Matt Culbert

Go draw something. Human art will always be better than computer art

[Matt Culbert @MattCulbert]

Went birding

[Signal @signalapp]

Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.

https://t.co/VdWe9uhi8p

[Sarah Fletcher @fletc117]

please help if you can, this perfect gentleman needs emergency surgery to amputate his necrotic hind leg 😢

[Nathan McNulty @NathanMcNulty]

Defender AV's ASR rules really are fantastic, great way to break attacker tools while still allowing your apps to work

I need to update my blog, but the core is there - KQL queries to help build your allow lists and get it done

https://t.co/Di1lfwkrWD

Some lessons learned 🧵

[Matt Culbert @MattCulbert]

@SpaceKoala Btw its “wreaks” not “wrecks” :) a wreck is “something cast up on the land by the sea”

[Rep. Mike Levin @RepMikeLevin]

There is no world in which this is okay.  

Supreme Court Justice Samuel Alito did not recuse himself from cases involving Trump’s Treasury Department while his own son was secretly working there as a political appointee and attorney. 

His son's employment was hidden so thoroughly that his name appears nowhere on the Treasury Department website, he has no public resume, and his bar listings are outdated. 

If Alito had recused himself, the secret would have come out. He didn’t recuse himself. 

This is a clear conflict of interest, and the American people deserved to know about it. 

The federal recusal standard is clear: a justice must step aside in any case where there is a reasonable basis to question whether he or she can be impartial. A justice ruling on cases involving the department where his son works fails that test. The Treasury Department sits at the center of some of the biggest legal fights of this administration, and challenges to Trump’s $1.776 billion January 6 slush fund could be headed to the Court next. 

The Supreme Court is the only court in America with no binding code of conduct. That is completely unacceptable, and it has to change NOW. 

Congress controls the Power of the Purse, and therefore the Court’s funding. If the Court will not adopt a binding code of conduct with real recusal review on their own, I support withholding their funding until they do. 
 https://t.co/FV2Tkpz7Dk

[Taylor Lorenz @TaylorLorenz]

This is what these social media ID verification/age verification laws are really about, and you’re an idiot if u think any of this is about “protecting children.”

[Pope Leo XIV @Pontifex]

The apparent objectivity of the responses these systems provide can lead us to overlook the fact that they reflect the cultural assumptions of those who designed and trained them.

[Pope Leo XIV @Pontifex]

Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas

[More Perfect Union @MorePerfectUS]

A judge has ruled that corporations can vote in some Delaware elections.

Delaware Superior Court Judge Craig Karsnitz said the town of Fenwick Island was not diluting human votes by allowing companies ​and other legal entities that own property to cast votes in municipal elections.

These "legal entities" and corporations make up about 12% of registered voters in the town.

In total Delaware has far more ​corporations chartered in the state than residents.

Judge Karsnitz rejected the constitutional arguments of the ACLU, including the claim that "entity" or corporate voting dilutes the political power of living people.

[David Grossman @davidgross_man]

Here's a quote from 2014 from a member of the IDF's tech/intelligence Unit 8200 regarding its targeting of queer Palestinians

[Adam Chester 🏴‍☠️ @_xpn_]

Love this article. "I don’t fear loss of status, I almost think this is some kind of psyop to sell agents". Been saying similar for a while, this is the first time I can remember new tech being sold based on FOMO and doomsday to this level. Previously it's been optimism based. It works of course (social media proving the point), plus there are benefits to pushing FOMO to coerce people into handing over new training data.. But if the aim is mass adoption, its short sighted.

[onion person @CantEverDie]

jan 6 is going to be one of those events historians look back at in 100 years questioning how the hell absolutely no one was punished for this, and instead rewarded for it 10 times over

[Mike Levin @MikeLevin]

This New York Times piece is worth your time. Here’s what is happening, as simply as I can put it.

Back in January, Trump sued the IRS, an agency he controls, demanding $10 billion over the leak of his tax returns a number of years ago.

IRS lawyers did their jobs. They wrote a memo laying out the defenses that could beat the suit, including the fact that Trump filed too late. His own lawyer was in court when the leaker pleaded guilty in October 2023, more than two years before Trump sued.

The Justice Department never showed up to court. Never argued back. Never used the defenses sitting on their desk.

The judge got suspicious and ordered both sides to explain whether they were actually opposing each other or just colluding. The day before that brief was due, Trump dropped the suit.

Same day, his Justice Department announced a $1.776 billion taxpayer-funded “anti-weaponization fund.” 

Trump gets a formal apology. The IRS agrees to drop any audits of him and his family, even though a 2024 Times report found a loss in an ongoing audit could cost him over $100 million.

The acting Attorney General, Trump’s former criminal defense attorney, picks the five commissioners who decide who gets paid. Trump can fire any of them. Proud Boys and Oath Keepers are not ruled out.

This is the most corrupt thing I’ve ever seen from an American president.

Where in the hell are my Republican colleagues?

https://t.co/La0nlLuz1r

[Heidi Matthews @Heidi__Matthews]

Flotilla participants are arriving at Istanbul airport. This is what Israel military and prison personnel did to them.

[Dominic Chell 👻 @domchell]

If you’re not up to speed with the risks of malicious vscode extensions, just a reminder, we blogged about this 3 years ago - https://t.co/JSbFwV5NoO @MDSecLabs

[Josh Terrill @joshterrill]

I broke Kindle's DRM protection tonight through a mix of static and dynamic analysis. AES key is derived from accountSecrets, kindle device ID, and voucher path. Book is decrypted in parts using OpenSSL from Ion blobs and then decompressed with LZMA.

[Rebane @rebane2001]

OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND STILL WORKS 💀💀

[Tyler McBrien @TylerMcBrien]

BLANCHE: "The United States...is hereby FOREVER BARRED and PRECLUDED from prosecuting or pursuing...examinations or similar or related reviews" against Trump "or related or affiliated individuals," including family members or related companies and trusts.

[Matt Culbert @MattCulbert]

It never gets old watching people waste time as they argue with a chat bot. It never occurs to these people to just go find a source of their own that proves whatever point they want to make.

[⚡️🌙 @dystopiabreaker]

@grok @Dark_Goldenrod @tkanarsky you absolutely can register 127 ranges in public dns, and that’s exactly what the attacker does

[Matt Culbert @MattCulbert]

Choosing to use an LLM to write this blog post was definitely a choice... A good one? No.

I was trying to figure out why the writing felt so disjointed and then the blog hits me with “Its not just X, its Y”

[Cloudflare @Cloudflare]

Cloudflare's security team spent the last few weeks testing Anthropic's Mythos against fifty of our own repositories. What we learned about offensive AI, why faster patching is the wrong reaction, and what the architecture around vulnerabilities has to look like next. https://t.co/RSrRtIhgaV