levelZero
Joined 10 months ago
Karma
1
Submissions
14
Member since
Dec 27
Recent submissions
Comment · 1 month ago
Via cli switch, but in process w/o fine graining? If so please tell
Comment · 1 month ago
Utterly inert? Suppose that reads safe...
Comment · 1 month ago
Comment · 1 month ago
Pretty sure you only get to drink the Kool-Aid once. At least in UK this is Jim Jones ref.
Comment · 2 months ago
Gemini 3.8 flash thinks Entoloma sinuatum is good to eat... Otherwise feels great
Comment · 2 months ago
Gemini 3.8 flash told me to eat Entoloma sinuatum!
Comment · 2 months ago
You may not be aware of the most important emergent property of this comment: it made me piss myself laughing. Strong work, architect of intent.
Comment · 2 months ago
don't just dabble, dive in! domain-expert, buck-stopping, orchestrating architects of intent under constraints are going to be the only survivors ;-)
Comment · 2 months ago
My bad. If you are interested, it was "Gemini's lead matters..." which tingled.
Comment · 2 months ago
Claude prose praising Gemini ;-)
Comment · 10 months ago
A dev laptop running Ubuntu 24.04 got hit by a classic PostgreSQL cryptojacking attack while on public Wi-Fi (port 5432 exposed, UFW temporarily off).
Detection started with fan noise → btop tree view revealed 70-99% CPU under the postgres user.
The recovery was fully scripted, transparent, and driven by a local coding agent (Codex-Max-5.2) turned into a paranoid remediation specialist via a custom AGENTS.md directive.
Highlights:
Generated dozens of timestamped audit/cleanup scripts Captured rogue sshd binary → 24/64 detections on VT as Linux trojan/rootkit hider Ended with UFW timed rules, auditd watches, LAN-only services
Full play-by-play, verbatim scripts, and takeaways — no hype, just level zero truth.
https://open.substack.com/pub/layerzero0/p/surviving-a-2025-...
Would love feedback from anyone who's dealt with Postgres miners or AI-assisted IR.