Харківський східняк

Злі і веселі діти Харківських підвалів

[Харківський східняк @fuel_ex]

@denysdovhan Це якийсь жабагадюкінс

[Харківський східняк @fuel_ex]

@father_of_dwarf Тримайтеся! Сил малому козачку❤️

[🌺КАМОНЯ🌺 @kavalerivna]

Ну що, ви готові збирати на реабілітацію військових і вигравати призи за донат?
Тоді погнали 😱
Разом з @YourFutureUA збираємо на реабілітацію 100 бійців, мета - 4 200 000, вартість 1 реабілітації 42 000 грн

Моя скромна банка на 50к:

https://t.co/urJ6pWW3Xr

Боже поможи!!!!

[Харківський східняк @fuel_ex]

@krakenfx Sweet🔥 Слава Україні! Слава Кракену!

[Харківський східняк @fuel_ex]

@sens_kyiv

[Харківський східняк @fuel_ex]

@asia_kvitka Якшо запитаєте у чому різниця на смак Ром Кола та Бренді Кола - так і не зможу пригадати

[Харківський східняк @fuel_ex]

@sens_kyiv

[Харківський східняк @fuel_ex]

@sens_kyiv

[Харківський східняк @fuel_ex]

@sens_kyiv

[Julian Derry @CyberSamuraiDev]

Most users believe that because Signal uses end-to-end encryption (E2EE), their messages are untouchable. While the pipe is secure, the moment that message hits your screen, it leaves a trail. This specific case highlights a critical persistence artifact, the iOS Notification Center.

When a notification pops up, iOS often caches the text in a system database, typically NotificationCenter.db or delimited.db, so you can scroll through your history. Even if you delete the message in the app or delete the app entirely, that system level record remains until it’s overwritten.

The FBI didn’t break Signal's encryption, they performed a file system extraction to recover the OS's own logs of what was displayed to the user.

The device shown is a Cellebrite UFED. It is the industry standard for bypassing device locks and pulling these hidden SQLite databases during a physical or advanced logical extraction.

Your phone is designed for convenience, and convenience is the enemy of privacy.
Your device is a silent witness that never stops taking notes. In the world of Mobile Forensics, we don’t always need to crack the vault, we just need to find the notes the operating system left on the desk.

To mitigate this, go to
Settings > Notifications > Show Previews and set it to "Never" or "When Unlocked."

[Radosław Sikorski 🇵🇱🇪🇺 @sikorskiradek]

Moscow supports Orban because he sabotages the European Union, blocks sanctions and money for Ukraine.
Ergo, he who supports Orban, helps Moscow.
It really is that simple.

[Харківський східняк @fuel_ex]

@YanaSuporovska "Бомжі Донбасу" literally

[Харківський східняк @fuel_ex]

Таке навіть в найкращому анекдоті не вигадаєш

[Ryan @ohryansbelt]

Delve, a YC-backed compliance startup that raised $32 million, has been accused of systematically faking SOC 2, ISO 27001, HIPAA, and GDPR compliance reports for hundreds of clients. According to a detailed Substack investigation by DeepDelver, a leaked Google spreadsheet containing links to hundreds of confidential draft audit reports revealed that Delve generates auditor conclusions before any auditor reviews evidence, uses the same template across 99.8% of reports, and relies on Indian certification mills operating through empty US shells instead of the "US-based CPA firms" they advertise. Here's the breakdown:

> 493 out of 494 leaked SOC 2 reports allegedly contain identical boilerplate text, including the same grammatical errors and nonsensical sentences, with only a company name, logo, org chart, and signature swapped in
> Auditor conclusions and test procedures are reportedly pre-written in draft reports before clients even provide their company description, which would violate AICPA independence rules requiring auditors to independently design tests and form conclusions
> All 259 Type II reports claim zero security incidents, zero personnel changes, zero customer terminations, and zero cyber incidents during the observation period, with identical "unable to test" conclusions across every client
> Delve's "US-based auditors" are actually Accorp and Gradient, described as Indian certification mills operating through US shell entities. 99%+ of clients reportedly went through one of these two firms over the past 6 months
> The platform allegedly publishes fully populated trust pages claiming vulnerability scanning, pentesting, and data recovery simulations before any compliance work has been done
> Delve pre-fabricates board meeting minutes, risk assessments, security incident simulations, and employee evidence that clients can adopt with a single click, according to the author
> Most "integrations" are just containers for manual screenshots with no actual API connections. The author describes the platform as a "SOC 2 template pack with a thin SaaS wrapper"
> When the leak was exposed, CEO Karun Kaushik emailed clients calling the allegations "falsified claims" from an "AI-generated email" and stated no sensitive data was accessed, while the reports themselves contained private signatures and confidential architecture diagrams
> Companies relying on these reports could face criminal liability under HIPAA and fines up to 4% of global revenue under GDPR for compliance violations they believed were resolved
> When clients threaten to leave, Delve reportedly pairs them with an external vCISO for manual off-platform work, which the author argues proves their own platform can't deliver real compliance
> Delve's sales price dropped from $15,000 to $6,000 with ISO 27001 and a penetration test thrown in when a client mentioned considering a competitor

[Харківський східняк @fuel_ex]

@rustinb Could you make it available for Ukraine? There are lots of tech guys over here with a desire to use such amazing tools

[Харківський східняк @fuel_ex]

@hertsokytsia на Стерненка підписались?

[Харківський східняк @fuel_ex]

@sens_kyiv

[Харківський східняк @fuel_ex]

@sens_kyiv

[Харківський східняк @fuel_ex]

@sens_kyiv

[Харківський східняк @fuel_ex]

@garryshoww LAUD

[Харківський східняк @fuel_ex]

@sens_kyiv