Switch 2 emulator for Windows 👀
eden-nx2 Windows Switch 2
git.eden-emu.dev/Takoroka/ed…
Macrike retweeted
The Indian security company that used 4 as a private key also lacks basic account security.
To sign into your account, you enter your email and receive a 4 digit code.
There are no limits on login attempts. You can try all 10,000 combinations.
The Indian government uses this.
eMudhra login to download customer's certs can be cracked
Their 1FA login generates a OTP & sends it. It also sends a RSA public key to front end
They haven't rate limited checks, so you can offline brute force 0 to 9999 encrypted with public key & find the OTP
@ni5arga
RIP one of the absolute greatest of all time. 😞
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
You can finally see the stick drift.
Introducing the transparent Prism Collection, launching February 4
🧡 Flare Orange
💚 Emerald Green
🩶 Graphite Gray
First details on the DualSense controllers: play.st/47QnvE7
Some more goodies. 💀
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
I love this. Made me consider switching from Safari. I miss the old internet from 20 years ago.
This is a deeply concerning privacy flaw on iOS and iPadOS (and possible macOS)… Worth a read.
Claude Code found 145,763 photos I permanently deleted from my iPhone.
Three years of deleted photos and videos still sitting in a hidden cache. Any app with file access can read them.
I plugged my iPhone into my MacBook to run a backup. Claude Code was doing the security audit from my last post and flagged a directory I wasn't even looking for.
PhotoData/Thumbnails. Over 146,000 files. Photos, videos, screenshots. Every single one was something I deleted.
Photos from 2023, 2024 and 2025. The ones I deleted the second after taking them. The ones I cleared from Recently Deleted. The ones I deleted three separate times because I wanted to be sure they were gone. All still there.
Passport photo I took for a visa application in 2023.
Screenshots of my bank app with full account numbers visible.
Private photos I sent someone and immediately deleted after a breakup.
Screenshot of my crypto seed phrase I took temporarily in 2022.
Photo of my ID and credit card I took to remember the numbers and deleted 5 seconds later.
Screenshots of my ex's private Instagram stories I saved and permanently deleted in 2023.
Some were full resolution. All organized by date going back to 2021.
When you delete a photo on iPhone, iOS removes it from your camera roll and Recently Deleted. It keeps a compressed copy in a Spotlight search index cache so your phone can find things when you search. Apple never clears it. Not after 30 days. Not after a year. Never.
They told you it was permanently deleted. It wasn't.
I checked which apps on my phone had Files and Folders access. 23 apps. Weather apps. QR code scanners. PDF readers. A flashlight app I downloaded in 2022. Any one of them could have been reading every photo I ever deleted this entire time.
Went from 23 apps to 3 in about two minutes.
Full step by step below. Takes 2 minutes. Save it so you don't lose it and send it to anyone with an iPhone.
Readers added context they thought people might want to know
The video is an old, misappropriated clip from 2023, and the accompanying claims are fabricated.
x.com/HarshithLucky3…
Seems like there’s a new method to take over someone’s PlayStation account. Passkeys, 2FA, strong unique password, unique email address alias… none of this protects you from this attack.
I just woke up and I had my email to my psn account change from this stupid child family management exploit where unauthorized accounts are added to your family management where they can see your account information
FUCKING FIX IT
@PlayStation @PS_Support_US
I’m so glad I paired a disc drive to a PS5 Pro before Sony blocked 14.00.
I was planning on pairing drives on two 14.10 Pros I have sitting around this week but Sony blocked 14.10 a day after 14.20 came out. 🤦♂️
This is really surreal. I don’t even know what to think about this.
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
