@CheetoSantino Bobby's asshole looked like some sort of federally protected sacred land, like hair never grew there before. Immaculate and vivid coloration that made me believe in God.
I feel blessed by the slept king to have seen it. My only regret is not seeing his infamous egg roll penis.
Did you know there's a type of phishing attack that defeats MFA completely.
It's called a reverse proxy phishing kit and it's one of the fastest-growing attack techniques in cybersecurity.
Traditional phishing works by using fake login page. you type your password. attacker gets it. if you have MFA enabled, the stolen password alone is useless. attacker gets stopped at the second gate.
reverse proxy is different.
instead of a fake page, the attacker sets up a live proxy server between you and the real website. when you click the phishing link, you connect to the attacker's server. the server connects to the real Microsoft, Google, or Okta on your behalf. it fetches the real login page and serves it directly to you, pixel for pixel in real time.
you're looking at the actual login page. you type your real password. the proxy relays it to Microsoft. Microsoft sends back an MFA prompt. the proxy relays that to you. you approve it. Microsoft sends back a session cookie.
the proxy intercepts the cookie before it reaches your browser.
You're logged in, so is the attacker using the same session.
Tools used: Evilginx, Modlishka, Muraena. all open source. all free. all with pre-built templates for Microsoft 365, Google Workspace, Okta, and PayPal.
commercial versions: EvilProxy, Tycoon 2FA, Mamba 2FA, Starkiller. Sold as subscription services on Telegram.
Reverse proxy phishing surged 139% between September 2025 and March 2026, nearly 1 in 4 phishing links now carries a reverse proxy payload.
18 US universities hit last year. Microsoft 365 campaigns targeting thousands of organizations globally.
The only authentication method that stops this completely: FIDO2 passkeys and hardware security keys. They bind credentials to the real domain. The proxy can't replay them because the credential was never issued for the proxy's domain.
Everything else, SMS codes, authenticator apps, push notifications can all be relayed.
this is f*cking gold
How to build your first AI agent (Full guide)
if I had this a year ago, I would've shipped my first agent in a day instead of 2 weeks in the right hands, this changes everything:
someone open-sourced a terminal torrent client that searches every trusted source at once.
you literally type one query, press 'd', and it downloads straight to disk.
You can now run a 2.78 trillion parameter model on a CPU with 8.24 GB of RAM 🤯
kimi-k3-in-c is a 176KB pure C99 engine that streams Kimi K3’s experts from disk instead of loading them into memory.
no GPU. no CUDA. no framework.
100% Open Source.
Adobe has a pirate enemy.
He goes by comfyanonymous. Nobody knows his real name.
He built ComfyUI. The most powerful AI image tool on the planet. 123K stars. GPL-3.0. He ships a new release every single week. For free.
Then Adobe did the unthinkable.
March 13, 2026. The Department of Justice hit Adobe with a $150 million settlement for hiding cancellation fees and trapping millions of users in subscriptions they could not escape.
Then they raised prices again.
Photoshop is $22.99 a month. Illustrator is $22.99 a month. Premiere is $22.99 a month. Photography Plan is $19.99 a month. Midjourney Standard is $30 a month. Firefly locks every real generation behind a credit meter that resets every month and never rolls over.
The trillion-dollar creative empire got caught red-handed by the DOJ, then squeezed harder. They called it a "value adjustment."
Coincidence.
Here's the wildest part:
comfyanonymous did not slow down. Latest release: August 3, 2026.
Still free. Still GPL-3.0. Still runs on your own laptop. No credits. No cancellation trap. No monthly rent. No cloud upload of your work.
Same models. Same power. Zero dollars. Forever.
One anonymous developer vs. the trillion-dollar creative empire.
But DO NOT install it. We should all keep paying Adobe.
100% Open Source.
(Link in the comments)
We gave your office an opportunity to share this evidence with our heavily DC-centric audience on June 22nd. For one reason or another, your office chose not to do so — completely your prerogative.
That said, how are we supposed to take your office’s word for it when the USAO conceded there wasn’t the evidence to charge Mr. Hearn?
🚨 DaddyBiden, a well known darknet market vendor, has likely been busted by law enforcement according to DrugHub admin.
DaddyBiden was known for selling pressed Adderall pills with meth.