Collin Goedken

Cyber Security - threat hunt and detection

GCIH, GPEN, GREM

[Cloudflare @Cloudflare]

We're opening the waitlist for our Monetization Gateway, which will allow you to charge for any web page, dataset, API, or MCP tool behind Cloudflare. The charges will settle in stablecoins over the x402 open protocol. https://t.co/pvICtEIixj

[vx-underground @vxunderground]

Yeah, so pretty much, like, there is this really sketchy company in Israel named "Paragon". Paragon sells a "product" called GRAPHITE.

Let me explain the background and why this is very silly.

GRAPHITE spyware which allows "customers" to remotely access peoples cell phones and monitor their instant messaging applications such as WhatsApp

It is spyware. It is sometimes called Mercenary Spyware because it is primarily used by governments to spy on political enemies, journalists, and activists.

Very little is known about Paragon, GRAPHITE, and their "customers". However, it was publicly noted by the Trump administration in January, 2025, to be purchased by the United States government and to be used to aid ICE.

Furthermore, in September 2025 the Trump administration noted the usage of Graphite to aid the United States against "domestic terrorist organizations" such as "ANTIFA".

ICE acting director Todd Lyons noted using GRAPHITE to monitor anti-ICE protestors to track "ringleaders and professional agitators".

Citizen Lab and other civil rights organizations have documented the usage of GRAPHITE against individuals in Australia, Canada, Cyprus, Denmark, Israel, Singapore and (unsurprisingly) the United States. It is believed the Canadian government actively uses GRAPHITE in Ontario.

Okay, so why does all of this matter? Yeah, it's super fucked up. But today representatives from Paragon accidentally leaked GRAPHITE screenshots ... ON LINKEDIN. Dawg, that image in the background IS GOVERNMENT FUCKING SPYWARE

It shows phone numbers in Czechia, apps, accounts, media on the phone, "interception status", and phone numbers extracted. THEY LEAKED IT BY ACCIDENT ON LINKEDIN WHILE TAKING SELFIES

[Florian Roth ⚡️ @cyb3rops]

Here’s how I currently see software development.

Imagine a farmer who grows cabbage.

He has one large field and several smaller ones. For years, a group of farm workers harvested the cabbage by hand. It took them a full week to clear the big field. They worked carefully. Sometimes a cabbage was damaged, but overall the quality was good.

Then the farmer discovers a machine.

The machine harvests the entire field in one hour and delivers all the cabbage to the barn.

It’s not perfect. Out of 1,000 cabbage heads, maybe 30 or 40 are damaged. The workers point this out immediately:
“When we do it by hand, only 10 get damaged. Our work is higher quality.”

They’re right.

But the farmer replies:
“You need a week for one field. The machine needs one hour.”

Now the machine can harvest:
the big field in the morning
the next field an hour later
then another
and another

Eight, ten, maybe twenty fields per day.

The farmer doesn’t ask the workers to compete with the machine anymore. He gives them a new job:
Stand in the barn. Pick up each cabbage. Check it quickly. Throw out the damaged ones.

That’s the new bottleneck.

And maybe, soon, the farmer buys another machine that does even that inspection automatically.

The workers are still correct: hand-harvested cabbage is often better.
But it no longer matters economically.

The speed difference overwhelms the quality difference.

This is where software development is heading.

Engineers are right when they say manual coding can be higher quality in many situations.
But it is orders of magnitude slower.

That gap is so large that even imperfect AI-generated code wins.
And the quality improves every month.
If it doesn’t improve, it gets cheaper.
If it doesn’t get cheaper, it gets smaller.
And once it’s small enough, it runs on your own hardware.

There is no visible ceiling yet.

So the role changes.

From writing code
to reviewing code
to supervising systems that write and review code.

Like the farm workers in the barn.

Not because their work was bad.
But because the machine changed the economics.

[Olaf Hartong @olafhartong]

This is huge news, #sysmon going native in Windows 11 next year.

https://t.co/Bmb7bTyPX3

More cool stuff on custom logging coming this week. Watch this space 😎

[Andrej Karpathy @karpathy]

Agency > Intelligence

I had this intuitively wrong for decades, I think due to a pervasive cultural veneration of intelligence, various entertainment/media, obsession with IQ etc. Agency is significantly more powerful and significantly more scarce. Are you hiring for agency? Are we educating for agency? Are you acting as if you had 10X agency?

Grok explanation is ~close:

“Agency, as a personality trait, refers to an individual's capacity to take initiative, make decisions, and exert control over their actions and environment. It’s about being proactive rather than reactive—someone with high agency doesn’t just let life happen to them; they shape it. Think of it as a blend of self-efficacy, determination, and a sense of ownership over one’s path.

People with strong agency tend to set goals and pursue them with confidence, even in the face of obstacles. They’re the type to say, “I’ll figure it out,” and then actually do it. On the flip side, someone low in agency might feel more like a passenger in their own life, waiting for external forces—like luck, other people, or circumstances—to dictate what happens next.

It’s not quite the same as assertiveness or ambition, though it can overlap. Agency is quieter, more internal—it’s the belief that you *can* act, paired with the will to follow through. Psychologists often tie it to concepts like locus of control: high-agency folks lean toward an internal locus, feeling they steer their fate, while low-agency folks might lean external, seeing life as something that happens *to* them.”

[Cindy Sridharan @copyconstruct]

The detailed AWS incident report is out, and it’s worth a read

- DNS records managed by 2 systems; a race condition led to regional record getting unset
- EC2 lease establishment was borked as it depends on DynamoDB
- fluctuating NLB health checks leading to EC2 DNS entry purges

[Florian Roth ⚡️ @cyb3rops]

About the #Signal outage:

In information security we look at three principles: secrecy, integrity, and availability.
Signal’s outage affected only one of them: availability. The relay servers were down, so messages couldn’t move. But nobody could read them.

Signal is open source and its end-to-end encryption has been reviewed by independent experts for years. The messages could sit on AWS, Google Drive, or even Reddit - still unreadable to anyone except sender and receiver

Other messengers claim end-to-end encryption, but they’re closed source. You can’t verify what happens before encryption - you just have to trust them.

With Signal, you don’t have to trust. You can verify.
It’s still the best option from my pov.

[Michi @NekoMichiUBC]

If you're making more typos in iOS lately, you're not going crazy - it's a bug in iOS that causes the keyboard to randomly insert the wrong letter instead of what you typed.

[Smukx.E @5mukx]

Free Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques

https://t.co/yFs6Rwjk9X

[Alex Prompter @alex_prompter]

🚨 DeepSeek just did something wild.

They built an OCR system that compresses long text into vision tokens literally turning paragraphs into pixels.

Their model, DeepSeek-OCR, achieves 97% decoding precision at 10× compression and still manages 60% accuracy even at 20×. That means one image can represent entire documents using a fraction of the tokens an LLM would need.

Even crazier? It beats GOT-OCR2.0 and MinerU2.0 while using up to 60× fewer tokens and can process 200K+ pages/day on a single A100.

This could solve one of AI’s biggest problems: long-context inefficiency.
Instead of paying more for longer sequences, models might soon see text instead of reading it.

The future of context compression might not be textual at all.
It might be optical 👁️

github. com/deepseek-ai/DeepSeek-OCR

[Collin Goedken @pcapsnocap]

@adamdoyle @cybertruck What was the install cost?

[recteq @recteq_official]

🚨Tailgate Takeover Grill Giveaway🚨

We decided to up the ante and offer up an even BIGGER prize. 🤯 That's right, this week's winner will bring home our latest and greatest: the Flagship 1600 Starter Bundle PLUS a front-folding shelf with your choice of college team logo, MLB® Logo, or art from our design library!

HOW TO ENTER:
1️⃣ Follow @recteq_official
2️⃣ Share the original post from our @recteq_official page
3️⃣ Tag up to 5 friends (each tag = 1 extra entry)

📢 Winner will be announced on Monday, October 6th so make sure you’re following us! Winners will also be contacted via email.

Want to check out our full portfolio of Collegiate Series logos, MLB® Logo, or art from our design library click here: https://t.co/TYk326XzO1

#giveaway #recteq #bbq #grilling #explorepage #sports #collegesports #football

[The Humanoid Hub @TheHumanoidHub]

Dynamic control trained at SUSTech’s ACT Lab in Shenzhen.

[KreekCraft @KreekCraft]

Yesterday the office of Congressman Ro Khanna reached out to @RealSchlep and I concerning Roblox's child safety issues and moderation concerns.

Schlep and I shared the information we have along with instances of failed policy on Roblox's end. (E.g Bathroom Simulator) 🧵👇

[Dexerto @Dexerto]

A YouTuber who catches predators in Roblox has had his account banned by the platform

Roblox sent Schlep a cease-and-desist letter, threatening to sue him if he continues

[Schlep @RealSchlep]

Parents are waking up to what’s on Roblox

[ZachXBT @zachxbt]

1/ An unnamed source recently compromised a DPRK IT worker device which provided insights into how a small team of five ITWs operated 30+ fake identities with government IDs and purchased Upwork/LinkedIn accounts to obtain developer jobs at projects.

[NASA JPL @NASAJPL]

There's a new interstellar comet in the neighborhood!

Known as 3I/ATLAS, this comet poses no threat to Earth – but it does provide a rare opportunity to study an object that originated outside of our solar system: https://t.co/7ihCiHi91t

[Psyware @Psy_ware]

This guy made a video bypassing a lock the company responds by suing him, saying he’s tampered with them.

So he orders a new one and bypasses it right out of the box.

[Microsoft Edge @MicrosoftEdge]

i OnLy UsE yOu To DoWnLoAd ChRoMe