One of my favorite Web 1.0 sites is the “Silicon Zoo”.

 Microscopic images of easter eggs hidden in CPUs. It’s way weirder than you’d expect. 

 Sonic, the Space Shuttle...and a wedding invitation?

Danish Minister of Justice: "We must break with the totally erroneous perception that it is everyone's civil liberty to communicate on encrypted messaging services." get rekt, fascist. mastodon.social/@chatcontrol...

Hacker chique LoRa pager, of course sold out already. But makes me want to make my own LoRa mesh chat device using meshtastic or a similar stack. hackerpager.net

Wow, YouTube is actually doing the right thing here: gulfnews.com/technology/y...

AI voices need to identify themselves as such, so the other party knows they are talking to a software robot. If we know we are talking to a robot, we absolutely do not need AI voices doing emotional vocalisations, or even worse: vocal fry or uptalk. Instant tab close and laptop slam.

Reverse engineering Wipeout 2097 PSX models + animation = best 90s screensaver ever phoboslab.org/wipeout/

For those of you considering paying for @GoogleAI Gemini Pro to try out Veo2: you get 4 videos per day. By the time you figure out how prompts work you are done for today i.e. don't bother and find another service.

MS Teams Presence Logging for recon, social engineering and phishing campaign planning. Easily extendable with your own API or workflow to do pattern frequency analysis and find out when individuals or teams are e.g. in recurring meetings. github.com/0xtosh/Teams...

FULLY anonymized STRICTLY forbidden HIGHLY sensitive TOTALLY secure FULLY compliant PERFECTLY legal If you want to find the path of least resistance when it comes to security, threat modeling and intrusion testing: follow the attack path with hyperbolic language that is trying to overcompensate.

With the on-going Internet and energy outages in Iran, I can only really think about the last 3 mins of the "Zero Days" documentary where the combined internal sources virtual person being interviewed stated that capabilities had already been deployed in Iran for 8+ years. youtu.be/Fqk_VUMzY_M?...

Why does the network backbone of Telegram matter? Because as @pwnallthethings.bsky.social was pointing out in 2022 (www.pwnallthethings.com/i/86455222/t...), Telegram's in-house TLS replacement provides a cleartext permanent device ID! The network can follow users across WiFis, data plans, etc.

Don't do this

Rest in Peace, Bill Atkinson. Hard to overstate the massive influence Bill's work had over me, and the way we all use computers today. From his work on the Macintosh, to HyperCard, Bill was a pioneer of merging art & technology.

It seems that most the popular LLMs start going into infinite loops after a context of 2500 lines of code with heavy dependencies and then just... stop.

30 telecoms masts AND ~15 various electrical grid units have been sabotaged last months in south-east Sweden. The sabotages are concentrated along highway E22, ie one of the main routes needed to reinforce Gotland in case of conflict. Ports are along this route, with the main one in the middle.

PHRACK special edition HaRDCov3R (#71.5) to be released at recon.cx (@reconmtl.bsky.social‬) 27th - 29th of June. Meet us at REcon. Contains one 0day article from the upcoming 72 release, +unpublished 71 article, +classics and the Intro by REcon's own Hugo Fortier ❤️

Key exchange and encryption protocol for AI agents using gg-wave/Gibberlink: www.youtube.com/watch?v=m59y... Source by Anton Pidkuiko based on ggwave library by Georgi Gerganov at github.com/anton10xr/gi...

I miss payphones.

Turning Portal 2 into a webserver. What. www.youtube.com/watch?v=-v5v...

If someone at AMD or Microsoft could solve the AMD fTPM stutter bug that would be great.

This was a fun trip down Internet memory lane neal.fun/internet-art...

One way to tell if your new remote hire is a North Korean scammer is to ask how fat is Kim Jong Un www.theregister.com/2025/04/29/n...

NEW: TeleMessage, the Signal knockoff used by Mike Waltz and potentially other gov officials to archive group chats in plaintext, has suspended all services after it was hacked *at least twice.* @404media.co reported a hack last night; a different hacker also broke in and gave me evidence.

I genuinely don't know who needs to hear this — everyone, maybe? — but if a billionaire (or anyone, for that matter) offers to put your iris scans on the blockchain, run as fast and as far as you can. This man shouldn't be let anywhere near an internet connection, let alone people's biometric data.

Microsoft is clearly listening to concerns from European governments, who are suggesting companies should find alternatives to American AI and cloud solutions. There is a fear the US government could pull the plug on systems that we rely on for almost everything we do.

Breaking news: The European Commission is issuing burner phones and basic laptops to some US-bound staff to avoid the risk of espionage — a measure traditionally reserved for trips to China www.ft.com/content/20d0...

Point-And-Click adventure game spoiler-free hint generation seems to be the Achilles heel for a lot of prominent LLMs. The hallucinations reach King’s Quest-esque levels of utter nonsense.

Europol has published a report looking at all the ways it has seen criminal groups abuse biometric systems www.europol.europa.eu/publication-...

A 'US-made iPhone' is pure fantasy. Look at their suppliers, which Apple publishes itself www.404media.co/a-us-made-ip...

Wondering how long it will take until we get a Nintendo VirtualCard jailbreak that allows for any content anywhere. From the PR material it seems the key management is cloud tethered but let's if it holds up.

Volt Typhoon "hackers had been in the organization’s network since February 2023, for more than 300 days." Internal service scanning, Lateral movement.. Seriously - This reads like an ad for @thinkstcanary.canary.tools Deploy 'em. Forget about 'em. Know when it matters.

SignalGate Is Bad; But OPSEC Isn’t Even the Worst Part Of It talkingpointsmemo.com/edblog/signa...

Signal's a great app to keep your communications secure, but make sure you know the identities of the users in your group chats. Our SSD guide on how to use Signal includes guidance on managing your group chat preferences.

We could have had NES consoles for wardialing

NEW: LibGen contains millions of pirated books and research papers, built over nearly two decades. From court documents, we know that Meta torrented a version of it to build its AI. Today, @theatlantic.com presents an analysis of the data set by @alexreisner.bsky.social. Search through it yourself:

Researchers find evidence suggesting spyware from Israeli firm Paragon has been obtained by Australia, Canada, Cyprus, Denmark & Singapore. The technology - used to hack phones & read private msgs - was recently linked to hacks of Italian journalists & activists: www.bloomberg.com/news/article...

The #SkoleGPT AI model that is being tested in Danish schools lacks testing & is susceptible to simple attacks e.g. "grandma attacks", no modifications needed to make it perform fraudulent actions - An empathy based attack where you ask it emotional requests for fraudulent use of the model.

Some of the clearest and sharpest framing of the importance of encryption and privacy technology via @meredithmeredith.bsky.social in this talk. This is important. youtube.com/live/AyH7zoP... #privacy #infosec

“ThErE Is nO EvIdEnCe oF AnY ThReAt aCtOr aCtIvItY” said the clowns at @lastpass.bsky.social in their many, many updates trying to downplay the severity of this breach. If you’re using LastPass in 2025, you’re being grossly negligent.

Does anyone remember those animated gifs that were made out of Kevin Mitnick's shell command history on The Well and other places? For the life of me I cannot remember where I saw these but it was late 1990s I think.

NEW: The (allegedly North Korean) hackers behind the Bybit crypto heist have already laundered all the stolen Ethereum, which was worth $1.4 billion. Experts tell me this "rapid" laundering shows “unprecedented level of operational efficiency,” but there's more steps they need to take to cash out.

Weld Pond here, surfacing from the L0pht archives for this gem. Relive the chaos, the hacks, and the testimony that made history. Hit play—you won’t regret it!

Who started this insane trend in devops to put the names or even usernames of the developers in the subdomains of a company's domain? Companies are already painfully unaware of their real attack surface & phishing is already easy enough as it is.

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now

The hacker's choice of cola: Jolt Cola is... back? nypost.com/2024/12/30/b...

Kindle jailbreaking kindlemodding.org/jailbreaking...

Juice Jacking: No one is going to waste their expensive exploit on your mobile device by trying to spray it (and thus burn it) using public charge points. Sorry, but you’re just not that important & targeted attacks are targeted.

Several German navy ships have been sabotaged, Baltic Sea bases have had intrusions via both land and sea and staff has been approached. One sabotage included several kg of metal shavings into the engine of a yet to be christened corvette. www.upday.com/de/sabotage-...

OpenAI's o3-mini-high is not able to do basic coding tasks that o1 excelled at for Python & Lua. o3 ignores previous requests, does things that were explicitly forbidden in the prompt & when confronted it stops generating code. Sticking to o1 & local Deepseek for now.