We're working on a writeup that I'm pretty excited about --
Importing your address book to find friends is common for social, but it's insecure to enumeration attacks and database leaks so we've historically refused to implement it. The team has a proposal now that we think solves those risks.
Importing your address book to find friends is common for social, but it's insecure to enumeration attacks and database leaks so we've historically refused to implement it. The team has a proposal now that we think solves those risks.
November 7, 2025 at 1:57 AM
We're working on a writeup that I'm pretty excited about --
Importing your address book to find friends is common for social, but it's insecure to enumeration attacks and database leaks so we've historically refused to implement it. The team has a proposal now that we think solves those risks.
Importing your address book to find friends is common for social, but it's insecure to enumeration attacks and database leaks so we've historically refused to implement it. The team has a proposal now that we think solves those risks.
We'll be posting the writeup to invite scrutiny before we put it into prod.
It reduces the number of possible matches, but we believe it's fully resistant to enumeration attacks. It's also fairly hardened to decryption in the event of a leak, and stores numbers in a form that our org can't misuse
It reduces the number of possible matches, but we believe it's fully resistant to enumeration attacks. It's also fairly hardened to decryption in the event of a leak, and stores numbers in a form that our org can't misuse
November 7, 2025 at 1:57 AM
We'll be posting the writeup to invite scrutiny before we put it into prod.
It reduces the number of possible matches, but we believe it's fully resistant to enumeration attacks. It's also fairly hardened to decryption in the event of a leak, and stores numbers in a form that our org can't misuse
It reduces the number of possible matches, but we believe it's fully resistant to enumeration attacks. It's also fairly hardened to decryption in the event of a leak, and stores numbers in a form that our org can't misuse
The folks running this site continue to demonstrate that they are actively hostile to privacy and vulnerable groups
Maybe work on private accounts before you roll out more abuse mechanisms. Because your claim that you found a novel method? Such, such deep doubt.
Maybe work on private accounts before you roll out more abuse mechanisms. Because your claim that you found a novel method? Such, such deep doubt.
November 7, 2025 at 7:35 AM
The folks running this site continue to demonstrate that they are actively hostile to privacy and vulnerable groups
Maybe work on private accounts before you roll out more abuse mechanisms. Because your claim that you found a novel method? Such, such deep doubt.
Maybe work on private accounts before you roll out more abuse mechanisms. Because your claim that you found a novel method? Such, such deep doubt.
i get frustrated by counting problems when it's something there isn't even a good method to solve (like enumeration of some arbitrary thing with arbitrary contraints) so either you just hope you stumble upon something or have to accept there is an answer that isn't reasonable to find😭
November 10, 2025 at 3:22 AM
i get frustrated by counting problems when it's something there isn't even a good method to solve (like enumeration of some arbitrary thing with arbitrary contraints) so either you just hope you stumble upon something or have to accept there is an answer that isn't reasonable to find😭
[Blogpost] @croco_byte presents how to exploit attack paths related to Active Directory sites' ACLs.
As the latter often constitute a blind spot for AD enumeration tools, the article also describes a pull request aiming to integrate them into the BloodHound project:
As the latter often constitute a blind spot for AD enumeration tools, the article also describes a pull request aiming to integrate them into the BloodHound project:
Site Unseen: Enumerating and Attacking Active Directory Sites
Site Unseen: Enumerating and Attacking Active Directory Sites
www.synacktiv.com
November 7, 2025 at 2:15 PM
[Blogpost] @croco_byte presents how to exploit attack paths related to Active Directory sites' ACLs.
As the latter often constitute a blind spot for AD enumeration tools, the article also describes a pull request aiming to integrate them into the BloodHound project:
As the latter often constitute a blind spot for AD enumeration tools, the article also describes a pull request aiming to integrate them into the BloodHound project:
Interview test:
“Explain lateral movement detection.”
Answer frame: identity + network + behavior.
Signals: new RDP source, Kerberos anomalies, SMB enumeration.
Tools: Zeek, Sysmon, Defender logs.
Principle: access + timing = compromise trail.
“Explain lateral movement detection.”
Answer frame: identity + network + behavior.
Signals: new RDP source, Kerberos anomalies, SMB enumeration.
Tools: Zeek, Sysmon, Defender logs.
Principle: access + timing = compromise trail.
November 5, 2025 at 7:54 PM
Interview test:
“Explain lateral movement detection.”
Answer frame: identity + network + behavior.
Signals: new RDP source, Kerberos anomalies, SMB enumeration.
Tools: Zeek, Sysmon, Defender logs.
Principle: access + timing = compromise trail.
“Explain lateral movement detection.”
Answer frame: identity + network + behavior.
Signals: new RDP source, Kerberos anomalies, SMB enumeration.
Tools: Zeek, Sysmon, Defender logs.
Principle: access + timing = compromise trail.
My art, an enumeration of movements,
Hours of a carnal script
Spoken too quietly
To people loud
Like a thunderclap….
(Fragment from one of my first published poems)
Hours of a carnal script
Spoken too quietly
To people loud
Like a thunderclap….
(Fragment from one of my first published poems)
November 4, 2025 at 7:12 PM
My art, an enumeration of movements,
Hours of a carnal script
Spoken too quietly
To people loud
Like a thunderclap….
(Fragment from one of my first published poems)
Hours of a carnal script
Spoken too quietly
To people loud
Like a thunderclap….
(Fragment from one of my first published poems)
Superb clue but what’s the enumeration? 😆
October 28, 2025 at 8:49 AM
Superb clue but what’s the enumeration? 😆
At the moment it *never* works automatically, even if you have chosen that option in form N-400. USCIS has suspended the "Enumeration Beyond Entry" program in April. All new citizens need to go to an SSA office with their naturalization certificate or US passport to update their status.
October 30, 2025 at 2:12 PM
At the moment it *never* works automatically, even if you have chosen that option in form N-400. USCIS has suspended the "Enumeration Beyond Entry" program in April. All new citizens need to go to an SSA office with their naturalization certificate or US passport to update their status.
ICYMI: F# and C#: Deep Integration for Modern Development #shorts: F# and C# have shared edges and deep integration for 20 years. Users benefit from doing things within a strongly typed API. Policy choices are defined as an enumeration inside of the React app as well as in the backend. #FSharp…
F# and C#: Deep Integration for Modern Development #shorts
F# and C# have shared edges and deep integration for 20 years. Users benefit from doing things within a strongly typed API. Policy choices are defined as an enumeration inside of the React app as well as in the backend. #FSharp #CSharp #React #API #Integration
www.youtube.com
October 28, 2025 at 7:44 AM
La police ? Équipements de fou, hausse des salaires, autorisation de faire n'importe quoi. (Évidemment, tout est relatif, cette énumération est catastrophique)
October 26, 2025 at 12:56 AM
La police ? Équipements de fou, hausse des salaires, autorisation de faire n'importe quoi. (Évidemment, tout est relatif, cette énumération est catastrophique)
Our #SongOfTheDay is "John They're Stealing", where a racial profiling story turns into an hilarious enumeration of thefts, by Thirstin Howl III with Rack Lo from '99.
🎧 Listen at thepropagandasite.com
#Music #NowPlaying #MusicSky #MusicianSky
🎧 Listen at thepropagandasite.com
#Music #NowPlaying #MusicSky #MusicianSky
October 22, 2025 at 1:01 PM
Our #SongOfTheDay is "John They're Stealing", where a racial profiling story turns into an hilarious enumeration of thefts, by Thirstin Howl III with Rack Lo from '99.
🎧 Listen at thepropagandasite.com
#Music #NowPlaying #MusicSky #MusicianSky
🎧 Listen at thepropagandasite.com
#Music #NowPlaying #MusicSky #MusicianSky
NEW: Next year's #2030Census field test, the "2026 Census Test," no longer plans to allow administrators of college dorms and other group-living quarters to review data about the location online before counting starts, according to this Federal Register notice
www.federalregister.gov/public-inspe...
www.federalregister.gov/public-inspe...
October 21, 2025 at 5:51 PM
NEW: Next year's #2030Census field test, the "2026 Census Test," no longer plans to allow administrators of college dorms and other group-living quarters to review data about the location online before counting starts, according to this Federal Register notice
www.federalregister.gov/public-inspe...
www.federalregister.gov/public-inspe...
you get what MSVC did to GCC/Clang source code compat for 30 years: load a shotgun and start fucking blasting it. They also acknowledge this with the enumeration situation.
"It was broken, C23 fixed it" yeah, man. Now that can be backported!
"It was broken, C23 fixed it" yeah, man. Now that can be backported!
October 17, 2025 at 1:19 AM
you get what MSVC did to GCC/Clang source code compat for 30 years: load a shotgun and start fucking blasting it. They also acknowledge this with the enumeration situation.
"It was broken, C23 fixed it" yeah, man. Now that can be backported!
"It was broken, C23 fixed it" yeah, man. Now that can be backported!
@carson.house.gov
A1S2C3's Enumeration Ratio
1 Representative shall not exceed 30,000 people
Indiana's Population as of the 2020 Census = 6,785,528
6,785,528 ÷ 30,000 People = 226 Representatives for Indiana.
If we're gonna do this... lets do it right
A1S2C3's Enumeration Ratio
1 Representative shall not exceed 30,000 people
Indiana's Population as of the 2020 Census = 6,785,528
6,785,528 ÷ 30,000 People = 226 Representatives for Indiana.
If we're gonna do this... lets do it right
October 16, 2025 at 4:39 PM
@carson.house.gov
A1S2C3's Enumeration Ratio
1 Representative shall not exceed 30,000 people
Indiana's Population as of the 2020 Census = 6,785,528
6,785,528 ÷ 30,000 People = 226 Representatives for Indiana.
If we're gonna do this... lets do it right
A1S2C3's Enumeration Ratio
1 Representative shall not exceed 30,000 people
Indiana's Population as of the 2020 Census = 6,785,528
6,785,528 ÷ 30,000 People = 226 Representatives for Indiana.
If we're gonna do this... lets do it right
A Beacon Object File (BOF) for Active Directory enumeration through Active Directory Web Services (ADWS) compatible with BOFHound🕵️♂️
github.com/Nomad0x7/sek...
#infosec #cybersecurity #pentest #redteam #windows #opensource
github.com/Nomad0x7/sek...
#infosec #cybersecurity #pentest #redteam #windows #opensource
GitHub - Nomad0x7/sekken-enum: adws enumeration bof
adws enumeration bof. Contribute to Nomad0x7/sekken-enum development by creating an account on GitHub.
github.com
October 14, 2025 at 8:15 AM
A Beacon Object File (BOF) for Active Directory enumeration through Active Directory Web Services (ADWS) compatible with BOFHound🕵️♂️
github.com/Nomad0x7/sek...
#infosec #cybersecurity #pentest #redteam #windows #opensource
github.com/Nomad0x7/sek...
#infosec #cybersecurity #pentest #redteam #windows #opensource
3. Asked how she would identify areas where 2020 census operations were truncated or potentially incomplete, Meyer said she would "take a closer look at the 2020 post-enumeration survey."
But the survey's results are not broken down below the state level because of the survey's small sample size
But the survey's results are not broken down below the state level because of the survey's small sample size
www.commerce.senate.gov
October 9, 2025 at 9:47 PM
3. Asked how she would identify areas where 2020 census operations were truncated or potentially incomplete, Meyer said she would "take a closer look at the 2020 post-enumeration survey."
But the survey's results are not broken down below the state level because of the survey's small sample size
But the survey's results are not broken down below the state level because of the survey's small sample size
This issue...
I wrote a 700 page book as a solution (free to all)
www.OneDominoAway.com
A redesigned US House based on A1S2C3's Enumeration Ratio.
No more gerrymandering
No more DC Bubble
I wrote a 700 page book as a solution (free to all)
www.OneDominoAway.com
A redesigned US House based on A1S2C3's Enumeration Ratio.
No more gerrymandering
No more DC Bubble
The Carbon Lattice Republic » One Domino Away
A House of Representatives built on Legitimate Constitutional Enumeration. After each census, the Constitution requires 1 Representative Shall Not Exceed 30,000 people. That’s not a suggestion. The Ca...
www.OneDominoAway.com
October 7, 2025 at 2:49 PM
This issue...
I wrote a 700 page book as a solution (free to all)
www.OneDominoAway.com
A redesigned US House based on A1S2C3's Enumeration Ratio.
No more gerrymandering
No more DC Bubble
I wrote a 700 page book as a solution (free to all)
www.OneDominoAway.com
A redesigned US House based on A1S2C3's Enumeration Ratio.
No more gerrymandering
No more DC Bubble
I didn’t read anything into the dash; there’s no need to indicate the hyphen - it’s part of the enumeration. Maybe it’s slightly unsatisfying but in principle it’s ok from my point of view …
October 7, 2025 at 12:36 PM
I didn’t read anything into the dash; there’s no need to indicate the hyphen - it’s part of the enumeration. Maybe it’s slightly unsatisfying but in principle it’s ok from my point of view …
Tit Hite
Mississippi, Enumeration of Educable Children, 1850-1892; 1908-1957
Mississippi, Enumeration of Educable Children, 1850-1892; 1908-1957
October 4, 2025 at 12:24 PM
Tit Hite
Mississippi, Enumeration of Educable Children, 1850-1892; 1908-1957
Mississippi, Enumeration of Educable Children, 1850-1892; 1908-1957
New working paper! *Female labor force participation in historical census microdata*, available at EHES: ehes.org/wp/EHES_282.... . Female labor force participation is well measured in the Norwegian 1910 Census, and the available micro data is well suited for economic analysis (with some caveats).
October 2, 2025 at 2:11 PM
New working paper! *Female labor force participation in historical census microdata*, available at EHES: ehes.org/wp/EHES_282.... . Female labor force participation is well measured in the Norwegian 1910 Census, and the available micro data is well suited for economic analysis (with some caveats).
absolute king shit (or earl shit I guess) to write a list verse where the enumeration is the second line? why? because fuck you, that's why. "I am able to understand . . . poems" as the final line. My guy Rognvald is dunking on us.
Weirdly enough I was telling my first-years about "warrior ethos" last week.
Here's the skill set of a Top Viking, as set out by a dude who'd have gone through anyone using the phrase "warrior ethos" like a well-aimed axe.
Here's the skill set of a Top Viking, as set out by a dude who'd have gone through anyone using the phrase "warrior ethos" like a well-aimed axe.
October 1, 2025 at 6:41 PM
absolute king shit (or earl shit I guess) to write a list verse where the enumeration is the second line? why? because fuck you, that's why. "I am able to understand . . . poems" as the final line. My guy Rognvald is dunking on us.
NEW: The Census Bureau says it plans to test using U.S. Postal Service mail carriers to conduct census interviews at two sites of next year's major field test for the #2030Census. It's also reduced its estimate of "2026 Census Test" participants by about 30%
www.federalregister.gov/public-inspe...
www.federalregister.gov/public-inspe...
September 26, 2025 at 1:01 PM
NEW: The Census Bureau says it plans to test using U.S. Postal Service mail carriers to conduct census interviews at two sites of next year's major field test for the #2030Census. It's also reduced its estimate of "2026 Census Test" participants by about 30%
www.federalregister.gov/public-inspe...
www.federalregister.gov/public-inspe...
Something I like about doing these little lists every week or so is that it proves just how edifying and passive aggressive the act of enumeration can be. Really just slices through a lot of the dumb rationalizing. The picture does not look good, people. I would suggest we stop sugar coating it.
September 25, 2025 at 5:18 PM
Something I like about doing these little lists every week or so is that it proves just how edifying and passive aggressive the act of enumeration can be. Really just slices through a lot of the dumb rationalizing. The picture does not look good, people. I would suggest we stop sugar coating it.