Samuele⁷ 👻🇮🇹

Computer Science student @SapienzaRoma
#BTSArmy

[BeyondMemory Intelligence. @beyondmemory_io]

Well, well, well. The public JSON formatter sites your developers paste production data into have been quietly publishing every paste for about seven years. Naturally, we read all seven years of it.

200,000+ documents. Cloud keys, SSH keys, payment API keys, whole tax returns with SSNs, people's full identities, bank balances. Nobody hacked anything. People pasted it in to make it look tidy, as you do.

Full writeup below. Yes, it's as bad as it sounds.

[Mario Zechner @badlogicgames]

if we see this, we know

[UwU Underground @uwu_underground]

Saw ppl sayin they would never install kernel anti-cheat on their gaming rig again today

2 replies later same guy talks bout runnin OpenClaw

Bro rejected kernel cheats, then installed a supply-chain Ouija board because automated copy-paste curl 'felt safer than Vanguard'

CSTP

[glunk @glunkinator]

Who at Google is drawing these? I really hope they aren't AI generated because I really love them

[vx-underground @vxunderground]

cybersecurity

[Daniel Cuthbert @dcuthbert]

“Non-technical teams are now shipping production code and many of our workflows are being automated. The pace of what's possible with a small, focused team has changed dramatically, and it's accelerating every day”

[HSVSphere @HSVSphere]

Casual reminder that these posts are from american founders who can't sell your data and are salty because of it. The EU doesn't force you to put a cookie popup for functional cookies :)

Abide by my GDPR information deletion requests and stay mad.

[vx-underground @vxunderground]

CVE-2026-31431 a/k/a CopyFail

> Linux LPE
> Description sounds like AI slop
> Exploit is legit
> Impacts every Linux kernel from 2017 - Now
> Proof-of-concept released
> It's Wednesday?

https://t.co/FXgjWW7lOV

[mert @mert]

--dangerously-skip-permissions by claude was godly marketing bait for mythos to now hack a bunch of vibecoded apps

95D chess

[vx-underground @vxunderground]

Look at this and tell me God exists

[vx-underground @vxunderground]

> Notepad++ says infra compromised
> Suspects Chinese state-sponsored hackers
> "Why would China hate Notepad++????"
> Look inside

[Turk Bondsman @Hacharukuji]

If you're a zoomer your tech literacy level is determined by whether or not you tried to install Minecraft mods as a child

[❄️ @__Tkat__]

I forked Ghostty so I could set subway surfers as my terminals background

[faulty *ptrrr @0x_shaq]

For the embedded security enthusiast,
here’s a list of resources of vuln researchers inspecting the TP-Link security camera(s):

>By @evilsocket : TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering : https://t.co/Iv5rjtZkqH

>By (me🤓): Exploiting n-day in Home Security Camera: https://t.co/pu03e6NV3L

>By @Watchful_IP : Link (Tapo) C210 cloud camera: bootloader vulnerability and firmware decryption : https://t.co/7Dt8GcvF8s

>By @two06 : Hacking a Tapo TC60 Camera : https://t.co/Q1DdIZrHvZ

>By @drmnsamoliu : Tapo C200 IP camera research project : https://t.co/pmgPsK8dFZ

[смех @0x6D6172636F]

🫠

[vx-underground @vxunderground]

tl;dr
> hello i wanna disable bitlocker
> ok but we gotta prompt uac this is bad
> no im explorer.exe, check for urself
> *windows checks*
> hmmm, says ur explorer.exe in peb
> checks_out.exe
> uac prompt bypassed
> disable bitlocker stuff

very cool, thanks windows

[AIfredo 0rtega @ortegaalfredo]

Arbitrary code execution inside Google's Nano Banana Pro:

[(Gay) Signal @NopeSignal]

Some poor 5th grade teacher, grading the worst WW2 paper ever turned in when it suddenly starts talking about World of Tanks and Nord VPN for no reason.

[Gabriel Dechichi @gdechichi]

- $15 billion dollar company
- ships entire browser with their application cause "native GUI too hard bro"
- javascript so devs don't have to reason about memory
- leaks memory anyway
- "let's just restart the application when we go above 4 GB"

this is a new rock bottom