Dragos

All-Time Learner | Current deployment: NZ

[François Chollet @fchollet]

Twitter used to be my favorite place on the Internet. I've derived enormous value from it in the past 16 years.

Not true anymore. Most of the people I enjoyed reading have left. My feed, which used to feature art and science and technology and humor, has become constant political propaganda -- on the opposite side of the Enlightenment values I believe in. (I like the rule of law, free speech, free markets, and democracy. I like science and reject obscurantism. I can see that Putin is a dictator, not a genius role model, and that it is Russia that is invading Ukraine, not the other way around.)

I have been coming here less and less as a result -- it only brings me negative emotions. I never thought that would be possible, but I might eventually stop coming altogether.

[Pi-hole @The_Pi_Hole]

Tempted to change up the update script to provide a link to the latest blogpost, and then have the user enter a password that they could only know if they've read and digested the release notes... Only joking. Maybe.

[Rachel Tobac @RachelTobac]

Yes and also, interestingly, this tool takes all of the most commons steps used to hack people & companies — from OSINT (open source intelligence) via social media, to target selection, to pretext development, to contact + phishing — and automates it completely for attackers.

[onotch @onotch_x]

大寒波で雪化粧した鶴ヶ城がやばい

[DietPi @DietPi_]

#DietPi v9.10 is here:

- New: "dietpi-display" to control display mode and rotation, and toggle @FriendlyARM_ NanoPi M6 DSI displays
- Kernel migration for @Raspberry_Pi
- @risc_v systems migrated to @debian Trixie
- @orangepixunlong 5 Max Ethernet fixed

https://t.co/CF5UxNS2kG

[Jack Rhysider 🏴‍☠️ @JackRhysider]

I want you to know, this is the second company I've had to quit due to the company mistreating my listener's privacy.

Megaphone was my old hosting provider, they shared my listener data with advertisers. Left them.

And now Patreon got caught sharing my lister data to Facebook.

[htmx.org / CEO of Perfectly Normal Behavior (same) @htmx_org]

lisan al gaib!

https://t.co/aV76cwUMrX

[Traceix @usetraceix]

Malware Bible is now opensource: https://t.co/6ztrul9P2M

Feel free to make pull requests how you see fit, ilysm!

[GrapheneOS @GrapheneOS]

GmsCompatConfig version 154 released:

https://t.co/bVro4QC4jD

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://t.co/SKlwF0yE9a

GmsCompatConfig is the text-based configuration for the GrapheneOS sandboxed Google Play compatibility layer. It provides a large portion of the compatibility shims and sets the maximum supported versions for Play services and the Play Store.

#GrapheneOS #privacy #security #gmscompat

[AWS Identity @AWSIdentity]

#AmazonCognito supports identity provider-initiated login, encrypted SAML responses, & signed SAML login requests. https://t.co/zJVCAiAnGz

[Johannes Bader @viql]

Today, I'm releasing the first version of a small web 🚀: https://t.co/WZMsLWpGEK

It provides IOCs and YARA rules collected semi-automatically from public blog posts and reports of almost 200 cybersecurity sites.

I hope it proves useful to some of you ... 🙏✨ #ThreatIntel

[Brian Roemmele @BrianRoemmele]

"Reality is what we take to be true. What we take to be true is what we believe. What we believe is based upon our perceptions. What we perceive depends upon what we look for.
What we look for depends on what we perceive”—David Bohm to Albert Einstein 1956

[404 Media @404mediaco]

OpenAI furious DeepSeek might have stolen all the data OpenAI stole from us

🔗https://t.co/oDtSXrFekM

[Surya @sdand]

made a site to run deepseek r1 for free -- locally in your browser, no downloads, no servers purely using WebGPU

r1-web is open source, made in america, run on american servers, available below forever

[Dragos @_Drag0s_]

@plmaltais @rez0__ THIS.

[Dave Kennedy @HackingDave]

😂😂

[Alex Plaskett @alexjplaskett]

Two new side-channel attacks against Apple CPUs that can leak sensitive data from the processor's memory

SLAP (Speculation Attacks via Load Address Prediction) and FLOP (False Load Output Predictions)

https://t.co/8OxbdIy99X

[Andrey Kovalev @avkovaleff]

Today Google announced a new OSV-SCALIBR: A library for Software composition analysis. It allows to extract software dependencies, generate SBOM’s and scan them via https://t.co/TyHMfmbPP6!

More details in our blogpost: https://t.co/sG2ninnRPc

[Ivan Velichko @iximiuz]

Building container images FROM scratch? Then you need to be aware of these pitfalls 👇

By default, scratch containers lack:

- Rootfs layout
- CA certificates
- Time zone info
- Shared libraries
- /etc/{passwd,group}

Learn more in my new blog post:
https://t.co/lUx7LROKL3

[Simone Margaritelli @evilsocket]

Any model hosted on HuggingFace and loaded via AutoModel with trust_remote_code=true can be backdoored to execute malicious code, without changing any of the its weights files. Using SafeTensors is not enough, just add a custom class to auto_map in config.json and 💥