mera

[mera @MeraMeraska]

@jackGARCIA1077 @GEOIMINT That reads as a post doxxing legal notice, not the original DMCA that was about the imagery?

Kinda like a, 'ok you post doxxing, we report the imagery' thing. Don't think this shows they did anything prior to aryan's post.

[mera @MeraMeraska]

@jackGARCIA1077 @GEOIMINT Ok so how do we know that? you are simply saying the what, not how, how can i verify this is true?

[mera @MeraMeraska]

@jackGARCIA1077 @GEOIMINT How do we know that?

[mera @MeraMeraska]

@GEOIMINT Are you sure it was Faytuks?

[mera @MeraMeraska]

Competent leadership doesn't just fall out of trees. Do you think commanders can be endlessly replaced without a negative impact on unit and organizational effectiveness?

At some point it actually does become a problem, especially when a lifetime of expertise and knowledge gets snuffed out before it is passed on to successors.

[mera @MeraMeraska]

I wonder where the assessment of Fordow being repaired comes from. Last I saw, they concreted down the ventilation shaft and never opened any of the other tunnel entrances. I had a keen interest in this and observed satellite imagery for many months after the strike.

I haven't looked at it in a while though, anyone know of evidence they repaired Fordow? My assessment was, leaving it totally buried and concreting down the ventilation shaft was indicative of severe damage inside and an essential write off of it. There's important stuff in there that would need maintenance and the only explanation for me is they wrote it off and deem the inside too hazardous to go look at at the moment.

[mera @MeraMeraska]

@GEOIMINT @GeoConfirmed

[mera @MeraMeraska]

@weezerOSINT @ZackKorman Very good to learn from mistakes, happy hunting.

[mera @MeraMeraska]

vaguepost "Check your emails" is not a serious attempt.

Please learn from the experts and professionals giving you advice, there is a reason for these standards.

You could have even made a big post saying you discovered a serious security flaw and ask help getting in contact with them.

A single email(can be swept up by spam filters) to a mass public facing address and a vague post tweet is not a serious attempt.

Please learn from this, everyone egging you on are random people on the internet not security people, the people pushing back and giving you advice are.

[mera @MeraMeraska]

@Alex_Major1 @weezerOSINT @AnthropicAI Opus can find these kinds of things too.

[mera @MeraMeraska]

It really doesn't matter. You are revealing exploits publicly, it doesn't matter if it's trivially easy.

You are supposed to report it, if they ignore you, go contact someone with more clout like a security researcher or journalist.

In any case, so you sent someone an email less than a month ago, and that's it? No serious attempt to inform them then..

In any case you can point sonnet at many sites and find vulnerabilities like this even, yes there is a lot of totally irresponsible practises going on with a lot of new and even old apps(due to the rise of vibecoding).

I highly recommend that in future you put a bit more effort into contacting companies, automated spam filters can easily set aside what you email them. If you need help getting company's attention I'm sure there's journalists or other people with influence that can help.

By the way @AnthropicAI @trq212 are you happy with Claude Mythos being used like this and someone leaking all the details on the web because a company didn't respond to a single email less than a month ago?

[mera @MeraMeraska]

@weezerOSINT @Itx_Shad0w It doesn't matter that you censored anything when you revealed how to trivially extract the data.

[mera @MeraMeraska]

But you now disclosed to the world on a public forum how to get to that data.

Essentially, you discovered a vulnerability, and after the company didn't reply within a couple weeks you leaked it to the public.

Did you try to inform Security Researchers about this that could've gotten the company to listen more?

What you are doing is irresponsible. I have also discovered vulnerabilities before, I never showed it to the public even if the company never responded. At that stage just send it off to security researchers.

You seem to be sharing this publicly for clicks more than a concern about safety.

[mera @MeraMeraska]

@GabrielEpsteinX @MiddleEastBuka

[mera @MeraMeraska]

@LebarmyOfficial @Easybakeovensz bomb casing

[mera @MeraMeraska]

@EpicFuryMap There is still stuff from the 12 day war no one put up publicly.

Even without imagery restriction, I think there's hundreds of targets still not out on any osint map and may never be

[mera @MeraMeraska]

@Soureh_design2 @talhagin this real?

[mera @MeraMeraska]

@natsecboogie @Shayan86 Yeah, I've also come to the conclusion that's the best way to do it. State video is authentic and geolocated but that proof won't be shared publicly due to risk to person filming's safety.

[mera @MeraMeraska]

You're right, not everything has to be, but you should assume someone will once it's on mass social media.

Public geolocators are a fraction of what's going on behind the scenes, and their purpose is typically to help the public(and journalists, and institutions) know that footage is real.

In some cases that can put people at risk, and yes judgement should be used.