Device code phishing is exploding, and AiTM actors are getting in on it. We found ODx phishing-as-a-service providing device code capabilities in addition to their AiTM offerings. ODx is one of the most popular AiTM kits currently. It's also tracked as Storm-1167 and FlowerStorm.

What moral injury comes of being called racist when racism is so thoroughly rewarded?

my father was a grassroots bureaucrat who hung out with other grassroots bureaucrats. at a family banquet, my relative said telling me about politics would be 对牛弹琴 (lit. playing the lute to a cow) chenchenzhang.net/2026/05/01/o... read on and it gets more interesting

Also shout out to @krishraghav.bsky.social whose comic I talk about in this newsletter who has a new game out 🚨 🚨 krishraghav.itch.io/dont-get-you...

Happy Labor Day. I wrote about Chinese work and why it’s frustrating that Americans refuse to learn about it beyond stereotypes the-haters-guide-to-international-politics.ghost.io/the-chinese-...

Again, before we make trade-offs in civil liberties for nominal security, why not look at the world's largest age-gating experiment to see if it even helps? www.project-syndicate.org/commentary/c...

Installez-vous confortablement, détendez-vous et regardez comment nous retirons doucement le support papier acide au dos d’une estampe! Écouteurs recommandés 🎧 #ASMR #Restauration youtu.be/hIf46oI8XpU

In case I’m too cryptic - it’s Xinjiang. A lot of Chinese solar panels come from Xinjiang and are likely made by slavery www.theguardian.com/environment/...

Good day yesterday, picked up the new @thepeopleswant.bsky.social book (published by @haymarketbooks.org) from my local bookstore. As a coincidence, it was also #IndieBookstoreDay! I think @brianhioe.bsky.social mentioned during the book launch event that there is a Chinese version coming too (!!)

A few days ago I asked about posting more protest art and expanding my essays on the HK pro-democracy movement somewhere and... er, this happened. niaocollective.bearblog.dev

the irony of having a one-on-one HR layoff meeting in the conference room with my Loki mural on it

It's such a low-key resistance move but talking about not using AI, especially in a professional context, is so important in working against "inevitability" narratives and so powerful in identifying who your people are — and in ensuring there are more of us all the time.

We’re cooking on Beyond the Spider-Verse!!! So excited to share these new stills… see you in IMAX on June 18, 2027!! 🕷️

This posture also makes it hard for people to appreciate the many individual, marginal steps that are needed in combination. Incremental steps are too often dismissed as “magical thinking” that won’t “solve” “the problem.” As if there is a single problem or, somewhere out there, a single solution.

Memories of Hong Kong & Taiwan 💚

I'll be speaking at @rustconf.com in September! Looking forward to presenting on reverse engineering Rust binaries, to the Rust community! sched.co/2KHt7 #RustConf #RustConf26 #Rustlang #Rust

面对家庭暴力、关系伤害或其它暴力时，如何求助、去哪求助是亟需回应的问题。资源地图或许无法解决所有困难，但我们希望它能够在某一个时刻，为需要的伙伴提供方向和安全感。

当新闻无法改变现实，它的社会意义也被重新定义。

sourcing request: I am looking for recruiters or managers at major tech companies who are trying to hire cybersecurity talent. if that's you, and you want to talk to me on background or on-record, please get in touch! contact info in my bio.

Will be moderating later this month! A new internationalism is precisely what we need at a time in which campist viewpoints are increasingly a political dead end and, in fact, dangerous. How then, can we find a way forward? This manifesto can be a starting point

I'll be speaking at this event in London next week together with @ayoub.bsky.social and others ...

Trump alternates between threat and promises of peace while making what are fundamentally threats, just as China does. And though China sometimes promises peace, there is discourse about wiping Taiwan off the map too as in that of “Keep the island but not the people” (留島不留人)

Excited for the usual suspects to use Trump’s threats of wiping out the Iranian people to claim we should be closer with China——which has threatened death and destruction with thousands of missles pointed at Taiwan for decades—than note say, they are two sides of the same coin

We didn't deserve this day.

sooooo many people are only going to read the headline of this article 🙃 but yeah, basically: if you want the world to centre less around personalist dictators' arbitrary whims, you need to reduce the PRC's influence

This has been a year in the making. As Executive Director of IFIN, I'm very excited for what's coming. Join us!

This isn’t a lamentable side effect of these products. It’s the actual reason they exist.

SOURCE CALLOUT 🏳️‍⚧️ ✨ (Please share!) I'm working on a large print feature for later this year that asks a big question: What does it look like when we let trans people thrive? I'm looking to talk to a few everyday trans people from across Canada about what that idea means to them. (Thread...)

Many thanks to George for publishing this poem.

After Jimmy Lai's 20 year jail term in Feb, Reuters delved into thousands of national security and protest related arrests by Hong Kong police between 2019-2026, in an interactive graphic: "Awaiting Justice:The impact of #HK NSL laws". www.reuters.com/graphics/HON... #HK w/@jessiepang.bsky.social

ergosphere.blog/posts/the-ma... A gorgeous essay about what we lose when we outsource thinking. "The real threat is a slow, comfortable drift toward not understanding what you're doing."

This draft lived in my notes app for 5 years, but finally, I am courageous enough to hit publish: 🍎 Let’s Talk About Apple Daily 🗞️ konggirlsocialist.ghost.io/apple-daily/

There are some who may be offended by this, but I think it's true that many technologists take moral abdication almost as a point of pride, where nothing matters except "capabilty". If so, I don't understand the offence. Why are you uncomfortable being described as the thing you're bragging to be?

What we are seeing is that a lot of computer touchers value their access to neat toys over literally anything else, and the appropriate reaction is to just identify these people as morally deficient.

Who wants to make up some fake etymology with me? I've wanted to dabble in Pop Sinology for a while...

New event! 📆14th April 🕔5pm EDT @thepeopleswant.bsky.social & @haymarketbooks.org host online Book launch of "Revolutions of Our Times: An Internationalist Manifesto" w panel discussion feat Morteza, Rindala, Roula & @brianhioe.bsky.social as mod. Reg: www.tickettailor.com/events/hayma...

I had a great time teaching this last week, and I'm looking forward to teaching again at NorthSec in May!

Hey nerds, I'm still alive! Dropped a new blogpost today c-b.io/cases/s3-squ... An unnamed company probably won't be happy I mentioned this lol

Replicube is Picross but a nerd who loves coding shaders came up with it

Btwn this, the end of Sora, & think I saw sthg about Nvidia /Microsoft /Open AI investment deals unwinding?—looks like the ship HASN'T sailed, you CAN return the genie, and things AREN'T "here to stay". Tech determinism is a self-fulfilling prophecy that only works if enough people fall for it.

at the london anti-far right march earlier today 今天參加了倫敦的反極右 together 遊行 “beyond boundless lands and oceans, countless souls are all connected to me” 「無窮的遠方，無數的人們，都和我有關」（lu xun 魯迅） 這是蘇丹 🇸🇩、DRC 剛果 🇨🇩、巴勒斯坦 🇵🇸和烏克蘭 🇺🇦 的國旗

🚨new open-access paper!🚨 How does meritocratic discourse contribute to the construction of ethnic majority male victimhood, legitimizing misogyny and narratives of 'reverse racism'? we use a relatively niche case here but elaborate on broader patterns www.cambridge.org/core/journal...

One facet of our neocolonial world that really alienates me is that ppl from the global north are constantly trying to get away from home, whereas ppl in the global south are doing anything they possibly can to be able to go home.

What is it like to be a Chinese person, living in a Chinese time? "Surreal." konggirlsocialist.ghost.io/chinamaxxing/

Recorded Future's annual malicious infrastructure report has finally dropped, and this year, we took a different approach to how we analyze malicious infrastructure👇

On these permission seeking conversations, see this excellent blog post by Mark Dingemanse ideophone.org/dont-seek-pe... >>

There's a genre of post on here which I find a little puzzling --- people complaining about not being able to have a "civil" or "nuanced" conversation about "AI" because they get piled on by the haters. A short 🧵>>

APTN has an all new web series on YouTube called APTN News: Answers. It's a one stop shop to help separate fact from fiction when it comes to the latest headlines and misconceptions involving Indigenous people. We spoke with co-host Savannah Kelly.

Looking for #RustLang samples to practice your reverse engineering skills on? Just since January, we've added samples from 8 different #malware families to the Rust Malware Sample Gallery: github.com/decoderloop/... 1) KCVY OSLOCK Ransomware 2) An unnamed Rust DDoS botnet 3) FunkSec Ransomware 🧵

BTS's comeback concert is set for Seoul this weekend — at Gyeongbokgung Palace. Seoul is on edge. To mark the occasion, some trivia. #BTS #Arirang #Seoul