🚨طالب أمريكي كتب أطروحته بيده لـ 6 أشهر وفي يوم واحد خسر كل شيء
المنحة: راحت ✗
التعليق الأكاديمي: صدر ✗
السبب: برنامج AI قال إن ورقته 98% مولّدة بالذكاء الاصطناعي
تاريخ تعديلات على Google Docs لكل كلمة كتبها
رد الجامعة؟
“برنامجنا دقيق ونحن نثق به”
@mi80231@coneticc@Meta@Meta masks sensitive data with asterisks ONLY on the client side.
So you can simply send a POST request manualy to the account recovery endpoint, plug in any username, and see what the server returns in response.
That’s stupid.
@evgeny_makarov7 Я купил бушный Mackbook Pro на M1 чипе с 16 гб озу за 450$. По железу, сборке, экрану, тачпаду, да и в общем по ощущениям аналога не найдешь.
Сама макось ограниченная сильно да, но она намного лучше винды. Сам я юзер арч линукса со стажем и жду когда допилят асахи линукс под м1.
The bug is very simple:
1. Open the web tools, inspect js files, and find password reset API endpoints.
2. Send a post req on /reset endpoint, with any registered email, with my password, and it was changed without any Authentication or Authorization.
‼️🚨 BREAKING: Sony PlayStation's age-verification partner Yoti is reporting GrapheneOS users to authorities for using GrapheneOS, due to "past security concerns."
🚒More fallout from the Mini Shai-Hulud campaign
49 Microsoft, Azure, and Azure-Samples GitHub repos were removed at 16:00 UTC for Terms of Service violations
This is linked to news this morning that attackers had regained access, after the previous durabletask compromise
❗️🚨 An Israeli company has backdoored hundreds of millions of households through countless Smart TV apps, and they're quietly turning Samsung and LG TVs into exit nodes for AI web-scraping. Your TV is relaying strangers' web traffic from your home IP, your bandwidth, your address attached to whatever those scraping jobs touch.
Roku, Fire TV and Google TV banned the practice. Samsung and LG didn't. The culprit is Bright Data's proxy SDK, which rides inside Tizen and webOS apps, 200+ on webOS alone. Datacenter IPs get blocked, home IPs don't.
Include Security reverse-engineered the SDK and found its relay protocol has no message signing, authentication, or device attestation. Their words: less secure than typical malware command-and-control.
To make things worse, they found that in iOS the relay tunnel binds straight to the physical network interface, so it routes around any VPN the user is running.
Bright Data's config also ships per-country tiers. Devices in Uzbekistan and Oman are cleared to relay down to 1% battery, with data caps up to 60x the worldwide default.
Before the BaCkDoOrEd replies land: technically you agreed. In practice you were enrolled into a global proxy network you were never given the information to refuse. And these exit nodes drag down your IP's reputation, potentially leaving you with blocks from providers.