# sasha (blogs) — RSS Amplifier Recent posts from the 2 feeds in the RSS Amplifier directory that cover sasha. Page: Feed: --- ## [The Spell Of Absolute Gullibility](https://rasputincatamite.com/comics/pl/1894334/) _2026-08-16 · Rasputin Catamite_ Frame 1 Decoy sadly gazes into Sasha's eyes. DECOY What have you done to us? Frame 2 Sasha awakens in terror by herself. SASHA DADDY! Frame 3 DUCK-DUCK Sasha, what's the matter? SASHA My arms, legs, privates... Everything hurts, Duck-Duck. Frame 4 I don't know why I hurt so bad, little sister. Frame 5 Norm enters the room. NORM Sasha was badly hurt in a car crash. She had surgery on her ambiguous… ## [Absolute Power Play](https://rasputincatamite.com/comics/pl/1894333/) _2026-08-09 · Rasputin Catamite_ Frame 1 Sasha, Hielope, and Decoy are in the icy dream world having a conversation. SASHA I didn't want this to happen. Benjamin's dream curse did this. You are my ticket out of Russia, Decoy. The Benitez brothers were using you to steal my body and Lechy's so they could... DECOY Don't call me Decoy, you treacherous pathological liar. I was killed in prison because of you. Frame 2 HIELOPE Dr… ## [Slam](https://rasputincatamite.com/comics/pl/1894332/) _2026-08-02 · Rasputin Catamite_ Frame 1 Decoy starts to panic. Sasha Sandoval’s spirit possessed his brother, Benjamin, to cast the Spell of Absolute Power during Lechy’s initiation. Decoy WHAT!? Sasha They also cast the Curse of Realized Dreams on you. Frame 2 Decoy I can’t read your mind! Sasha Papa Norm taught me how to block snooping psychics, so I felt brave enough to tell Principal Rytkheu the truth about you. Door \*CRASH\*… ## [Norm Returns](https://rasputincatamite.com/comics/pl/1894330/) _2026-07-19 · Rasputin Catamite_ NORM Why is Decoy not in prison yet? Sasha told us his real name. You know what he looks like. He works in your poopy school district. RYKTHEU It's messy. PRINCIPAL RYKTHEU It seems Dr Rodan Manakov has powerful friends. I've been advised that without solid evidence he cannot be arrested or fired. NORM Ugh! That means he's a Lord of Sodom PRINCIPAL RYKTHEU I don't know what a Lord of Sodom is?… ## [Housing](https://rasputincatamite.com/comics/pl/1894328/) _2026-07-11 · Rasputin Catamite_ Dima And, that’s how Ugly Alex’s dad got us into this experimental capitalist-run apartment complex for old Jewish ladies who are too ancient to fly to Israel, right here in Irkutsk. Our flat even has a private bathroom. Frame 2 Sasha That’s rad! My real dad is finally out of prison. Frame 3 Zoya Major coincidence! My dad just went to prison. Frame 4 Dima Whatever happened to Lechy? Zoya I dunno.… ## [Wedding Day](https://rasputincatamite.com/comics/pl/1894329/) _2026-06-27 · Rasputin Catamite_ Frame 1 Lechy and Masha are signing their marriage license in front of a JP. Masha’s parents, Lechy’s unimpressed mom, his dad (The guy with the grey hair and glasses on the drawing above), Decoy and Benjamin as also witnesses. Benjamin and Decoy are both wearing suits. Masha’s Mom You must be proud of your son. Frame 2 Dr. Merkacheva I’m more proud of the psychiatric team I enlisted to cure Lech… ## [Love](https://rasputincatamite.com/comics/pl/1894326/) _2026-06-20 · Rasputin Catamite_ Frame 1 Play up the romance to gloppy sappy levels. Floaty hearts, if need be. Dima You’re a monster scientifically designed to play hockey, just like me. Instead of fangs and immortality, you have ‘roid rages and an inflated sense of entitlement. These are symptoms of the same disease, so I accept and love you the way you are. Frame 2 Ugly Oh Dima... Dima Let’s get drunk and play hide the… ## [It's A Shame](https://rasputincatamite.com/comics/pl/1894325/) _2026-06-13 · Rasputin Catamite_ Frame 1 Ugly It’s still a shame that you’re throwing away your hockey career after everything we went through. Frame 2 Ugly And, what about your girlfriend? What would she think if you became a mobster? Dima Sasha is a pretty good mind reader, so I think I’ll avoid Irina for now. Frame 3 Irina is in her shack with all sorts of implements of upir torture including meat hooks, chains, ropes,… ## [Monster Mobsters](https://rasputincatamite.com/comics/pl/1894324/) _2026-06-06 · Rasputin Catamite_ Frame 1 Dima I think I’m gonna quit hockey to go work as a mob goon for my sperm donors’ criminal organization. Father Igor really wants me to continue the family business. Frame 2 Ugly I knew the Shapinov Brothers were monsters, but I didn’t know that they were mobsters. Dima Oh yeah, they work with Lord Sodom and the KGB to control all sex, drugs and weapons coming in and out of Irkutsk. Frame 3… ## [Rooting Home Assistant through MeshCore: XSS attacks with a LoRa node name](https://mxsasha.eu/posts/meshcore-xss-home-assistant/) _2026-06-03 · Sasha Romijn_ A crafted MeshCore node name could compromise any Home Assistant instance running meshcore-card as soon as someone viewed a dashboard with that card. MeshCore relays through repeaters, so the attacker did not need to be in radio range of the target itself, only of any node that could forward to it. ## [Finnish Seedboxes — Up to 20Gbps (Sponsored)](https://crawlproof.com/a/tfY9wgINpg6s) _2026-06-02 · **Sponsored**_ Private Finnish seedboxes with 1–20Gbps speeds, RAID storage and 14‑day refund ## [Journal](https://rasputincatamite.com/comics/pl/1894323/) _2026-05-30 · Rasputin Catamite_ Frame 1 Sasha and Zoya are sharing a seat on a train. Zoya sleeps and Sasha journals. Lechy is close to them, but looks bitter and distant. Sasha as narrator Our band’s first and last concert, was the greatest moments of our sad lives. I’m pretty sure everything will go downhill from there. It was the culmination of many choices and several avalanches of errors. Frame 2 Flashback of the concert.… ## [RIPE NCC session fixation: poaching logins with an Atlas probe](https://mxsasha.eu/posts/ripe-ncc-session-fixation/) _2026-05-28 · Sasha Romijn_ RIPE NCC’s single sign-on did not rotate session tokens on login, leaving 12000 Atlas probe hosts in a position to compromise other RIPE NCC users’ logins. A single link click planted a session token in a target’s browser. When that target next logged in to a RIPE NCC service, possibly much later, the attacker could access their account. An XSS variant did the same regardless of… ## [1000 third parties could have stolen RIPE NCC session tokens - by design](https://mxsasha.eu/posts/ripe-ncc-sso-cookie-exposure/) _2026-05-06 · Sasha Romijn_ The RIPE NCC made its all-powerful single sign-on tokens available to over 1000 third parties. From a single link click, any logged-in RIPE NCC user would leak their session token. That token grants full access to the RPKI Dashboard, the RIPE Database, and the member portal. RPKI and the Database govern internet routing for Europe, the Middle East, and Central Asia. This access could be made… ## [Inside a 14-month responsible disclosure with the RIPE NCC](https://mxsasha.eu/posts/ripe-ncc-disclosure-retrospective/) _2026-04-29 · Sasha Romijn_ This post covers the disclosure process for the vulnerabilities described in my RPKI exploit chain , through RIPE NCC’s Responsible Disclosure Policy . Update 2026-06-10 : RIPE NCC published their own retrospective on this disclosure: What We Learned from a Multi-Service Vulnerability Disclosure , by their CISO Eleonora Petridou. What went well RIPE NCC engaged in good faith throughout. All… ## [Taking down a European network with a TLS certificate: my RIPE NCC RPKI exploit chain](https://mxsasha.eu/posts/ripe-ncc-rpki-exploit-chain/) _2026-04-29 · Sasha Romijn_ One click on a malicious, but not suspicious, link. That is all it could take for a network operator to get disconnected from the internet, through a chain of vulnerabilities I discovered. From that single click, I could fully control their routing authorisations in a RIPE NCC portal, telling the rest of the internet not to accept their routes. I could also hijack all their RIPE Database objects,… ## [Root from the parking lot: OpenWrt XSS through SSID scanning (CVE-2026-32721)](https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/) _2026-03-19 · Sasha Romijn_ Lately, I’ve been experimenting with unusual XSS vectors. XSS (cross-site scripting) allows an attacker to execute arbitrary javascript in another user’s browser session. Sometimes the result is merely entertaining, sometimes the result is: Dear Sasha, excellent (and terrible) find! A crafted wifi SSID could lead to an XSS in the OpenWrt admin interface, if an admin opened the nearby…