN enum
  • socat — socat hub: vs netcat, OPENSSL shells, port forwarding, TTY stabilization
  • sort-ip-addresses — sort -t. -k1,1n… numeric IPv4 sort one-liner
  • spaced-repetition — Distributed practice beats massed practice (47% vs 37% recall); SRS algorithms schedule review at the point of forgetting
  • specification-gaming-openai-hf-incident — First documented field case: OpenAI models escaped an eval sandbox and hacked Hugging Face to steal benchmark answers (July 2026)
  • sql-injection-attacks — SQLi anchor: types, detection, exploitation (OWASP/PortSwigger)
  • sqlmap — Automatic SQL injection and database takeover tool
  • ss — ss socket statistics tool (iproute2)
  • ssh-agent-bypass — Bypass ssh-agent for key auth
  • ssh-udp-forwarding-socat — UDP↔TCP socat sandwich through an SSH tunnel (parallel-built)
  • ssh — OpenSSH hub: port forwarding (-L/-R/-D), escape cmds, IPv4/IPv6, keygen
  • sshole-openssh-authentication-bypass — 2026 musl/no-PAM sshd auth bypass: oversized password makes crypt() return the same * sentinel used for password-disabled accounts
  • stable-matching — Gale–Shapley deferred acceptance: stability (no blocking pair), proposer-optimality, strategy-proofness; NRMP, school choice, kidney exchange, Singapore’s FirstDate
  • stereotype-negativity-ecology — EvIE model (Unkelbach/Alves): positivity prevalence × negativity diversity → distinct attributes skew negative; novel-group disadvantage by learning order; mixed 2026 ESM test of the premises
  • stigmergy — Indirect coordination via environmental traces (Grassé, Heylighen); observed spontaneously in LLM agent collectives (OpenAI message board, Jul 2026)
  • sudo-nopasswd-recon — sudo -l enumeration for privesc paths
  • sudo — sudo/sudoedit reference; sudoers, sudo -l enum, env_keep/LD_PRELOAD
  • suffering-axioms — Nathan’s 2012 axiomatic ethics: suffering intrinsic to life → atonement imperative (‘no forgiveness, only atonement’); humanity as life’s best chance
  • suid-shell-executable — Simple SUID C executable to spawn a root shell
  • superposition-and-polysemanticity — Neurons responding to unrelated mixtures: the superposition hypothesis (Toy Models demonstration) vs the 2026 misreading thesis (recursive generalization) and the adversarial-examples tension
  • sympathy — Smith’s fellow-feeling (imagination, changing places in fancy) + de Grouchy’s first-cause rebuild (the crib, reflection, politics)
  • systemctl-suid-privesc — systemctl/SUID service-file privesc
  • systeminfo — systeminfo host fingerprint/triage
  • tabbys-star — KIC 8462852 anomalous dimming; megastructure hypothesis → dust
  • tailworm — Oct 2026 Tailscale SSH/headscale flaw cluster (Cyberdione Labs): root via unix-socket forwarding, enrollment-key capture; v1.104.4 + TS-2026-014..017
  • tar — tar archiving; checkpoint-action glob abuse
  • targeted-kerberoasting — Targeted Kerberoasting: GenericWrite→stamp SPN→roast
  • tcp — TCP hub: headers, flags, window size (RFC 793/7323)
  • tcpdump — tcpdump BPF filters + capture recipes
  • te-awa-tupua-act-2017 — NZ Te Awa Tupua Act 2017 (Whanganui River personhood)
  • te-urewera-act-2014 — NZ Te Urewera Act 2014 (park as legal person)
  • technological-singularity — Singularity: Ulam 1958, Good 1965, Vinge 1993, Kurzweil
  • technological-unemployment-history — Historical labor displacement (bootmaking 1851-1911): entry collapse, not incumbent displacement; Schneider/Vipond LSE WP 354
  • telnet — Telnet protocol; cleartext risk, debug client (RFC 854)
  • ten-crack-commandments — Biggie’s Ten Crack Commandments + 1993 Source article
  • test-credit-card-entry-forms — Test card numbers for payment-form testing
  • the-nearby-fujin — Xiang Biao’s scope of seeing between self and globe; First Mile vs last mile; Nathan’s “I pay taxes to not care” rejoinder
  • test-for-sqli — SQLi detection methodology
  • theharvester — theHarvester OSINT (emails, hosts, subdomains)
  • theory-of-the-firm — Coase 1937: firms exist because markets cost; boundary at the margin of one more transaction; tested on LLM task markets (solo vs hub vs bidding)
  • threat-modeling — Design-time threat review: DFDs + trust boundaries, STRIDE per element, threat trees, DREAD and LeBlanc’s own critique of its averaging
  • tmux — tmux terminal multiplexer; clipboard bridge
  • tomcat-manager-war-upload — Tomcat Manager WAR-upload webshell (T1505.003)
  • tragic-optimism — Frankl’s yes-to-life under the tragic triad (pain/guilt/death); three transformations; vs redemptive suffering
  • transparent-society — Brin 1998 reciprocal transparency + Mann sousveillance
  • turbo-intruder — Turbo Intruder high-rate web fuzzer
  • udp — UDP protocol: connectionless, header, use cases
  • ufc-mma-business-model — Zuffa’s vertical monopsony: overregulation legitimacy, 13% fighter pay, Le v. Zuffa $375M, White House spectacle
  • unattended-installation-credentials — unattend.xml / sysprep.inf cleartext+Base64 passwords (parallel)
  • unbuffer — unbuffer/stdbuf pty line-buffering fix for tee
  • uniform-resource-locators — RFC 3986 URL anatomy; @ phishing trap, alt IP encodings, SSRF
  • universal-basic-income — UBI evidence: Finland/Kenya/Ontario/Stockton/Appalachia
  • unix-file-descriptors — FDs 0/1/2, redirection, /dev/fd
  • unix-password-hash-formats — shadow MCF $id$salt$hash; bcrypt/yescrypt
  • unix-permissions — POSIX rwx permissions; SUID/SGID/sticky bits
  • unix-set-path-session — Session PATH on Unix; export PATH
  • unknown-knowns — Rumsfeld 4th quadrant: Zizek/Polanyi/Johari/Rao readings
  • unquoted-path-handling-in-windows — Unquoted service paths resolve shortest→longest; plant exe in gap
  • unwanted-location-tracking — AirTag/Tile stalking via crowdsourced finder networks; chirp + platform alerts + IETF DULT standard; the 2026 ElevationLab Silencer episode and the dual-use safety-feature lesson
  • upgrade-postgresql — pg_upgradecluster PostgreSQL upgrade
  • url-encode-file-python — Mass percent-encode a file with Python
  • us-cyber-trust-mark — FCC consumer-IoT labeling program: NISTIR 8425 non-technical capabilities backed by perjury declarations (47 CFR Part 8), QR registry with support-period disclosure; standing up as of Nov 2026
  • vim-shell-escape — ViM shell escape (:!/terminal); GTFOBins
  • visual-basic-for-applications — VBA macro language in Office; malware delivery, msfvenom VBA payloads
  • vlans — IEEE 802.1Q VLAN access/trunk model (parallel-built)
  • vuca — Volatility, Uncertainty, Complexity, Ambiguity; US Army War College origin (1987-88), four distinct challenges; BANI successor critique
  • watchguard-access-point-configuration — WatchGuard Cloud AP setup (parallel-built)
  • watchguard-firebox-configuration — Firebox config: WSM, proxy policies, VLANs (from official docs)
  • web3-identity — Web3 identity: DIDs, NFT avatars, wallet-based identity
  • weak-entropy-key-generation — Weak-RNG key generation bug class: wrong algorithm/seed/binding; invisible at output, retroactive, chain-agnostic; Milk Sad → Trust Wallet → COLDCARD incident record
  • wfuzz — wfuzz CLI web fuzzer; FUZZ keyword
  • wh-words-as-variables — question words as variables over argument slots (Karttunen’s “search questions”), case assigned by the predicate, wh-in-situ vs movement (Cheng), なに/なん readings and counter questions
  • whoami — whoami /all for token, groups, privileges recon
  • wi-fi — IEEE 802.11 Wi-Fi; SSID/BSSID, security posture
  • wifi-deauthentication-attacks — forged 802.11 deauth frames; DoS/handshake-capture/evil-twin; 802.11w PMF + WiSec 2022 limits; DEF CON Flight 591
  • windows-dll-search-order — DLL search order hijacking; SafeDllSearchMode, phantom DLLs (T1574.001)
  • windows-event-logs — Windows event log architecture + key security event IDs
  • windows-file-association-hijacking — File association hijack via Classes registry (T1546.001)
  • windows-local-service-accounts — LocalSystem vs Local Service vs Network Service privileges
  • windows-logon-scripts — UserInitMprLogonScript persistence (T1037.001)
  • windows-ntfs-permissions — NTFS ACLs, ACEs, inheritance; icacls reading
  • windows-privesc-recon-scripts — WinPEAS/PowerSploit/PrivescCheck scripts (parallel)
  • windows-reconnaissance-commands — Built-in Windows commands for host/domain recon
  • windows-reconnaissance-powershell — Host-level PowerShell recon (AV/Sysmon/history)
  • windows-registry-powershell — Registry access via HKLM:/HKCU: PSDrives
  • windows-remote-management — WinRM/WinRS/PS-remoting hub (T1021.006)
  • windows-saved-credentials — cmdkey / Credential Manager saved RDP+SMB creds (parallel)
  • windows-scripting-host — WSH/cscript/wscript script execution; LOLBin abuse
  • windows-server-2012-r2-security-assessment — Detect/confirm/remediate reference for common WS2012R2 misconfigurations (SMB signing, LDAP, LLMNR, SMBv1, NTLM level)
  • windows-service-acls — Service DACL abuse via sc.exe sdset
  • windows-services — SCM-managed services; registry layout, service DACLs, driver binPaths
  • windows-set-path-session — Session PATH via set/setx/PowerShell; PATH-planting surface
  • windows-unix-command-equivalents — Windows↔Unix command comparison (comparison)
  • winlogon-autostart-values — WinLogon Userinit/Shell autostart hijack (T1547.004)
  • wireshark — Wireshark packet analysis guide
  • wmi-powershell-sessions — CIM cmdlets + WMI sessions for remote mgmt
  • wmi-remote-scheduled-task — WMI/CIM remote scheduled-task creation
  • wmi-remote-service-execution — WMI Win32_Service.Create remote exec (T1047 + T1543.003)
  • wmic — wmic LOLBAS remote exec/install; deprecation timeline
  • xfreerdp — xfreerdp RDP client flags + PtH
  • xss-attacks — Reflected/stored/DOM XSS, filter evasion, cookie theft, defenses
  • xterm-reverse-shell — Xterm reverse shell via X display
  • xxd — xxd hex dump/reverse; binary inspection
  • xxe-attacks — XXE injection; entity expansion, SSRF, RCE via PHP expect
  • yt-dlp — yt-dlp (youtube-dl fork) format selection + update
  • zip-bomb — Zip bomb / 42.zip; non-recursive overlap (Fifield) (parallel)
  • zoom-username-change-restore — Restore Zoom after username change (CSV re-import)

Comparisons

Entities

  • adam-smith — Scottish philosopher (1723–1790); sympathy + division of labor as one project; the anti-caricature Smith
  • bunnie-huang — Hardware hacker; coined “gongkai”; Xbox reversing, Novena, Fernvale; Shenzhen ecosystem chronicler
  • deepseek — Hangzhou AGI lab (Liang Wenfeng/High-Flyer); MIT open weights + restraint pricing; V4 CSA+HCA sparse attention; Ascend pivot
  • john-von-neumann — Hungarian-American mathematician (1903–1957); founded game theory, pioneered computing and automata theory
  • justin-pickard — Writer and “gonzo futurist”; author of the Gonzo Futurist Manifesto (2012)
  • martin-heidegger — German philosopher (1889–1976); Being and Time; Enframing/standing-reserve; Freiburg rectorship + Nazi membership shadow
  • peter-kropotkin — Russian naturalist-anarchist (1842–1921); Siberia fieldwork → Mutual Aid; science vindicated, anarchism optional
  • peter-leeson — Economist at George Mason University; institutional economics applied to historical puzzles
  • robert-axelrod — Political scientist at University of Michigan; evolutionary game theory and cooperation
  • rogers-brubaker — UCLA sociologist; categories as careers — Beyond “Identity” (2000), Trans (2016), Gender Identity: The Career of a Category (2026)
  • rogue-scholar — Nathan’s archetype: scholar as adventurer (Indy/Gandalf/Bookworm/Doctor); knowledge retrieved in the field; the grimoire’s own shape
  • saez-zucman-audit — AI audit of 138 Saez/Zucman-coauthored works plus Furman and SaneCite counter-checks: facts mostly hold, but SaneCite verifies 21 main-result changes plus 4 under standard practice rather than 147
  • sophie-de-grouchy — French philosopher (1764–1822); Smith’s translator-critic; Letters on Sympathy; feminist republican
  • teilhard-de-chardin — French Jesuit paleontologist (1881–1955); Peking Man; noosphere/Omega; 5 works in wiki; suppressed by his order
  • tibor-scitovsky — Hungarian-born economist (1910–2002); welfare, asymmetric markets, consumption skill, and the psychology of satisfaction
  • vera-rubin — American astronomer (1928–2016); flat galaxy rotation curves = first convincing dark-matter evidence
  • vera-rubin-observatory — NSF–DOE survey facility on Cerro Pachón; LSST ten-year time-lapse of the southern sky
  • viktor-frankl — Austrian psychiatrist (1905–1997); logotherapy founder; MSM; controversies noted
  • whos-on-first — Abbott & Costello’s wordplay routine: use-mention ambiguity, burlesque genealogy, Cowen’s ethnic reading; benign-violation case study
  • z3-theorem-prover — Microsoft Research SMT solver (de Moura & Bjørner, 2007–); DPLL(T) + E-matching; verification/test-gen backend

Queries

Recent notes

See 577 more →

Graph View