Well, no DEF CON for me for a long while.

@rmondello.com Hi, Ricky! I have a passkey-related question if it's alright to ask. Would it be okay to implement passkey that would not require an OTA even if set up (I've seen here and there), and if so, what would be the rationale and/or the attack models it protects against? Thanks in advance!

Here’s my Spotify Wrapped 🎵✨

After we published this story, Kohler has removed all mentions of "end-to-end encryption" from its website. Company PR said: "We used the term with respect to the encryption of data between our users (sender) and Kohler Health (recipient)."

12월 3일을 기억합니다.

27일 개최되는 유럽 최대 보안 컨퍼런스 39C3(39. Chaos Communication Congress)에는 한국과 관련된 세션이 두가지 준비되어 있습니다. Learning from South Korean Telco Breaches - Shinjo "peremen" Park (@pheremen.bsky.social) - Yonghyu Ban (@perillamint.pds.witchcraft.systems)

The Doctor is right and correct

Studies have not ruled out the possibility that drinking water causes autism...

트랜스젠더 추모의 날입니다. 그럭저럭 지내는 줄 알았는데 어느 순간부터 글이 올라오지 않다가 부고를 전해듣게 된 여러 명을 추모합니다. 그들을 위해서라도 지금 살아있는 우리는 꼭 자연사하길 바랍니다.

Silksong’s fascination with religion is obvious from the beginning. But only in examining the game’s conclusion(s) does its perspective become clear — this is a story about the apocalyptic finish line, a story about the end of stories. And it is also about what comes after. youtu.be/Rp-gPD_-RM4

옆집 포스트모템만큼 흥미진진한 것도 없지요… 언제나 그렇지만 Cloudflare의 최대 강점은 본사 레벨의 투명성에서 오는 것 같습니다. 무슨 일이 일어나도 곧 길고 긴 블로그 글이 올라올 것이며 뭘 어쨌고 어떻게 고칠 건지 설득할 거라는 믿음. 그래서 이런 일이 터져도 신뢰할 수 있는 것 같습니다. 그 기조가 지사에도 내려왔으면 참으로 좋겠지만…

We can no longer trust that survey responses are coming from real people.”

신고하세요

I love Passkeys, and I hope one day Safari would authenticate me with my Apple Watch...

NEW: Cybersecurity firm Deepwatch laid off around 80 people citing AI the reason. CEO John DiLullo said the company “is aligning our organization to accelerate our significant investments in AI.” A current employee said: “they’re doing something with AI and agentic AI but it sounds like bullshit.”

Immensely refreshing read

여러분의 회사 컴퓨터는 어떻게 관리되고 있나요? 블스에 투표 기능이 없어서 부득이 트위터입니다...

Tax the churches.

Removed the X app from my phone and slapped a PWA on the home screen. Push notifications work, ad blockers work. Now finally it feels like a glorified RSS reader, as it should be.

I gave an opening keynote at the FIDO Alliance’s “Authenticate” conference a few weeks ago! My goal was to explain, as clearly as I can, why passkeys are important and how we should use them to reduce the harm that passwords cause. [1/2] YouTube link: www.youtube.com/watch?v=otOb...

@hankgreen.bsky.social When I search for "Focus Friend," the first result feels off. It has screenshots, detailed description & FAQ, even embeds your video, but somehow the app can edit photos with prompts? I'm assuming this is simply farming ad revenue, but can you confirm this is not legit?

X and TikTok accounts are dedicated to posting AI-generated videos of women being strangled.

Apple’s App of the Day is our app for using apps less! A small win in an admittedly losing battle, but I’ll still celebrate it!!

NEW, by me: Researchers have discovered an Android spyware that specifically targeted Samsung Galaxy phones during a nearly year-long hacking campaign. The spyware relied on a zero-day bug triggered by sending a victim a malware-laced photo via a messaging app. Victims are likely in the Middle East.

“0% woke shit” a black man with a physical disability leads an environmental terrorist cell trying to save the planet from mega-billionaires and you play as a cross dressing twink femdomed by two different women ending and the final boss against the gayest angel of all time

스카이 뉴스의 조사에 따르면 X의 알고리즘은 머스크와 같은 유저를 선호하며 우익 및 극단적인 콘텐츠를 증폭시킨다고 말함. 정치적 성향(좌, 우, 중립)에 따라 분류된 9명의 새로운 X 사용자의 For You 피드에 표시된 게시물을 분석한 결과, 사용자 선호도에 관계없이 정치 콘텐츠의 60% 이상이 우익인 것으로 나타났음

Metric Tip xkcd.com/3164/

KT 해킹 숨기고 결제정보까지 털렸다…정부 ‘역대급 제재’ 임박 2025. 11. 06 16:02 작성 'BPF도어' 서버 43대 감염 숨기고 '조용히 조치' 소액결제 피해 확산에 법적 책임 '정조준' lawtalknews.co.kr/article/751W...

https://check.kt.com/simchg/SimChgOrderInfo.html KT도 HSS가 털렸나, 아니면 국K-1 등지의 압력으로 결정한 건가? HSS가 털리지 않았다면 SKT가 했던 "유심 재설정"만으로도 IMSI를 통한 사용자 추적은 막을 수 있다. 그러나 슈뢰딩거의 HSS 해킹이 지속되는 한 아무도 안전하다는 걸 믿지 않을 가능성이 크다.

Uncle Sam wants to scan your iris and collect your DNA, citizen or not

데이비드 베컴 작위 받는데 궁정에 울리는 음악이 골든

Right,

진화심리학 같은 소리를 한다면 조용히 씹어줍시다

I love their films but A24 is simply an impractically small paper size

미국에 대한 관심이 당연한 것으로 여겨지는게 좀 싫음

The White House plans to bar hospitals that treat transgender children and youth from getting any Medicare and Medicaid payments. The move would affect trans youth who have private insurance, too. n.pr/4qFa1mY

Welp. That's the third telco in South Korea to have reported a data breach in the past six months, after SK Telecom and KT.

developers in california just don't seem to understand some people can be bilingual and they would find your auto-translate feature fucking annoying holy shit

This article by @quinnypig.com nails it www.theregister.com/2025/10/20/a...

My longest video to date is out now! AI Is Not the Solution youtu.be/piZVmf29ju8

Cloudflare WARP를 늘 켜놓고 살았는데 도저히 너무 느려서 Surfshark를 사용하기 시작했다. 그런데 도대체 WARP는 왜 한국 서버(colo=ICN)라고 뜨는데도 한국 서버(특히 정부, 금융) 응답 속도가 느린 건지 이해가 안 돼서 이래저래 테스트를 해봤는데, 아무래도 ICN 내에서 이상한 제한이 있는 것 같다. TCP 연결이 열리는 시간(connect)은 빠른데 그 이후 TLS 연결이 열리는 시간(appconnect)과 데이터가 오기 시작하는 시간(starttransfer)이 20배 느리다!

This is what democracy looks like. #NoKings

If you bring Rayhunter to a protest this weekend (or ever), please send us the results, even if you didn’t find anything! Negative results can still help us better understand how and when CSS are being used. efforg.github.io/rayhunter/s...

“허니팟 설치를 위한 가상머신(VM) 내 크롬 브라우저에서 직원의 개인 이메일이 자동로그인 돼 있었고 메일함에 업무 자료가 있었다는 설명이다. 해커를 유인하는 가짜 시스템에 '진짜' 이메일 계정 정보가 있어, 해커가 실제 업무 자료를 빼간 것이다.“ 어이가 없네…

Blink: Intent to ship: Cache sharing for extremely-pervasive resources

Reddit's AI product provided dangerous advice in medical subreddits and moderators can't turn it off www.404media.co/reddit-answe...

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypted. www.wired.com/story/satell...

We're updating our bounty program with the top award now set at $2 million for zero-click remote exploit chains. In addition - there are increased awards for proximate wireless attacks, WebKit, and Gatekeeper security.apple.com/blog/apple...