Adam

Blue Team, all things Marvel and DC, hiking, Netflix binging and lots of walks with my fat chocolate lab.

[Adam @Reptarr2]

@PaloAltoNtwks @OpenAI You should train it how to write xql, it still brings back SPL or KQL for all major AI vendors.

[Nard @Narddog4747]

It’s certifiably insane that the majority of the public doesn’t even bat an eye at this.

A foreign born Indian is CEO of America’s 4th largest tech company. Hires another foreign born Indian as CEO of America’s largest gaming company. The CEOs jointly fire Americans, replacing Americans with Indian employees.

Thousands of Americans losing high paying jobs, being kicked down the socioeconomic ladder. With Indians hired as replacements, the money and resources from those jobs that would’ve gone to our citizens will be siphoned by foreigners, mostly to be sent back to India as a remittance. It will leave and never come back to America.

This is definitionally a form of warfare against the American public.

[Adam @Reptarr2]

@rucam365 It’s been blowing us up

[Hedgie @HedgieMarkets]

🦔Leonardo is a $17 billion defense contractor. It built a system called SignalTrace that clips sensors onto the license plate readers already mounted on street poles, overpasses, and police cars across the US. Every time you drive past one, the sensor grabs the Bluetooth and WiFi signals from every device in your car, ties them to your plate, and logs the time and location. Your phone, your AirPods, your kid's tablet. All of it goes into the same file. A friend rides with you once and their devices are linked to your plate.
Leonardo has sold this to police departments since at least 2023. There is no federal law covering it, no opt-out, and no warrant requirement.

My Take
None of the pieces here are new. Your phone has always broadcast a signal. The license plate cameras were already there. Leonardo just connected them and found a buyer. Nobody had to break a law or build anything from scratch. They assembled a surveillance system from parts already in place and sold it before anyone noticed.

Most people found out this week from a 404 Media investigation. Leonardo received the patent in 2024. By the time you hear about something like this, the deals are done and the sensors are on the poles. That's how it works now.

Hedgie🤗
https://t.co/serZi0IGnT

[Justin Elze @HackingLZ]

👀

https://t.co/6lVX1uy06T

[SafeDep @safedepio]

git clone + open folder = code execution.

Config files that run code are the new install scripts and almost nobody reviews them.
VS Code, Cursor, Claude Code, Gemini CLI, npm, Composer, Bundler. All support config entries that can carry a shell command.
Miasma wired one dropper into seven of them in a single commit.

Opening a cloned repo now runs attacker code.
Full breakdown → https://t.co/6XloMqPsYC

[Adam @Reptarr2]

@DBrit87 @MarioNawfal Sadly, mass surveillance will be everywhere by then with palantir

[UI/UX Savior @UiSavior]

🤩

[Rothmus 🏴 @Rothmus]

👏👏👏👏👏👏

[Adam @Reptarr2]

@vxunderground Have you seen this guys “kill switch post” if anything happens to him? Bro is unstable and at this point, a fucking dickhead.

[BuBBliK @k1rallik]

do you understand what just happened to your computer..

Google Chrome secretly downloaded a 4GB AI model onto your device. Without asking.. Without telling you..

It's called weights.bin. It lives deep in your system folders. It powers Gemini Nano - Google's on-device AI.

And if you delete it? Chrome re-downloads it automatically. Like nothing happened.

Just Google deciding your hard drive is their storage unit.

At 1 billion Chrome users - that's 4 BILLION gigabytes of data pushed silently across the internet.

The carbon footprint alone equals tens of thousands of cars running for a year.

Check your disk right now:
📁 %LOCALAPPDATA%\Google\Chrome\User Data\OptGuideOnDeviceModel

To stop it: chrome://flags → disable Optimization Guide On Device Model → restart Chrome → delete the folder.

Reshare so people know what's sitting on their computers.

[Adam @Reptarr2]

@IntCyberDigest Disable saving passwords for enterprises

[Adam @Reptarr2]

@paolini They told me to lift to get healthy. Now I have double tennis elbow, golfers elbow, a clicks right shoulder and tendentious in my forearms lol.

[Adam @Reptarr2]

@paolini Let’s goooooooooo!!!!

[Dave Kennedy @HackingDave]

For the enterprises using Claude, if you are using it for heavy enterprise type stuff - be extremely careful. It's introducing massive bugs, security issues, and code quality is way worse than Opus 4.5, substantially worse on both 4.6 and 4.7.

Our entire development team is shifting off of it. It's unusable at the moment aside from beautiful UI stuff, it's code quality is not something you can trust.

Still no word from Claude on why they mangled their models and didn't tell anyone - which is particularly alarming on every front.

I would recommend switching teams over to something like Cursor, Perplexity, or AWS Bedrock - as the frontier models continue to innovate (or regress) - having the ability for flexible model selection that doesn't disrupt development workflow will be insanely important for enterprise.

[Adam @Reptarr2]

@RTausique @AISecurityInst Only if we can afford it.

[Adam @Reptarr2]

@AggrendWoW Any spoilers or info if there is even a classic +?

[Frank McCormick @CBHeresy]

I work from home, and sometimes it gets boring and lonely, so recently I’ve taken to answering those Indian scammer calls on my headset and dragging them out as long as possible with increasingly bizarre antics.

Today I had one where the scammer was trying to get me to buy gift cards at a store and send him the codes so he could allegedly send me cash. I don’t even know what the scam was supposed to be—it was really poorly thought out on their end—but I played along.

After about 30 minutes of pretending I was incredibly incompetent—having all sorts of difficulty starting my car and getting to the store—I told the guy I had arrived at Walmart.

You could hear the excitement in his voice—this was a man who clearly had very little success doing this. I even played sound effects from YouTube videos I had open in a bunch of tabs so he could hear me parking, entering the store, etc.

“Yes, sir! Very good! Cannot wait—I can send you the cash!”

Then things got interesting.

I told him to hold on while I got the cards, explaining that I didn’t have any money. He became a bit concerned and said, “Please, sir, just buy the cards.”

Then, as loud as I could, right in his ear: “EVERYONE GET ON THE FUCKING GROUND! I’VE GOT A GUN!”

plays YouTube clip of people screaming

The guy lost it: “Oh my God, sir, what are you doing?! Oh my God! Oh my God! Please stop!”

Too late.

For about five minutes, I narrated a high-stakes robbery, complete with me losing my cool, gunshot sound effects, audio clips of women screaming, etc.

It was the most harrowing five minutes of this poor guy’s life, as he kept telling me to stop and just give him the card numbers quickly.

When it was over, I made sure to let him know that I got the cards and killed anyone who tried to stop me—just as he had asked.

Clearly nervous he would somehow be implicated in this robbery-turned–mass murder he facilitated overseas, he emphatically told me that he only wanted me to buy the cards and did not ask me to do any of this.

I ended with a police siren and me pretending to run away before screaming, playing the gunshot sound effects again, and abruptly ending the call.

I honestly don’t know why he stayed on the call as long as he did, considering how panicked he sounded at various points—maybe he thought I’d still give him the card numbers and PINs after the botched robbery—but I can’t imagine Mr. Patel will be scamming anyone for some time.

So—how did you guys spend your workday?

[Adam @Reptarr2]

@co11ateral @matthewdunwoody Is this stock defender? Or locked down E5 suite defender?

[MERICA MEMED @Mericamemed]

Wait, hold up, you 3D printed rifling for a potato gun?!?