Flavius

[ClaudeDevs @ClaudeDevs]

As a result of a US government directive, we are suspending access to Claude Fable 5 for all users. You can continue to use all other Claude models.

Here’s what this means for you:

Across Claude products, new sessions will run on your selected default model or Opus 4.8, and existing Fable 5 sessions will end with an error.

On the Claude Platform, requests to Fable 5 will also return an error. Please update your integrations to other Claude models.

We know this is a disruption to your workflows; we appreciate your patience and support.

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovered Remote Code Execution on https://t.co/SvN2lGsnbO with a single git push

The flaw in @github allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯

[antirez @antirez]

In the next months I'll provide you with a Hacker News replacement that I'll run myself and I'll guarantee personally: no benefit for whatsoever individual, a team of 10/20 persons since the start, from different time zones, clear rules, total transparency, and a "karma" system. I really want to fix HN and provide something that is not bound to a specific company.

[Forrest Knight @ForrestPKnight]

This... this is art. Submitting a PR to the Claude Code repo to add the actual Claude Code source code.

[Leon Lin @LexnLin]

IT WORKED.

opensource full claude code soon.

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

c99.php ♥️

[CR1337 @CR1337]

Kevin Mitnick definitely had the best business card of all time

[Simone Margaritelli @evilsocket]

lol https://t.co/zHZ1nKOedW

[Anthropic @AnthropicAI]

On December 8, the Perseverance rover safely trundled across the surface of Mars.

This was the first AI-planned drive on another planet. And it was planned by Claude.

[Have I Been Pwned @haveibeenpwned]

New breach: A reincarnation of BreachForums was breached in Aug before being taken down by law enforcement agencies in Oct. Data included 672k unique email addresses across user, post and private message tables. 53% were already in @haveibeenpwned. More: https://t.co/oHP4R1c3vG

[Grummz @Grummz]

Razer announced Project AVA at CES and is taking pre-orders.

Dude...it's waifu tech. Hologram.

[Daniel Lockyer @DanielLockyer]

StackOverflow has so little traffic now that they're going to be hosting on a $5 VPS

[Simone Margaritelli @evilsocket]

150 days after initial disclosure, here is the writeup (link in the comments to make the algo happy).

TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering

[Peter Girnus 🦅 @gothburz]

Last quarter I rolled out Microsoft Copilot to 4,000 employees.

$30 per seat per month.

$1.4 million annually.

I called it "digital transformation."

The board loved that phrase.

They approved it in eleven minutes.

No one asked what it would actually do.

Including me.

I told everyone it would "10x productivity."

That's not a real number.

But it sounds like one.

HR asked how we'd measure the 10x.

I said we'd "leverage analytics dashboards."

They stopped asking.

Three months later I checked the usage reports.

47 people had opened it.

12 had used it more than once.

One of them was me.

I used it to summarize an email I could have read in 30 seconds.

It took 45 seconds.

Plus the time it took to fix the hallucinations.

But I called it a "pilot success."

Success means the pilot didn't visibly fail.

The CFO asked about ROI.

I showed him a graph.

The graph went up and to the right.

It measured "AI enablement."

I made that metric up.

He nodded approvingly.

We're "AI-enabled" now.

I don't know what that means.

But it's in our investor deck.

A senior developer asked why we didn't use Claude or ChatGPT.

I said we needed "enterprise-grade security."

He asked what that meant.

I said "compliance."

He asked which compliance.

I said "all of them."

He looked skeptical.

I scheduled him for a "career development conversation."

He stopped asking questions.

Microsoft sent a case study team.

They wanted to feature us as a success story.

I told them we "saved 40,000 hours."

I calculated that number by multiplying employees by a number I made up.

They didn't verify it.

They never do.

Now we're on Microsoft's website.

"Global enterprise achieves 40,000 hours of productivity gains with Copilot."

The CEO shared it on LinkedIn.

He got 3,000 likes.

He's never used Copilot.

None of the executives have.

We have an exemption.

"Strategic focus requires minimal digital distraction."

I wrote that policy.

The licenses renew next month.

I'm requesting an expansion.

5,000 more seats.

We haven't used the first 4,000.

But this time we'll "drive adoption."

Adoption means mandatory training.

Training means a 45-minute webinar no one watches.

But completion will be tracked.

Completion is a metric.

Metrics go in dashboards.

Dashboards go in board presentations.

Board presentations get me promoted.

I'll be SVP by Q3.

I still don't know what Copilot does.

But I know what it's for.

It's for showing we're "investing in AI."

Investment means spending.

Spending means commitment.

Commitment means we're serious about the future.

The future is whatever I say it is.

As long as the graph goes up and to the right.

[International Cyber Digest @IntCyberDigest]

Welp

[Who said what? @g0njxa]

Confirmed rumours about targeting Rhadamanthys, customers messaged by Dutch Police, associated domains displaying a seized banner

#Endgame 🐉

[YesWeHack ⠵ @yeswehack]

The solution to our latest Dojo challenge, Chainfection, is out!

See how an SQL injection and path traversal were chained to achieve remote code execution (RCE). 👀

Full write-up here 👇
https://t.co/qoOAi0iDh4

[YesWeHack ⠵ @yeswehack]

We have our monthly Dojo champions! 🏆

Massive congrats to Flavius, dev_urandom and vh for solving Chainfection - you’ve earned yourself a @yeswehack swag pack🎁

Keep an eye on your mailbox 📬

Didn’t win this time? Stay tuned: https://t.co/FFtBrOkn8W

#BugBounty #CTF

[Flavius @iamflavius]

@yeswehack Thank you so much for the challenge and for the swag!!!

[Nicolas Krassas @Dinosn]

Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control https://t.co/OCETBadFSL