Michał "rysiek" Woźniak · 🇺🇦

Hacker, activist, free-softie ◈ techie luddite ◈ formerly information security and infrastructure at https://isnic.is/ and https://occrp.org/ ◈ my opinions are my own etc.

(he/him)

⁂

profile image: drawing of a head and shoulders of a cat-person, in a space suit.

banner image: long-exposure photo of a large tent, brightly illuminated from inside, looking as if it is made of lava

#foss #libre #privacy #infosec #fedi22

(public toots CC By-SA 4.0 if applicable)

🇪🇺 🇵🇱 · 🇧🇦 🇮🇸 · 🇺🇦

Public Key

npub1dpgpternuccjgfyv3pgjkvtrv9pwk0kjf65pqed3urms39mtcjgs2tsckl

NIP-05 Address

rysiek@mstdn-social.mostr.pub

Profile Code

nprofile1qqsxs5q4u3e7vvfyyjxgs5ftx93kzsht8mfya2qsvkc7pacgja4ufygpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsxfkgpl

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1dpgpternuccjgfyv3pgjkvtrv9pwk0kjf65pqed3urms39mtcjgs2tsckl

Show more details

Last Notes

2026-04-15 21:06:49 UTC

- reply

@nprofile…dymg "pecunia non olet" was about charging for a service that was necessary and provided at decent quality – public toilets in Rome. The controversy there was about charging for it, not about the quality of the service.
Here the issue is that the paid promotion bit is spreading disinformation about what VPNs can and can't do. It's not just false advertising, it can put actual people in harm's way.

2026-04-07 12:28:17 UTC

A cold-war superpower with a seat on the UN Security Council is committing what will likely be seen as a war crime – targeting civilian rail infrastructure of a much smaller and weaker country – and it's not Russia blowing up trains in Ukraine this time.
#USA #Iran

2026-04-05 12:00:07 UTC

Happy ninth Mastodon Won't Survive Day to all who celebrate!
https://mashable.com/article/mastodon-wont-survive
#Fediverse #Mastodon

2026-04-04 11:39:51 UTC

There used to be a time when building out a botnet required *some* work – writing exploits, taking over devices, obscuring the purpose of the executable, etc.
Not any more!
Instead of "malware", call it an "AI agent" and people will just happily install it on their devices with full root privileges!
https://github.com/jgamblin/OpenClawCVEs/
#OpenClaw #AI #Hype #InfoSec

2026-04-02 21:21:17 UTC

There is a fresh thing going around about LinkedIn scanning extensions installed in Chrome/Chromium:
https://browsergate.eu/
The website claims "LinkedIn is Illegally Searching Your Computer", and implies the purpose is to find "religious beliefs, political opinions, disabilities".
tl;dr:
- yes, LinkedIn is scanning through a list of 6k+ extensions on Chrome;
- yes, this is bad;
- but the website is disingenuous in making unnecessarily overblown claims.
🧵
#LinkedIn #BrowserGate #Privacy

2026-03-31 14:37:31 UTC

Trans rights are human rights. 🏳️‍⚧️

2026-03-30 12:24:09 UTC

Well there you go, a company is explicitly offering FLOSS licensing math-washing as a service:
https://malus[.]sh/
> Our proprietary AI robots independently recreate any open source project from scratch. The result? Legally distinct code with corporate-friendly licensing. No attribution. No copyleft. No problems.
Congratulations to anyone in the FLOSS community still supporting and promoting genAI "revolution".
#FLOSS #AI

2026-03-30 11:12:39 UTC

- reply

@nprofile…lch8 jedna uwaga:
> amerykańskie jastrzębie szykują się do inwazji lądowej na wyspy w kluczowej cieśninie Ormuz blokowanej przez Iran.
Ja widziałem jedynie sugestie/pomysły inwazji na wyspę Chark (Kharg w angielskiej transliteracji), na której znajduje się główny irański terminal paliwowy.
Tyle, że ona nie jest nigdzie w pobliżu cieśniny Ormuz – a na drugim końcu Zatoki Perskiej, prawie setki kilometrów na północny zachód.
Były jakieś przebąkiwania o wyspach w samej cieśninie?

2026-03-30 00:01:58 UTC

About 10 days ago Bluesky proudly announced it got 100m investment, largely from cryptobros:
https://techcrunch.com/2026/03/19/bluesky-announces-100m-series-b-after-ceo-transition/
Today they are proudly announcing an "AI product" that relies on scraping your posts.
#Bluesky #AI
#nevent1q…jjns

2026-03-28 16:36:22 UTC

The bubble is already popped, it's just not very evenly distributed? :blobcatcoffee:
#nevent1q…axr7

2026-03-28 15:02:31 UTC

- reply

ping @nprofile…8a92 @nprofile…xnyu

2026-03-28 14:28:09 UTC

Do yourself a favor and go see Project Hail Mary.
It is a delightfully funny, thoughtful, and smart movie. There is a lot of subtle humor and subtle references. There is also hopefulness.
It's really refreshing how it respects the viewer, trusts you to pick up on and understand important plot points and jokes, doesn't force-feed you the context.
Been a long time since I've had that much genuine fun at the cinema.
Of course I also recommend the book and the audiobook (they're great)!

2026-03-26 18:08:51 UTC

- reply

@nprofile…ulx7 why are you showing the amendment vote (which was close, yes) instead of the actual vote to reject extension of voluntary Chat Control (which was anything but close)?
https://howtheyvote.eu/votes/189270

2026-03-26 01:42:27 UTC

- reply

@nprofile…snss congratulatiosn!

2026-03-25 19:58:48 UTC

Just got this from Microslop GitHub:
> We're updating how GitHub uses data to improve AI-powered coding tools. From April 24 onward, your interactions with GitHub Copilot—including inputs, outputs, code snippets, and associated context—may be used to train and enhance AI models unless you opt out.
I barely ever use GitHub. When I do, it's when I am forced to because some project I rely on only uses GitHub.
If you're project is only using GitHub, please consider migrating.
#GitHub #Slop #AI

2026-03-22 00:20:48 UTC

Attacking civilian infrastructure, especially critical infrastructure that a lot of civilians rely on – like power plants – is a war crime.
You know who else has been attacking power plants of a much smaller country? Vladimir Putin.
#nevent1q…55qk

2026-03-20 16:15:19 UTC

Remember the VC-funded social network that I had pointed out had problematic cryptocurrency space funding, but folks said "don't worry their CEO can be trusted and knows what she's doing"?
Their CEO just stepped down, and now it got $100m more VC funding largely from more cryptocurrency space folks:
https://techcrunch.com/2026/03/19/bluesky-announces-100m-series-b-after-ceo-transition/
"Don't worry, it's decentralized!" – well, let's just say I am not holding my breath for that either.
#BlueSky

2026-03-10 10:03:41 UTC

- reply

@nprofile…4gcp the answer is in the linked piece

2026-03-10 09:27:00 UTC

Ig Nobels to move awards to Europe due to concern over US travel visas
https://www.theguardian.com/science/2026/mar/09/ig-nobel-prize-europe
> The annual Ig Nobels, a satirical award for scientific achievement, are shifting for the first time from the US to Europe due to concerns about attendees getting visas, organizers announced on Monday.
That story again: even parody Nobel committee recognizes how dangerous it is to travel to the USA these days. If your conference doesn't, your conference is less serious than parody Nobels. 🤡
#USpol

2026-03-09 12:19:57 UTC

That's just fscking great, ffs:
When Google Changes Brand Websites To AI Pages In Dynamic Takeover
https://www.mediapost.com/publications/article/413133/when-google-changes-brand-websites-to-ai-page-in-d.html
> This patent allows Google to evaluate a brand's landing page -- and if it predicts the page will underperform for a specific user, generate a machine-learning-generated alternative page in real-time. It's described in the background of a “conventional system."
#Google's getting into the business of "improving" your website landing page with slop. 🤡

2026-03-09 11:05:17 UTC

Sure is convenient that Gallup stopped tracking US presidential approval ratings a month ago:
https://www.theguardian.com/us-news/2026/feb/11/gallup-stop-tracking-presidential-approval-ratings
I'm sure that yet another new war of the "no-new-war" US president and oil prices spiking is proving massively popular with US public.
MAGA must be so tired of winning!
If only there was a way to measure that popularity. Not that it's important in a midterm elections year. No biggie there, Gallup. 🤡
#USpol

2026-03-07 15:27:29 UTC

Polecam świetny tekst @nprofile…y0qy w #OkoPress:
Big techy grają z nami w weryfikację wieku. To karanie ofiar zamiast sprawców
https://oko.press/big-techy-weryfikacja-wieku-karanie-ofiar-zamiast-sprawcow
> „Chyba wszyscy widzimy, jak wiele zła sprowadza na kobiety to, że mają nieograniczony dzisiaj realnie niczym dostęp do niebezpiecznego parku. [...]. Uważamy, że należy im ten dostęp ograniczyć” – mogłoby brzmieć wystąpienie Barbary Nowackiej, gdyby nie dotyczyło zagrożeń, jakie czyhają na dzieci w internecie, a niebezpiecznej przestrzeni miejskiej.

2026-03-04 20:34:21 UTC

- reply

@nprofile…d6ag become unindexable

2026-03-03 19:46:17 UTC

- reply

On my home instance this got blocked within seconds, I barely had time to take the screenshot.
Chapeau-bas, @nprofile…v5q3!
Your instance might be a bit slower with moderation, and that's fine (hugs for all the admins and mods on here!).
You can help keep everyone safe by reporting scams as soon as you see it.
You can help keep yourself safe by blocking scam accounts.
This is not Facebook, your report will be seen by a human, and will not be ignored.
And if not, you might consider moving instances.

2026-03-03 19:41:27 UTC

There are scam notifications about "monetization" on here going around.
👉 Don't fall for them.
👉 Don't click the link.
👉 Report and block on sight.
There is no monetization scheme on mastodon.social, nor any other fedi instance I know of.
Stay safe!
#Fediverse #InfoSec
https://media.mstdn.social/media_attachments/files/116/166/922/549/080/168/original/2f19487334aa2574.png

2026-03-03 18:14:31 UTC

Spain denies USA use certain bases for their Iran aggression, so Trump threatens to cut off *all trade with Spain*
https://www.bloomberg.com/news/articles/2026-03-03/trump-threatens-to-cut-off-trade-after-spain-denies-air-base-use
US their trade policy is just another tool of imperialist coercion and control.
That said, I wonder if that means that Spain will lose access to all the US-based Big Tech services and tools? Because it would seem to me as if that was the case.
And if that's the case… tech sovereignty becomes even more clear of a choice for EU. 🍿
#USpol #USA #BigTech #EU

2026-03-03 09:53:20 UTC

I was a very happy user of the first Jolla phone, and then a Sony Xperia with SailfishOS on it, for almost a decade.
Switched to an Android-based system mainly because there was no modern hardware that supported SailfishOS at the time I needed to switch (so got myself a Fairphone).
SailfishOS user interface is leaps and bounds better than Android's, in my humble opinion, and I miss it a lot.
#nevent1q…65lz

2026-03-02 20:31:19 UTC

> Scientists at Oregon State University have engineered a powerful new nanomaterial that zeroes in on cancer cells and destroys them from the inside out. Designed to exploit cancer’s unique chemistry—its acidity and high hydrogen peroxide levels—the tiny iron-based structure sparks not one but two intense chemical reactions, flooding tumors with cell-damaging oxygen molecules. This dual attack overwhelms cancer cells with oxidative stress while sparing healthy tissue.
https://www.sciencedaily.com/releases/2026/02/260228093456.htm
🎉

2026-03-02 14:30:58 UTC

I've always been partial to the Triceratops, but it seems not to be included in this chart (for shaaaaame).
So, Styracosaurus it is.
#nevent1q…3g75

2026-03-02 11:46:42 UTC

Motorola announces a partnership with GrapheneOS Foundation
https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/
> Motorola and the GrapheneOS Foundation will work to strengthen smartphone security and collaborate on future devices engineered with GrapheneOS compatibility.
This could be a gamechanger. Congratulations to @nprofile…8d0p, fingers crossed this works out well!
#InfoSec #GrapheneOS

2026-03-02 09:53:20 UTC

Heads up for any folks using @nprofile…5n7j: scammers seem to be trying to exploit the recent bump in pricing by sending "unpaid invoice notification" e-mails.
Easy to fall for it before morning coffee.
"Update Payment Method" link obviously leads to a scam site, so not particularly hard to spot either.
Be careful out there. :blobcatcoffee:
P.S. yes I am aware of the shitty ways Hetzner treated a bunch of fedi instances; this is not a recommendation.
#Hetzner #InfoSec #SysAdmin

2026-02-28 19:03:58 UTC

Keep your eyes on Gaza, Israel seems to want to use the "major combat operation" in Iran as a distraction.
Receipt:
https://www.timesofisrael.com/liveblog_entry/gaza-crossings-closed-amid-iran-strikes/
CW: claims that the closures will not affect humanitarian situation in Gaza; I take those claims with a mountain of salt.
#nevent1q…nkje

2026-02-28 13:24:26 UTC

It's not war, it's a "major combat operation"?
Trump can't even come up with his own bullshit, has to steal Putin's homework.

2026-02-28 11:09:06 UTC

- reply

@nprofile…dku9 corporations don't try to be decent, corporations (especially in the USA) have legal obligations to maximize shareholder value.
I am pushing back against the interpretation I am seeing that Anthropic suddenly is "acting ethically" or has a "moral stance" here. It does not. It's a corporation. And its purpose is to make money.

2026-02-28 02:25:14 UTC

- reply

Also, this would be a *great* time to ask other AI hype peddlers – Microsoft, OpenAI, Meta, Google – if they are comfortable with US DoD using their models for mass domestic surveillance of Americans and fully autonomous weapons.
Put them on the spot. Make them squirm trying to answer this question in a way that is not a major PR disaster, and not find themselves on Hegseth's "naughty" list.

2026-02-28 02:17:06 UTC

- reply

Oh, and I forgot about another level of comedy here: US government throwing a tantrum because *checks notes* it does not have enough technological sovereignty from US tech behemoths.
While at the same time actively pushing against EU's policies related to technological sovereignty:
https://www.reuters.com/sustainability/boards-policy-regulation/us-orders-diplomats-fight-data-sovereignty-initiatives-2026-02-25/
This is truly comedy gold.

2026-02-28 02:09:13 UTC

- reply

Consider what this means in practice. Again Dean W. Ball:
> Nvidia, Amazon, Google will have to divest from Anthropic if Hegseth gets his way. This is simply attempted corporate murder. I could not possibly recommend investing in American AI to any investor; I could not possibly recommend starting an AI company in the United States.
https://xcancel.com/deanwball/status/2027515599358730315#m
So…
Would be super funny if that's what causes the bubble to start popping. :blobcatcoffee:

2026-02-28 02:08:04 UTC

- reply

But the best part is that, as noted by Dean W. Ball – a former Senior Policy Advisor for Artificial Intelligence and Emerging Technology at the White House Office of Science and Technology Policy, under Trump! – "DeepSeek is now treated much more kindly by the United States government than anthropic":
https://xcancel.com/deanwball/status/2027540776402747853#m
Hegseth designating Anthropic as a "supply chain risk" means that no entity providing services to the US government can do business with Anthropic.

2026-02-28 01:55:56 UTC

- reply

In that context, ironically, Hegseth is not wrong about how sanctimonious the rhetoric of effective altruism is:
https://xcancel.com/SecWar/status/2027507717469049070
But here's the kicker – all the AI bubble barons are in the effective altruism and the wider TESCREAL bundle:
https://techwontsave.us/episode/198_how_effective_accelerationism_divides_silicon_valley_w_emile_torres
It's only become a problem for Whiskey Pete now because Anthropic is being difficult.

2026-02-28 01:52:44 UTC

- reply

Another level is that even in their rebuttals of Department of Defense (as it is still officially called!), Anthropic appeases the fascists by using the unofficial "Department of War" moniker:
https://www.anthropic.com/news/statement-comments-secretary-war
That's one of the reasons why I am not taking Anthropic's pushback seriously. It's not about any actual moral stance, it's about being able to do business with the fascists while not looking too bad publicly.

2026-02-28 01:47:19 UTC

- reply

Basically, Secretary of Defense Pete Hegseth wants to be able to use Anthropic's AI models for things Anthropic is not comfortable with: mass domestic surveillance of Americans and fully autonomous weapons.
Anthropic said "no". Whiskey Pete is throwing a tantrum, and Trump is supporting him in it.
This is highly entertaining on many levels.
One level is that a company peddling dangerous technology to fascists is suddenly learning the hard way how instrumentally the fascists treat them.

2026-02-28 01:40:15 UTC

Trump orders US agencies to stop using Anthropic technology in clash over AI safety
https://apnews.com/article/anthropic-pentagon-ai-hegseth-dario-amodei-b72d1894bc842d9acf026df3867bee8a
Would be super funny if that's what causes the bubble to start popping. :blobcatcoffee:
#AI #Hype #Anthropic

2026-02-22 18:38:41 UTC

Remember how SQL (still called SEQUEL) was supposed to make non-techies able to talk to computers?
> there is also a large class of users who, while they are not computer specialists, would be willing to learn to interact with a computer in a reasonably high-level, non-procedural query language. Examples
of such users are accountants, engineers, architects, and urban planners
https://dl.acm.org/doi/epdf/10.1145/800296.811515
How quaint!
Anyway, tell me again how LLMs are making non-techies able to talk to computers. 👀

2026-02-22 13:08:15 UTC

Entirely Foreseeable AWS Outages
https://rys.io/en/182.html
Once you strip away the marketing hype, agentic systems like Kiro AI are just automation tools.
The difference between Kiro and regular infrastructure management tools is that the latter are deterministic. They can be tested, analyzed, and bugs can be reliably, provably fixed.
That's just not the case with agentic tools. They are by their very nature non-deterministic. And that's the last thing a systems engineer should want.
#SysAdmin

2026-02-22 04:06:26 UTC

for sale: complex system, poorly understood

2026-02-22 00:14:13 UTC

chatpot (noun):
a chat bot based on a slop generator; a crackpot chat bot.

2026-02-21 15:32:20 UTC

- reply

@nprofile…d6ag I love the comparison of financial sector companies to a calamity. :blobcatheart:

2026-02-20 15:59:06 UTC

- reply

> Michał Woźniak, a cybersecurity expert, said it would be nearly impossible for Amazon to completely prevent internal AI agents from making errors in future, because AI systemsmake unexpected choices and are extremely complex.
> “Amazon never misses a chance to point to “AI” when it is useful to them – like in the case of mass layoffs that are being framed as replacing engineers with AI. But when a slop generator is involved in an outage, suddenly that’s just ‘coincidence’,” he added.
Henlo.

2026-02-20 15:58:20 UTC

Turns out Amazon had two outages in December caused by their IaaS management slop generator:
Amazon’s cloud ‘hit by two outages caused by AI tools last year’
https://www.theguardian.com/technology/2026/feb/20/amazon-cloud-outages-ai-tools-amazon-web-services-aws
> Reported issues at Amazon Web Services raise questions about firm’s use of artificial intelligence as it cuts staff
Sounds like things are not going well over at AWS.
#InfoSec #SysAdmin

2026-02-20 14:28:48 UTC

Web developers: we are going to go out of our way to hide the scrollbars!
Users: but that makes it difficult to know how much of the text is left to read!
Web developers: don't worry, we'll add a non-standard UI element that signals this in some non-obvious, weird way!
:blobcatroll:

2026-02-20 14:13:16 UTC

Over 600.000 people got deported from the USA since January last year. A lot of these people owned property or real estate.
What happens to that property and real estate once they're gone?
I am going to go out on a limb and say: it more often than not ends up being sold at a massive discount.
👉 Apart from all other horrible things the deportation campaign is, it is also a gigantic ethnically targeted expropriation campaign.
#USpol #ICE #FuckICE

2026-02-19 23:06:51 UTC

- reply

@nprofile…50mt is this the link?
https://blog.fluxer.app/how-i-built-fluxer-a-discord-like-chat-app/

2026-02-19 19:30:14 UTC

Oh this is wonderful news:
DNS-PERSIST-01: A New Model for DNS-based Challenge Validation
https://letsencrypt.org/2026/02/18/dns-persist-01.html
> Instead of publishing a new challenge record for each issuance, you publish a standing authorization in the form of a TXT record that identifies both the CA and the specific ACME account you authorize to issue for this domain.
#DevOps #SysAdmin #InfoSec

2026-02-19 11:19:25 UTC

Andrew Mountbatten-Windsor arrested at Sandringham estate
https://www.theguardian.com/uk-news/2026/feb/19/police-former-prince-andrew-mountbatten-windsor-sandringham
> Police have been assessing allegations that Mountbatten-Windsor – formerly known as Prince Andrew
Uhhh… "formerly known as Prince" used to have a completely different vibe and I liked it better that way.

2026-02-09 23:01:44 UTC

Discord will require a face scan or ID for full access next month
https://www.theverge.com/tech/875309/discord-age-verification-global-roll-out
Every project that uses Discord for their community thingy is now effectively saying: papers please, or you are not welcome in our community.
Every. Single. One.
#Discord

2026-02-05 10:29:10 UTC

- reply

@nprofile…rnn3 but I thought the only winning move is not to play?

2026-02-04 00:02:38 UTC

- reply

@nprofile…zaxj @nprofile…xmsz I am definitely looking closely at Cwtch. VeilidChat was, as far as I understand, a proof-of-concept and not recommended for any kind of serious use?

2026-02-02 20:15:28 UTC

Any sufficiently naïve technosolutionism is indistinguishable from malice.

2026-01-16 20:34:45 UTC

Men would rather invade Greenland than publish Epstein files in full.

2026-01-13 16:44:05 UTC

- reply

@nprofile…h0ux I should test out Phanpy again

2026-01-13 16:29:17 UTC

- reply

@nprofile…h0ux this is very fresh. let people find their feet.

2026-01-13 16:11:30 UTC

I am quite excited about what #TheForkiverse is doing and to see how it goes.
It seems to be going very well.
This is exactly what fedi was built for and what can make fedi stronger: an independent instance created and run for a specific community, pulling people in.
If you're as confused as I initially was: The Forkiverse is a fedi instance set up by hosts of two podcasts (Search Engine and Hard Fork), the name references the latter:
https://www.searchengine.show/the-fediverse-experiment/
#nevent1q…ka95

2026-01-09 01:33:10 UTC

- reply

@nprofile…l9z3 @nprofile…7q7j there's a meme here somewhere about the AI hype and more generally tech startups, I feel. :blob0w0:

2026-01-08 02:36:40 UTC

- reply

@nprofile…0hde @nprofile…4xpq when I grow up, I want to have my keyboards optimal!

2026-01-05 21:25:47 UTC

The US administration seems to insist the Southern District of New York has jurisdiction over Venezuela; surely they'd agree a certain court in the Hague has jurisdiction over the USA, then? :blobcatcoffee:

2025-12-02 19:06:06 UTC

become unenshittifiable

2025-11-18 08:17:23 UTC

- reply

@nprofile…a0ps and the wave of elections won by far-right parties all over the world shows how that works in practice.

2025-11-06 18:35:29 UTC

Keep Android Open
https://keepandroidopen.org/
This is important. We already have a basic duopoly in mobile operating systems, now Google is trying to lock down their platform even more. Nobody benefits from this other than Google's shareholders.
Whether you are a device owner, a developer, or a public institution, this affects you and should matter to you.
Everyone can meaningfully help to push back.
:boost_requested:
#FuckGoogle #Android #FOSS #Mobile

2025-11-03 19:13:54 UTC

And this, kids, is why we never ever set up easy-to-guess passwords. Even in testing, even temporarily. Just pwgen it, every time.
https://www.unionesarda.it/en/world/louvre-robbery-security-flaws-the-obviously-password-was-quot-louvrequot-ft1kkp6c
> accessing the museum's video surveillance server required typing the all-too-obvious word: LOUVRE
#InfoSec

2025-10-20 15:50:58 UTC

- reply

@nprofile…6zuf got my marshmallows out! :blobcat:

2025-10-20 09:20:05 UTC

Awwwwwws!.. :blobcatcoffee:

2025-10-18 11:20:38 UTC

Windows 11? Wow, Microsoft is really behind the curve, aren't they. I'm already running Debian *13*!

2025-08-22 21:12:36 UTC

I guess that settles the "is BlueSky decentralized" debate?
https://bsky.app/profile/bsky.app/post/3lwzadikbrc2u
#BlueSky
https://media.mstdn.social/media_attachments/files/115/074/471/919/903/187/original/d59ddd5fc1be2809.png
https://media.mstdn.social/media_attachments/files/115/074/485/073/733/837/original/37eeff5f30760d08.png

2025-08-08 14:45:05 UTC

Germany suspends arms exports to Israel for use in Gaza
https://www.dw.com/en/germany-suspends-arms-exports-to-israel-for-use-in-gaza/a-73569858
> German Chancellor Friedrich Merz cited Israel's plan to take over Gaza City as a reason for the decision, marking a major policy change.
My understanding is this is a truly *massive* policy change for Germany.
Better late than never. But why did it have to be so late…
#Palestine #Israel #Germany #Gaza

2025-07-26 13:38:07 UTC

- reply

@nprofile…el4d and even if it required some serious skill to maliciously extract this data, the h-word has no business being used in that headline just because computer skills were in use, the same way we wouldn't be writing headlines like "Drivers Robbed a Bank" just because robbers used their driving skills for the getaway.

2025-07-26 10:24:23 UTC

Oh I see the absurdly, negligently insecure Tea app is now getting the "hackers hacked" treatment, so that it can comfortably deflect blame to some unspecified scary hackers?
Cool, cool.
*takes out a bullhorn*
📢 Tea kept drivers license photos of thousands of women in an unprotected Google Firebase storage bucket.
📢 Centering "hackers" means helping let those responsible for the horrendous negligence at Tea off the hook.
👏 There is no "hack", only other people's negligence.
#InfoSec #Tea
https://media.mstdn.social/media_attachments/files/114/919/037/879/780/551/original/283a0ad8bdfd3a2a.png

2025-07-22 14:14:00 UTC

Hej @nprofile…pslg minister Gawkowski zapowiada LLMa w mObywatelu:
https://www.donald.pl/artykuly/hBHRVZ94/wicepremier-gawkowski-zapowiada-wdrozenie-asystenta-ai-w-mobywatelu
A ja się zastanawiam, ile to ustrojstwo kosztowało i kto je wykonał. :blobeyes:

2025-07-22 00:11:33 UTC

- reply

@nprofile…5ev4 @nprofile…c95x jeszcze niestety wciąż za login-wallem. :sadcat1:

2025-07-06 20:41:36 UTC

So, are we ready to call LLM scrapers "malicious activity" yet, and report via abuse forms as such?

2025-07-04 10:34:24 UTC

- reply

@nprofile…pslg o, fajnie, że o to wnioskujecie!
Te "miliardy" wzięły się z raportu Implement Consulting Group. Pisałem o tym w Oku:
> [W] mediach społecznościowych Magdalena Dziewguć, szefowa Google Cloud Polska, chętnie rzuca liczbami: „Według raportu Implement Consulting Group, generatywna sztuczna inteligencja pomoże zwiększyć PKB Polski nawet o 55 miliardów euro, czyli +8%, w ciągu dziesięciu lat". Raportu oczywiście nie udostępnia.
https://oko.press/wasalstwo-cyfrowe-google-i-microsoft-opanowuja-polske
Wpis:
https://pl.linkedin.com/posts/magdadziewguc_razem-z-polskim-funduszem-rozwoju-oraz-ochk-activity-7295811892554469376-OFdU

2025-06-28 14:04:46 UTC

My silly side project to very slowly generate Markov chain slop for LLM scrapers, wasting their resources, is slowly getting to a usable state:
https://git.rys.io/libre/markov-tarpit/
Basic functionality is there, now I need to figure out how to figure out a request comes from an LLM scraper, and how to trap them in the Markov chain world.

2025-06-15 03:01:29 UTC

Latest Big Tech investor scam just landed! 🎉
I was saying for quite a while "quantum" is the next hype cycle:
https://mstdn.social/@rysiek/113077042446797897
Yes, this is real:
https://quantumai[.]google/
https://media.mstdn.social/media_attachments/files/114/685/129/366/259/844/original/80f81dd89f217313.png

2025-06-10 22:22:58 UTC

- reply

Telegram has responded to IStories' piece:
> All Telegram servers are Telegram’s property maintained by Telegram employees. Unauthorized access is not possible. Telegram has neither employees nor servers in Russia. In the entire history of Telegram, it has never handed over private messages to third parties, and its encryption has never been hacked
https://vot-tak.tv/87198696/fsb-chitaet-telegram
This responds to exactly zero of the crucial points raised by the story. :blobcateyes:
🧵
#Telegram

2025-06-10 07:26:02 UTC

- reply

As part of the investigation, I have looked closely at Telegram's protocol and analyzed packet captures provided by IStories.
I have also done some packet captures of my own.
I dive into the nitty-gritty technical details of what I found and how I found it on my blog:
Telegram is indistinguishable from an FSB honeypot
https://rys.io/en/179.html
Yes, my packet captures and a small Python library I wrote in the process are all published along.
#Telegram #InfoSec #Privacy #Surveillance #Russia

2025-06-10 07:20:26 UTC

Remarkable investigation into Telegram by IStories (in Russian):
https://www.istories.media/stories/2025/06/10/kak-telegram-svyazan-s-fsb/
English version by OCCRP:
http://www.occrp.org/en/investigation/telegram-the-fsb-and-the-man-in-the-middle
tl;dr:
👉 Telegram uses a single company with ties to the Russian FSB as their sole infrastructure provider, globally.
👉 Combined with a cleartext device identifier Telegram's protocol requires to be prepended to all encrypted messages, this allows for global surveillance of Telegram users.
I am quoted in this story.
#Telegram #InfoSec #Privacy

2025-06-05 12:59:43 UTC

Hey @nprofile…nw9n is this really your founder? 👀
https://xcancel.com/epoberezkin
#SimpleX #InfoSec

2025-05-29 14:24:56 UTC

Apparently there exists a system for deep dredging of public Internet data about specific people, called #Hermes, and it was bought by the Polish national prosecutor's office in 2021.
Seems like it was sold by the #NSOGroup, but they were only a reseller for another, unnamed Israeli company.
There's been quite the brouhaha about it in Polish media, but it's kinda difficult to find any mentions of it anywhere outside Poland.
Weird.
Does anyone have any info on this?
:boost_ok:
#InfoSec

2025-05-18 19:30:27 UTC

Exit polls are in: in the first round of Polish presidential elections far-right and fascist candidates got combined 50.7%.
During the campaign the leader of the polls, Rafał Trzaskowski, representing centre-right Civic Platform / Civic Coalition, kept drifting right, trying to reach the "undecided voters" between centre-right and far-right.
This strategy paid off well… for Karol Nawrocki, supported by the Law and Justice party (further right on the political spectrum).
#Election2025 #Poland

2025-05-18 19:16:40 UTC

Faszyści w sumie 50.7% w exit pollach. 🤡
Polska mistrzem Polski. Sztandar wyprowadzić. 🇲🇨
#Wybory2025

2025-05-15 23:10:37 UTC

- reply

@nprofile…3nsk quite the contrary, security is impossible without convenience. The sooner we understand that, the better.

2025-05-08 19:22:16 UTC

- reply

@nprofile…gu7x
image description:
A US 1970's style poster showing two police cars, Jake and Elwood (the Blues Brothers), and a stern nun in the background.
Text:
We're on a mission from God.

2025-05-04 11:03:35 UTC

- reply

@nprofile…3hem @nprofile…gvwn @nprofile…kjtm ale jest mnóstwo lewicowych/progresywnych wyborców, którzy na przykład w poprzednich wyborach zagłosowali jednak na KO.

2025-05-04 10:32:27 UTC

sztab KO przed wyborami:
> trzeba zawalczyć przede wszystkim o głosy niezdecydowanych wyborców centroprawicowych, przytemperować lewicujący przekaz! 🧐
sztab KO po wyborach jak znów przegrają z nołnejmem wyciągniętym z szafy wuja z wąsem:
> WiNa LeWiCoWyCh WyBoRcÓw, NjE pOsZlI Do UrN!!1! :blobcatshocked:
Tradycji stać się musi zadość. 🤡
#Polska #Wybory

2025-04-28 23:28:03 UTC

Holy cow, #404media enabled ActivityPub directly on their site! 🎉
@nprofile…flnf :blob0w0:
:blobcathappypaws:

2025-04-28 15:27:56 UTC

Shot:
May 11, 2023
ASUMO to digitalise Spain’s substations with AI and digital twin tech
https://www.smart-energy.com/regional-news/europe-uk/asumo-to-digitalise-spains-substations-with-ai-and-digital-twin-tech/
Chaser:
April 28, 2025
Spain and Portugal hit by massive power outage causing blackouts
https://www.theguardian.com/world/2025/apr/28/spain-portugal-power-outage
Now, I am not saying that the massive electric grid outage in Spain and Portugal today was caused by "AI" "optimizing".
But would I be surprised if these ended up meaningfully connected?
No. I would not be surprised.
(h/t @nprofile…6es7 for the Spanish electric grid AI link)

2025-04-24 21:34:16 UTC

I have recently been asked by the @nprofile…ff2s if it was possible to create an online age verification system that would not be a privacy nightmare.
I replied that yes, under certain assumptions, this is possible. And provided a rough sketch of such a system.
But privacy is not the only issue with systems like that:
https://rys.io/en/178.html
#Privacy #AgeVerification #Web

2025-04-07 16:18:17 UTC

- reply

@nprofile…jmnz mam 6 ziemniaków, w tym 2 upieczone. 🤑

2025-04-07 12:14:16 UTC

- reply

@nprofile…pslg nazwisk pewnienie dadzą.
Ale może dałoby się wyciągnąć rozbicie na paragraf, w związku z którym trwało "dochodzenie", w którym Pegaz był użyty? To by było wydaje mi się bardzo ciekawe.

2025-04-06 12:54:23 UTC

Szyfrowanie jest w Europie pod ostrzałem. Wczoraj pisałem o tym w #OKOpress:
https://oko.press/going-dark-szyfrowanie-w-komunikatorach-pod-ostrzalem-w-europie
Z punktu widzenia służb i organów ścigania szyfrowana komunikacja to jednak problem. Problem, który Międzynarodowe Stowarzyszenie Szefów Policji (ang. „International Association of Chiefs of Police”, IACP) określiła w 2015 roku terminem „Going Dark” – w wolnym tłumaczeniu „Znikanie w Ciemności”.

2025-04-05 09:49:55 UTC

- reply

I will probably never get tired of having a hearty laugh on Mastodon Won't Survive Day.
Ulanoff's piece is such a great example of "tech bubble journalism" – where anything that does not fit in the round hole of Silicon Valley VC-fueled business models must necessarily be outside of the realm of possibility (and imagination).
Not only he completely ignores the existence of broader fedi, but he also compares Mastodon to Peach – a centralized social network that quickly fizzled out.
3/🧵