Nostr notes by VessOnSecurity

Posting a picture of a real Monet painting and saying it's ...

2026-05-14T15:57:40Z

Posting a picture of a real Monet painting and saying it's AI-generated. Watch the anti-AI bros pile up in the comments...

What would happen? Most likely this: ...

2026-05-13T15:48:35Z

In reply to nevent1q…fzw3
_________________________

What would happen? Most likely this:

Yes

2026-05-05T23:07:43Z

In reply to nevent1q…a2gz
_________________________

Yes

This. 👇 ...

2026-05-05T15:14:19Z

This. 👇

...then they came for the VPNs... No, not in China, Russia, or ...

2026-05-04T07:29:53Z

...then they came for the VPNs...

No, not in China, Russia, or Iran - in the USA. Coming soon to a country or a state near you. Because, "think of the children".

"Utah first state to hold websites liable for users who mask their location with VPNs — law goes into effect, designed to prevent bypassing age checks":

https://www.tomshardware.com/software/vpn/utah-becomes-first-us-state-to-target-vpn-use-with-age-verification-law

Not sure if this is real but it sure is funny. ...

2026-04-30T13:03:54Z

Not sure if this is real but it sure is funny.

ClownStrike strikes again. "Critical bug in CrowdStrike ...

2026-04-27T05:39:05Z

ClownStrike strikes again.

"Critical bug in CrowdStrike LogScale let attackers access files":

https://securityaffairs.com/191343/hacking/critical-bug-in-crowdstrike-logscale-let-attackers-access-files.html

I use such a plugin for the browser (it monitors the ownership ...

2026-04-14T15:12:17Z

In reply to nevent1q…wszg
_________________________

I use such a plugin for the browser (it monitors the ownership changes of the other plugins), but I don't use WordPress, so I don't know. The browser plugin is called "Under New Management".

Getting e-mail to work shouldn't be rocket science... ...

2026-04-14T05:56:04Z

Getting e-mail to work shouldn't be rocket science...

Code reviewing. ...

2026-04-13T06:42:40Z

Code reviewing.

Well, it does make a certain kind of sense. The Strait isn't ...

2026-04-12T17:16:58Z

In reply to nevent1q…znuy
_________________________

Well, it does make a certain kind of sense. The Strait isn't really "blocked" - it has been converted into a toll booth. Traffic hasn't stopped completely but the only ones who are allowed through are Chinese ships (and those of a handful of other countries), and the only one who profits is Iran for collecting $2 mil per ship. Trump can't force Iran to free the Strait for all traffic, so he's doing what he can - cutting off Iran's profits and the oil to a country unfriendly to the USA.

Of course, it is stupid and will backfire in unpredictable ways, plunging the world further into a crisis - but it's certainly a logical plan any 6-year old could come up with.

I am old enough to remember the Vietnam war, the mandatory draft ...

2026-04-09T07:19:30Z

I am old enough to remember the Vietnam war, the mandatory draft in the USA, and Americans fleeing their own country in order to avoid it. Well, guess what.

"Automatic registration for military draft to be implemented by December":

https://www.stripes.com/theaters/us/2026-04-07/automatic-registration-military-draft-21306855.html

The oil shock will look like a walk in the park when the food ...

2026-04-02T05:48:55Z

In reply to nevent1q…ywna
_________________________

The oil shock will look like a walk in the park when the food shock hits. The closing of the straight of Hormuz has interrupted the flow of fertilizer precisely at a time when they are needed. Even if the war ends a few months from now with a total victory over Iran, it will be too late to plant what needs planting today. A global famine is coming.

Abusing the old meme... ...

2026-03-31T05:53:25Z

Abusing the old meme...

"Southwest is charging plus-size passengers a 'fat ...

2026-03-27T06:30:22Z

"Southwest is charging plus-size passengers a 'fat tax' at the airport":

https://www.sfgate.com/travel/article/southwest-charging-fat-tax-22094860.php

While I can see how it does make sense, isn't it a form of discrimination?

I have the impression that you needed some kind of ...

2026-03-24T18:35:59Z

In reply to nevent1q…y2vd
_________________________

I have the impression that you needed some kind of permission/acknowledgement before starting to record a Teams meeting?

Regarding that WW3 everyone's been talking about... ...

2026-03-24T06:46:15Z

Regarding that WW3 everyone's been talking about...

The more energy (of any kind) a country has, the better off it ...

2026-03-23T15:31:07Z

In reply to nevent1q…qj2j
_________________________

The more energy (of any kind) a country has, the better off it is. Germany's energy production is declining. And this is not the result of external factors (e.g., natural disasters or war) - it is the result of Germany's own idiotic policies. Thus - deindustrialization, the society getting poorer. Economic suicide.

Somebody made Doom run from DNS records... 🤣 ...

2026-03-23T05:50:27Z

Somebody made Doom run from DNS records... 🤣

https://blog.rice.is/post/doom-over-dns/

This is a hilarious commentary on the US/Israeli war with Iran: ...

2026-03-22T06:46:53Z

This is a hilarious commentary on the US/Israeli war with Iran:

"God is a comedian":

https://no01.substack.com/p/march-19-21-god-is-a-comedian

These are real Facebook groups that exist: ...

2026-03-21T08:08:18Z

These are real Facebook groups that exist:

The picture of a nation committing economic suicide: ...

2026-03-16T05:55:03Z

The picture of a nation committing economic suicide:

Your screenshot is from mobile, mine is from desktop. That's ...

2026-03-11T18:19:27Z

In reply to nevent1q…hrea
_________________________

Your screenshot is from mobile, mine is from desktop. That's why I supposed that the two may be offering different kinds of access.

At least for Twitter, this is not true. Yeah, the page exhorts ...

2026-03-11T15:20:50Z

In reply to nevent1q…sfr4
_________________________

At least for Twitter, this is not true. Yeah, the page exhorts you to create an account - but it *does* show the post. At least on desktop; maybe it's different on mobile.

The universal truths of software development. ...

2026-03-10T10:51:39Z

The universal truths of software development.

Trump's efficiency. ...

2026-03-10T06:12:16Z

Trump's efficiency.

Do we really know who hit the school? Was it the USA because the ...

2026-03-05T09:11:32Z

In reply to nevent1q…8eg8
_________________________

Do we really know who hit the school? Was it the USA because the AI hallucinated a target, or was it Israel because they don't give a fuck?

Do you really want to see an alien death cruiser parked in ...

2026-03-03T16:16:54Z

In reply to nevent1q…3uya
_________________________

Do you really *want* to see an alien death cruiser parked in front of our plant, though?

Slots machine vs vibe colding. ...

2026-03-03T06:58:05Z

Slots machine vs vibe colding.

OpenAI strikes a deal with the Pentagon. ...

2026-02-28T07:23:46Z

In reply to nevent1q…7vm5
_________________________

OpenAI strikes a deal with the Pentagon.

https://www.nbcnews.com/tech/tech-news/trump-bans-anthropic-government-use-rcna261055

Economics in one lesson. ...

2026-02-17T15:44:38Z

Economics in one lesson.

I asked an AI (Claude) a question about the old MS-DOS viruses, ...

2026-02-16T06:09:29Z

I asked an AI (Claude) a question about the old MS-DOS viruses, because I had forgotten the information (it couldn't find it, either, probably because it doesn't exist) and at one point it went "according to the anti-virus researcher Vesselin Bontchev...".

I couldn't resist and told it "I *am* Vesselin Bontchev". To which it replied "Oh, it's an honor to meet you!". 🤣 🤣 🤣

Maybe it's not AI that's remarkably good at finding ...

2026-02-07T07:56:23Z

In reply to nevent1q…snu0
_________________________

Maybe it's not AI that's remarkably good at finding vulnerabilities; maybe it's we who're remarkably bad at writing vulnerability-free code...

Vincenzo Iozzo.

2026-02-01T18:14:37Z

In reply to nevent1q…dzjx
_________________________

Vincenzo Iozzo.

Script to remove the AI and other shit from Firefox, Chrome, and ...

2026-01-25T15:41:52Z

Script to remove the AI and other shit from Firefox, Chrome, and Edge via policies:

https://justthebrowser.com/

Home prices in my country for the past two decades. Tell me again ...

2026-01-12T10:12:30Z

Home prices in my country for the past two decades. Tell me again how the anticipation of the introduction of the euro doesn't lead to inflation?

Time to finally finish your thesis, Tay.

2026-01-11T18:29:12Z

In reply to nevent1q…0wy3
_________________________

Time to finally finish your thesis, Tay.

I run an ADB honeypot. Is there anything I can do to help you in ...

2026-01-09T05:54:00Z

In reply to nevent1q…mswc
_________________________

I run an ADB honeypot. Is there anything I can do to help you in your research of this issue? Any particular artifacts to look for?

Well, I didn't have this on my 2026 Bingo card... ...

2026-01-07T07:28:05Z

Well, I didn't have this on my 2026 Bingo card...

"‘Stop sending butt plugs to Bahrain’: Toronto sex store receives letters from U.S. Department of War":

https://www.ctvnews.ca/toronto/article/stop-sending-butt-plugs-to-bahrain-toronto-sex-store-receives-letters-from-us-department-of-war/

I don't see how threatening his wife gives the US any ...

2026-01-04T16:50:10Z

In reply to nevent1q…08sr
_________________________

I don't see how threatening his wife gives the US any leverage against Venezuela. Most Venezuelans are probably happy to be rid of both Maduro and his wife (although just probably would rather that this didn't involve a military invasion).

My MongoDB honeypot is now open source: ...

2026-01-04T12:22:22Z

My MongoDB honeypot is now open source:

https://gitlab.com/bontchev/mongopot

Visualization (not included in the repo):

https://pandora.nlcv.bas.bg/grafana/d/EysKAV4Dz/mongopot

Ah, yes, because the USA had such a great experience running ...

2026-01-03T18:58:29Z

In reply to nevent1q…k2w4
_________________________

Ah, yes, because the USA had such a great experience running Iraq...

Imagine the outcry if Russia did that to Zelensky...

2026-01-03T12:58:03Z

In reply to nevent1q…94as
_________________________

Imagine the outcry if Russia did that to Zelensky...

"New York teachers stunned to learn some students can’t ...

2026-01-01T07:37:02Z

"New York teachers stunned to learn some students can’t read time on old clocks after phone ban comes into play":

https://www.independent.co.uk/news/world/americas/new-york-phone-ban-clock-time-b2891919.html

None here. (If I understand correctly, using the exploit would ...

2025-12-27T21:50:42Z

In reply to nevent1q…8e5v
_________________________

None here. (If I understand correctly, using the exploit would generate many connections and nothing else.) Not even authentication attempts. Just a few IPs running commands (buildinfo, listDatabases, ismaster, etc.) without prior authentication.

They seem to be looking for databases exposed to the Internet and not protected in any way? Unless something's wrong with the honeypot...

Not related to the latest MongoDB vulnerability (since it ...

2025-12-27T10:09:11Z

Not related to the latest MongoDB vulnerability (since it doesn't require authentication), but does anyone know of a good MongoDB honeypot? You know, one that masquerades as a real MongoDB database server and logs the login attempts while returning a "bad credentials" error? (It clearly won't be able to log the passwords because of SCRAM but anything else would be useful.)

All I could find was a logging proxy to a real MongoDB server or a MongoDB server running in a Docker image - but I don't want that.

"What if Bitcoin was one big mining company?": ...

2025-12-26T16:30:38Z

"What if Bitcoin was one big mining company?":

https://no01.substack.com/p/what-if-bitcoin-was-one-big-mining

You'd be insane buying its shares.

Yes

2025-12-25T12:11:22Z

In reply to nevent1q…dxcm
_________________________

Yes

Privacy settings are important. ...

2025-12-25T06:46:35Z

Privacy settings are important.

"Bavarian pensioner lays trap to catch phone fraudster who ...

2025-12-18T19:49:04Z

"Bavarian pensioner lays trap to catch phone fraudster who was out for his gold":

https://www.theguardian.com/world/2025/dec/18/german-pensioner-lays-trap-catch-fraudsters-after-gold

Oh, for God's fucking sake, the overly-indebted governments ...

2025-12-16T16:13:30Z

In reply to nevent1q…v4e0
_________________________

Oh, for God's fucking sake, the overly-indebted governments are so desperate to hunt down every possible cent of income that they're willing to tax robots...

Well, before they were serving ads. Same difference.

2025-12-16T16:10:16Z

In reply to nevent1q…hp0x
_________________________

Well, before they were serving ads. Same difference.

"Artificial intelligence and natural stupidity"

2025-12-11T18:50:26Z

In reply to nevent1q…55d0
_________________________

"Artificial intelligence and natural stupidity"

Indicators that your machine has been infected with a virus: - ...

2025-12-10T10:17:03Z

In reply to nevent1q…zee4
_________________________

Indicators that your machine has been infected with a virus:

- The computer slows down.

- The computer beeps.

- The OS doesn't load.

- The BIOS logo changes. (WTF?!)

- The computer freezes, has BSODs, etc.

(I thought these were indicators that you're infected with CrowdStrike.)

- A virus can infect only with the help of the user (I can argue ...

2025-12-10T10:14:56Z

In reply to nevent1q…wwr7
_________________________

- A virus can infect only with the help of the user (I can argue this one for hours).

- MBR-infecting viruses are very widespread and very hard to remove.

- Macro viruses infect templates. (Well, they did 3 decades ago.)

- A logic bomb is a kind of virus.

- Ransomware is a kind of virus.

Indicators of a Trojan infection: - Your DVD drive opens and ...

2025-12-10T10:13:05Z

In reply to nevent1q…8w6g
_________________________

Indicators of a Trojan infection:

- Your DVD drive opens and closes by itself.

- Your screen blinks or the picture turns upside down.

- The wallpaper changes.

- Your printer starts printing.

- Your screensaver changes.

- The sound level of your computer keeps changing up and down.

- Your mouse buttons swap.

- The Windows Start button disappears.

- The Windows taskbar auto hides.

- The keyboard and mouse hang.

Oh, good, now that we know all the symptoms we can determine for sure if we have a Trojan horse on our machine or not.

- Attackers can enter your computer/phone via Bluetooth. - ...

2025-12-10T10:09:41Z

In reply to nevent1q…u909
_________________________

- Attackers can enter your computer/phone via Bluetooth.

- Attackers hide behind 13-14 chained proxies.

- Attackers turn your computer into an FTP server for illicit goods.

- The purpose of a rootkit is to let the attacker execute everything as root.

- If you click a link sent to you by the attacker, your machine ...

2025-12-10T10:08:03Z

In reply to nevent1q…x435
_________________________

- If you click a link sent to you by the attacker, your machine will be immediately infected.

- Like many others, the lector is confusing multi-factor authentication with two-step verification.

- Always scan the files that you have received via e-mail. (Nevermind that AV does this on-access.)

- Never use public WiFis because the attacker can intercept and MiTM your traffic. Oldie but goldie.

- Malware runs automatically from USB drives when these are inserted.

I'm attending an on-line lecture on "cyber hygiene". ...

2025-12-10T10:05:05Z

I'm attending an on-line lecture on "cyber hygiene". The lector is some old guy who used to be in the military and now works for an infosec company. You wouldn't believe the "useful" stuff I learned there. 👇

Obviously, since we still have directory traversal and SQL ...

2025-12-08T08:14:21Z

In reply to nevent1q…drye
_________________________

Obviously, since we still have directory traversal and SQL injection vulnerabilities in 2025.

The FIFA Peace Prize is a prestigious prize rarely awarded to ...

2025-12-06T07:22:58Z

The FIFA Peace Prize is a prestigious prize rarely awarded to people who have stopped conflicts between opposing soccer teams, right?

No but I have strategies and tools I wish I didn't (have to).

2025-11-27T07:58:31Z

In reply to nevent1q…unp6
_________________________

No but I have strategies and tools I wish I didn't (have to).

I don't know which brand it is, but there is some brand of ...

2025-11-24T20:09:54Z

In reply to nevent1q…drj7
_________________________

I don't know which brand it is, but there *is* some brand of Android TV that exposes the adb interface directly to the Internet. In practice, this means that just by knowing the IP address of the device, you can log into it from anywhere in the world - and log in as root and no password!

There is, of course, a worm/botnet that exploits this. I'm tracking these attacks with my ADB honeypot:

https://pandora.nlcv.bas.bg/grafana/d/6Fh36QEmk/adbhoneypot?orgId=1

Trust me, you don't want to date me.

2025-11-21T12:15:51Z

In reply to nevent1q…wuqe
_________________________

Trust me, you don't want to date me.

Siri actually had funny responses to the command "Open the ...

2025-11-20T22:54:13Z

In reply to nevent1q…5aw0
_________________________

Siri actually had funny responses to the command "Open the pod bay doors" but Apple later removed them.

https://www.youtube.com/watch?v=YAjhDx4yoAA

Well, can you blame him? He was an expert in collecting underage ...

2025-11-16T15:32:19Z

In reply to nevent1q…ysqv
_________________________

Well, can you blame him? He was an expert in collecting underage girls - not in cybersecurity...

We (F-PROT) had something similar, minus the telemetry. The ...

2025-11-14T05:59:16Z

In reply to nevent1q…ygf7
_________________________

We (F-PROT) had something similar, minus the telemetry.

The reason for them was to speed up the scanning process. They were short and fast and easy to check. Signature not present - just don't bother scanning any further. Signature present - that by itself doesn't warrant a report but triggers our other, more precise but slower malware identification algorithms.

I don't know what Microsoft is using these for but this might be the idea behind them too.

I don't think that it works any more; 94.74.164.136 seems to ...

2025-11-12T20:26:37Z

In reply to nevent1q…7nk0
_________________________

I don't think that it works any more; 94.74.164.136 seems to have been nuked.

You "scanned the internet". Lucky you. I couldn't get ...

2025-11-06T10:58:13Z

In reply to nevent1q…fsue
_________________________

You "scanned the internet". Lucky you. I couldn't get permission to scan even my own organization. 😢

Ahh, the good old times when men were real men and laser printers ...

2025-11-04T13:47:19Z

In reply to nevent1q…wj0y
_________________________

Ahh, the good old times when men were real men and laser printers were real printers.

The cybersecurity awareness month is over. You may resume using ...

2025-11-01T15:21:57Z

The cybersecurity awareness month is over. You may resume using your dog's name as your password. Just make sure to use a different dog for each account and also use a dog manager.

Q: Why is inflation low but the prices keep going up? A: Because ...

2025-10-27T06:55:35Z

In reply to nevent1q…xwdm
_________________________

Q: Why is inflation low but the prices keep going up?
A: Because nobody checks the CPI at the grocery store.

Sending information to yourself that will disappear after a ...

2025-10-25T04:52:51Z

In reply to nevent1q…yjew
_________________________

Sending information to yourself that will disappear after a while? I already have that; it's called "memory".

When I was there (late '90s), I remember visiting lake ...

2025-10-21T17:46:57Z

In reply to nevent1q…3u2t
_________________________

When I was there (late '90s), I remember visiting lake Mývatn, which I was told meant "Mosquito lake". The damn insects weren't biting but there were thick clouds of them and you literally couldn't breathe (they got into your nose and mouth) unless you were wearing a special face net, like those the beekeepers use.

There was. It lasted only a few hours. But a bunch of companies, ...

2025-10-20T21:14:43Z

In reply to nevent1q…09sy
_________________________

There was. It lasted only a few hours. But a bunch of companies, web sites, games, and other services got screwed up while it lasted.

It's always DNS.

Heroin?! In this economy?!

2025-10-17T13:21:20Z

In reply to nevent1q…a5wa
_________________________

Heroin?! In this economy?!

"US gov't admits F-35 is a failure": ...

2025-10-14T19:48:17Z

"US gov't admits F-35 is a failure":

https://responsiblestatecraft.org/f-35-failure/

You think the US government buying a stake in Intel was ...

2025-10-13T11:04:31Z

You think the US government buying a stake in Intel was nationalization/socialism?

How about the Dutch government taking the *whole* of Nexperia (for nothing, apparently)?

"Dutch government takes control of Chinese-owned chipmaker Nexperia in ‘exceptional’ move":

https://lite.cnn.com/2025/10/13/tech/dutch-government-china-nexperia-chipmaker-intl

SCR? Ah, yes, this is an old attack. Those are EXE files ...

2025-10-08T16:17:38Z

In reply to nevent1q…xlmu
_________________________

SCR? Ah, yes, this is an old attack. Those are EXE files internally. They are supposed to be the programs that are run when the screen saver function is activated - but in practice, you can run one at any time just by double-clicking on it. It's a perfectly normal executable; it's just that many people wouldn't expect one to reside in a file that doesn't have an EXE extension.

(Well, in fact many people wouldn't see the extension at all, because by default Windows doesn't display them.)

Ah, what is a Windows screenshot file?

2025-10-08T04:45:20Z

In reply to nevent1q…3t5j
_________________________

Ah, what is a Windows screenshot file?

The also need one mf who knows how people work, because none of ...

2025-09-30T20:11:05Z

In reply to nevent1q…cwjy
_________________________

The also need one mf who knows how people work, because none of the above four is any of that.

It will be very hard to keep it non-violent. Don't forget ...

2025-09-21T19:53:54Z

In reply to nevent1q…cexc
_________________________

It will be very hard to keep it non-violent. Don't forget that nearly half the country voted for him and is very happy with what he's doing. There are likely to be counter-protests and the two sides are likely to clash, resulting in violence.

As an aside, remember that a revolution has *never* succeeded if at least part of the armed forces (police, military) haven't joined the revolutionaries. There doesn't have to be an armed clash - but at least the silent support of the armed forces is needed.

Sometimes it is not obvious that an article is paywalled. E.g., ...

2025-09-21T19:45:12Z

In reply to nevent1q…gs9e
_________________________

Sometimes it is not obvious that an article is paywalled. E.g., if you click on it from Google News, you get to read it - but if you pass the URL to somebody else and they click that, they'll hit a paywall. Or the site will let you read a couple of articles for free but then you'll hit a paywall (even if you try to read the articles you've read before).

There are browser add-ons that warn you about paywalled links but, more importantly, this extension:

https://chromewebstore.google.com/detail/remove-paywalls/ghkdkllgoehcklnpajjjmfoaokabfdfm

lets you bypass the paywall (if possible) by going to an archived copy of the page you're looking at. There's probably an equivalent add-on for Firefox.

You got off easy. They were planning to make these vaccines ...

2025-09-20T19:08:24Z

In reply to nevent1q…xfhr
_________________________

You got off easy. They were planning to make these vaccines available only with prescription - but that proposal got voted down.

Fortunately, virtually nobody uses CrowdStrike, right? Right?

2025-09-16T14:41:55Z

In reply to nevent1q…d69g
_________________________

Fortunately, virtually nobody uses CrowdStrike, right? Right?

I wonder how big the ransom was...

2025-09-13T06:21:40Z

In reply to nevent1q…kacm
_________________________

I wonder how big the ransom was...

That's generally the case every time there is a large ...

2025-09-12T21:39:05Z

In reply to nevent1q…lu8w
_________________________

That's generally the case every time there is a large congregation of people competing for a limited resource.

A narcissist is someone loves himself. A sociopath is someone who ...

2025-09-12T21:37:35Z

In reply to nevent1q…6mdj
_________________________

A narcissist is someone loves himself. A sociopath is someone who hates society. While a narcissist is so much occupied with himself that he's often indifferent or even hostile to society, that's not necessarily the case. Similarly, a sociopath who hates society does not necessarily love himself; he might be hating himself too.

I think you should accept and write a review along the lines of ...

2025-09-12T15:16:42Z

In reply to nevent1q…hqhf
_________________________

I think you should accept and write a review along the lines of "Not on the blockchain, 1 out of 10 stars".

I think I watched a couple of episodes of this thing. (I guess it ...

2025-09-12T11:38:05Z

In reply to nevent1q…6h7y
_________________________

I think I watched a couple of episodes of this thing. (I guess it is the same series because it was about him and you were in it.)

What a very strange person... Most other former criminals that I've seen express remorse (real or fake) about what they did, or at least about themselves for doing something stupid and getting caught. This one was like "yeah, I did that thing, no big shit". As if he was saying that some people have pet dogs, he swats people, that sort of stuff.

I wouldn't even call him "evil". For me, an evil person is someone who knows that they're doing bad things and enjoys it. This guy seems utterly incapable of realizing what is bad. A psychopath, I guess? Severe lack of empathy and understanding of social norms - not even enough to reject them because he disagrees with them.

The society needs to be protected from people like him. That doesn't necessarily mean keeping him in jail - it means keeping him doing stuff he would find enjoyable while being physically incapable of harming others.

He needs medical help - but I doubt that he can be helped and am pretty sure that he wouldn't seek such help anyway.

The intelligence is definitely artificial. As in fake. ...

2025-09-12T06:49:55Z

The intelligence is definitely artificial. As in fake.

There's always 0patch.com and massgrave.dev.

2025-09-10T05:45:39Z

In reply to nevent1q…al9s
_________________________

There's always 0patch.com and massgrave.dev.

"WiFi signals can measure heart rate—no wearables ...

2025-09-05T06:13:11Z

"WiFi signals can measure heart rate—no wearables needed":

https://news.ucsc.edu/2025/09/pulse-fi-wifi-heart-rate/

By law, in Russia every car must have a dashboard camera. I ...

2025-09-04T16:20:29Z

In reply to nevent1q…hn7w
_________________________

By law, in Russia every car must have a dashboard camera. I wonder if... ah, nevermind.

Well, it's hardly surprising, given that even DEFCON was ...

2025-09-03T17:20:23Z

In reply to nevent1q…w9lx
_________________________

Well, it's hardly surprising, given that even DEFCON was duped by AI slop.

It lasted only 35 seconds?! Uhm, that's shorter than the time ...

2025-09-02T16:39:02Z

In reply to nevent1q…d8z7
_________________________

It lasted only 35 seconds?! Uhm, that's shorter than the time the user needs to decide "hmm, the page isn't loading for some reason; let me click the Refresh button".

"Block apps with dangerous permissions"? This will fail, ...

2025-09-02T16:32:24Z

In reply to nevent1q…4nzw
_________________________

"Block apps with dangerous permissions"? This will fail, according to some research a colleague of mine did more than a decade ago.

Basically, Permission1+Permission2 might be considered a dangerous combination and an app requesting them might be blocked - but you just release 2 apps, each using only one of the permissions, and when both apps are installed on the same device, they cooperate to do the malicious thing. Don't have a paper to point to (it was a lecture at an anti-virus workshop) but you get the idea. Works against iOS, too.

Yay, only 8 in Bulgaria, most of them belonging to foreign ...

2025-08-28T10:36:56Z

In reply to nevent1q…vxcu
_________________________

Yay, only 8 in Bulgaria, most of them belonging to foreign companies, 3 of them in the same company. A1 is a telecom; these are probably residential IPs - but maybe somebody ought to call the US bank and the German insurance company here and tell them that they have a little bit of a problem...

88.203.128.230,Bulgaria,Sofia,A1 Bulgaria EAD
195.191.94.244,Bulgaria,,Bulgarian-American Credit Bank JSC
92.247.124.120,Bulgaria,Sofia,Ultracom Ltd.
213.169.55.20,Bulgaria,,A1 Bulgaria EAD
91.216.174.52,Bulgaria,,ZAD Allianz Bulgaria AD
91.216.174.42,Bulgaria,,ZAD Allianz Bulgaria AD
91.216.174.53,Bulgaria,,ZAD Allianz Bulgaria AD
213.169.55.31,Bulgaria,,A1 Bulgaria EAD

Yay! Somebody has finally found a way to use a chatbot for ...

2025-08-28T06:33:49Z

In reply to nevent1q…gw0q
_________________________

Yay! Somebody has finally found a way to use a chatbot for something profitable.

There are two ways AI can surpass humanity: 1) AI's ...

2025-08-27T19:56:57Z

In reply to nevent1q…cnmn
_________________________

There are two ways AI can surpass humanity:

1) AI's intelligence increases exponentially.

2) Humanity's intelligence decreases exponentially.