Abandoning Antarctic krill management measure threatens conservation progress (commentary) news.mongabay.com/2025/10/aban... 🧪🦑🌎

Why was the built-in calculator removed from the Venmo app? Probably one of it’s best features.

So Apple blocks logging into iCloud if you use Ubuntu + FireFox. You have to spoof the user agent to get around it. Random.

Threat Intel report by Anthropic about threat actors using Claude is an interesting read.

Microsoft has a hidden talent of making people never want to upgrade their Windows OS. Sadly only two months left of Win10 support.

Wouldn’t this effectively drive traffic away from delta.com to third party booking sites? The only time you need to book on the carrier website is when you are redeeming points

Update: Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771. Customers should apply these updates immediately. Full guidance and detection details: msft.it/6010sDzSE.

I really hope @netflix.com signs @stephencolbert.bsky.social with a new late night show. Colbert is second to none.

Unlike CEOs and other executives, individual contributors understand concert OPSEC

Creative idea by @xeiaso.net to have a visitor’s local browser run cryptographic math in JS to identify and block AI bot scrapers.

Appears all DJI shipments are being seized at the US border, resulting in most products to be out of stock indefinitely on their website and partner retailers. A real shame because they arguably make the best drones. I really like their handheld cameras and was hoping to buy one.

Mandiant is now aware of multiple incidents in the airline sector that resemble Scattered Spider. The industry should button up its call centers where this actor has had a lot of success with social engineering. www.axios.com/2025/06/27/a...

Let's just agree that if this works against a vendor, you should stop using that vendor.

The customer paid a $440 fine due to the “AI Scanner” identifying a scuff on a tire cover, with $125 (about 28%) being a processing fee for “the cost to detect and estimate the damage”. Good luck with customer retention.

The Starfish Barometer, launched on World Ocean Day 2025, offers an accessible, science-based annual snapshot of the Ocean’s state and its vital connection with humanity www.starfishbarometer.org/content/over...

Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!

We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-t...

TIL it's possible to search among opened Firefox tabs by prefixing your search with "%" 🤯 As a keyboard maximalist, the workflow should be "Ctrl-T + %search criteria + up/down + Enter" 🦥 support.mozilla.org/en-US/kb/add...

Absolute tragedy.

BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.

So tariffs have achieved $10 trillion in losses to apparently solve a trade deficit valued at $1.2 trillion. Completely reasonable.

Garmin now wants to charge $69/year on top of their $1k+ watches to use Connect+ I can just see all the future features that would have been built in now getting pay walled. So disappointing.

Good overview of NodeJS issue. Impacts v12 and below, which was EOL in mid-2022, so if you’re up to date on patching it’s not a problem.

Skip that morning coffee and donate $5 to support my run to find a cure! fundraise.cff.org/chicagomarat... I’m running for Breathe Team at the 2025 Chicago Marathon to raise money for the Cystic Fibrosis Foundation. Every donation, like, or repost helps!

Apple removes its Advanced Data Protection (ADP) feature from customers in the UK after pressure from the government. Very troubling news. ADP provides end-to-end encryption, allowing only account holders to view items such as photos or documents they have stored online.

The jamming of Global Navigation Satellite System (GNNS) signals by military forces disrupts the tracking of tagged animals - these are tracks of Bonelli's Eagles which have been spoofed to other sites such as airports #Ornithology 🌐🌍

Multiple Garmin smartwatches are in a boot loop this morning. Starting a GPS activity seems to trigger the issue. The problem appears to be associated to an update Garmin pushed to the GPS sub-service, which is updated outside of the regular/beta channels, and the updates can’t be disabled.

References should be added as a feature, allowing you to add [#] after sentences with no char limit penalty that links to URLs with supporting info. Issue with char limit is it discourages supporting evidence. References would counter that and the community could rate the validity of sources.

This #macOS backdoor uses /usr/bin/SetFile to hide itself in the Finder. SetFile was deprecated in Xcode 6 (that's 2014 to humans)...not sure why it makes sense to declare smth 'deprecated' then leave it in the OS for 10+ years. 🤷‍♂️ #apple #malware SHA1: 609088c54b99432aab212f35cfe74030b52f0320

That moment when you snapshot a VM to save progress and then you proceed to crash the VM before the snapshot completed

Musk claiming he is a top 20 in the world Diablo IV player while fumbling at basic gameplay on a live stream is quite entertaining. youtu.be/qpXu9ft9h4M?...

A reminder to Google Maps users that you can download whole regions for offline use in the event of no internet connection. In the Maps app, tap your profile picture, then "Offline Maps." Great for evacuation planning. #PalisadesFire

incredible

I'm up 47% on Crowdstrike stock after buying it last year because I knew nobody was gonna transition EDR's

If you want your children to organically learn problem solving and root cause analysis skills, make sure the OS on their first computer is Linux.

New from Datadog Security Research! Threat actors are constantly publishing backdoored software libraries to steal credentials, get C2, and more. @ikretz.bsky.social did something about it. Meet the Supply-Chain Firewall, a tool to block malicious packages. securitylabs.datadoghq.com/articles/int...

Did you know you can use an ancient magic cookie to downgrade parsers and bypass WAFs?! Hope you enjoy this quality bit of RFC-diving from @d4d89704243.bsky.social! portswigger.net/research/byp...

It's Giving Tuesday. Is there a more impactful cybersecurity organization than Let's Encrypt? And did you know that Let’s Encrypt is a non-profit 100% funded by charitable contributions? We just surpassed 500 million domains using Let’s Encrypt certificates! Let's (keep) Encrypt(ing) the Web.

til that the name "David Mayer" breaks ChatGPT. If your prompt includes the name "David Mayer" or you try to get ChatGPT to say "David Mayer," the chat *always* crashes. It's like the AI in Neuromancer, which is banned forever from knowing the single password that will unleash its true potential.

It’s mind-boggling the level of access anti-cheat gaming software has on a computer. The fact that you need to provide kernel access to a device so a user can play a game online is an astonishing precedent.

Recall returns to Windows 11 Insider builds -is encrypted -can be disabled/removed (image via Alex Hagenah) blogs.windows.com/windows-insi...

Bluesky feels like I took a Time Machine back to 2009 when I was still like “Hey this social media thing is going to make the world a better place.”

Almost embarrassed to post this, but I've always used Fiddler or Burp for capturing things like this... I didn't have admin rights and was trying to capture network traffic from a pop-up, so Dev Tools wasn't working Apparently this is built into Chrome/Edge! So cool :) edge://net-export/

We're excited to announce the release of ProcDump 1.0 for Mac. ProcDump functionality is now available on Windows, Linux, and macOS. Get the tools at sysinternals.com. See what's new on the Sysinternals Blog:

Akira ransomware write up by DCSO that takes advantage of the partial encryption techniques used by threat actors to enable recovery. #dfir #forensics #ransomware

PSA: new xitter tos that claims all your tweets as ai training data goes into effect THIS FRIDAY you can delete your tweets using @blockpartyapp.bsky.social it’s free if you activate the free trial. don’t worry, no auto-charge at the end of the trial

It turns out, democracy dies in broad daylight, by popular vote, over the price of staple goods.

Synology owners, be sure to update your systems in relation to several security advisories for exploits identified at PWN2OWN. Several patches have been released and automatic updates are disabled by default. www.synology.com/en-us/securi...

Today would have been Carl Sagan's 90th birthday. He wrote this in 1995. Carl was absolutely right. #CarlSaganDay