Nick Price (@DominoTree) header
Nick Price (@DominoTree) profile picture

Nick Price

@DominoTree

FreeBSD kernel committer, hardware hacker, cybersecurity professional

 San Francisco, US
github.com/DominoTree
Joined October 2011
  • Tweets9.7K
  • Following1.9K
  • Followers2.3K
I vibe-coded a kernel module for FreeBSD that uses GitHub's downtime as an entropy source github.com/DominoTree/ghrand…
Image from Nick Price (@DominoTree)
14
42
4
787
27,479
Q: Where do PCIe devices hang out? A: The BAR.
52
Touchscreens on laptops for general use were a terrible idea when Windows 8 came out (remember how well that was received?) and they are still a terrible idea today
2
13
184
Nick Price retweeted
USGC (@usgraphics) profile picture
USGC
@usgraphicsOct 18
We need FreeBSD guy vs. Mac dude ads. FreeBSD guy asks "What's a GUI and why is so slow? Oh it animates? Shit just moves around for no reason? Wait...it looks like glass and you can't read anything? And search doesn't work?"
16
16
1
357
9,992
EIEIO
Image from Nick Price (@DominoTree)
3
7
367
emudhra is actively blocking certain versions of curl from fetching their certificate revocation lists. this is with the usual combination of incompetence (only blocking specific curl versions) and malice (deliberately disrupting global security response) bugzilla.mozilla.org/show_bu…

2085612 - eMudhra: Access to CRLs blocked for certain User-Agent headers

UNCONFIRMED (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-26.

bugzilla.mozilla.org
21
141
8
1,965
63,055
LLM SENTIENCE CONFIRMED AGI IS HERE
Image from Nick Price (@DominoTree)
2
1
8
1,219
Nick Price retweeted
hashcat (@hashcat) profile picture
hashcat@hashcatOct 25
hashcat v8.0.0 released! The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards. Release notes: github.com/hashcat/hashcat/b… Download: hashcat.net/hashcat/
Image from hashcat (@hashcat)
24
425
33
2,042
94,239
Nick Price retweeted
Jon  (@jonschxyz) profile picture
Jon 
@jonschxyzOct 25
Replying to @marcorandazza @AmericanExpress
Sounds like you thought $900 a year made you some sort of elitist lol. Sorry to hear about the reality check.
4
4
464
38,602
Boomer-coding a static site generator and templating engine entirely in ANSI C89 because I hate myself
3
1
4
511
Someone bought a really badass domain name and made a sweet landing page for a vibevuln in your product. No one actually knows if the bug is exploitable or impactful yet but it has gone viral anyways, enjoy your weekend
14
2
137
6,072
STOP THE PRESSES Setting the environment variable TS_SERVE_ALLOW_ALL_INTERFACES will let Tailscale Serve bind to all interfaces CVSS 10.0 SHUT IT DOWN
19
10
2
544
56,276
(this is literally a finding in the report)
Image from Nick Price (@DominoTree)
2
53
7,797
I reported a decent kernel vuln on Thursday - nobody told me I was supposed to register a domain name about it :(
5
68
2,439
Nick Price retweeted
calle (@callebtc) profile picture
calle
@callebtcOct 25
the tailscale vulnerabilities read like slop to me. nothing in there seems critical or reason to panic. also: no repsonsible disclosure, nor any code or proof. feels like a scam.
14
14
3
322
11,487
Back in my day, we’d make artisanal hand-crafted shitposts to drop vulns on the Full-Disclosure listserv. Kids today only know eat hot chip and AI
9
518
Pretty sure that the reason that the Tailscale “Tailworm” vulnerabilities weren’t responsibly disclosed with the vendor is that they were hallucinated AI slop and there wasn’t anything to be responsibly disclosed with the vendor
8
11
197
7,988
There may be some legit findings here but they’re buried in sensationalism and nonsense and don’t seem like anything that would merit coordinated disclosure to begin with
1
10
907
Nick Price retweeted
banteg (@banteg) profile picture
banteg
@bantegOct 25
that tailworm site reads like gigaslop, i call bullshit on the framing. the ssh bug is basically: authorized nonroot access can become root via unix socket forwarding. serious, but propagation follows ssh policy. this concerns tailscale’s opt-in ssh server, not ordinary openssh. the path also requires the attacker (yourself) to be added to your tailnet, enabled tailscale ssh (not enabled by default), configured forwarding (not default).
16
35
4
352
22,613
Nick Price retweeted
Vincent Yiu (@vysecurity) profile picture
Vincent Yiu
@vysecurityOct 25
Replying to @ashxhart
Did you see the finding about the TAILSCALE SERVE INTERFACE environment variable? LMAO
1
2
145
I’m turning on Tailscale SSH at home just to spite this dumb report
6
7
1
103
3,453
“bypasses network policy”: Reaching cross-namespace services is default pod behavior in Kubernetes. Their "fix" is to “add a default-deny egress NetworkPolicy.” If adding one fixes it, the finding is just “their test environment had no NetworkPolicy”?
Image from Graham Helton (too much for zblock) (@GrahamHelton3)
2
1
38
1,671
Load more