Fides Fracta

[Fides Fracta @algebracrat]

i was watching a video of this scammer getting arrested and thought of matt's post.

i thought there was simply no way that tehaskumar patel, who scams elderly americans out of hundreds of thousands of dollars, could also be listed as ‘white' 😂

[Matt Van Swol @mattvanswol]

I ran down the rabbit hole last night...

What I've discovered is shocking.

I searched through thousands of arrests in my county and every single Hispanic individual who has been arrested is labelled as "WHITE"

Not one, not two... HUNDREDS

How long has this been going on?!!!!

[Smukx.E @5mukx]

Malware Reverse Engineering for Beginners series:-

Part1 :- https://t.co/bQFRzKyWbx

Part2 :- https://t.co/udSk5YxH9O

#malware #analysis #beginners

[Fides Fracta @algebracrat]

@SolidSportsBets @HappyPunch better angle: https://t.co/bZ4tIoWnOg

[MVP - Most Valuable Promotions @MostVpromotions]

Ngannou ends it all.
3 First Round KO's IN. A. ROW.

———
LIVE NOW
🌎 NETFLIX
#RouseyCarano #DiazPerry #NgannouLins

[iShowCybersecurity @ishowcybersec]

1. Web Application Hacker’s Handbook
2. The Hackers Playbook 2
3. Hacking: The Art of Exploitation
4. Ghost in the Wires
5. Social Engineering: The Art of Human Hacking
6. Computer Hacking Beginners Guide
7. Kali Linux Revealed : Mastering Pen Testing Distribution
8. The Basics of Hacking and Penetration Testing
9. Nmap Network Scanning
10. Practical Malware Analysis: The Hands-on Guide
11. RTFM: Red Team Field Manual
12. Hash Crack: Password Cracking
13. Mastering Metaspoilt
14. Advanced Penetration Testing
15. Hacking: A Beginners Guide to Your First Computer Hack
16. CISSP All in One Exam Guide
17. Web Hacking 101
18. Blue Team Handbook: Incident Response Edition
19. Black Hat Python: Python
20. Gray Hat Hacking: The Ethical Hacker’s Handbook

[Fides Fracta @algebracrat]

@benonwine liquidation and deportation of offender and all family members (we all know who's doing it).

[Fides Fracta @algebracrat]

@elonmusk meh.

needs a billion indians standing around, shitting and throwing trash everywhere, and washing their clothes in the rivers.

then sprinkle in some muslim rape gangs and some knife attacks and now we're talkin.

[John Scott-Railton @jsrailton]

NEW: we caught 🇨🇳Chinese hackers... again.

Twist: they're hacking journalists & activists, but we suspect they're private contractors.

State repression... with a profit margin.

Thread + how to protect yourself 1/

By us @citizenlab in collab w/@ICIJorg

[Fides Fracta @algebracrat]

@Hayyarebbim @FurkanGozukara @Zigoo0 @three_cube @DarkEntryAms another inbred moron

[Mushtaq Bilal, PhD @MushtaqBilalPhD]

Sci-Hub is an evil website that pirated 85M+ research papers and made them freely available

And now they've added AI to their database to make Sci-Bot.

It answers your questions using latest, full-text articles.

But DO NOT use it. We should all try to make billion-dollar academic publishers richer.

I'm putting the link below so you know how to avoid it.

[Fides Fracta @algebracrat]

@FurkanGozukara @Zigoo0 @three_cube @DarkEntryAms i would also ban a third-worldist moron if i saw that they liked to spew "israel made genocide" bullshit on their socials.

[Aurelien @Aurelien_Gz]

this is mind-blowing...

google maps rendered like a video game.. control light, clouds, and locations with three.js

[Fides Fracta @algebracrat]

@pureMetatron wuhan bat soup.

[OSINT Techniques @OSINTtechniques]

North Korea is exploiting remote IT hiring using stolen identities to place workers in companies, generating millions for the regime. Many orgs have unknowingly hired them, creating insider threats capable of data theft, extortion, and risks to national security.

[Shin @hey_itsmyturn]

Just got my hands on a 3-page "guide to detect starlink terminals"

Islamic Regime's security forces are utilizing a specialized software protocol to identify and triangulate Starlink terminals through unique signal signatures, such as high BSSID density and the use of 802.11ac/ax radio types.
The tool enables field personnel to physically locate hardware via real-time distance estimation and acoustic tracking that intensifies as they approach the source.
People arrested with Starlink possession might face extreme legal consequences, including charges of "sabotage and spying" which may result in execution.

#Iran

[Fides Fracta @algebracrat]

https://t.co/DTUz3oumlR

[Om Patel @om_patel5]

I taught Claude to talk like a caveman to use 75% less tokens.

normal claude: ~180 tokens for a web search task

caveman claude: ~45 tokens for the same task

"I executed the web search tool" = 8 tokens
caveman version: "Tool work" = 2 tokens

every single grunt swap saves 6-10 tokens. across a FULL task that's 50-100 tokens saved

why does it work? caveman claude doesn't explain itself. it does its task first. gives the result. then stops.

no "I'd be happy to help you with that." no "Let me search the web for you" no more unnecessary filler words

"result. done. me stop."

50-75% burn reduction

with usage limits getting tighter every week this might be the most practical hack out there right now

[Fides Fracta @algebracrat]

@callistoroll https://t.co/feCwSuLMNS

[Nicolas | だんだんフランス語 @Nico_furansugo]

@callistoroll He is half-naked, isn’t he? It seems to me that Article 174 of the Japanese Penal Code states that you risk up to 6 months of imprisonment and a fine of 300,000 yen for indecent behavior in a public place.

[Fides Fracta @algebracrat]

@otakara18 launch this bucket of lard into the pacific.

[Andrej Karpathy @karpathy]

Software horror: litellm PyPI supply chain attack.

Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.

LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.

Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.

Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.

Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.