home.social

Search

632 results for “DWM”

  1. Baker Street Forensics @[email protected] ·

    Unmasking the Moon: Comparing LunaStealer Samples with MalChela and Claude

    As one tends to do on Saturday mornings with coffee in hand, I was reviewing two samples that were attributed to the LunaStealer / LunaGrabber family. Originally I was validating that tiquery was working with the MCP configuration, however what started as a quick TI check turned into a full static analysis session — and it gave me a good opportunity to put the MalChela MCP integration through its paces in a real workflow. This post walks through how that investigation unfolded, what the pivot points were, and what we found at the bottom of the rabbit hole.

    The Setup

    If you haven’t seen the MalChela MCP plugin before, the short version is this: MalChela is a Rust-based malware analysis toolkit I’ve been building for a while — tools like tiquery, fileanalyzer, mstrings, and others. The MCP server exposes all of those tools to Claude Desktop natively, so instead of dropping to the terminal for every command, I can run analysis steps conversationally and let Claude help interpret the results and suggest next moves.

    This is not replacing the terminal — it’s augmenting it. The pivot decisions still come from the analyst. But having a reasoning layer that can look at mstrings output and say “that SetDllDirectoryW + GetTempPathW combination is staging behavior, and here’s the ATT&CK mapping” is genuinely useful when you’re moving fast.

    Both samples were sitting in a folder on my Desktop. I had SHA-256 hashes. Let’s go.

    Phase 1: Threat Intelligence Query

    First move is always TI. The MalChela tiquery tool hits MalwareBazaar, VirusTotal, Hybrid Analysis, MetaDefender, and Triage simultaneously and returns a combined results matrix. Two calls, two answers.

    Sample 1 (4f3b8971...) came back confirmed LunaStealer across all five sources. First seen 2025-12-01. Original filename sdas.exe. VT tagged it trojan.generickdq/python — already telling us something about the build.

    Sample 2 (d4f57b42...) was more interesting. MalwareBazaar returned both LunaGrabber and LunaStealer tags. Triage clustered it with BlankGrabber, GlassWorm, IcedID, and Luca-Stealer. The original filename was loader.exe. That’s a different kind of name than sdas.exe. One sounds like a throwaway test artifact. The other sounds deliberate.

    The TI results alone suggested these weren’t just two copies of the same thing. They were potentially different components of the same campaign.

    Phase 2: Static PE Analysis

    fileanalyzer and mstrings on both samples.

    The first thing that jumped out was the imphash — f3c0dbc597607baa2ea891bc3a114b19 — identical on both. Same section layout, same section sizes, same import count (146), same 7 PE sections including the .fptable section that PyInstaller uses for its frozen module table. These two samples were compiled from the same PyInstaller loader template with different payloads bundled inside.

    But the entropy diverged sharply. Sample 1 (sdas.exe) came in at 3.9 — low, even for a PyInstaller bundle. Sample 2 (loader.exe) was 6.9 — high, indicating the embedded payload is compressed or encrypted more aggressively. Combined with the file size difference (47 MB vs 22 MB), this was the first signal that what was inside each bundle was meaningfully different.

    mstrings gave us 22–23 ATT&CK-mapped detections across both samples — largely the same set: IsDebuggerPresent, QueryPerformanceCounter, SetDllDirectoryW, GetTempPathW, ExpandEnvironmentStringsW, OpenProcessToken. Standard infostealer staging behavior. Tcl_CreateThread showed up in both, which is a PyInstaller artifact from bundling Python with Tkinter. The VT python family tag made more sense in context.

    Phase 3: PyInstaller Extraction

    Both samples were extracted with pyinstxtractor-ng. This is where the two samples started to diverge clearly.

    Sample 1 entry point: sdas.pyc — Python 3.13, 112 files in the CArchive, 752 modules in the PYZ archive.

    Sample 2 entry point: cleaner.pyc — Python 3.11, 113 files, 760 modules.

    The name cleaner.pyc inside a file called loader.exe is a tell. That’s not a stealer payload name. That’s something that runs after.

    The bundled library sets were nearly identical between both — requests, requests_toolbelt, Cryptodome, cryptography, psutil, PIL, sqlite3, win32 — same stealer framework. But Sample 2 had a unique addition: a l.js reference (mapped to T1059 — Command and Scripting Interpreter). A JavaScript component not present in the December build. The OpenSSL versions also differed: Sample 1 bundled libcrypto-3.dll (OpenSSL 3.x), Sample 2 had libcrypto-1_1.dll (OpenSSL 1.1). Different build environments, roughly one month apart.

    At this point the working theory was solid: Sample 1 is a standalone stealer. Sample 2 is a later-generation dropper/installer with an updated payload and additional capability.

    Phase 4: Bytecode Decompilation

    decompile3 couldn’t handle Python 3.11 or 3.13 bytecode. That’s a known limitation. pycdc (Decompyle++) handles both.

    sdas.pyc decompiled cleanly — the import stack made the capability set immediately obvious:

     from win32crypt import CryptUnprotectData  from Cryptodome.Cipher import AES  from PIL import Image, ImageGrab  from requests_toolbelt.multipart.encoder import MultipartEncoder  import sqlite3

    CryptUnprotectData for browser master key decryption. AES for the decryption itself. ImageGrab for screenshots. MultipartEncoder for structured exfiltration. Classic infostealer, nothing surprising.

    cleaner.pyc was a different story. The decompiler output opened with this:

     __________ = eval(getattr(__import__(bytes([98,97,115,101,54,52]).decode()), ...

    Heavy obfuscation — byte arrays used to reconstruct eval, getattr, and __import__ at runtime so none of those strings appear in plain text. The approach is designed to evade static string detection. Decode the byte arrays and you get:

     bytes([98,97,115,101,54,52])        → "base64"  bytes([90,88,90,104,98,65,61,61])   → b64decode("ZXZhbA==") → "eval"  bytes([90,50,86,48,...])            → "getattr"  bytes([88,49,57,112,...])           → "__import__"

    Standard Python malware obfuscation. But buried further down in the decompile output was a large binary blob — a bytes literal starting with \xfd7zXZ. That’s the LZMA magic header.

    Phase 5: LZMA Stage 2 Extraction

    The blob was located at offset 0x17d4 in the pyc file. Extract and decompress it:

     import lzma  blob = open('cleaner.pyc', 'rb').read()  idx = blob.find(b'\xfd7zXZ')  decompressed = lzma.decompress(blob[idx:])  # → 102,923 bytes

    One important detail: the decompression is wrapped in a try/except LZMAError block with os._exit(0) on failure. If the decompression fails — as it would in some emulated sandbox environments — the process exits silently with no error. That’s the anti-sandbox mechanism.

    The decompressed payload was another obfuscated Python source using a custom alphabet substitution encoding. The final execution chain was compile() + exec(). Decoding the full stage 2 revealed everything:

    The injection URL:

     https://raw.githubusercontent.com/Smug246/luna-injection/main/obfuscated-injection.js

    This is the live Discord injection payload. The stage 2 pulls this JavaScript file from GitHub and injects it into the Discord desktop client’s core module, persisting across restarts.

    The capability set from stage 2:

    • Anti-analysis checks on startup: process blacklist (~30 entries including wireshark, processhacker, vboxservice, ollydbg, x96dbg, pestudio), MAC address blacklist (80+ VM prefixes), HWID blacklist, IP blacklist, username/PC name blacklists
    • Discord token theft from all three release channels (stable, canary, PTB)
    • Browser credential theft across 20+ Chromium and non-Chromium browsers
    • Roblox session cookie harvesting (.ROBLOSECURITY= targeting with API validation)
    • Desktop screenshot capture
    • Self-destruct: ping localhost -n 3 > NUL && del /F "{path}"

    The ping delay is a simple trick — the 3-second wait lets the process fully exit before the delete fires, so the file removes itself cleanly after execution.

    What MalChela + MCP Added to This Workflow

    The honest answer is: speed and synthesis.

    tiquery hitting five TI sources in one call versus five separate browser tabs or CLI invocations is a meaningful time saving, but that’s the surface benefit. The deeper value showed up in the mstrings step — getting ATT&CK-mapped output with technique IDs alongside the raw strings meant the behavioral picture came together faster than manually correlating imports against the ATT&CK matrix.

    The MCP integration meant each of those steps — TI query, PE analysis, string extraction — could happen within the same conversation context. Claude could see the fileanalyzer output and the mstrings output together and note that the entropy difference between the two samples was significant, that the identical imphash meant shared loader infrastructure, that the staging imports in mstrings were consistent with the exfil approach suggested by the TI tags. That cross-tool synthesis is where the integration earns its keep.

    The parts that still required manual work: pyinstxtractor-ng, pycdc, the LZMA extraction, and decoding the stage 2. Those are terminal steps on the Mac.

    IOCs at a Glance

    Samples:

    SHA-256FilenameFamily4f3b8971...d0sdas.exeLunaStealerd4f57b42...24loader.exeLunaGrabber

    Injection URL:

     https://raw.githubusercontent.com/Smug246/luna-injection/main/obfuscated-injection.js

    Self-destruct pattern:

     ping localhost -n 3 > NUL && del /F "{executable}"

    Imphash (shared loader stub):

     f3c0dbc597607baa2ea891bc3a114b19

    A full IOC list including ~60 C2 IPs, MAC address blacklists, and HWID blacklists is in the analysis report linked below.

    Downloads

    • 📄 [Full Analysis Report] — Complete investigation narrative, sample properties, capability breakdown, IOC documentation, campaign timeline, and recommendations. (lunaStealer_analysis_report.pdf)
    • 🛡️ [YARA Rules — PE] — Four rules targeting the PE samples: exact hash match, shared PyInstaller stub (imphash-based), infostealer payload strings, generic PyInstaller infostealer. (lunastealer_pe.yar)
    lunastealer_analysis_reportDownload lunastealer_pe.yarDownload

    If you’re running MalChela in your environment and want to reproduce the TI query steps, the MalChela MCP plugin source is on GitHub at github.com/dwmetz/MalChela. Questions or additions to the IOC list — find me on the usual channels.

    #DFIR #Forensics #Github #lumastealer #MalChela #Malware #Python #yara
    #dfir #forensics #github #lumastealer #malchela #malware
  2. TobiasSPQH ✅ @[email protected] ·

    Me and @vanlondor at my familys house, Kvarnplatsen, Rånnaväg, Sweden

    Band: Cold
    Song: Quiet Now

    #Sweden #travelphotography #dronevídeo #djimini4pro #nature #sunset #house #haus #wald #forrest #sonnenuntergang #schweden #outdoorliving #peace #innerbalance #travel #Natur #trekking #hiking #freedom #freiheit #wandern #outdoor #frieden #intothewild
    instagram.com/reel/DWMT7QrMbF7

    #sweden #travelphotography #dronevideo #djimini4pro #nature #sunset
  3. Angry Metal Guy @[email protected] ·

    Hands of Goro – Hands of Goro – Review

    By Steel Druhm

    On a day when a NASCAR-themed album hits the mean streets, why shouldn’t we cover a kinda-sorta Mortal Kombat-themed throwback metal opus by members of Slough Feg, Spirit Adrift, and Angel Witch. Hands of Goro is a project playing a style that the members refer to as the “Third Wave of British Heavy Metal.” That’s a fancy-pantsy name for what is essentially the classic NWoBHM sound being unearthed anew in 2024, and that basic NWoBHM sound composes the core of what the band delivers on Hands of Goro. It’s a charmingly retro blend of hard rock, punk, and early-days metal combining for some energetic, exuberant fare with a whole lot of old school flair. Will that be enough to earn a flawless victory? Will Lord Goro reign supreme? FIGHT!

    As opener “Prince of Shoka” kicks into life, you get flavors of early Diamond Head, Thin Lizzy and even Foghat. It’s that classic template of hard rock taken up a notch or 3 to transmogrify it into heavy metal and it works well thanks to the major guitar acumen of Tom Draper (Sprit Adrift, ex-Angel Witch, ex-Carcass) and the stellar bass-work of Adrian Maestas (Slough Feg) which feels very vintage, wrapping a punky, rowdy Mötörhead-friendly vibe into the beef salad. This pays rough, slapdash approach pays big dividends on the hyperactive charge of “Dwmonizer” which bears a bit of a Nucleus-era Dawnbringer feel. The frantic riffing and solos make this one tough to resist and Maestas outdoes himself with some wild vocals and wails. “Uncanny” is like a shotgun marriage between Iron Maiden and Thin Lizzy and Focus with Lemmy on vocals, so you know that’s an easy win you need to play at 12.

    Elsewhere, “21st Century Plague” injects more Motörhead mania with slight but effective touches of black metal, and the pièce de résistance comes with 6-plus minute closer “Archduke of Fear,” which channels all the rowdy, riffy charm of vintage Raven crossed with the stadium rock sensibilities of Scorpions for a hard-charging good time. At a shockingly fast-moving 36 minutes, there’s not much chaff to sift out and every song has its own charm and moments of “FUCK YEAH!” guitar heroics. I love the charmingly retro production which often sounds warm and organic like the old Black Sabbath or Thin Lizzy albums.

    This is a highly talented trio, with tons of road experience under their bullet belts. Tom Draper puts on a crazed clinic on 70s and 80s rock, punk, and metal riffology, crafting many fist-raising, headbanging moments along the way. He has a keen ear for riffs that stick and there are many moments when his playing elicited a smile and unstoppable air guitar noodling. His infectious fretboard romps alone are worth the investment in this thing. Maestas is right there with Draper the whole time, sitting in the bass pocket rumbling and clanging along in fine fashion, giving everything a deep, funky edge. His particular style of playing does make the material sound a bit like Slough Feg, but that’s a bonus. Maestas also hands lead vocals and if there is a weak point, it’s here. His delivery is fine for the rough, rocking style the band plays, but no one will consider him a vocal powerhouse. He reminds me of a less proficient Chris Black (Dawnbringer, High Spirits) and though he certainly hits the mark on the faster tracks, he can seem a bit rough around the edges on the slower cuts. Behind it all we have Avinash Mittur (Nite, Wretched Stench) tearing it up on the kit like a raving maniac. There’s no way to listen to this guy’s gonzo percussive assault and not feel yourself getting amped up and edgy. The trio plays in a loose, punky style which gives everything a live feel and that suits the hard rocking material to its bones. Anything more polished would do this stuff an injustice.

    Much like the High Spirits output, Hands of Goro is so damn throwback that you might bust a shoulder joint listening to it, but boy is their style good fun. It’s simple in design but big in entertainment factor and it has an endearingly sincere feeling that comes from how much those involved love this style of music. It may not be the kind of album that people will be talking about come end-of-year lists, but I suspect it will get a nice little following by those who were born after 1960. Regardless of age, take a flyer on it and get your elder rock on. Hail our new many-fisted overlord. WAR GORO.

    Rating: 3.5/5.0
    DR: 7 | Format Reviewed: 320 kbps mp3
    Label: BSP Records
    Websites: handsofgoro.bandcamp.com | facebook.com/thehandsofgoro
    Releases Worldwide: March 1st, 2024

    #2024 #35 #AngelWitch #BSPRecords #Dawnbringer #HandsOfGoro #HeavyMetal #InternationalMetal #Mar24 #Motörhead #NeoNWOBHM #Raven #Review #Reviews #SloughFeg #SpiritAdrift

    #angelwitch #bsprecords #dawnbringer #handsofgoro #heavymetal #internationalmetal
  4. Angry Metal Guy @[email protected] ·

    Hands of Goro – Hands of Goro – Review

    By Steel Druhm

    On a day when a NASCAR-themed album hits the mean streets, why shouldn’t we cover a kinda-sorta Mortal Kombat-themed throwback metal opus by members of Slough Feg, Spirit Adrift, and Angel Witch. Hands of Goro is a project playing a style that the members refer to as the “Third Wave of British Heavy Metal.” That’s a fancy-pantsy name for what is essentially the classic NWoBHM sound being unearthed anew in 2024, and that basic NWoBHM sound composes the core of what the band delivers on Hands of Goro. It’s a charmingly retro blend of hard rock, punk, and early-days metal combining for some energetic, exuberant fare with a whole lot of old school flair. Will that be enough to earn a flawless victory? Will Lord Goro reign supreme? FIGHT!

    As opener “Prince of Shoka” kicks into life, you get flavors of early Diamond Head, Thin Lizzy and even Foghat. It’s that classic template of hard rock taken up a notch or 3 to transmogrify it into heavy metal and it works well thanks to the major guitar acumen of Tom Draper (Sprit Adrift, ex-Angel Witch, ex-Carcass) and the stellar bass-work of Adrian Maestas (Slough Feg) which feels very vintage, wrapping a punky, rowdy Mötörhead-friendly vibe into the beef salad. This pays rough, slapdash approach pays big dividends on the hyperactive charge of “Dwmonizer” which bears a bit of a Nucleus-era Dawnbringer feel. The frantic riffing and solos make this one tough to resist and Maestas outdoes himself with some wild vocals and wails. “Uncanny” is like a shotgun marriage between Iron Maiden and Thin Lizzy and Focus with Lemmy on vocals, so you know that’s an easy win you need to play at 12.

    Elsewhere, “21st Century Plague” injects more Motörhead mania with slight but effective touches of black metal, and the pièce de résistance comes with 6-plus minute closer “Archduke of Fear,” which channels all the rowdy, riffy charm of vintage Raven crossed with the stadium rock sensibilities of Scorpions for a hard-charging good time. At a shockingly fast-moving 36 minutes, there’s not much chaff to sift out and every song has its own charm and moments of “FUCK YEAH!” guitar heroics. I love the charmingly retro production which often sounds warm and organic like the old Black Sabbath or Thin Lizzy albums.

    This is a highly talented trio, with tons of road experience under their bullet belts. Tom Draper puts on a crazed clinic on 70s and 80s rock, punk, and metal riffology, crafting many fist-raising, headbanging moments along the way. He has a keen ear for riffs that stick and there are many moments when his playing elicited a smile and unstoppable air guitar noodling. His infectious fretboard romps alone are worth the investment in this thing. Maestas is right there with Draper the whole time, sitting in the bass pocket rumbling and clanging along in fine fashion, giving everything a deep, funky edge. His particular style of playing does make the material sound a bit like Slough Feg, but that’s a bonus. Maestas also hands lead vocals and if there is a weak point, it’s here. His delivery is fine for the rough, rocking style the band plays, but no one will consider him a vocal powerhouse. He reminds me of a less proficient Chris Black (Dawnbringer, High Spirits) and though he certainly hits the mark on the faster tracks, he can seem a bit rough around the edges on the slower cuts. Behind it all we have Avinash Mittur (Nite, Wretched Stench) tearing it up on the kit like a raving maniac. There’s no way to listen to this guy’s gonzo percussive assault and not feel yourself getting amped up and edgy. The trio plays in a loose, punky style which gives everything a live feel and that suits the hard rocking material to its bones. Anything more polished would do this stuff an injustice.

    Much like the High Spirits output, Hands of Goro is so damn throwback that you might bust a shoulder joint listening to it, but boy is their style good fun. It’s simple in design but big in entertainment factor and it has an endearingly sincere feeling that comes from how much those involved love this style of music. It may not be the kind of album that people will be talking about come end-of-year lists, but I suspect it will get a nice little following by those who were born after 1960. Regardless of age, take a flyer on it and get your elder rock on. Hail our new many-fisted overlord. WAR GORO.

    Rating: 3.5/5.0
    DR: 7 | Format Reviewed: 320 kbps mp3
    Label: BSP Records
    Websites: handsofgoro.bandcamp.com | facebook.com/thehandsofgoro
    Releases Worldwide: March 1st, 2024

    #2024 #35 #AngelWitch #BSPRecords #Dawnbringer #HandsOfGoro #HeavyMetal #InternationalMetal #Mar24 #Motörhead #NeoNWOBHM #Raven #Review #Reviews #SloughFeg #SpiritAdrift

    #spiritadrift #sloughfeg #reviews #review #raven #neonwobhm
  5. 娛壹 @[email protected] ·

    MIRROR正副隊長變阿發‧外父
    AK緊接拍新戲
    許願Fing小組成員更多工作

    Tiger引發哥哥們年齡焦慮？
    AK：我哋都仲係青春期！
    文哥：我啱啱發育之嘛！

    讚老虎演唱會表現水準之上
    Ian冇起身跳舞
    AK：佢話個位買咗，坐足啲唔好蝕呀

    MIRROR正副隊長：Lokman #楊樂文（文哥）和 #AnsonKong 江𤒹生周日（22日）到尖沙嘴出席導演會周年晚宴，早前放假學躺平蓄鬚的文哥剃了鬚，由「土耳其毒梟」變番MIRROR隊長。是夜他與談善言一齊做晚宴及頒獎禮司儀。MIRROR過去兩年都有成員出席導演會晚宴，笑言是為「搲撈」尋求工作機會，AK笑稱：「我係諗住嚟食乳豬嘅！」

    ︱AK拍完劇 緊接拍新戲︱
    AK稱是夜還要開工，故未能留足全晚；日前隊中「忙內虎」Tiger #邱傲然 首次舉行演唱會，AK也因為工作關係早走，他笑：「托賴托賴…」文哥插嘴連珠炮發：「忙囉！紅囉！勁囉！搵到囉！」AK放棄掙扎，聳聳肩表示：「冇辦法真係…」

    AK續說：「多謝！承讓（拱手）！FING小組有一個先跑咗，...
    instagram.com/p/DWMX5nwkrne/

    #mirror #ak #文哥 #导演会 #演唱会 #工作
  6. 娛壹 @[email protected] ·

    MIRROR正副隊長變阿發‧外父
    AK緊接拍新戲
    許願Fing小組成員更多工作

    Tiger引發哥哥們年齡焦慮？
    AK：我哋都仲係青春期！
    文哥：我啱啱發育之嘛！

    讚老虎演唱會表現水準之上
    Ian冇起身跳舞
    AK：佢話個位買咗，坐足啲唔好蝕呀

    MIRROR正副隊長：Lokman #楊樂文（文哥）和 #AnsonKong 江𤒹生周日（22日）到尖沙嘴出席導演會周年晚宴，早前放假學躺平蓄鬚的文哥剃了鬚，由「土耳其毒梟」變番MIRROR隊長。是夜他與談善言一齊做晚宴及頒獎禮司儀。MIRROR過去兩年都有成員出席導演會晚宴，笑言是為「搲撈」尋求工作機會，AK笑稱：「我係諗住嚟食乳豬嘅！」

    ︱AK拍完劇 緊接拍新戲︱
    AK稱是夜還要開工，故未能留足全晚；日前隊中「忙內虎」Tiger #邱傲然 首次舉行演唱會，AK也因為工作關係早走，他笑：「托賴托賴…」文哥插嘴連珠炮發：「忙囉！紅囉！勁囉！搵到囉！」AK放棄掙扎，聳聳肩表示：「冇辦法真係…」

    AK續說：「多謝！承讓（拱手）！FING小組有一個先跑咗，...
    instagram.com/p/DWMX5nwkrne/

    #mirrorandaksactivities #尖沙嘴 #work #music #entertainment #机会
  7. 娛壹 @[email protected] ·

    MIRROR正副隊長變阿發‧外父
    AK緊接拍新戲
    許願Fing小組成員更多工作

    Tiger引發哥哥們年齡焦慮？
    AK：我哋都仲係青春期！
    文哥：我啱啱發育之嘛！

    讚老虎演唱會表現水準之上
    Ian冇起身跳舞
    AK：佢話個位買咗，坐足啲唔好蝕呀

    MIRROR正副隊長：Lokman #楊樂文（文哥）和 #AnsonKong 江𤒹生周日（22日）到尖沙嘴出席導演會周年晚宴，早前放假學躺平蓄鬚的文哥剃了鬚，由「土耳其毒梟」變番MIRROR隊長。是夜他與談善言一齊做晚宴及頒獎禮司儀。MIRROR過去兩年都有成員出席導演會晚宴，笑言是為「搲撈」尋求工作機會，AK笑稱：「我係諗住嚟食乳豬嘅！」

    ︱AK拍完劇 緊接拍新戲︱
    AK稱是夜還要開工，故未能留足全晚；日前隊中「忙內虎」Tiger #邱傲然 首次舉行演唱會，AK也因為工作關係早走，他笑：「托賴托賴…」文哥插嘴連珠炮發：「忙囉！紅囉！勁囉！搵到囉！」AK放棄掙扎，聳聳肩表示：「冇辦法真係…」

    AK續說：「多謝！承讓（拱手）！FING小組有一個先跑咗，...
    instagram.com/p/DWMX5nwkrne/

    #mirror #ak #文哥 #导演会 #演唱会 #工作
  8. Doctor Who: Radio Free Skaro @[email protected] ·

    Radio Free Skaro #1066 – A Space Helmet for a Cow

    http://traffic.libsyn.com/freyburg/rfs1066.mp3

    Download MP3

    The worlds of Doctor Who collide once more as the BBC launches into new Fugitive Doctor adventures via Circuit Breaker, a multi-platform saga in the tradition of Time Lord Victorious and Doom’s Day,.The Three Who Rule are somewhat skeptical about the whole business, despite the welcome addition of a new and quite snazzy hat for Jo Martin’s Fugitive Doctor! There’s also an Entertainment Weekly list of the top 50 Doctor Who stories of the modern era which is just as non-controversial as you’d think, articles about missing episodes in general and the The Daleks’ Master Plan in particular, multicam from School Reunion and an extended hockey-Who metaphor like you’ve all been clamouring for! And speaking of long-awaiting things, we have the conclusion of our latest Classic Series Commentary with Part Four of The Mysterious Planet!

    Links:

    Commentary:

    #AnAdventureInSpaceAndTime #BigFinish #CircuitBreaker #Commentary #Dalek6388 #doctorWho #doctorWhoMagazine #EntertainmentWeekly #MissingEpisodes #NcutiGatwa #SchoolReunion #SNLUK #TheBlackArchive #TheDaleksMasterPlan #TheDevilSPlanet #TheMysteriousPlanet #TheWhoniverseShow
    #anadventureinspaceandtime #bigfinish #circuitbreaker #commentary #dalek6388 #doctorwho
  9. Doctor Who: Radio Free Skaro @[email protected] ·

    Radio Free Skaro #1066 – A Space Helmet for a Cow

    http://traffic.libsyn.com/freyburg/rfs1066.mp3

    Download MP3

    The worlds of Doctor Who collide once more as the BBC launches into new Fugitive Doctor adventures via Circuit Breaker, a multi-platform saga in the tradition of Time Lord Victorious and Doom’s Day,.The Three Who Rule are somewhat skeptical about the whole business, despite the welcome addition of a new and quite snazzy hat for Jo Martin’s Fugitive Doctor! There’s also an Entertainment Weekly list of the top 50 Doctor Who stories of the modern era which is just as non-controversial as you’d think, articles about missing episodes in general and the The Daleks’ Master Plan in particular, multicam from School Reunion and an extended hockey-Who metaphor like you’ve all been clamouring for! And speaking of long-awaiting things, we have the conclusion of our latest Classic Series Commentary with Part Four of The Mysterious Planet!

    Links:

    Commentary:

    #AnAdventureInSpaceAndTime #BigFinish #CircuitBreaker #Commentary #Dalek6388 #doctorWho #doctorWhoMagazine #EntertainmentWeekly #MissingEpisodes #NcutiGatwa #SchoolReunion #SNLUK #TheBlackArchive #TheDaleksMasterPlan #TheDevilSPlanet #TheMysteriousPlanet #TheWhoniverseShow
    #anadventureinspaceandtime #bigfinish #circuitbreaker #commentary #dalek6388 #doctorwho
  10. Doctor Who: Radio Free Skaro @[email protected] ·

    Radio Free Skaro #1066 – A Space Helmet for a Cow

    http://traffic.libsyn.com/freyburg/rfs1066.mp3

    Download MP3

    The worlds of Doctor Who collide once more as the BBC launches into new Fugitive Doctor adventures via Circuit Breaker, a multi-platform saga in the tradition of Time Lord Victorious and Doom’s Day,.The Three Who Rule are somewhat skeptical about the whole business, despite the welcome addition of a new and quite snazzy hat for Jo Martin’s Fugitive Doctor! There’s also an Entertainment Weekly list of the top 50 Doctor Who stories of the modern era which is just as non-controversial as you’d think, articles about missing episodes in general and the The Daleks’ Master Plan in particular, multicam from School Reunion and an extended hockey-Who metaphor like you’ve all been clamouring for! And speaking of long-awaiting things, we have the conclusion of our latest Classic Series Commentary with Part Four of The Mysterious Planet!

    Links:

    Commentary:

    #AnAdventureInSpaceAndTime #BigFinish #CircuitBreaker #Commentary #Dalek6388 #doctorWho #doctorWhoMagazine #EntertainmentWeekly #MissingEpisodes #NcutiGatwa #SchoolReunion #SNLUK #TheBlackArchive #TheDaleksMasterPlan #TheDevilSPlanet #TheMysteriousPlanet #TheWhoniverseShow
    #anadventureinspaceandtime #bigfinish #circuitbreaker #commentary #dalek6388 #doctorwho
  11. Doctor Who: Radio Free Skaro @[email protected] ·

    Radio Free Skaro #1066 – A Space Helmet for a Cow

    http://traffic.libsyn.com/freyburg/rfs1066.mp3

    Download MP3

    The worlds of Doctor Who collide once more as the BBC launches into new Fugitive Doctor adventures via Circuit Breaker, a multi-platform saga in the tradition of Time Lord Victorious and Doom’s Day,.The Three Who Rule are somewhat skeptical about the whole business, despite the welcome addition of a new and quite snazzy hat for Jo Martin’s Fugitive Doctor! There’s also an Entertainment Weekly list of the top 50 Doctor Who stories of the modern era which is just as non-controversial as you’d think, articles about missing episodes in general and the The Daleks’ Master Plan in particular, multicam from School Reunion and an extended hockey-Who metaphor like you’ve all been clamouring for! And speaking of long-awaiting things, we have the conclusion of our latest Classic Series Commentary with Part Four of The Mysterious Planet!

    Links:

    Commentary:

    #AnAdventureInSpaceAndTime #BigFinish #CircuitBreaker #Commentary #Dalek6388 #doctorWho #doctorWhoMagazine #EntertainmentWeekly #MissingEpisodes #NcutiGatwa #SchoolReunion #SNLUK #TheBlackArchive #TheDaleksMasterPlan #TheDevilSPlanet #TheMysteriousPlanet #TheWhoniverseShow
    #thewhoniverseshow #themysteriousplanet #thedevilsplanet #thedaleksmasterplan #theblackarchive #snluk
  12. Doctor Who: Radio Free Skaro @[email protected] ·

    Radio Free Skaro #1066 – A Space Helmet for a Cow

    http://traffic.libsyn.com/freyburg/rfs1066.mp3

    Download MP3

    The worlds of Doctor Who collide once more as the BBC launches into new Fugitive Doctor adventures via Circuit Breaker, a multi-platform saga in the tradition of Time Lord Victorious and Doom’s Day,.The Three Who Rule are somewhat skeptical about the whole business, despite the welcome addition of a new and quite snazzy hat for Jo Martin’s Fugitive Doctor! There’s also an Entertainment Weekly list of the top 50 Doctor Who stories of the modern era which is just as non-controversial as you’d think, articles about missing episodes in general and the The Daleks’ Master Plan in particular, multicam from School Reunion and an extended hockey-Who metaphor like you’ve all been clamouring for! And speaking of long-awaiting things, we have the conclusion of our latest Classic Series Commentary with Part Four of The Mysterious Planet!

    Links:

    Commentary:

    #AnAdventureInSpaceAndTime #BigFinish #CircuitBreaker #Commentary #Dalek6388 #doctorWho #doctorWhoMagazine #EntertainmentWeekly #MissingEpisodes #NcutiGatwa #SchoolReunion #SNLUK #TheBlackArchive #TheDaleksMasterPlan #TheDevilSPlanet #TheMysteriousPlanet #TheWhoniverseShow
    #anadventureinspaceandtime #bigfinish #circuitbreaker #commentary #dalek6388 #doctorwho
  13. Linse_Dunemanninen @[email protected] ·

    Nach vielen Jahren habe ich es endlich ins Wildkatzen- und Luchs-Mekka, genauer ins @wildkatzendorf_huetscheroda in Thüringen geschafft...

    Neue Eindrücke, viel Input und Inspiration für meine Arbeit als @naturversteher.harz und Nationalpark-Guide und Wanderführer im @harzklub_goslar und im @nationalpark_harz

    #harzhikingmetalpunk
    #wildkatze
    #Luchs
    #NationalparkHarz
    #nationalparkhainich
    #harzmountains
    #hiking
    #wandern
    instagram.com/p/DWmR3bJDMpD/?i

    #harzhikingmetalpunk #wildkatze #luchs #nationalparkharz #nationalparkhainich #harzmountains
  14. LeibnizIGB @[email protected] ·

    2022 zeigte die #Oder, wie verletzlich ein Fluss sein kann. Die Katastrophe liefert aber auch wertvolle Hinweise für die Zukunft. Video 4 von 4 fragt: Wie machen wir die Oder langfristig widerstandsfähiger? Und warum ist ein gesunder Fluss für uns so entscheidend?
    Hier ansehen: youtu.be/RybwD6BOKyA?si=-aMZBX

    #WRRL #Revitalisierung #Klimawandel #Klimaanpassung #Hochwasser #Ökosystemleistungen #Wasserstraße #Brandenburg

    #oder #wrrl #revitalisierung #klimawandel #klimaanpassung #hochwasser
  15. Brian Hayes @[email protected] ·

    The wonderful thing about Linux is that there isn't one way to do things, but rather a plethora. This is even true for Tiling Window Managers! On Linux, you can use i3, bspwm, dwm, awesomewm, xmonad, sway, hyprland, river, and many many others. I personally use bspwm, but have used others in the past, and they all provide that minimalist, keyboard centric workflow. How about you? Which Tiling Window Managers have you tried?
    #twm #tilingwindowmanager #windowmanager #desktop #workflow

    #workflow #desktop #windowmanager #tilingwindowmanager #twm
  16. LUCHS KINO am Zoo Halle @[email protected] ·

    Nicht verpassen: Im Anime-Programm „Manganime“ zeigen wir diesen Monat *Tunnel to Summer*! Der Film erzählt die Geschichte eines mysteriösen Tunnels, der Wünsche erfüllt. Was würdet ihr euch wünschen? Unser Wunsch ist, euch im Kino zu sehen!

    🎬 Trailer: youtu.be/oWy7DY1I-Ls?si=QEokCN
    📅 Programm: luchskino.de/film_1708/tunnel_
    🎟️ Tickets: luchskino.de/tickets/

    #LUCHSKinoHalleSaale #LUCHSKino #Kino #Film #TunnelToSummer #Anime #Manganime #iloveanime #HalleSaale #Deutschland

    #luchskinohallesaale #luchskino #kino #film #tunneltosummer #anime
  17. LeibnizIGB @[email protected] ·

    2022 zeigte die #Oder, wie verletzlich ein Fluss sein kann. Die Katastrophe liefert aber auch wertvolle Hinweise für die Zukunft. Video 4 von 4 fragt: Wie machen wir die Oder langfristig widerstandsfähiger? Und warum ist ein gesunder Fluss für uns so entscheidend?
    Hier ansehen: youtu.be/RybwD6BOKyA?si=-aMZBX

    #WRRL #Revitalisierung #Klimawandel #Klimaanpassung #Hochwasser #Ökosystemleistungen #Wasserstraße #Brandenburg

    #oder #wrrl #revitalisierung #klimawandel #klimaanpassung #hochwasser
  18. LeibnizIGB @[email protected] ·

    2022 zeigte die #Oder, wie verletzlich ein Fluss sein kann. Die Katastrophe liefert aber auch wertvolle Hinweise für die Zukunft. Video 4 von 4 fragt: Wie machen wir die Oder langfristig widerstandsfähiger? Und warum ist ein gesunder Fluss für uns so entscheidend?
    Hier ansehen: youtu.be/RybwD6BOKyA?si=-aMZBX

    #WRRL #Revitalisierung #Klimawandel #Klimaanpassung #Hochwasser #Ökosystemleistungen #Wasserstraße #Brandenburg

    #brandenburg #wasserstraße #okosystemleistungen #hochwasser #klimaanpassung #klimawandel
  19. MacMagazine @[email protected] ·

    Ontem, como cobrimos no site, a #Apple encerrou as festas em comemoração dos seus 50 anos com um belo show em pleno #ApplePark. Hoje, o CEO Tim Cook comentou o seguinte: "Que alegria celebrar #Apple50 com Paul McCartney! Sua música nos inspira desde o início, então este é um momento de fechamento de ciclo para encerrar nossas comemorações. Obrigado, Paul, por provar que, quando você pensa diferente, você tem o poder de mudar o mundo." 🥳🎂 instagram.com/p/DWmsh2HgRrF/

    #apple #applepark #apple50
  20. Joanna @[email protected] ·
    CW: Emacs, exwm et wayland

    Ces jours-ci je réfléchis à préparer une migration vers un environnement wayland

    Mais je n'ai pas envie de perdre l'expérience offerte par exwm, à savoir le minimalisme visuel, la fluidité des chargements et la tranquillité du processeur.

    Il y a     #swaywm, mais ça reste encore trol lourd à mon goût

    Alors je viens de voir     #dwl (fork de dwm compatible wayland) et de découvrir #dwl-guile qui a un package #guix qui s'installe via un service home (alternaive à systemd). Ce dernier m'intéresse particulièrement, puisqu'il intègre directement emacs dans l'environnement. Mais pour le prendre en main, il me faudrait comprendre et maîtriser #guile...

    #swaywm #dwl #dwlguile #guix #guile
  21. Baker Street Forensics @[email protected] ·

    The Long Game: MalChela v4.0

    When I started building MalChela, I had a narrow problem to solve. I was doing a lot of malware triage during incident response engagements and I kept reaching for the same scattered set of tools — VirusTotal, some strings extraction, a hash lookup here, a YARA scan there. The workflow existed, but it wasn’t a workflow. It was a series of scripts and context switches dressed up as a process. I wanted something that unified those steps under one roof, ran locally, and felt like a tool a forensicator actually built.

    What I got was MalChela. What I didn’t expect was how far it would go.

    From Rust Experiment to Field Platform

    The first version was modest. A handful of tools with a unifying CLI runner. The goal was simple: hash a malware sample, look it up, pull strings, run YARA. The kind of triage you want to do in the first ten minutes with an unknown file.

    Version 2 brought a desktop GUI — MalChelaGUI, built on egui/eframe. It was a genuine step up in accessibility. Analysts who weren’t comfortable in the terminal had a way in. The toolset kept growing.

    Version 3 added structure around the investigation itself. Case management landed, giving results somewhere to live across a session. MCP server integration followed, opening up a whole new mode of operation — Claude working alongside the tools, not just alongside me.

    But the GUI carried freight. It meant building for a specific platform, managing a Rust GUI dependency chain, and ultimately shipping something that couldn’t easily follow MalChela into its most interesting new use case: the field.

    Toby Changed Everything

    If you’ve been following Baker Street Forensics for the last few months, you’ve seen the ‘TOBYgotchi‘ project take shape — a Raspberry Pi Zero 2W running Kali Linux, with a Waveshare e-ink display, PiSugar battery, and MalChela pre-installed. Boot it up, it announces itself on the network, and you’re ready to triage. And yes, I am working on making a full build of TOBY available to the public. Stay tuned…

    The original field kit vision was: SSH in, run tools from the CLI, pull results. Simple and functional. But the more I used Toby in practice, the more I wanted a better interface — something that worked without a terminal, something a colleague could pick up at a scene without knowing the command syntax.

    MalChelaGUI on a Pi Zero 2W is possible but not comfortable. The egui overhead, the X display stack, remote display via VNC — it all works, but it’s friction. What I wanted was something lighter. Something any browser on the network could reach. Something that felt native on an iPad.

    That’s what pulled me toward the PWA.

    v4.0: The PWA Takes Over

    MalChela v4.0 retires the desktop GUI entirely and replaces it with a Progressive Web App as the primary interface.

    Every tool that lived in MalChelaGUI has been ported. Most have been improved in the process. The PWA is served locally from the server/ directory — run setup-server.sh once after building the binaries, then start-server.sh on every subsequent boot. Open any browser on the local network and you’re in.

    On Toby, this is now part of autostart. Boot the Pi — battery-powered, no cables required — and the server comes up automatically. Connect from your desktop, phone or iPad directly to the PWA. No VNC, no X display overhead, no SSH tunnel. Just a browser pointing at the Pi’s IP.

    And here’s the part that makes it genuinely useful in the field: you can upload files directly from whatever device you’re browsing from to the MalChela server. Phone, iPad, laptop — if it has a browser and can reach Toby on the network, it can submit a sample for analysis. The triage station travels with you, and so does the interface.

    This is still a work in progress, but the direction is clear: a battery-powered Pi you can drop on a table at a scene, pull out your tablet, and start triaging — no keyboard, no monitor, no additional hardware required.

    The field kit I was imagining finally snapped into focus.

    REMnux Support

    Running MalChela on a REMnux instance? It’s now even easier to load the REMnux configuration tools.yaml.

    Configuration > tools.yaml > Load REMnux

    then refresh the browser and you’ve got access to all the REMnux CLI tools from within MalChela.

    What Else Is New

    Simplified case management. This one’s been on my list for a while. In previous versions, case management was tied to starting with a file or folder — you had to know what you were investigating before you could create a case. That’s not how IR actually works. v4.0 breaks that dependency: any result can be saved to a case, and you can create a new case from within a running tool session. All the output, whether from the included cargo tools, or 3rd party add-ons like TShark or Volatility, can be saved to your case. The investigation defines the case, not the other way around.

    Improved Volatility support. The Volatility integration got a meaningful UX overhaul. The reference panel has been improved, and output now streams inline within the PWA — no more spawning a separate terminal window to see results, which was one of the more awkward edges of the old GUI experience.

    Rapid tool iteration via tools.yaml. The PWA is built around a tools.yaml configuration file that defines the tool manifest. Add a new tool, update the YAML, refresh the interface — done. No recompiling the GUI, no rebuilding the binary for a UI change. This makes extending MalChela considerably faster in practice, and opens the door for community-contributed tool configs down the road.

    Try MalChela for Yourself

    MalChela v4.0 is available on GitHub now: https://github.com/dwmetz/MalChela/

    The CLI isn’t going anywhere. If you’re scripting triage workflows, running MalChela headless in an automated pipeline, or just prefer the terminal, everything you relied on in v3.x is still there. The PWA is the new face of MalChela; the CLI is still the engine.

    Want to run MalChela on Windows? You can build it in an Ubuntu instance in WSL. Once you start the server in WSL, the Windows host can access the PWA via http://localhost:8675. (In modern WSL2 Microsoft automatically forwards WSL loopback → Windows localhost.)

    If you hit any constraints, open an issue on GitHub. I tried to be as thorough as possible in my testing, but there’s only so much a one-man dev team can do. I’m happy assist in troubleshooting and improve the documentation. Rest assured you won’t get a “well, it works in my environment…”

    #DFIR #Forensics #MalChela #Malware #Memory #REMnux #Rust #TOBY
    #dfir #forensics #malchela #malware #memory #remnux
  22. Юніксоїд :flag_wbw: @[email protected] ·

    Хороший подкаст о Linux

    JustaGuyLinux :debian: (@justaguylinux) - Fosstodon

    fosstodon.org/@justaguylinux

    > 54 Posts, 24 Following, 174 Followers · Just A Guy. Linux. Fan of good people. Good BBQ. Good FOSS. Would love it if I can be better at social media, but have little hope that will happen. :debian: :dwm: #linux #youtube #youtuber #Buccaneers #bbq #kcbs #nativefloridian #debian #bspwm #dwm

    #linux #youtube #youtuber #buccaneers #bbq #kcbs
  23. Mark @[email protected] ·

    The vibrant landscape. I can't give it up. So many exciting things happening:
    - RakuOS: immutable bootc image, but with a normal package manager. And Cosmic.
    - Project Bluefin: the Dakota alpha is out, which is based on Gnome OS. So no more distro involved, pure Gnome as the basis.
    - Butterknife: as mentioned yesterday Debian Stable, btrfs snapshots and a number of window managers to choose from (Qtile, Awesome, dwm, Sway, SwayFX, i3). Plus good looks and many, many scripts to install additional sw (Helium, Zen, ghostty etc etc).
    - TunaOS: the bootc concept for enterprise Linux, based on Alma and CentOS. But also Bonito, which provides Fedora44 and Niri!
    Wild!

    #archlabs #rakuos #dakota #tunaos #butterbian

    #tunaos #archlabs #rakuos #dakota #butterbian
  24. Baker Street Forensics @[email protected] ·

    Hashes for the Masses: Finding What Matters in a Sea of Samples

    A short while back, I released a pair of tools for building MD5 hash sets — one targeting known-good gold builds, the other designed for scanning malware corpora. The goal was simple: generate hash sets that could be used in forensics tools like Axiom Cyber to flag IOC matches during case processing.

    Recently, I hit a familiar problem: I had a hash and wanted to know if that file existed in my malware library. Step one was updating my tooling to support SHA256 — the modern standard for hash sharing — and regenerating the hash sets. That part worked. I could search for a hash and confirm whether it appeared in my set.

    But what if I got a match?

    At that point, I realized: I had no way to correlate the match back to the original file. With ~30,000 samples in the library, “just eyeballing it” wasn’t an option.

    As I’ve been coding up new tools — or revisiting earlier ones — I’ve discovered that rabbit holes have rabbit holes.

    So I updated the SHA256 tool to not only generate a hash set, but also produce a .tsv lookup table mapping each hash to its full file path. This made the sets usable both in forensics platforms and for custom lookups in more ad hoc workflows. As they say: necessity is the mother of intention.

    Of course, that led to another realization. I now had four hashing tools — two for MD5 (MZ and non-MZ), and two for SHA256. The “Hashing Tools” section in MalChela was getting a bit crowded.

    Back to the drawing board.

    The Result: Three Unified Tools

    I consolidated and upgraded everything into three tools — all of which support both CLI and GUI usage.

    #️⃣ MZHash (replaces mzmd5)

    • Uses YARA to recursively scan for files with an MZ header (i.e., Windows executables and DLLs)

    • Generates one hash file per selected algorithm: MD5, SHA1, SHA256

    • Also creates a .tsv lookup file for each, mapping hashes to paths

    cargo run -p mzhash /directory/to/scan -- -a MD5 -a SHA1 -a SHA256

    Via GUI, you can browse to the folder and check boxes for each algorithm.

    🌐 XMZHash (replaces xmzmd5)

    • Uses YARA to skip over files with MZ, ZIP, or PDF headers

    • Hashes everything else — ideal for surfacing Linux, Mac, or unusual samples from a mixed malware corpus

    • Also supports .tsv lookup file generation

    cargo run -p xmzhash /directory/to/scan -- -a MD5 -a SHA1 -a SHA256

    The idea: hash what’s not obviously Windows, document-related, or un-extracted samples.

    XMZHash

    🔍 HashCheck

    Okay, so naming might not be my strong suit. But this tool’s direct.

    • Provide a hash value and a .txt or .tsv hash set

    • It checks for matches, and if you’re using a .tsv, it shows the file path of the match

    • Great for live triage, corpus hunting, or checking known-bads

    cargo run -p hashcheck ./hashes.tsv 44d88612fea8a8f36de82e1278abb02f
    Hash Check

    In Summary

    MalChela 2.2.1 expands its hashing toolkit with the introduction of HashCheck, MZHash, and XMZHash — giving analysts faster ways to flag known-good, isolate unknowns, and build actionable sets. In this release, we’ve also said goodbye to legacy tools, standardized output saving, and doubled down on clarity across both CLI and GUI workflows.

    Download: https://github.com/dwmetz/MalChela/releases

    User Guide: https://dwmetz.github.io/MalChela/

    #Axiom #DFIR #Forensics #hashing #Malware #Rust #yara

    #axiom #dfir #forensics #hashing #malware #rust
  25. seyfriedmichi @[email protected] ·

    @VQuaschning Wir sehen uns in #München am 18.4. um 12 Uhr am Siegestor (instagram.com/reel/DWlqshEtAnz/ )
    ... und am 24.4. um 15 Uhr am Odeonsplatz (instagram.com/reel/DWmLAGst7Xu/)
    ... und wer #mitmachen möchte am 15.4. um 18 Uhr im MHDS (instagram.com/reel/DWrbCdmjN-D/)

    #munchen #mitmachen
  26. Euan @[email protected] ·

    Being Canadian, It's been a very long time since an issue has crossed my path, but I happened on this copy of June's #DoctorWhoMagazine yesterday at a nearby bookshop! Having a lovely little time reading it. (And it's very cool that it came with a whole Target novel as a freebie!)

    It is a bit odd travelling back in time a few months to *just* before Ncuti's surprise departure. But these magazines sure are lovely time capsules. If I was loaded, I'd be reading every issue.

    (Incidentally, as I was checking out I asked if they carried DWM regularly. The guy there said he'd never seen it there before.)

    #DoctorWho

    #doctorwhomagazine #doctorwho
  27. question mark @[email protected] ·
    I don't know if nvidia driver got better, but I experience less problems with "jonaburg picom" than a few months ago, so it stays for more, to see if it's really working that well.

    This is the one with kawase blur, rounded corners and animations. All are very well done btw. I remember that in dwm it had an animation for workspace switching, and xmonad doesn't have that, probably it handles workspaces differently.

    https://github.com/jonaburg/picom

    If you want to try this and if you have a picom on your system, they are not compatible, the other one has to go. Also the configuration is different, so what I did was I made a config file with different name: picom_anim.conf (although it should really be picom_jonaburg so I don't forget which picom I use with.

    And you start with:
    picom --experimental-backends ~/.config/picom/picom_anim.conf

    (config file you can as "picom.sample.conf")

    This compositor doesn't have as much flashy stuff as kwin or compiz, but still looks good and really easily configurable.

    #Linux #customization #picom #animations #blur #roundedcorners
    #linux #animations #blur #customization #picom #roundedcorners
  28. eventos.coletivos.org @[email protected] ·

    Festival Euforia x Disgraça

    Disgraça, domingo, 29 de março às 11:30 GMT+1

    ꧁⋆Festival Euforia x Disgraça⋆꧂

    No próximo domingo, 29 de março, a Disgraça recebe o segundo dia do nosso festival!

    Pelas 11h30, o @festival_euforia irá dinamizar uma oficina de fanzines, onde exploraremos a publicação diy como ferramenta de expressão política cuir, que servirá também como material de apoio à marcha que acontecerá a seguir.

    (⁠´⁠⊙⁠ω⁠⊙⁠`⁠) ! Lotação máxima de 15 pessoas – formulário de inscrição na bio
    https://www.instagram.com/p/DWMsNfUAqbV/


    Às 15h30 seguimos para o Largo do Intendente, para nos juntarmos à marcha pela visibilidade trans (mais infos pela @transmutarredeativista) ⚧️ o trajeto termina na Ribeira das Naus, com open mic, performances e concertos

    A partir das 20h, voltamos para a Disgraça, para uma noite de convívio com jantar vegan e música ♡

    eventos.coletivos.org/event/fe

    #disgraca #lisboa #fanzine
  29. Don Trueten :antifa: @[email protected] ·

    Nazi-Milliardäre – Reich, rechts, mächtig

    #BMW, #MercedesBenz, #Porsche, #Allianz, #Oetker; wie sind diese deutschen #Weltkonzerne groß geworden?

    Die vier reichsten Männer in der BRD waren 1970 Friedrich #Flick, August von #Finck, Herbert #Quandt und Rudolf-August #Oetker. Den entscheidenden Teil ihrer enormen Vermögen konnten sie ab 1933 erwerben, in der Stahl- und #Rüstungsindustrie, bei #Versicherungen und #Banken und in der #Lebensmittelindustrie.

    Der langsame Aufstieg dieser #Familienclans in den zwanziger Jahren, der rasante Weg in die höchsten Machtpositionen im deutschen #Faschismus, das kurze Straucheln nach dem 8. Mai #1945, die spektakuläre Rückkehr an die Spitze seit den fünfziger Jahren und die heutige Debatte um die #Nazi-#Milliardäre sind das Thema des Buches des niederländischen Wirtschaftsjournalisten David De Jong.

    Die #Konzernchefs teilten nach dem Ende des #Kaiserreiches die republikfeindlichen und reaktionären politischen Vorstellungen des deutschnationalen Milieus. Das erleichterte die bewusste Annäherung an #Hitler und die #NSDAP mit sehr grossen Spenden und regelmässigen Treffen ab 1930.

    Für alle sichtbar wurde dieses Zusammengehen durch die Heirat von #Goebbels und Magda Quandt, zuvor Ehefrau Günter Quandts, dem Besitzer der Deutschen Waffen- und #Munitionsfabriken (DWM) und der AFA-Werke (später Varta). Auf dem Buchumschlag der deutschsprachigen Ausgabe von „Braune Erben“ ist ein Foto der faschistischen #Prominentenfamilie: Josef und Magda Goebbels mit dem Quandt-Sohn Harald.

    Nach der von ihnen mit vorangetriebenen Zerstörung der Weimarer #Republik 1933 haben Quandt, Flick, Finck, #Porsche und #Kaselowsky (Oetker) 12 Jahre lang immer schneller an der Aufrüstung und der „Arisierung“ verdient. Alle waren Mitglieder in #Himmlers „Freundeskreis #Reichsführer SS“ und der NSDAP.

    Im Zweiten Weltkrieg kam es zum systematischen Einsatz von #Zwangsarbeiter:innen. Skrupellos haben sie die vielen Verschleppten ausgebeutet, allein bei Quandt mussten 57500 Menschen arbeiten. „Mindestens 403 Menschen starben in Günther Quandts (.) AFA-Werk.“ Eingesperrt in Lager, gefährdet durch Arbeit, Unfälle, Hunger und Krankheit, von Ermordung bedroht, wurden viele Zwangsarbeiter:innen schliesslich auf die #Todesmärsche geschickt. Die 1016 Toten des grausamen Verbrechens in #Gardelegen kamen aus einem der AFA-Werke. Sie wurden lebend in der Feldscheune verbrannt.

    (...) Weiter in der #Rezension von @sebastianschroeder

    trueten.de/archives/13179-Nazi #Antifa #CapitalismIsADeathCult #Faschismus

    #bmw #mercedesbenz #porsche #allianz #oetker #weltkonzerne
  30. Don Trueten :antifa: @[email protected] ·

    Nazi-Milliardäre – Reich, rechts, mächtig

    #BMW, #MercedesBenz, #Porsche, #Allianz, #Oetker; wie sind diese deutschen #Weltkonzerne groß geworden?

    Die vier reichsten Männer in der BRD waren 1970 Friedrich #Flick, August von #Finck, Herbert #Quandt und Rudolf-August #Oetker. Den entscheidenden Teil ihrer enormen Vermögen konnten sie ab 1933 erwerben, in der Stahl- und #Rüstungsindustrie, bei #Versicherungen und #Banken und in der #Lebensmittelindustrie.

    Der langsame Aufstieg dieser #Familienclans in den zwanziger Jahren, der rasante Weg in die höchsten Machtpositionen im deutschen #Faschismus, das kurze Straucheln nach dem 8. Mai #1945, die spektakuläre Rückkehr an die Spitze seit den fünfziger Jahren und die heutige Debatte um die #Nazi-#Milliardäre sind das Thema des Buches des niederländischen Wirtschaftsjournalisten David De Jong.

    Die #Konzernchefs teilten nach dem Ende des #Kaiserreiches die republikfeindlichen und reaktionären politischen Vorstellungen des deutschnationalen Milieus. Das erleichterte die bewusste Annäherung an #Hitler und die #NSDAP mit sehr grossen Spenden und regelmässigen Treffen ab 1930.

    Für alle sichtbar wurde dieses Zusammengehen durch die Heirat von #Goebbels und Magda Quandt, zuvor Ehefrau Günter Quandts, dem Besitzer der Deutschen Waffen- und #Munitionsfabriken (DWM) und der AFA-Werke (später Varta). Auf dem Buchumschlag der deutschsprachigen Ausgabe von „Braune Erben“ ist ein Foto der faschistischen #Prominentenfamilie: Josef und Magda Goebbels mit dem Quandt-Sohn Harald.

    Nach der von ihnen mit vorangetriebenen Zerstörung der Weimarer #Republik 1933 haben Quandt, Flick, Finck, #Porsche und #Kaselowsky (Oetker) 12 Jahre lang immer schneller an der Aufrüstung und der „Arisierung“ verdient. Alle waren Mitglieder in #Himmlers „Freundeskreis #Reichsführer SS“ und der NSDAP.

    Im Zweiten Weltkrieg kam es zum systematischen Einsatz von #Zwangsarbeiter:innen. Skrupellos haben sie die vielen Verschleppten ausgebeutet, allein bei Quandt mussten 57500 Menschen arbeiten. „Mindestens 403 Menschen starben in Günther Quandts (.) AFA-Werk.“ Eingesperrt in Lager, gefährdet durch Arbeit, Unfälle, Hunger und Krankheit, von Ermordung bedroht, wurden viele Zwangsarbeiter:innen schliesslich auf die #Todesmärsche geschickt. Die 1016 Toten des grausamen Verbrechens in #Gardelegen kamen aus einem der AFA-Werke. Sie wurden lebend in der Feldscheune verbrannt.

    (...) Weiter in der #Rezension von @sebastianschroeder

    trueten.de/archives/13179-Nazi #Antifa #CapitalismIsADeathCult #Faschismus

    #bmw #mercedesbenz #porsche #allianz #oetker #weltkonzerne
Next page