OffCode retweeted
‼️ Anthropic's official Claude Code extension was distributed with an SSH backdoor via Cursor's marketplace.
A trojanized update (v2.1.313) targeted up to 5,000 users, according to Cursor.
How attackers pushed it under the legitimate extension's identity remains unclear.
Read: thehackernews.com/2026/10/of…
Grok Bot could be the operating layer AI agents have been missing.
It can use tools, run routines and coordinate other agents with minimal supervision.
In this article, I show you how.
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
OffCode retweeted
PHP releases emergency fixes for critical PHP2Shell vulnerabilities
#PHP #PHP2Shell
cyberinsider.com/php-release…
OffCode retweeted
U.S. Government Bans DeepSeek AI and Orders Federal Agencies to Remove All Related Tools
Details: cybersecuritynews.com/u-s-go…
The U.S. Department of Homeland Security has ordered federal civilian agencies to stop buying DeepSeek products and remove related technology from their IT systems.
The action covers products from Hangzhou DeepSeek Artificial Intelligence Co., Ltd., its affiliates, and third-party products and services developed using DeepSeek implementations. The notice was filed for public inspection on October 19, 2026, with publication scheduled for October 20.
It creates a government supply chain restriction, not a nationwide ban on private use. Businesses and individuals are not prohibited from using DeepSeek by this order.
#cybersecuritynews
OffCode retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
OffCode retweeted
🚨 Grok 4.8 Update:
>The next model is on the way
>featuring 2.5 trillion parameters
>training powered by SpaceXSI’s new C++ software
stack.
>The launch is expected in late October
Could Grok 4.8 arrive as a surprise Halloween release?
holy shit, opencode got hacked and it's officially fu*ked
'a large scale distillation attack, 1.4% of console users hit'
and people got drained, one user says his openai and anthropic keys, used only in opencode, ran up over $400 overnight, another replied $1,700. who compensates that?
every one of them had external providers linked, and it's still ongoing
this is the warning for all of us, build your own harness and keep your keys on your own machine, don't park them in anyone's console anymore
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
OffCode retweeted
Session implements quantum-resistant encryption in Protocol v2
#Session #messenger #encryption
cyberinsider.com/session-imp…
WTFFF, this is absolutely insane 😳
deepseek v4.1 flash is free on opencode and tokenhabor right now
and i run it on deepseek's own agent harness for $0
no subscription.
no credit card.. MIT.. FREE
here is how you set it up:
1. run npx @deepseek-ai/dsh web
2. open http://127.0.0.1:3080
3. settings → add custom provider → base url tokenharbor.ai/v1 → deepseek v4.1 flash
done. full agent harness for $0
milk it before they take it off
Gemini 4 Argon is FREE 😳
just claimed 2M tokens to test it out
what you get:
- 2M free tokens
- test the model before you pay
- no card needed
> 2M tokens, freeget started: blazerail.com
gonna test this one myself 👀
OffCode retweeted
Build the next GitHub. We'll give you the stage.
Finalists present at #CloudflareConnect next week, and their travel to San Francisco is on us. First place also wins $25K in Cloudflare credits.
Submissions close in 2 days: cfl.re/4hSVJeB
Elon Musk on WHY SpaceXSI acquired Cursor:
“In order to create a compelling SI, you need a LOT of training data and need to SOLVE CODING. As far as I can tell, three organizations that had enough coding training data:
OpenAI, Anthropic, Cursor (and, arguably perhaps Google)
but you ABSOLUTELY have-to-have the DATA in order to train an effective coding SI. if you can't do CODING, your SI is not going to be very useful.
There’s a LOT of Talented people at Cursor.
basically for success in SI you need: Data, Talent & Compute..and you also need a good Enterprise sales team. Cursor also had that good enterprise sales team with Relationships with THOUSANDS of companies.
Those were VERY SIgnificant advantages.”
OffCode retweeted
Replying to @VolaViola
Quoting their docs:
Kryfo: "you are a key pair generated on your device. nobody, including us, can look you up or tie
your chats to a real identity." - so there is identity, it's a key.
Night Drop: "Your identity is a keypair held on your device."
Bitchat - user identity is the hash of public key.
Briar - it has Briar ID, which is also a cryptographic identity of the user.
So all these and other apps have pseudonymous user identities, not "no user identity". The problem with pseudonymous identities is that they can be de-anonymised with LLMs by comparing observable [parts of] connection graphs with public connection graphs (X, Facebook, etc.). There is a relevant research from 2009 about deanonymizing social networks where users are pseudonymous: arxiv.org/abs/0903.3276
It was quite successful then, and it's much easier now, as participation in social networks in much wider, and LLMs are cheap.
The difference of SimpleX Network from all pseudonymous (aka anonymous) messengers and networks, is that it has no concept of user identity at all - there is nothing that identifies a user to the network - not a key, hash, or some random number. There are addresses and there will be public names soon, but they exist as opt-in layer for those who want to be discovered, and in any case they are not used to deliver messages - they are only optional rendezvous points.
Instead, SimpleX Network uses pairwise connection identifiers with anonymous per-connection credentials. So network servers can observe which connections exist, but not which (or even how many) users exist. Our knowledge of active users is from App Store and Play Store data, and from download statistics of the app.
And even on the transport level - network servers can observe user IP addresses (same as Tor entry nodes can), but not which IP address talks to which IP address. You can look at a simplified vizualization of how SimpleX works here: simplex.chat/messaging/#simp… (in reality there are two independent servers in message delivery path)
So if you talk to 2 people in SimpleX, they have no simple way to prove you are actually the same user, because there is no correlation between your connections on metadata level, other than by time or writing style.
So "the only messaging network without any user identifiers" is not just marketing, it's a fact.
OffCode retweeted
SimpleX Chat has grown to over 600,000+ users!
More than 70% in the last 6 months and 20x since the 2023 investment round.
SimpleX is the only messaging network without user identifiers - which means that nobody can reach you unless you want it, and nobody can watch or block your private conversations.
It is the only network that can protect users from AI scammers that can fake people you trust, even their email addresses and phone numbers.
You can now invest in SimpleX Chat and own a part of it - watch our new explainer video on Wefunder.
wefunder.com/simplex.chat
OffCode retweeted
This Cybersecurity Awareness Month, we’re sharing small steps toward more privacy and security online.
📲 First up: Downloading Tor apps through our official channels, you can be sure to get the real thing. Check out our new download page: download.torproject.org
While reverse-engineering Tesla OS, I came across a few interesting things (none of these count as security vulnerabilities, so there's no issue with me sharing them):
1. Geofence coordinates are hardcoded (the locations of Tesla's factories/design centers aren't secret, so the hardcoding itself doesn't pose a security problem)
2. It looks like a careless programmer misspelled "Tesla" as "Telsa"
OffCode retweeted
🚨 GOOGLE IS KILLING ANDROID FREEDOM. 🚨
This #DiDay we call on you to take action & sign the petition:
change.org/p/keep-android-op…
Because Google must not decide what you can & can't download on YOUR Android device.
This undermines one of Android’s defining features: the freedom to install software from wherever you choose. 😤
#Android is supposed to be open, & your phone should be yours → NOT GOOGLES.
It’s time to support open alternatives like @GrapheneOS ✊
Find out more: tuta.com/blog/android-side-l…
OffCode retweeted
Age verification (digital ID) laws are spreading fast and most people have no idea what's already on the books near them.
We mapped every bill, state by state.
See what's passed, what's pending, and who wants to introduce ID checks for internet access.
We also have a global map so you can see the threats all around the world and map the co-ordinated effort to end privacy online...
reclaimthenet.org/age-verifi…
OffCode retweeted
We did it: The EU Parliament continues to OPPOSE #ChatControl 2.0! 🥳
Thanks everyone for writing to representatives. 🫶
The next trilogue is scheduled for November, we must make sure that end-to-end encryption and private communication remains to be protected!
#privacy
🚨🇪🇺 The #ChatControl trilogue starts on Tuesday & the EU Council is trying to pressure Parliament into giving up its opposition. We must stop them once again! 💪🏼
Ahead of tomorrow’s final CSAR trilogue, leaked Council documents suggest a proposed compromise around so-called "search plans". These would allow authorities ask providers to scan broad groups of users or entire services for extended periods.
This isn't targeted policing, it is mass surveillance!
It's crucial that the EU Parliament remains strong and keeps up their opposition.
Because no matter the framing, the truth remains the same: There's no backdoor for the good guys only!
We at Tuta will continue to fight for your right to #privacy. Make your voice heard as well, today is the day!
➡️ fightchatcontrol.eu/


































