fadenb

"Cannot say. Saying, I would know. Do not know, so cannot say." - Zathras
are my own and should never be taken seriously** 😜

[BeyondMemory Intelligence. @beyondmemory_io]

Well, well, well. The public JSON formatter sites your developers paste production data into have been quietly publishing every paste for about seven years. Naturally, we read all seven years of it.

200,000+ documents. Cloud keys, SSH keys, payment API keys, whole tax returns with SSNs, people's full identities, bank balances. Nobody hacked anything. People pasted it in to make it look tidy, as you do.

Full writeup below. Yes, it's as bad as it sounds.

[Seduxiq 💫 @seduxxiq]

@jwt0625 "babe, what's for dinner?"

[International Cyber Digest @IntCyberDigest]

‼️🚨 Malicious actors can now use your SSD's activity, just by getting you to open their website, to spy on which other sites you're browsing and which apps you're running.

The attack, called FROST, is accurate: 88.95% on identifying websites, 95.83% on identifying applications. It works on macOS and Linux, across browsers, and runs entirely in JavaScript.

The browser makers were told, and largely shrugged. Chromium says fingerprinting isn't a security bug. Apple called it out of scope. Mozilla acknowledged it and shipped nothing.

Researchers at Graz University of Technology developed the attack. It abuses the Origin Private File System, a browser feature that lets sites store files on your disk without asking. The attack creates one huge file, then constantly times how fast it can read from it. When you open another tab or launch an app, that activity competes for the same SSD, and the tiny changes in read speed leak what you're doing. A trained neural network turns those timing patterns into guesses about which site or app it is.

[Rick Brewster @rickbrewPDN]

I GOT THE DOMAIN! I FINALLY GOT IT!!!!!!!!!!1 🥳🎉

Paint​.NET is now at https://t.co/ZJTUII4bVG!

Well, it will be just as soon as I push all the buttons to migrate content and set up redirects from getpaint​.net etc. For now it's just a "hey go here" redirect page.

[Son Luong @sluongng]

Codex just found a “workaround” of not having sudo on my pc…

[Brandon Carl @brandonjcarl]

Earnings Before Tokens

[Justine Moore @venturetwins]

Me using Claude Opus 4.8 to rename a file

[Sovey @SoveyX]

Did you know Korea sells “one-a-day” banana packs?

Instead of every banana ripening at once, each one is at a different stage.

One is ready today.

The next one is ready tomorrow.

The last one is still spiritually in college, “experimenting.”

Simple. Genius. Solves the entire banana problem.

What do you think?
Would you prefer your bananas this way?

[TracketPacer @TracketPacer]

a friend sent this to me, i cannot take credit for it. but now u know which chocolate bar will fit into a qsfp cage

[Brian Pak @brian_pak]

Time to talk about this one.

CopyFail (CVE-2026-31431) — a 732-byte Python script that roots every Linux distro shipped since 2017. 🧵

[fadenb @fadenb]

@thisisrapchuel same here, annoying but not a real problem

[vx-underground @vxunderground]

Jira and Confluence is badass

They're going to train off your data unless you opt-out by August, 17th

Thank you AI overlords for draining us of literally everything

[Sweep @0xSweep]

The Police once raided a warehouse and found 3,800 PlayStations running FIFA

Ukraine's security service raided a warehouse in Vinnytsia expecting to find a crypto mining farm

Instead they found PS4 consoles stacked on racks from floor to ceiling

Every single one was running FIFA 21 on autopilot, farming Ultimate Team coins 24 hours a day to sell on the black market

The operation was stealing $259,000 a month in electricity and causing power blackouts across the entire city

The consoles alone were worth $1.5 million

EA makes $1.6 billion a year from Ultimate Team

The FIFA coin black market is worth over $200 million a year

At black market rates, 3,800 consoles farming coins 24/7 could pull in $3 to $5 million a year

Around the same time an actual EA employee got caught selling rare Ultimate Team cards for $1,000 each on the side

Even the people who made the game were running the same hustle

[Kristo Käärmann @kaarmann]

Now that we're soon running out of 32-bit namespace for transfer IDs at @Wise, the engineers are annoyed with me choosing int over long when I wrote the first lines of code in 2010.

But why don't they appreciate the $17 of savings in storage cost over years!? 🤷

[chloe 🐇 @SapphoSys]

world's first enterprise solution to reach zero nines uptime

[AWS Developers @awsdevelopers]

‼️The AWS console has been retired. All services must now be used through the CLI only.

[fadenb @fadenb]

@Zai_org Unfortunately as a subscriber I still get 'You do not have permission to access glm-5.1' as of now

[Zack Korman @ZackKorman]

NVIDIA fixed NemoClaw to "prevent the sandboxed AI agent from modifying gateway security settings (openclaw.json)"

Except it didn't work. The AI can just make a copy of the settings and restart pointing at that new config. Same result.

They're really struggling with the basics.

[Ihtesham Ali @ihtesham2005]

This feels like cheating.

People pay $30-$50 for custom city map posters on Etsy.

Someone just open-sourced the exact same thing for free.

It's called TerraInk.

Its a cartographic poster engine built on OpenStreetMap data.

Type a city. Customize everything. Download and print.

What you get:

→ Any city on Earth via OpenStreetMap
→ Roads, water, parks, building outlines
→ Full theme and color control
→ Custom fonts via Google Fonts
→ PNG export, print-ready

The whole thing runs in your browser.

No account. No subscription. No checkout.

Self-host it with one Docker command if you want it completely yours.

100% Open Source. MIT License.

Live app: https://t.co/IQangu9eAF

[fadenb @fadenb]

@louszbd @ZixuanLi_ It is working quite well but it is very annoying that it tends to ignore direct instructions. E.g., tell it to use bun and not npm -> it will use npm 1/3 of the time. Same is true forever browser testing, it is always trying to use puppeteer no matter what instructions I provide