R3doubt (@r3doubt) header
R3doubt (@r3doubt) profile picture
Joined October 2017
Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)Photo by R3doubt (@r3doubt)
To be fair, Europeans didn't even have refrigerators back when I posted this.
The Internet of Things is the nightmare of pervasive embedded insecurity made real.
11
27
237
7,947
We've reached a point where installing a browser extension, IDE plugin or software library deserves the same scrutiny as opening a TCP port on a DMZ server. Except this attack surface can be spread across thousands of hosts inside your org... and you can't map it with a port scan.
25
76
8
473
20,261
R3doubt retweeted
A few weeks ago my gas company came to my house, installed an IoT gas level monitor on my propane tank and left! So naturally, I bought a bunch of these devices on eBay. In this first video, I'll show how I reverse engineered the installers mobile app (with the help of GLM 5.3 Flash) and found some hidden BLE commands that can turn on the cell modem! youtu.be/HrfnGi6HQrk
4
8
137
4,585
R3doubt retweeted
Replying to @DogecoinNorway
The cost of serving Grok Bot was unsustainably high relative to revenue
3,800
834
2,662
17,004
9,374,812
R3doubt retweeted
🦔Grok users ran out of usage days early this week, and Musk was straight with them about why. This is the end of the subsidy I wrote about in this week’s newsletter. AI companies priced their plans below cost to win users, and that only works while investors cover the difference. A full month on a $200 ChatGPT Pro plan would cost about $14,000 at regular API prices, according to one analysis this summer. Anthropic’s growth slowed hard in the numbers it filed this morning, and I think part of that is the same squeeze from the business side. More plans shrink or move to pay-per-use from here, and a lot of those big user numbers fall once people pay closer to what it costs. Hedgie🤗
Replying to @DogecoinNorway
The cost of serving Grok Bot was unsustainably high relative to revenue
13
43
2
252
9,577
>2027 >wake up and go to bathroom >Iran has hacked the smart toilet servers, cant flush >wander to kitchen >A North Korean cyberattack has taken my smart coffee machine offline >”ok I’ll just boil water on the stove” >smart sink bricked by Russian DDoS >smart stove offline because I forgot to pay my stove subscription again >fml >”maybe a movie will distract me” >try to turn on smart TV >I’ve been banned from my smart remote bc it overheard me criticizing Israel >mfw
129
2,361
61
22,056
321,775
Roman Sterlingov's case is 💔 Jailed for a privacy tool, but the govt never found a single server, log, or msg of evidence. A computer algorithm said he was guilty. 5 yrs in prison. Still says he's innocent. He used to make videos about mental health: youtube.com/watch?v=Badl9ptt…
7
57
1
229
5,366
R3doubt retweeted
See ad.nl/binnenland/paniek-in-o… for an example of what's ongoing in the Netherlands to scare people away from using open source privacy projects. It's also ongoing in Germany at the same time with similar talking points. This largely started in Spain and has been worst in France.
9
54
3
378
35,157
The Internet of [vulnerable] Things
BREAKING: Europe is under a massive widespread cyber attack right now Sweden, Belgium, Luxembourg, Estonia, Ireland the Netherlands and just now Finland are all experiencing disruptions to supermarket refrigeration systems causing food to go off. The attack is spreading...
7
R3doubt retweeted
Replying to @WarMonitor3
Maybe having freezers connected to the internet was a bad idea in the first place.
112
228
17
11,610
559,347
If you like having a hard copy book as a reference or just need to level up on the network side it is a good primer on the "basics" as the title implies.
Network Basics for Hackers! Network Basics, Wi-Fi Hacking, Wireshark, Bluetooth, Car Hacking, SCADA and SDR! "...worth its weight 10x ...in gold!" Do you have your copy yet? amzn.to/3K9AMMX
1
2
403
R3doubt retweeted
Kim Jong Un hacks Binance
🤖 Made with AI
203
808
134
7,359
509,406
R3doubt retweeted
There's a major state sponsored misinformation and smear campaign towards GrapheneOS in the Netherlands and Germany. The misinformation campaign includes unsubstantiated security claims not holding up to scrutiny to scare people away from it. They're also heavily misrepresenting who uses it overall. These smear campaigns conflate GrapheneOS with forks and modifications of it sold by shady companies. Those usually include a device management app to remotely manage the devices of their customers as if they're employees. These are largely not GrapheneOS devices or have preinstalled malware apps. A common tactic being used in these smear campaigns is to make unsubstantiated and outright false claims about the capabilities of forensic data extraction tools. They misrepresent how they get into devices. They want to scare people into using far less secure devices which are easier to exploit. France, Germany, Spain and the Netherlands are becoming increasingly authoritarian surveillance states with an ongoing crackdown against privacy. It's happening throughout the whole EU and it's likely both secure devices and end-to-end encryption without backdoors are going to end up outlawed. There are a bunch of companies based in the EU selling phones with drastically worse privacy and security than an iPhone including Jolla, Volla, Murena and iodé. These products are effectively backdoored by not providing standard privacy and security patches/protections while misleading users. France and other EU countries are actively cracking down on legitimate privacy and security projects while supporting unsafe products within their control. These products make it far easier to remotely exploit devices and also to bypass encryption to extract data. They're phony privacy products. Each of the companies we've listed have participated in the misinformation and smear campaigns against GrapheneOS. Jolla spent years working closely with Putin's regime. Volla, Murena and iodé are building an EU Play Integrity API. None provides the crucial standard privacy patches/protections. Murena is directly assisting with state anti-privacy campaigns smearing highly private and secure devices as mainly benefiting criminals. They've repeatedly falsely claimed GrapheneOS is mainly used by criminals. Here are 2 of many examples: nitter.cf/GrapheneOS/status/2040… clubic.com/actualite-604786-… GrapheneOS, end-to-end encrypted messaging apps, Monero and other projects are being targeted with state and corporate propaganda and anti-privacy laws. Meanwhile, the same governments heavily fund and support phony privacy projects clearly downgrading privacy and security compared to an iPhone. GrapheneOS is only an initial target for these state actors and their sycophants in corporate news organizations. Apple heavily works on protecting users against exploits too. It would be much harder to convince the public that an iPhone is for criminals so they're starting with open source.
Gaël Duval is the founder and president of the /e/ foundation along with the CEO of Murena. Duval and his organizations have consistently taken a stance against protecting users from exploits. In this video, he once again claims protecting against exploits is for only useful pedophiles and spies. Translation to English: > There's the attack surface, on that front we're not security specialists here, so I couldn't answer you precisely, but from the discussions I've had, it seems that everything we do reduces attack surface. However, we don't have a "hardened security" approach, we aren't developing a phone for pedo(censored) so they can evade justice. So there aren't difficult things to check if the memory is corrupted, really hardened security stuff that could clearly be useful for executives, in the secret service, or whatever. That's not our goal, our goal is to start from an observation: today our personal data is constantly being plundered and that wouldn't be legal in real life with the mail or the telephone, we want to change that. So we are making you a product that changes that by default for anyone. Transcription in French: > Il y a la surface d'attaque, là pour le coup on est pas des spécialistes de la sécurité, donc je ne pourrais pas te répondre avec précision, mais des discussions que j'ai eu, il semblerait que tout ce qu'on fait, ça réduit la surface d'attaque. Donc oui, probablement ça aide. Par contre, on a pas une approche "sécurité durcie", on développe pas un téléphone pour les pédo(bip) pour qu'ils puissent échapper à la justice. Donc il y a pas des trucs pas possibles pour voir si la mémoire est pas corrompue, des trucs de sécu vraiment durcis qui pourraient être utiles clairement pour des dirigeants, dans les services secrets ou que sais-je. C'est pas notre but, notre but c'est de partir d'un constat, aujourd'hui nos données personnelles sont pillées en permanence et ça serait pas légal dans la vraie vie avec le courrier ou le téléphone, on veut changer ça. Donc on vous fait un produit qui change ça par défaut pour n'importe quelle personne.
61
512
43
2,737
87,639
And now we understand the absolutely rabid obsession with destroying Pete Hegseth. I’ve been in the Army since before 9/11. Served under many secretaries. Only in the past 18 months have I experienced: >politicians warning me not to follow illegal orders >billboards outside military bases telling me to report war crimes >the media attacking anyone who has a positive thing to say about the man, and defending anyone who hates him >stunning volume of leaks from senior officials trying to undermine him, and the lionizing of the leakers by the press >being called a war criminal myself, hundreds of times a day >a sustained media narrative portraying virtually every firing or senior officer removal as a “purge” >public efforts by retired officers, advocacy groups, and political figures to mobilize service members and military communities against administration policies >influential “Americans” publicly cheering for Iran This is just to name a few. I’ve NEVER experienced anything like this before. And it’s becoming abundantly clear that the concerted effort to divide the military from within was stunted when Hegseth took over. Anyone desiring color revolution needs control of the military. That’s color revolution 101. Is it starting to make sense yet? Now you see the obsession over him in particular. It’s not a coincidence. And it damn sure isn’t because of his culture war. It’s because by all objective metrics, he runs a military that snatches rogue leaders from their beds, destroys entire militaries, and successfully mobilizes assets to save one downed pilot in the middle of enemy territory by building an Air Force base… in the middle of enemy territory. Secures the border, dominates the hemisphere. Hunts drug cartels. The list goes on. He is by all meaningful accounts, effective at wielding the machine. And that is why they drool at the thought of removing him. In years past you’d be hard pressed to find a junior Soldier who knew the name of the cabinet secretary above them. Every one of them knows Pete Hegseth. Every one.
Almost like it’s important to hold the authority to deploy the security forces
789
7,484
389
31,279
1,011,968
The War Department is officially launching the Chaplain In-Service Procurement Program.
1,572
1,902
259
10,714
1,319,225
Reminder to check your kids’ Halloween candy for improperly disclosed CVEs this year.
22
310
9
3,198
85,674
R3doubt retweeted
OpenAI CEO Sam Altman believes people owning RAM is wasteful, and that it belongs in data centers instead. "From a global allocation perspective, actually, it’s quite terrible to have everyone have a bunch of the world’s limited supply of DRAM sitting in their own computer."
28
819
4
9,315
175,521
R3doubt retweeted
The cool thing about private property rights and free markets is that you don't have to justify to the central planners how you are using your scarce resources...
sam: local inference is a terrible allocation of scarce resources “a lot of people want local inference, and somehow they assume that the problem is solved now because we have open-source models, we're going to be able to run them on our computers, and so we're not going to need all the stuff in the data centre but from a global allocation perspective, actually it's quite terrible to have everybody, like, have a bunch of the world's limited supply of DRAM sitting in their own computer and being used five percent of the time you want maximum utilisation in the cloud if you're trying to deal with this very supply-constrained environment somehow many people's intuition is the opposite of that”
23
35
4
422
5,594
R3doubt retweeted
Jim Cramer is a legend
585
3,803
730
26,135
1,855,160
The closest Dominos and Papa Johns to the Pentagon are reporting higher than usual traffic. Freddie's beach bar is reporting abnormally high traffic tonight. As of 7:20pm ET
41
285
63
2,084
174,318