The nvidia-smi line that hid a botnet's wallet
a too-permissive sudo shim, a sealed detonation lab, and four rounds of fake C2 to pull a diicot cryptomining crew's live zephyr wallet out of a $6 honeypot.
RESEARCH.
the lab notebook. writeups land here when the work holds up — not a day before.
more on the bench — writeups land when the work holds up, not a day before:
P25 side channels
what a control channel gives away through timing, power, and iq — before anyone touches an encrypted frame.
WPA3 downgrade
how far a modern client can be pushed back down the sae handshake, and where it holds.
LLM agent security
where a tool-calling agent can be steered — injected prompts, poisoned context, and the paths that leak out.