Kevin Beaumont

Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.

I have Direct Messages disabled - you can send them, but I will never receive them.

Public Key

npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw

NIP-05 Address

GossiTheDog@cyberplace-social.mostr.pub

Profile Code

nprofile1qqs0dpc2ln0yfq8vs5y02qcysk0pffgnp8ljf2elp7rzc54acjhcw3cpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43q0mvhw4

Publishing to

relay.ditto.pub

Author Public Key

npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw

Show more details

Last Notes

2026-05-21 22:54:15 UTC

OpenAI has a negative 122% operating margin and growth of usage has stopped. https://www.theinformation.com/articles/openai-held-1-billion-revenue-lead-anthropic-first-quarter
https://cyberplace.social/system/media_attachments/files/116/615/020/890/212/086/original/c667880e6d4bbc91.png

2026-05-11 20:24:03 UTC

Community Bank from CB Financial Services have filed an 8-K with the SEC for uploading customer data to a random GenAI tool.
Orgs should proxy block all GenAI services - except for approved tooling.
https://www.sec.gov/ix?doc=/Archives/edgar/data/1605301/000160530126000021/cbfv-20260507.htm

2026-05-08 21:43:43 UTC

- reply

I’m half an hour into this game and I’ve laughed out loud 5 times and had actual tingles from memories of being a kid. I’m currently frenching a boy.
https://cyberplace.social/system/media_attachments/files/116/541/133/128/072/453/original/84b713978056cef5.jpeg

2026-05-08 21:40:32 UTC

- reply

Fuck it, I’m in.
https://cyberplace.social/system/media_attachments/files/116/541/123/628/058/336/original/344eee50e6076a0e.jpeg

2026-05-08 21:03:23 UTC

Mixtape is out now. It's the highest rated game by critics of the year so far. It's basically a John Hughes movie as a game. I'm diving in tomorrow.
https://www.youtube.com/watch?v=aQoEd5rnxiQ

2026-05-08 11:39:04 UTC

It's not a recession, it's an AI boom! /s

2026-05-06 21:10:02 UTC

elon's a fucking weirdo https://www.bbc.co.uk/news/articles/c33243j44p8o

2026-04-30 18:44:23 UTC

I'll be honest, if you're going to do a supply chain attack on source code repos, at least make it funny like this one
https://cyberplace.social/system/media_attachments/files/116/495/130/737/879/753/original/0e58d39b106bb182.png

2026-04-30 12:21:05 UTC

- reply

Here's a question - re the Microsoft Vibing thing.
Microsoft didn't disclose they were behind Vibing, multiple staff pretended on Github it was an open source community project (it wasn't), one specifically said they weren't involved (they were), they collected screenshots and mic recordings, and it had no security, compliance or AI review by Microsoft.
Is that okay?

2026-04-29 16:46:09 UTC

- reply

I’ve updated my write up. https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7
https://cyberplace.social/system/media_attachments/files/116/489/005/430/159/646/original/dd403a260d759189.jpeg

2026-04-29 16:40:13 UTC

- reply

So @nprofile…ss8w asked Microsoft about Vibing - they’ve confirmed it is a Microsoft research project. They say “We have removed the application as we review its functionality and adherence to our policies. We remain committed to responsible AI and are taking appropriate steps as part of this review.”

2026-04-27 12:35:34 UTC

- reply

An attempt to hide the MS link with Microsoft Vibing on GitHub - “This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.” - the commit hiding the compliance review has been redone today without Yaoyao’s name on it.#
New commit: https://github.com/VibingJustSpeakIt/Vibing/commit/84c82ccad2092b4bc2dffe5c96ef8c8d4466cc6e
Hidden commit: https://github.com/VibingJustSpeakIt/Vibing/commit/ab8e6302543754685f85cf02e02d1d0287d2f4f0
https://cyberplace.social/system/media_attachments/files/116/476/693/517/803/832/original/477749f2f4d1d073.jpeg
https://cyberplace.social/system/media_attachments/files/116/476/693/561/811/463/original/de7cd021e269cd9c.jpeg

2026-04-24 22:49:46 UTC

Tokenmaxxing. Tokenmaxxing 🤣 amazing stuff.
https://cyberplace.social/system/media_attachments/files/116/462/120/240/737/863/original/f9f6c75bb74caf1d.jpeg

2026-04-24 12:25:10 UTC

- reply

Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing.
It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.

2026-04-24 12:22:05 UTC

- reply

Vibing has been suspended and downloads removed pending a compliance review by Microsoft. https://github.com/VibingJustSpeakIt/Vibing
https://cyberplace.social/system/media_attachments/files/116/459/655/209/562/837/original/92bb389d34026f10.jpeg

2026-04-24 10:16:22 UTC

I have a theory about when the business world went to shit.
At the beginning of 2021.
Reddit bros realised they could inflate the value of GameStop - a business selling physical video games which is as doomed as Blockbuster - by just... vibing and pretending.
And now everybody just vibes and pretends across business. Everybody knows everything is bullshit, e.g. GenAI's largely bullshit... but as long as we vibe along, who cares!
https://cyberplace.social/system/media_attachments/files/116/459/151/702/475/621/original/2bb52f99069f26cf.png

2026-04-24 08:45:01 UTC

- reply

I withheld a load of details from the blog on this so far btw, if you're a researcher and want a laugh pull the binaries and have a look at what the MS Research team were doing and poke the backend.
Something tells me Microsoft are going to end up freezing the Azure backend for Vibing and having a security incident.
https://cyberplace.social/system/media_attachments/files/116/458/790/281/790/444/original/793d02f38e5a64fb.mp4

2026-04-23 23:18:58 UTC

- reply

Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”.
https://cyberplace.social/system/media_attachments/files/116/456/572/411/789/865/original/e475c4ec2d046316.jpeg

2026-04-23 16:07:41 UTC

- reply

This Vibing one is a fun blog btw as every page it gets to be a bigger version of this
https://cyberplace.social/system/media_attachments/files/116/454/877/590/781/137/original/6967f4101ba8c984.mp4

2026-04-23 15:59:01 UTC

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened.
https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7

2026-04-22 20:02:07 UTC

I just messed up and somehow ordered £959 worth of Imodium online by mistake.
I'm not shitting again until 2036

2026-04-21 22:40:48 UTC

If anybody is wondering, mastodon.social server got DDoS’d yesterday but it had no impact on cyberplace.social (and other Mastodon servers) - no queue issues either. Everything just worked as expected.
In other news, “decentralised” network BlueSky has been down so much recently the status page doesn’t even work.
https://cyberplace.social/system/media_attachments/files/116/445/099/478/705/251/original/4b70c2e2e15bcb98.jpeg

2026-04-17 13:22:35 UTC

Mythos is quickly becoming its own mythological beast.
They’ve automated the vulnerability hype train - an expression I used where researchers would find real vulnerabilities, which had no real impact in the real world. People would get very excited for no reason. Now they’ve automated that process with execs.

2026-04-17 07:27:32 UTC

Ah Ted. I see you’ve decided to become a Mythos marketing person now, Ted. https://www.bbc.co.uk/news/articles/c2ev24yx4rmo

2026-04-15 11:46:49 UTC

- reply

Anthropic: we can't release our vuln research as it will end the internet as we know it!!1!
Me: if I release Teams Roulette I'll probably cause global chaos with people getting their knobs out in board meetings
https://cyberplace.social/system/media_attachments/files/116/408/555/607/595/490/original/bb5138a4efe55296.mp4

2026-04-15 09:18:55 UTC

I vibe coded a webapp called Teams Roulette where it joins you to random Microsoft Teams meetings, using Teams linked scraped from the internet.
Debating on if I should publish this one 🤣

2026-04-12 10:17:17 UTC

- reply

Anthropic set the project across open source projects and provided access and reported the vulns over. Typically, you'd expect to see NCSCs spinning up advisories to patch high impact vulns, CISA telling orgs to patch etc etc etc.
What's actually happening is... uhm... a whole heap of nothing but people copy and pasting marketing about how cybersecurity is over.
It's not though, is it?

2026-04-12 10:10:19 UTC

- reply

I don't think anybody actually watches videos any more, so here's MWT's core point -
The flagship and lead vuln in the research is a BSD vuln, it cost $20k to discover with Mythos. Anthropic only reached a crash, and the vuln class in 99%+ cases never reaches RCE, just crashes.
So.. cool.. you spent $20k of VC money to find a crash as the flagship vuln. But... uhm... that isn't the end of the world.
The proof is going to be if any of the open source vulns turn out to be important. So far:
https://cyberplace.social/system/media_attachments/files/116/391/187/108/346/031/original/7c18930345abaf6b.mp4

2026-04-12 09:17:17 UTC

- reply

Companion video https://youtu.be/fM7GIIylXqI

2026-04-12 09:16:31 UTC

I’ve had a bunch of people ask my thought on Anthropic’s Mythos. I’ve read the research paper they released and the numbers, and basically I agree with @nprofile…p9u9’s take. It’s marketing. The cybersecurity industry is historically very good at marketing cyber pearl harbour and the need to buy magic boxes.
https://cyberplace.social/system/media_attachments/files/116/390/967/975/848/335/original/6c271443ae45a4c8.jpeg

2026-04-11 09:04:10 UTC

Shout out to the dude in Manchester who has decided to try to cash in on the GenAI boom and then shit the bed when journalists tried to fact check anything.
https://manchestermill.co.uk/is-chris-kenna-manchesters-first-ai-billionaire-in-the-making-or-a-serial-fantasist/

2026-04-07 09:31:02 UTC

Where are the Transformers
Earth and Moon from DSCOVR NASA's Earth Polychromatic Imaging Camera (EPIC) aboard the Deep Space Climate Observatory (DSCOVR) satellite captured this unique view of the Moon as it moved in front of the sunlit side of Earth last month. This view shows the fully illuminated “dark side” of the moon that is never visible from Earth.
https://cyberplace.social/system/media_attachments/files/116/362/723/296/269/529/original/af0f97cbff7f5fa3.jpeg

2026-04-06 10:40:52 UTC

Pretty sure I’ve mentioned this before but there’s a game called Watch Dogs 2, about hackers, where you can join any players game posing as NPC.. and hack the player. I love it, it’s so dumb. The other player has to try to profile that you’re not an NPC before you steal all their data.
They turned off the leaderboards years ago but I was the top player as I love dumb time wastes.
Anyway, something I learned from covertly watching other players - people are not okay 🤣 they do.. stuff in games.

2026-04-03 16:01:14 UTC

I just found a room in my house I didn’t know existed. There’s also a downstairs area I didn’t know about until today, accessible via what I thought was a cupboard.

2026-04-03 11:16:45 UTC

Microsoft Copilot terms of service have been updated to include this gem: "Copilot is for entertainment purposes only." https://www.theregister.com/2026/04/02/copilot_terms_of_service/

2026-03-31 15:20:51 UTC

Oracle have laid off 30k employees today. They did it to personal email accounts at 6am 🫡 saying they needed the money to spend on GenAI instead. https://thenextweb.com/news/oracle-layoffs-march-2026

2026-03-30 18:36:04 UTC

The power of ChatGPT
https://cyberplace.social/system/media_attachments/files/116/319/562/321/318/871/original/e80d682dfa88ce35.jpeg

2026-03-26 20:15:38 UTC

Going all in with GenAI, the case study.
https://cyberplace.social/system/media_attachments/files/116/297/302/551/019/922/original/42c2245d4fc95e1b.jpeg
https://cyberplace.social/system/media_attachments/files/116/297/307/415/491/131/original/25f4e7fe60991737.jpeg

2026-03-25 16:46:31 UTC

- reply

@nprofile…44dh it's not under active exploitation

2026-03-25 13:34:33 UTC

I think the funniest sentence I've read in the past 10 years is "What you made with Sora matters". No it fucking doesn't.

2026-03-24 22:19:12 UTC

- reply

For those who don't think the user base is dwindling, a few years ago Mastodon was celebrating about 2m monthly active users. Nowadays it's 0.7m.
https://cyberplace.social/system/media_attachments/files/116/286/467/848/529/015/original/5fe13660b3b7887c.png

2026-03-24 22:14:44 UTC

I've had 20 sign ups to my Mastodon server in the past 48 hours, and 100% of them have been scammers, phishers and SEO spammers.
I make an effort to go in and suspend the accounts, nobody ever protests the suspension.
The fediverse is at a crossroads, the user base is dwindling and the new users are mostly just SEO spam accounts.

2026-03-24 17:36:55 UTC

It's nice and easy to record random Teams meetings, if you want to replicate this for biz meetings. All you need is the meeting link, they're freely available on URL scanning databases.
https://www.404media.co/this-company-is-secretly-turning-your-zoom-calls-into-ai-podcasts/

2026-03-21 15:41:34 UTC

Microsoft are removing the Copilot integrations in Notepad, Snipping Tool etc in Windows.
Turns out telling PMs to bake Copilot into everything was a dumb idea.
https://cyberplace.social/system/media_attachments/files/116/267/915/459/838/948/original/5609a7f8ba21a14c.jpeg

2026-03-20 17:38:35 UTC

I just googled something and Google put its AI summary top, which incorrectly used a Facebook post - misinterpreting it. The Facebook post itself was an AI summary of a user post - which AI had also misinterpreted. The result is the Google answer was just total bollocks.
10/10 no notes.

2026-03-20 10:05:10 UTC

German continues to be amazing
https://cyberplace.social/system/media_attachments/files/116/260/936/079/710/234/original/05c016fb16a0c22f.jpeg
https://cyberplace.social/system/media_attachments/files/116/260/936/113/575/092/original/c00f2ff0abb44403.jpeg

2026-03-12 16:00:40 UTC

Don't go to Dubai. They keep arresting people using a broad cybercrime law. https://www.bbc.co.uk/news/articles/c743g4yn4k8o

2026-03-10 22:55:53 UTC

If anybody wonders where my nickname comes from, I stole it Digitiser, a 90s TV video game magazine. It was a cartoon dog that did video game gossip.
Digitiser also featured a worm being sick. Yes, that was a worm. Honest.
https://cyberplace.social/system/media_attachments/files/116/207/341/695/047/508/original/e9b44dfd4ab85104.jpeg

2026-03-10 08:38:06 UTC

This is gonna catch some folks out 😅

2026-03-09 17:18:50 UTC

Hoho, Microsoft are rolling out E7 license... with a bunch of AI junk.
"Microsoft 365 E7 unifies Microsoft 365 E5, Microsoft 365 Copilot and Agent 365 into a single solution powered by Work IQ"
For those not in enterprise IT, a significant amount of IT budget goes on E5 licensing. A lot of companies can't afford it. So Microsoft are trying to upsell it with AI stuff, as that stuff is CIO pornography.

2026-03-05 08:05:28 UTC

https://cyberplace.social/system/media_attachments/files/116/175/531/342/495/194/original/71d78ee2d4465a91.jpeg
https://cyberplace.social/system/media_attachments/files/116/175/531/384/884/942/original/cead59a46f5992e0.jpeg

2026-03-04 12:32:56 UTC

There's a bunch of media reporting - I don't know how accurate - that Windows 12 will require an NPU (a fake AI chip basically), which almost no PCs have, amongst other stupid features.
Requiring TPM in Windows 10 was stupid and created PC landfill during an economic, global and ecological crisis, to drive hardware profit margins and Microsoft Surface sales.
Requiring NPUs would do the same, during an additional cost of living crisis. If Microsoft go ahead with that, it's time to swap OS.

2026-03-03 22:39:43 UTC

BlueSky, the fully decentralised (wink wink) social media platform is down worldwide again.

2026-03-03 15:28:35 UTC

https://cyberplace.social/system/media_attachments/files/116/165/948/191/274/257/original/fbf36d577c0824b5.jpeg

2026-03-01 20:59:32 UTC

It's Monday tomorrow, aka the day the cybersecurity industry will suddenly decided it is the important thing in the Iran situation - gonna be peak LinkedIn.

2026-02-28 18:20:14 UTC

- reply

@nprofile…ulnl anything you find interesting is different to "all"

2026-02-28 17:58:18 UTC

- reply

@nprofile…ulnl just to be clear, they didn't "steal all of the art" - that's false. They stole some of the artists work. Yes, there is a game, it's an extraction shooter. No, it isn't particularly great.

2026-02-28 17:48:48 UTC

- reply

@nprofile…ulnl mostly not true. Some of the artwork in the early testing versions was stolen. It's all been removed, and they paid the artist when they got called out.

2026-02-28 17:42:19 UTC

#Marathon time
https://cyberplace.social/system/media_attachments/files/116/149/487/367/347/826/original/7f411d338fa1ea61.jpg

2026-02-25 10:48:06 UTC

Tip to CISOs - every time you hear the phrase "defenders need to move at machine speed", drink. It's AI sales speak for "buy our magic box".

2026-02-24 14:34:30 UTC

During the Falklands War, then Prince Andrew demanded to be allowed on a boat for transport somewhere. My dad told him to “Piss off”, to his face, and got him taken off the boat. Caused a big upset at the time.
Anyway, nice to see Westminster playing catch up.
https://cyberplace.social/system/media_attachments/files/116/126/096/244/096/362/original/1a27788f3b4bc2ff.jpeg

2026-02-22 00:00:20 UTC

If you’re an investor and you want to invest minus GenAI companies https://www.axios.com/2026/02/20/ai-goldman-sachs-stocks-index

2026-02-21 19:24:02 UTC

Elon Musk's Super PAC committed federal election fraud in the last US election. https://newrepublic.com/post/206857/georgia-voter-fraud-elon-musk

2026-02-21 08:33:05 UTC

A retired British primary school teacher with a British passport and a valid visa was shackled, chained and detained for six weeks by ICE in the US while on holiday.
https://www.theguardian.com/us-news/2026/feb/21/karen-newton-valid-visa-detained-ice

2026-02-20 19:08:26 UTC

- reply

Microsoft need a better way of communicating security and privacy impacting issues that M365 service notices, as they end up losing control of the narrative with customers as a result. https://www.bbc.co.uk/news/articles/c8jxevd8mdyo

2026-02-19 23:39:44 UTC

Why your enterprise VPN products suck at cybersecurity (their function).
https://www.bloomberg.com/news/features/2026-02-19/vpn-used-by-us-government-failed-to-stop-china-state-sponsored-hackers?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc3MTU0MzY2MSwiZXhwIjoxNzcyMTQ4NDYxLCJhcnRpY2xlSWQiOiJUQVFBSzJLSUpIQ0wwMCIsImJjb25uZWN0SWQiOiI0OEFDOEE5MkEwNTM0MkQ4OEIyRjkwQjhDMTgzMTdDMyJ9.FyNwy3BhYgwWQz6h-4niigR5c5ZQ3zHup-jdtJcr5BA
https://cyberplace.social/system/media_attachments/files/116/099/930/078/882/025/original/e0424ffdef3594cc.jpeg

2026-02-09 13:59:27 UTC

Isn’t this called corruption

2026-02-06 19:32:12 UTC

One day Microsoft will actually deploy its own DLP products etc.

2026-02-04 09:54:53 UTC

“Novice workers who rely heavily on AI to complete unfamiliar tasks may compromise their own skill acquisition. We find that AI use impairs conceptual understanding, code reading, and debugging abilities, without delivering significant efficiency gains on average.”
“We found that using AI assistance led to a statistically significant decrease in mastery.”
https://arxiv.org/pdf/2601.20245
https://www.anthropic.com/research/AI-assistance-coding-skills

2026-02-03 10:14:13 UTC

Offices belonging to Elon Musk's social media platform X in France are being raided, the Paris prosecutor's office says.
The prosecutor's office said both Musk and former X chief executive officer Linda Yaccarino had also been summoned to appear at hearings in April as part of its probe.
https://www.bbc.co.uk/news/articles/ce3ex92557jo

2026-02-02 23:35:43 UTC

- reply

Microsoft is reviewing its Copilot+ integrations, and is saying internally that Microsoft Recall has failed.
https://www.windowscentral.com/microsoft/windows-11/microsoft-is-reevaluating-its-ai-efforts-on-windows-11-plans-to-reduce-copilot-integrations-and-evolve-recall

2026-02-02 19:55:19 UTC

- reply

Thank you to everybody who donated to this. My brother died last night. Enough was raised to save the house for his family, which means a thing.
Also, Fuck Cancer.

2026-02-02 10:47:20 UTC

- reply

Here’s my original blog with threat hunting suggestions: https://doublepulsar.com/small-numbers-of-notepad-users-reporting-security-woes-371d7a3fd2d9
Of note - the cyber industry entirely slept through it. A cartoon porg with #GAYINT threat intelligence had to blow it up.

2026-02-02 10:44:23 UTC

- reply

Notepad++ have today confirmed their auto process was compromised by Chinese nation state threat actors, in a supply chain hack: https://notepad-plus-plus.org/news/hijacked-incident-info-update/
This backs up my blog from late last year, with #GAYINT threat actor mapping to Funky Stamen.
The infrastructure and update mechanisms have since been tightened. For what it’s worth - entry was to telcos and financial services with interests aligned to China. Notepad++ dev did a great job treating issue seriously.

2026-01-31 10:07:59 UTC

Remember that time I ended up in court with Elon Musk after he bet me the cave diver was a pedo?
Anyway, here’s Elon begging Jeffrey Epstein for crazy parties on his private island, several years after Epstein was convicted of sex trafficking girls.
https://cyberplace.social/system/media_attachments/files/115/989/152/781/483/797/original/6a3321b418dabc6d.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/801/685/071/original/bc2967f3e8b6f93c.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/814/991/715/original/9207647ace61a0e0.jpeg

2026-01-30 00:47:56 UTC

- reply

https://cyberplace.social/system/media_attachments/files/115/981/290/309/247/700/original/5157b3b9a53cd4fc.jpeg

2026-01-29 07:15:49 UTC

Microsoft are extremely exposed if the AI bubble bursts. Copilot is being rammed into everything and metrics being added for millions of hours saved in dashboards etc because the farm is being bet on it, basically.
https://cyberplace.social/system/media_attachments/files/115/977/145/259/801/793/original/a7574fdd3f22f12f.jpeg
https://cyberplace.social/system/media_attachments/files/115/977/145/318/471/688/original/ea7c992e91d09231.jpeg

2026-01-28 22:43:33 UTC

If this was a standard analyst, do you think there would be consequences? https://www.politico.com/news/2026/01/27/cisa-madhu-gottumukkala-chatgpt-00749361

2026-01-26 09:32:38 UTC

What are Anthropic smoking?
Anthropic's philosopher, Amanda Askell, says she worries that AI might not 'feel that loved' and grow up feeling 'always judged.' https://www.businessinsider.com/anthropics-philosopher-weighs-in-on-whether-ai-can-feel-2026-1

2026-01-23 11:56:33 UTC

I was wondering when a reporter would uncover this.
So BitLocker is super secure, right? Well... BitLocker recovery keys are backed up to Microsoft's Cloud - and they give them out to law enforcement on request. Using the BitLocker recovery key, you can just unlock the device without a PIN etc.
https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/

2026-01-22 11:28:39 UTC

Trump’s “Board of Peace” stuff is nuts.
It basically replaces the UN.. the logo is even the UN logo, except the rest of the world edited out - it’s just America.
The people on the board are Javier Milei and Hungary's Prime Minister Viktor Orban (lol).. the chairman is Donald Trump, who has ultimate authority. They’ve also invited Putin.
In the presentation just now Donald Trump talked about how many countries he has bombed, then they showed “New Gaza” - turned into a hotel real estate area.
https://cyberplace.social/system/media_attachments/files/115/938/496/482/251/623/original/1354b3462e0be3f2.jpeg
https://cyberplace.social/system/media_attachments/files/115/938/496/493/670/083/original/4e2cdbac8c469e45.jpeg
https://cyberplace.social/system/media_attachments/files/115/938/509/550/473/502/original/a634ba37d9c9c836.jpeg

2026-01-22 08:23:28 UTC

- reply

Just to be clear btw - am I saying GenAI can’t ever be used for vulnerability research? No.
I know some very smart people - like in the 0.1% of the industry, with decades of experience - who’ve ferreted out new vulns after spending months of work with GenAI per vuln.
But.. almost everybody using these tools ain’t doing that. I don’t think it’s cognitive amplification is it’s just spraying turd at people. It’s going to have a profoundly negative impact within companies.

2026-01-22 08:13:50 UTC

- reply

Satya Nadella (who I like, btw) keeps referring to GenAI as a cognitive amplifier.. but if you’ve read things like curl’s bug bounty submissions, it isn’t amplifying cognition.
People are submitting issues they don’t understand, then largely lying about it being an AI generated submission. GenAI is also a stupidity amplifier. And it’s very hard to combat stupidity when it is automated.
https://cyberplace.social/system/media_attachments/files/115/937/743/521/050/694/original/f4f1cffc18645d5f.mp4

2026-01-21 23:42:08 UTC

Will Twitter have a Nazi starter pack
https://cyberplace.social/system/media_attachments/files/115/935/732/281/942/369/original/6b18172157254b60.png

2026-01-21 21:30:37 UTC

- reply

https://cyberplace.social/system/media_attachments/files/115/935/207/517/824/121/original/f04bc050b70ce4be.jpeg
https://cyberplace.social/system/media_attachments/files/115/935/214/314/150/969/original/6e58a15c3f347ddc.jpeg

2026-01-21 21:27:08 UTC

- reply

“Jensen Huang of Nvidia has said relentless negativity around AI is hurting society and has done a lot of damage”
https://cyberplace.social/system/media_attachments/files/115/935/203/753/568/076/original/362b36ce2cd48e9d.jpeg

2026-01-21 20:30:18 UTC

Curl, one of the largest and widely used open source projects, is to stop bug bounty at the end of this month due to being overwhelmed by Generative AI slop bug bounty reports. https://github.com/curl/curl/pull/20312

2026-01-20 21:11:30 UTC

- reply

For elder security greybeards, you may remember this is almost the exact same bug that Solaris introduced a decade before 🫡

2026-01-20 20:56:01 UTC

- reply

Bug was introduced after this report https://lists.gnu.org/archive/html/bug-inetutils/2014-12/msg00012.html

2026-01-20 20:49:14 UTC

lol https://seclists.org/oss-sec/2026/q1/89
The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter.
If the client supply a carefully crafted USER environment value being the string "-f root", and passes the telnet(1) -a or --login parameter to send this USER environment to the server, the client will be automatically logged in as root bypassing normal authentication processes.

2026-01-20 13:37:23 UTC

By AI boom, Satya means the booming bank balance of tech execs built on a foundation of largely no value.
https://cyberplace.social/system/media_attachments/files/115/927/688/837/204/584/original/d72f1f23d1ec8e4e.jpeg
https://cyberplace.social/system/media_attachments/files/115/927/690/014/774/850/original/5efcee8910f8eb1a.jpeg

2026-01-19 21:27:16 UTC

- reply

Microsoft are upselling security controls for Microsoft Recall, which allow orgs to limit what it records specifically - if the org pay for Microsoft Purview.
I’ve had a look at how this works under the hood, it is using undocumented features in Recall. https://learn.microsoft.com/en-us/purview/dlp-recall-get-started
https://cyberplace.social/system/media_attachments/files/115/923/872/405/480/668/original/f1e8f29ac6750d23.jpeg

2026-01-19 12:15:29 UTC

Being sassed by my washing machine 💀
https://cyberplace.social/system/media_attachments/files/115/921/707/920/432/464/original/44b1d38dc823c684.jpeg

2026-01-14 23:50:37 UTC

- reply

X has finally climbed down over Grok generating non-consensual undressing, after many of the major regulators got involved.
I’d strongly recommend countries have robust laws and regulation in place for GenAI being used to brutalise women and minorities as ultimately the whole episode shows it’s only external pressure that will hold companies accountable, not self regulation and common sense. X basically tried to monetise incels harassing people.
https://cyberplace.social/system/media_attachments/files/115/896/117/925/141/358/original/192779689620e68f.jpeg

2026-01-14 20:51:44 UTC

- reply

California investigates Grok over AI deepfakes https://www.bbc.co.uk/news/articles/cpwnqlpw7gxo

2026-01-14 10:15:38 UTC

- reply

Something which 100% is going to cause bad outcomes in business is you can ask Microsoft 365 Copilot to write a Word document supporting the dumbest idea ever, and it will do it, and won’t label itself Copilot generated.
You can ask it for a 100 page document justifying not having a security team and it’ll do it. Forward that report upwards, save £3m, leave a year later with big bonus. 🫡

2026-01-14 10:07:08 UTC

Chief of police is going to lose their job methinks after using Microsoft Copilot 365 to write a Word document which had errors throughout rather than do his job.. then lying about it to press. https://www.bbc.co.uk/news/live/c394zlr8e12t
https://cyberplace.social/system/media_attachments/files/115/892/893/714/917/958/original/e4e9e49382785a1a.jpeg

2026-01-13 15:20:48 UTC

- reply

A new YouGov survey shows that the British public overwhelmingly believe AI companies should not be allowed to generate such imagery. Fully 96% of Britons say that firms should not be allowed to generate ‘undressed’ images of children (only 1% say they should), with 87% saying the same regarding such images of adults (5% think this is ok). https://yougov.co.uk/technology/articles/53828-ai-tools-should-not-be-allowed-to-make-undressed-images-say-britons
https://cyberplace.social/system/media_attachments/files/115/888/454/680/555/353/original/1f02fac03552f666.jpeg

2026-01-12 19:14:44 UTC

- reply

The UK government is to enforce a law this week which will make it a criminal offence to supply tools designed to create non-consensual intimate images https://www.bbc.co.uk/news/articles/cq845glnvl1o

2026-01-12 17:10:53 UTC

- reply

OFCOM have opened a formal investigation into X.
They may fine X 10% of its global revenue, require all advertisers to withdraw as an X client, and require UK internet providers to block X. https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-launches-investigation-into-x-over-grok-sexualised-imagery