This will be *interesting*: Tinder to begin accessing your camera roll for “insight” & training its AI models #privacy #AI techcrunch.com/2025/11/05/t...

Password to the Louvre's video surveillance system was "Louvre"

Many media wrote about Chinese astronauts delayed from returning to Earth due to possible damage from debris hitting their spaceship. But of 4 stories I read, 3 failed to mention what the debris might be. Only NYT piece addresses the growing hazard caused by discarded satellites and other space junk

Evil

At WH press gaggle right now, JD Vance keeps saying airline pilots aren't being paid during the government shutdown. Why would that be ... since the pilots don't work for the government?

New: The FBI is quietly urging ICE agents to properly ID themselves in the field. In a bulletin to law enforcement last month, it warned of criminals posing as ICE to rob, rape, kidnap—a problem it says now demands national coordination to confront. By me & @carolinehaskins.bsky.social:

Two men who previously worked for ransomware-recovery firms have been indicted in Florida and accused of using the ALPHV/Black Cat ransomware to hack multiple US firms, and then trying to extort them for millions: www.cnn.com/2025/11/03/p...

My first book, Takeover, was about Dick Cheney's quest to expand presidential power (or "restore" it, as he saw it, to the level it had reached when Nixon was president, before Watergate). First two chapters, including Cheney's rise, free here: charliesavage.com/books/takeov...

Nice. @daveaitel.bsky.social tells the Three Buddy Problem podcast that he came up with the name for OpenAi's Aardvark project (openai.com/index/introd...). Why Aardvark? "Because they eat bugs" www.youtube.com/watch?v=7Ikm...

Halloween and @weratedogs.com is the perfect combination to end the week

Canadian authorities say hacktivists breached water and energy facilities multiple times across the country and tampered with critical systems at a water-treatment facility, an oil & gas firm, and an agricultural facility "causing disruptions, false alarms, and a risk of dangerous conditions"

New court doc in Peter Williams case reveals the former Trenchant exec continued to sell stolen code to Russian zero-day broker even after realizing that code he'd written and previously sold to Russian buyer was being "utilized" by a South Korean broker, indicating wide distribution of the code

New court doc in Peter Williams case reveals the former Trenchant exec continued to sell stolen code to Russian zero-day broker even after realizing that code he'd written and previously sold to Russian buyer was being "utilized" by a South Korean broker, indicating wide distribution of the code

Please news please stop please

Starting Monday LinkedIn will begin using data from your profiles/posts to train AI. If you live in EU/EEA/Switzerland/Canada/Hong Kong your data is subject to being used this way, but you can opt out. Go to Settings/Privacy/Data for Generative AI Improvement and toggle the switch to off

A former Coast Guard lieutenant who called for President Trump’s assassination on social media was acquitted by a federal jury after his attorneys argued the posts were protected speech under the First Amendment.

There is a long interview with Palantir CTO Shyam Sankar by columnist Ross Douthat in the Times today. "We’re explicitly not building Skynet," he reassures Douthat, in a wide ranging conversation that ranges from the company's work with ICE and Israel to Sankar's appetite for pro-American movies.

Peter Williams former Trenchant exec accused of selling trade secrets to someone in Russia pleaded guilty in court this morning. Prosecutors say he sold software trade secrets to Russian company that buys zero days from researchers and sells to other Russian firms. My story for Wired will be up soon

Next yr Google will make Always Use Secure Connections the default in Chrome. Currently you can choose this as option so you get alert when trying to access sites that don't use HTTPS and are therefore not secure. After change Chrome will always alert 1st time you try to connect to non HTTPS sites

A 75-year-old British cyclist lost half his face after a drunk driver hit him from behind while he was on his bike and dragged him beneath the car. But with 3D printer technology, he now has a new eye and face prosthetic with a near-match skin tone. people.com/grandfather-...

Three times in the past two weeks, editorials at the 'Washington Post' failed to disclose that they focused on matters in which owner Jeff Bezos had a material interest. n.pr/3X0UZtS

Russian lawmakers are talking about crafting a bill that would require all Russian bug hunters to register with the state and require anyone who discovers a zero-day vulnerability to report it to the vendor - and to the state - or face criminal charges. A law like this already exists in China

We published an investigation from @kcinbk.bsky.social into YouTube vids that falsely claim to show police racially profiling and arresting a person that turns out to to be an FBI agent. They've earned over 300 million views. In response, YouTube banned 13 channels: indicator.media/p/youtube-co...

I'm fascinated by the early #history of #hacktivism in #China and somehow forgot about a 2003 National Geographic documentary that features l10n, one of the founders of #Hacker Union of China, and was involved in mass-exploitation of Linux servers via the l10n worm. (🧵)

“'Whatever minimal work contractors are able to continue to do as far as building weapons, enriching special nuclear material, stockpile surveillance...will stop when the contractors run out of money...around Oct 28'.... At that point, the agency would no longer be able to deliver weapons to DoD"

The German company that makes the mechanical ladder used in the Louvre heist has used the image to advertise, with the text 'When you need to move fast' 10/10 response, no notes

"iOS 26 change deletes clues of old spyware infections" You're damned if you update and damned if you don't

If you thought having your Social Security number stolen was a pain... "Ancestry-tracing company 23andMe is offering five years of genetic-monitoring services to millions of customers whose DNA data was stolen in a 2023 cyberattack"

NEW: The U.S. govt accused Peter Williams, ex general manager of hacking tool maker L3Harris Trenchant, of stealing trade secrets and selling them to buyer in Russia. As we reported earlier, Trenchant investigated a leak of internal tools this year. It's unclear if that investigation is related.

With Trump pardoning Changpeng Zhao and accusing the Biden administration of persecuting him because it hated cryptocurrency, here's a reminder of what the IRS's cybercrime investigators dug up on CZ and Binance. www.washingtonpost.com/opinions/int...

Those annoying Cloudflare Captchas made everyone so used to clicking "I am not a robot" that Russian hackers used this to hack victims. Victims received PDF with a link that, if clicked, produced a Cloudflare Captcha. If user checked "I am not a robot" box and followed instructions, they got hacked

He is literally not paying for it. www.wsj.com/politics/pol...

Coincidence that Fox was working on similar story at same time? Or did gov give Fox story after Reuters contacted them for comment? This is why you wait until last minute to contact gov for comment. "Shortly after Reuters asked the agencies for comment..Fox News reported the existence of the group"

I keep pointing out that by lowering the bar for prosecuting former FBI Directors, Kash signed his own arrest warrant, but under Trump, not AOC or whoever.

I published a Wide World of Cyber edition today about the f5 incident with @stamos.org and @thekrebscycle.bsky.social No video for this episode… our video platform is AWS dependent 🤦‍♂️ risky.biz/WWC11/

Important loophole in sanctions against ISPs that host malicious actors & disinfo campaigns - because RIPE only freezes resources of sanctioned ISPs, preventing them from transferring IP space or acquiring new space but doesn't revoke space/resources, rogue ISPs can simply rebrand to evade sanctions

Hi judge expert here this isn't funny judges only do this when they're in extreme distress

I don't think I've ever received as many class-action lawsuit notifications as I have this year. Probably half a dozen so far just this year. In the past I have dutifully filled out the forms and then heard 🦗

This is probably your best reminder that Amazon Web Services is too big. So is Microsoft, and Google, and all of these companies that are gobbling up money, energy, and resources, only for things to go suddenly arse-up, like today, without being held accountable. There's no space for competition.

The John Bolton indictment released on Thursday contains a lot of interesting info about the AOL email account prosecutors say he used to send classified info to his wife and daughter while national security advisor - an email account that Iran allegedly hacked. I wrote about the indictment here:

It's always DNS. Except when it's AWS. (In this case, it was both.)

The John Bolton indictment released on Thursday contains a lot of interesting info about the AOL email account prosecutors say he used to send classified info to his wife and daughter while national security advisor - an email account that Iran allegedly hacked. I wrote about the indictment here:

CNN takes a deep dive into the business of crypto ATM companies who mark up the price of cryptocurrency by adding 20% to 30% to each transaction. "Americans, often retirees, lost around $240 million to crypto ATM scams in the first six months of this year" www.cnn.com/interactive/...

Yesterday the feds charged voting machine vendor Smartmatic w/ violating Foreign Corrupt Practices Act for bribery/moneylaundering to win contracts. Previously they charged only company execs. Charging a company is rare. I spoke w/ former fed who says this may be political and explains what it means

In about three years the entire university pivot to AI curricula and schools and programs is going to be so deeply embarrassing. We will all pretend it never happened and I will be standing there, looking at people with a mirror in my eyes. This is all so embarrassing.

New: Prosecutors in Florida have charged voting machine vendor Smartmatic with corruption in an indictment that previously only charged three of the company's former executives. Smartmatic's machines are used in LA County. This is a breaking story so I'll have more later, but here's my initial piece

Watching elderly and frail politicians freeze and collapse on the job -- whether it's a Democrat or Republican -- because their party doesn't want their seat to be up for grabs is never not going to be disturbing.

I should note: Leiendecker has said a condition of acquisition was for Dominion to first settle all of its defamation suits against Trump supporters who claimed Dominion rigged 2020 presidential election. But Patrick Byrne former CEO of Overstock and Mike Lindell of MyPillow say they won't settle

Scott Leiendecker who acquired Dominion Voting Systems last week vows to make the systems 100% domestically programmed. But Dominion has long had programmers in Serbia & Canada. Does this mean he'll rewrite all code written by foreigners? I took a deep dive into implications of the acquisition

Ugly end to Kryptos saga. Two people found the solution to the last encrypted portion of famed Kryptos sculpture at CIA headquarters. They found it in Smithsonian archive. They contacted artist who made sculpture, who is preparing to auction off solution; he threatened to sue them if they reveal it