R3doubt retweeted
We've reached a point where installing a browser extension, IDE plugin or software library deserves the same scrutiny as opening a TCP port on a DMZ server.
Except this attack surface can be spread across thousands of hosts inside your org... and you can't map it with a port scan.
R3doubt retweeted
A few weeks ago my gas company came to my house, installed an IoT gas level monitor on my propane tank and left!
So naturally, I bought a bunch of these devices on eBay.
In this first video, I'll show how I reverse engineered the installers mobile app (with the help of GLM 5.3 Flash) and found some hidden BLE commands that can turn on the cell modem!
youtu.be/HrfnGi6HQrk
R3doubt retweeted
🦔Grok users ran out of usage days early this week, and Musk was straight with them about why. This is the end of the subsidy I wrote about in this week’s newsletter. AI companies priced their plans below cost to win users, and that only works while investors cover the difference. A full month on a $200 ChatGPT Pro plan would cost about $14,000 at regular API prices, according to one analysis this summer.
Anthropic’s growth slowed hard in the numbers it filed this morning, and I think part of that is the same squeeze from the business side. More plans shrink or move to pay-per-use from here, and a lot of those big user numbers fall once people pay closer to what it costs.
Hedgie🤗
R3doubt retweeted
>2027
>wake up and go to bathroom
>Iran has hacked the smart toilet servers, cant flush
>wander to kitchen
>A North Korean cyberattack has taken my smart coffee machine offline
>”ok I’ll just boil water on the stove”
>smart sink bricked by Russian DDoS
>smart stove offline because I forgot to pay my stove subscription again
>fml
>”maybe a movie will distract me”
>try to turn on smart TV
>I’ve been banned from my smart remote bc it overheard me criticizing Israel
>mfw
Supermarket freezers in Belgium and Sweden hit by cyber-attack bbc.in/4zilPiF
R3doubt retweeted
Roman Sterlingov's case is 💔
Jailed for a privacy tool, but the govt never found a single server, log, or msg of evidence.
A computer algorithm said he was guilty.
5 yrs in prison. Still says he's innocent.
He used to make videos about mental health:
youtube.com/watch?v=Badl9ptt…
R3doubt retweeted
See ad.nl/binnenland/paniek-in-o… for an example of what's ongoing in the Netherlands to scare people away from using open source privacy projects. It's also ongoing in Germany at the same time with similar talking points. This largely started in Spain and has been worst in France.
The Internet of [vulnerable] Things
If you like having a hard copy book as a reference or just need to level up on the network side it is a good primer on the "basics" as the title implies.
Network Basics for Hackers!
Network Basics, Wi-Fi Hacking, Wireshark, Bluetooth, Car Hacking, SCADA and SDR!
"...worth its weight 10x ...in gold!"
Do you have your copy yet?
amzn.to/3K9AMMX
R3doubt retweeted
There's a major state sponsored misinformation and smear campaign towards GrapheneOS in the Netherlands and Germany. The misinformation campaign includes unsubstantiated security claims not holding up to scrutiny to scare people away from it. They're also heavily misrepresenting who uses it overall.
These smear campaigns conflate GrapheneOS with forks and modifications of it sold by shady companies. Those usually include a device management app to remotely manage the devices of their customers as if they're employees. These are largely not GrapheneOS devices or have preinstalled malware apps.
A common tactic being used in these smear campaigns is to make unsubstantiated and outright false claims about the capabilities of forensic data extraction tools. They misrepresent how they get into devices. They want to scare people into using far less secure devices which are easier to exploit.
France, Germany, Spain and the Netherlands are becoming increasingly authoritarian surveillance states with an ongoing crackdown against privacy. It's happening throughout the whole EU and it's likely both secure devices and end-to-end encryption without backdoors are going to end up outlawed.
There are a bunch of companies based in the EU selling phones with drastically worse privacy and security than an iPhone including Jolla, Volla, Murena and iodé. These products are effectively backdoored by not providing standard privacy and security patches/protections while misleading users.
France and other EU countries are actively cracking down on legitimate privacy and security projects while supporting unsafe products within their control. These products make it far easier to remotely exploit devices and also to bypass encryption to extract data. They're phony privacy products.
Each of the companies we've listed have participated in the misinformation and smear campaigns against GrapheneOS. Jolla spent years working closely with Putin's regime. Volla, Murena and iodé are building an EU Play Integrity API. None provides the crucial standard privacy patches/protections.
Murena is directly assisting with state anti-privacy campaigns smearing highly private and secure devices as mainly benefiting criminals. They've repeatedly falsely claimed GrapheneOS is mainly used by criminals. Here are 2 of many examples:
nitter.cf/GrapheneOS/status/2040…
clubic.com/actualite-604786-…
GrapheneOS, end-to-end encrypted messaging apps, Monero and other projects are being targeted with state and corporate propaganda and anti-privacy laws. Meanwhile, the same governments heavily fund and support phony privacy projects clearly downgrading privacy and security compared to an iPhone.
GrapheneOS is only an initial target for these state actors and their sycophants in corporate news organizations. Apple heavily works on protecting users against exploits too. It would be much harder to convince the public that an iPhone is for criminals so they're starting with open source.
Gaël Duval is the founder and president of the /e/ foundation along with the CEO of Murena. Duval and his organizations have consistently taken a stance against protecting users from exploits. In this video, he once again claims protecting against exploits is for only useful pedophiles and spies.
Translation to English:
> There's the attack surface, on that front we're not security specialists here, so I couldn't answer you precisely, but from the discussions I've had, it seems that everything we do reduces attack surface. However, we don't have a "hardened security" approach, we aren't developing a phone for pedo(censored) so they can evade justice. So there aren't difficult things to check if the memory is corrupted, really hardened security stuff that could clearly be useful for executives, in the secret service, or whatever. That's not our goal, our goal is to start from an observation: today our personal data is constantly being plundered and that wouldn't be legal in real life with the mail or the telephone, we want to change that. So we are making you a product that changes that by default for anyone.
Transcription in French:
> Il y a la surface d'attaque, là pour le coup on est pas des spécialistes de la sécurité, donc je ne pourrais pas te répondre avec précision, mais des discussions que j'ai eu, il semblerait que tout ce qu'on fait, ça réduit la surface d'attaque. Donc oui, probablement ça aide. Par contre, on a pas une approche "sécurité durcie", on développe pas un téléphone pour les pédo(bip) pour qu'ils puissent échapper à la justice. Donc il y a pas des trucs pas possibles pour voir si la mémoire est pas corrompue, des trucs de sécu vraiment durcis qui pourraient être utiles clairement pour des dirigeants, dans les services secrets ou que sais-je. C'est pas notre but, notre but c'est de partir d'un constat, aujourd'hui nos données personnelles sont pillées en permanence et ça serait pas légal dans la vraie vie avec le courrier ou le téléphone, on veut changer ça. Donc on vous fait un produit qui change ça par défaut pour n'importe quelle personne.
R3doubt retweeted
And now we understand the absolutely rabid obsession with destroying Pete Hegseth.
I’ve been in the Army since before 9/11. Served under many secretaries.
Only in the past 18 months have I experienced:
>politicians warning me not to follow illegal orders
>billboards outside military bases telling me to report war crimes
>the media attacking anyone who has a positive thing to say about the man, and defending anyone who hates him
>stunning volume of leaks from senior officials trying to undermine him, and the lionizing of the leakers by the press
>being called a war criminal myself, hundreds of times a day
>a sustained media narrative portraying virtually every firing or senior officer removal as a “purge”
>public efforts by retired officers, advocacy groups, and political figures to mobilize service members and military communities against administration policies
>influential “Americans” publicly cheering for Iran
This is just to name a few. I’ve NEVER experienced anything like this before. And it’s becoming abundantly clear that the concerted effort to divide the military from within was stunted when Hegseth took over. Anyone desiring color revolution needs control of the military. That’s color revolution 101.
Is it starting to make sense yet? Now you see the obsession over him in particular. It’s not a coincidence. And it damn sure isn’t because of his culture war.
It’s because by all objective metrics, he runs a military that snatches rogue leaders from their beds, destroys entire militaries, and successfully mobilizes assets to save one downed pilot in the middle of enemy territory by building an Air Force base… in the middle of enemy territory. Secures the border, dominates the hemisphere. Hunts drug cartels. The list goes on.
He is by all meaningful accounts, effective at wielding the machine. And that is why they drool at the thought of removing him.
In years past you’d be hard pressed to find a junior Soldier who knew the name of the cabinet secretary above them.
Every one of them knows Pete Hegseth.
Every one.
R3doubt retweeted
The War Department is officially launching the Chaplain In-Service Procurement Program.
R3doubt retweeted
Reminder to check your kids’ Halloween candy for improperly disclosed CVEs this year.
R3doubt retweeted
The cool thing about private property rights and free markets is that you don't have to justify to the central planners how you are using your scarce resources...
sam: local inference is a terrible allocation of scarce resources
“a lot of people want local inference, and somehow they assume that the problem is solved now because we have open-source models, we're going to be able to run them on our computers, and so we're not going to need all the stuff in the data centre
but from a global allocation perspective, actually it's quite terrible to have everybody, like, have a bunch of the world's limited supply of DRAM sitting in their own computer and being used five percent of the time
you want maximum utilisation in the cloud if you're trying to deal with this very supply-constrained environment
somehow many people's intuition is the opposite of that”





































