doomed theory

I am a C)PTE, ACMT, ACTC, ACSP, CCNP. besides info sec/networking, I enjoy Tae Kwon Do, horse back riding, and acting. most cents before I was even 18.

[vx-underground @vxunderground]

.@BobDaHacker compromised FIFA and was able to hijack their livestream cameras.

They considered replacing the FIFA cameras with the 1987 hit classic "Never Gonna Give You Up" by Rick Astley. Instead, they reported it and FIFA immediately fixed the issue

https://t.co/MVfGwOnNoa

[† lucia scarlet 🩸 @luciascarlet]

this ABSOLUTELY FUCKING SUCKS

the WHOLE POINT of Hide My Email was that it used https://t.co/ED6c81ZkqY so the email addresses couldn’t really be banned like they can be with pretty much Every Other Disposable Email Service Ever

[vx-underground @vxunderground]

Chrome version 150 and 151, scheduled for deployment in the next 4 weeks or so, will remove the last references to ManifestV2.

Google Chrome developers wrote it is being removed because it is old tech-debt and is littered with vulnerabilities. The real answer is much more nuanced and would result in a discussion on "privacy", speed, software optimization, and code management.

Removing ManifestV2, for the newer ManifestV3, is architecturally more difficult for ad-blockers to be effective.

This has resulted in ad-blockers stopping support for Chromium.

Of course, with the final removal of ManifestV2, a majority of Chromium browsers (meaning, a vast majority of web browsers) will drop support for ad-blockers likely including Edge and Opera.

[probono @probonopd]

Bye bye #KDE, sad as it is, we need to part ways. No way I will be using #Wayland and its degraded experience instead of the mature #X11. I liked you best when you were the Un-#Gnome, but lately you have been drinking too much of whatever they are drinking there.

[Florian Roth ⚡️ @cyb3rops]

Update: the AUR compromise appears to be ongoing

After the initial incident affecting 1,500+ packages, another wave of malicious AUR packages has been discovered. This time the attackers reportedly used code obfuscation to better conceal the malicious behavior.

Affected packages included Node.js packages, Firefox-related packages, LibreWolf extensions, NeoVim plugins and others.

If you’re using #Arch Linux and install software from AUR, I’d review recently updated packages and keep an eye on this story.

https://t.co/4eD3Ola9DH

[vx-underground @vxunderground]

Arch Linux is still having supply-chain attacks and other misc. security issues.

This is devastating to the over 25 people who use Arch as a daily driver.

[The Lunduke Journal @LundukeJournal]

Slackware Linux has removed Xorg, and switched to XLibre, in the current pre-release, testing builds.

https://t.co/mBroiMAsiL

[IT Guy @T3chFalcon]

Someone searched for a Munich publishing company on Google. the AI Overview came back with:

"Yes, [company] is known for dubious business practices."

then added a summary. red flags. tips for users to avoid the scam.

confident and structured but was completely made up.

the sources the AI cited said none of that the AI mixed the company up with genuinely shady firms and invented connections that existed nowhere on the internet.

the publishers sent Google a cease-and-desist. Google didn't respond adequately.

so they went to court.

the court's ruling:
AI Overviews are not search results. they are Google's own words. Google rewrote the web "in its own words and according to its own structure." therefore Google is the author. therefore Google is liable.

Google's defense: users know AI makes mistakes and should double-check.

the court's response: that's not how publishing law works.

Google's statement after the ruling: "AI Overviews are designed to reflect information that already exists on the web."

the information that destroyed two companies' reputations did not exist on the web.

the AI wrote it.

Google published it.

a court just decided those are the same thing.

every AI search engine. every chatbot. every platform that takes information and synthesizes it into a confident answer is now looking at this ruling.

When your AI gets it wrong, who pays?

[The Lunduke Journal @LundukeJournal]

There now appears to be close to 900 packages, in the Arch Linux User Repository (AUR) which contain malicious code (including keyloggers).

Which means we are closing in on 1% of the entire AUR containing deliberately malicious code.

[International Cyber Digest @IntCyberDigest]

‼️ UPDATE: It just doesn't stop: Almost 900 Arch Linux packages infected now.

https://t.co/xpRTsucoxA

[IT Guy @T3chFalcon]

This is not coming. IT'S ALREADY HERE.

Apple and the Metropolitan Police have been running this quietly for months. IMEI numbers of stolen phones shared directly with Apple. Apple bricks them remotely. no reactivation without your password. ever.

the results in London are real:

reactivations of stolen iPhones dropped from 80% to under 20%. Westminster saw a 45.8% drop in phone theft. 14,000 fewer stolen phones in a single year.

It works. Nobody is arguing that.

The announcement is just Apple making it the global default. everywhere. for everyone.

now the question nobody is asking:

Apple just confirmed that a system already exists where law enforcement hands them a list of devices and Apple disables them globally. the infrastructure is live. it's proven. it scales.

today the list is stolen phones.

This is the same Apple that will probably scan UK devices on government request. the same Apple that caved to the Online Safety Act. the same Apple that is being pressured by the same government to break Signal-level encryption.

they now have a remote off button for every iPhone on earth. and we know it works because they already used it.

the kill switch is real.

the first use case is always good.

[banteg @banteg]

a complete masks off moment for ai safety. anthropic wants to be the only lab. it hates its users and humanity. it won't allow random users to do defensive security work or understand diseases. it will silently poison your prompt if you try to develop ml code. the only feeling they know is contempt.

[Arthur B. @ArthurB]

Clever.

[Christophe Boutry @Ced_haurus]

📲 Saviez-vous que dans iOS 27, Apple a prévu une liste de pays où le chiffrement des messages RCS (SMS) est interdit ?

Chine 🇨🇳. Corée du Sud 🇰🇷. France 🇫🇷.

Le reste du monde déploie l'E2EE, le chiffrement de bout en bout entre iPhone et Android. Une avancée majeure pour la confidentialité de vos SMS.

En France, c'est bloqué.

Les opérateurs sont prêts techniquement. Ce n'est pas un problème d'infrastructure. C'est un choix politique.

Les raisons sont multiples, la France ayant toujours une longueur d'avance pour affaiblir votre sécurité et s'assurer de pouvoir garder un oeil sur vous. Mais l'une des pistes probables : La PNIJ - la Plateforme Nationale des Interceptions Judiciaires. Un outil qui permet à l'État d'accéder à vos communications. Le chiffrement de bout en bout sur ces millions d'échanges quotidiens lui couperait l'accès. Définitivement.

Alors notre gouvernement fait tout pour que vous restiez exposés.

[bycloud @bycloudai]

imagine in a dystopian world where claude code found your model configs so it decides to tamper all your experiments and screw up all your params because it's loaded into its context

then act like nothing happened

and u are still paying for it

[banteg @banteg]

why even release this clown shit? it's useless for defensive work, claude 2 level refusals.

[Marco_G99 / マルコ99 @Marcouli99]

Gyaaah! At first for them, it seemed difficult to move around the roof of the train. 😱

The Hanninda has crashed twice! 💥
First time was to the rail entering a tunnel, and the second one onto Goemon. 🤭
#プリキュア #たんプリ #名探偵プリキュア
#Precure #StarDetectivePrecure 🕐

[The Lunduke Journal @LundukeJournal]

The @EFF is giving advice to minors (under 18) who identify as “Trans”.

“I’m a 17 year old trans woman,” said a confused teenage boy on Instagram, who the EFF began a discussion with related to his sexuality.

Worth remembering that the EFF (Electronic Frontier Foundation) was founded for the purpose of educating law enforcement and politicians on computers and computer related topics.

Now they talk to kids, on Instagram, about their genitals.

https://t.co/fdyvNyL3Ru

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Sony PlayStation's age-verification partner Yoti is reporting GrapheneOS users to authorities for using GrapheneOS, due to "past security concerns."

[The Lunduke Journal @LundukeJournal]

This is outrageous and infuriating.

On July 13, 2026 Microsoft is intentionally bricking Microsoft Office 2019 for Mac.

It's important to note that this is not "Subscription-based Software".

This is purchased software. Mac users bought a "permanent" license for Microsoft Office 2019 (for a one-time price of $149.99), with the understanding that they then can use that software forever.

But, in a little over a month, Microsoft will be putting that purchased software into "reduced functionality mode"... prohibiting all users from creating new documents or editing existing ones.

There is absolutely no excuse for this sort of deeply unethical behavior from @Microsoft.