@cyberworm.uk · 47mgithub is the plains for the digital hunter gatherer. private tracker creds? github. api keys? github. and the advent of AI coding and people who don't know what they're doing hoping the computer does it for them, "make no mistakes", has really made a new boom in a resource that had dwindled. 000
@cyberworm.uk · 19hthis is a paragraph from their "study resource" on the dangers of socialism. it's so funny to me that they've always got to concede that Marx was basically right. and they're serious scholars of Russian history, so obviously they mix up Lenin and Putin in their citations. eh, they're both Vladimirs! 000
@cyberworm.uk · 21hAI means that right wing cranks will never again grace us with Graphic Design Is My Passion output like this. This is what they're taking from us, look at this beautiful hate-filled screed. 110
@cyberworm.uk · 22hYeah. The articles report chart metrics being smashed by a song which has no broader cultural impact. So it is a novel/stark indicator of it's loss of meaning as a cultural metric but the decline was slow. I think their interpretation of why is backwards. Performance targets are bad metrics, etc. 130
@cyberworm.uk · 23hYeah, I mean I'm sure we're both well aware that you can be consumed by interest in a subject that most people never even consider but that's always been true for us and for them, I think the shift in what charts mean to people and how people find and listen to music is new. 120
@cyberworm.uk · 23hI think the song seems to have had a *profound* impact on one particular Rolling Stone journalist... 120
@cyberworm.uk · 23hI saw this mentioned in passing on the reporting around the shinyhunters suspect, described as a "trick". If your so-called "WAF" is tricked by percent encoding, a normal and intended feature of HTTP, it's not a WAF. Also, you've had months to patch. A WAF isn't a suitable replacement for patching. 020
@cyberworm.uk · 29/09/2026I've seen recent examples of AI hallucinating details of software. Comments that lie about what the code does, documentation that claims features that don't exist, etc. 100
@cyberworm.uk · 29/09/2026like I said, if "people will accept it" is the standard then there's nothing further to discuss. 000
@cyberworm.uk · 29/09/2026what is "the thing"? is the IT intern legally liable? if your standard is "people will accept it" then you're right and there's nothing further to discuss. 100
@cyberworm.uk · 29/09/2026people have always accepted cheaping out on infrastructure for a thing that looks convincingly like the real thing. its lucky there's no broader cultural, societal or industrial downside, just feelings. 100
@cyberworm.uk · 29/09/2026A "proper" GUI is something designers spend time on, there are sets of requirements that are vague and hard to define, it goes back and forth between designers and client/users, then cycles of UAT, etc. It's that vs a thing that tries to look like the former thing without any of the process. 100
@cyberworm.uk · 29/09/2026The kind of shit marketing companies are doing to influence LLM output (www.404media.co/it-is-trivia...) will come for your software outputs too, some of it will just prefer including Mega Corp's libraries and APIs (with subscriptions and rate-limits) but just as plausible is a malicious actor.404media.coIt Is Trivially Easy to Use Reddit to Manipulate AI Search, Research Suggests"We show that a tiny snippet—just 13 words—of retrieved text on a UGC website like Reddit, Wikipedia, Quora, or Facebook can change AI agents to output spam / scam content pretty consistently." 000
@cyberworm.uk · 29/09/2026The kind of problems the future holds here with poisoning training data, supply chain attacks, etc. It's not a mature field. Consider this (zdimension.fr/everyone-get...) where a bunch of examples of an algorithm are plagiarised from a single, wrong example. LLMs then faithfully reproduce the fault.zdimension.frEveryone gets bidirectional BFS wrongPeople really need to stop blindly copying code from the Internet. 120
@cyberworm.uk · 29/09/2026in the hacker world "enterprise software" has always been a euphemism for "shit", like IoT came to be. it's kind of already a market for lemons, so a race to the bottom there makes sense. 130
@cyberworm.uk · 29/09/2026its not, its just people accepting a worst quality product that has fewer quality controls and crossing their fingers it doesn't blow up while they're in charge and liable. 2130
@cyberworm.uk · 29/09/2026software hasn't fundamentally changed. any such software system could have existed prior to AI and any company would have jumped at the savings offered by that. somewhere, something of value is being lost. replacing the department with a simulacrum depends on people accepting the loss of value. 1131
@cyberworm.uk · 29/09/2026I'm re-iterating my question but with a further exclamation mark. This sounds like they shelled the web app? And nobody noticed for months, neither OpenAI nor the victim org? Because write access and command execution seems like someone you'd want to spot sooner, or at all even! 000
Reposted by The Mind Doctor @birdrespecter.bsky.social · 28/09/2026How does this story keep getting more insane 126956
@cyberworm.uk · 28/09/2026i think throwing minorities under the bus to get into power at an extremely precarious time for them is evil. im happy to say evil. 000
@cyberworm.uk · 28/09/2026so you need to empower evil to then be able to hold it to account? will it be more accountable when empowered or does it seem like it'll simply vindicate throwing minorities under the bus as a strategy and they won't need to listen for another few years? seems like a really stupid thing to think. 000
@cyberworm.uk · 28/09/2026if i was a grand master tactical strategist adult, this might have already occurred to me. so, you obviously already know the answer. if i did make a good point, you'd dismiss it as "yapping" anyway. 000
@cyberworm.uk · 28/09/2026failing to grasp that the problem we've been outlining is your insisting that political change comes solely through positively voting for a specific candidate. yeah, it's all yapping if you can't read (on account of not being an adult) and not because of what is being said. 010
@cyberworm.uk · 28/09/2026no you're not an adult. scolding people on the internet for not standing up for evil. you've convinced yourself that it is rational, tactical and mature but the reality is that your strategy is why the system produces bad candidates who feel safe to throw minorities under the bus in the first place. 010
@cyberworm.uk · 28/09/2026tactical voting taken to its logical extreme: "given the choice between evil and mega evil, obviously you need to stand up for evil." questioning the system that produced the candidates is forbidden. the only agency you can express is positively voting for one! no other political agency allowed. 010
@cyberworm.uk · 28/09/2026fwiw, was maybe the other way around. arrest was 15th and a bunch of their posts about the breach, including the deface page, seem to reference the Dutch guys alias. krebsonsecurity.com/2026/09/dutc... 010
Reposted by evacide @evacide.bsky.social · 28/09/2026Meta Muse appears to read your Apple messages and upload them to the cloud even if you explicitly tell it not to: appleinsider.com/articles/26/...appleinsider.com 1001910980
Reposted by Raphael Satter @raphae.li · 28/09/2026This follows Brian Kreb's scoop this morning identifying the man as reformed hacker Pepijn van der Stap: krebsonsecurity.com/2026/09/dutc... More from us to come soon:krebsonsecurity.comDutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation – Krebs on Security 173
@cyberworm.uk · 28/09/2026this context makes the escalation a potential reaction, which might put it in a category of reckless rather than bold. 110
Reposted by lauren @lauren.rotatingsandwiches.com · 28/09/2026"I installed the Give Away Your Personally Identifying Info app made by the We Love Stealing Your Personally Identifying Info Corp headed by Mr. Steal Your Personally Identifying Info and it gave away all my personally identifying info" 342548541
@cyberworm.uk · 27/09/2026kind of telling that Zuck's new claim that everyone will have an AI agent in 5 years, etc, etc. is a very Elon Musk promise. its always just on the horizon, a bright future free of problems close enough to benefit you personally but not imminent enough to require real results. 010
Reposted by Catalin Cimpanu @campuscodi.risky.biz · 26/09/2026That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited zero-days is apparently real: www.reddit.com/r/Citrix/com... Confirmation 1: mastodon.social/@GossiTheDog... Confirmation 2: www.linkedin.com/feed/update/...reddit.comFrom the Citrix community on RedditExplore this post and more from the Citrix community 13925
Reposted by Spencer Ackerman @attackerman.bsky.social · 26/09/2026Ha ha that’s gross and should make everyone uncomfortable, anyway, Rahm presided over a Chicago police black site, lied about what it was and then I sued the Chicago police for its records that proved it:theguardian.comHoman Square revealed: how Chicago police 'disappeared' 7,000 peopleExclusive: Lawsuit exposes scale of detention at off-the-books interrogation warehouse while attorneys describe find-your-client chase ‘from a Bond movie’ 9147361723
@cyberworm.uk · 26/09/2026is it a branding thing, or what, that they have repeatedly misspelled their own company name as "kitewroks"? 030
@cyberworm.uk · 26/09/2026its crazy how much suspicious shit the post doesn't even mention, like he was an intern at Neuralink in 2024 (how is that whole category of Elon promises going? the brain chip that kills monkeys) or that the "cybersecurity" company that he got fired from is extremely dodgy in itself. 010
@cyberworm.uk · 26/09/2026the NSA leaks took all the ghosts out of the computer, its like how the flying saucer changed everyone afters perception of encounters with the unexplained. nobody was encountering fairies and such anymore, it was all space ships and super advanced technology. e.g. thehill.com/policy/techn...thehill.comWatchdog: Attkisson wasn’t hacked, had ‘delete’ key stuckAn IG report disputes Sharyl Attkisson’s claims that she was targeted by the government. 000
@cyberworm.uk · 25/09/2026This is sad and lazy from Ars. Paper says implementation can be improved, is an upper bound. FAQ says, AI/GPU could make the implementation faster. Ars states "because". Also conflates faster implementation with lower security levels. *Desperately* trying to suck off AI in a story unrelated to it. 010
Reposted by farce majeure @hongpong.bsky.social · 25/09/2026mouse.dev/blog/muse-ru... the Meta Muse AI will export its whole environment including ssh keys if you askmouse.devI asked Meta’s Muse for its filesystem and it sent me 6.8 GB | MouseI asked Muse to archive the files it could see and send them to my Google Drive. It did. 1154
Reposted by flyingrodent @flyingrodent.bsky.social · 25/09/2026Presumably this is the 97 million files that couldn’t be easily lost or destroyed www.bbc.co.uk/news/article...bbc.co.ukDiscovery of 97 million files related to SAS inquiry 'regrettable', MoD saysIt comes after the inquiry's chair called the disclosure - three years into the investigation - "troubling". 78226
Reposted by Oregon 🕎🎲 @oregonthedm.bsky.social · 25/09/2026Most riveting thing I've seen all week 382112683041
@cyberworm.uk · 25/09/2026I know this is listicle crap but the NYT are watching mostly dogshit TV. 000
@cyberworm.uk · 25/09/2026digging into the archives for some of my very early and bad C code, which generated a format string that would write some target value to some target loction. we put format strings in your format strings, etc. 110
@cyberworm.uk · 25/09/2026a format string exploit? that *is* ancient. let's be honest, %n was a misfeature. 120
@cyberworm.uk · 25/09/2026(* Labour has dramatically shifted right to assume many traditional Tory policy positions over the last ~5 years, so not that strange) 000
@cyberworm.uk · 25/09/2026it's been a long time coming. there's been a decades long project of slowly choking the BBC. controlling it by threatening to axe the budget has been a disciplinary tool that successive governments have threatened it with. that said, it was chiefly a Tory thing so it's strange* to see Labour do it. 101