iiinova — where your digital self keeps evolving

Reposted by Arrigo Triulzi

JP Aumasson @aumasson.jp · 25/09/2026

on Markku breaking bad crypto from China www.bfswa.blog/p/cryptograp...

bfswa.blog

Cryptographic mass murder

China’s cryptography standardization project

042

Arrigo Triulzi @cynicalsecurity.bsky.social · 21/09/2026

By the time I get Markdown to do what I want I am basically writing LaTeX…

060

Reposted by Arrigo Triulzi

Robert Graham @erratarob.bsky.social · 16/09/2026

"Anthropomorphizing" the HuggingFace incident is a problem. In most respects, the AI no more went rogue than your car went rogue when you failed set the brake and it started rolling down the hill. The metaphysics here is that the AGENCY and the REASONING are two different parts.

1136

Arrigo Triulzi @cynicalsecurity.bsky.social · 16/09/2026

Dear #Apple, Who on Earth came up with the idea of running LLM quantisation of all my data after upgrading to #macOS 27 making it impossible to run anything which needs I/O like Parallels? The machine is floored and, after 24hrs, it is still at 7.1% of the job. Can the adults come back, please?

$plutil -extract SpotlightKnowledgeV2.embeddingGenComplete raw ~/Library/Preferences/com.apple.spotlightknowledge.plist | awk '{printf "%.1f%%\n", $1 * 100}' 7.1%$

260

Reposted by Arrigo Triulzi

Robin Berjon @robin.berjon.com · 27/08/2026

The US State Department has designated A/I, a small Italian provider of open source infrastructure for political activists, as a global terrorist group. They will reach into our very homes to grab us — if we let them. www.state.gov/releases/off...

state.gov

Designation of Autistici/Inventati as a Specially Designated Global Terrorist - United States Department of State

Today, the Department of State, in partnership with the Department of the Treasury, is announcing the designation of Autistici/Inventati as a Specially Designated Global Terrorist. Autistici/Inventati...

619787

Reposted by Arrigo Triulzi

Andrea Barisani @andreabarisani.bsky.social · 14/08/2026

The TamaGo 1.26.6 release is so huge that a screenshot of its changes does not fit my screen! This release features support for LoongArch 64-bit on Loongson 3A5000/3A6000 + LS7A and major improvements to Microchip LAN969x support. Go check it out: github.com/usbarmory/ta...

github.com

Release v1.26.6 · usbarmory/tamago

This release features: support for a new architecture and related SoC: LoongArch 64-bit on Loongson 3A5000/3A6000 + LS7A major improvements to Microchip LAN969x support transition of Ethernet PHY ...

051

Reposted by Arrigo Triulzi

Zack Whittaker @zackwhittaker.com · 13/08/2026

New, by me: Apple told me it's sending out threat notifications to customers in 110 countries saying they've been targeted with spyware. This latest batch also features a new push notification, warning users to take action and what to do next. Bypass for ad-blockers: web.archive.org/web/20260813...

techcrunch.com

If Apple sends you a push notification alerting you to a spyware attack, take it seriously | TechCrunch

Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone's devices.

213888

Reposted by Arrigo Triulzi

Marco Arment @marcoarment.bsky.social · 14/08/2026

My new app is now released! Unforgetful: marco.org/2026/08/14/unforgetful Imagine if Reminders was optimized for ADHD, procrastination, and forgetfulness. Never lose a task. You'll always be reminded, with zero shame or judgment. That's Unforgetful.

3016522

Reposted by Arrigo Triulzi

Zack Whittaker @zackwhittaker.com · 12/08/2026

New: A security researcher called Nightmare Eclipse has published details of a new zero-day bug in Windows, seemingly undettered by Microsoft's legal threat earlier this year. The bug affects latest versions of Windows, and currently no patch. Bypass for ad-blockers: web.archive.org/web/20260812...

techcrunch.com

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug | TechCrunch

This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.

23914

Arrigo Triulzi @cynicalsecurity.bsky.social · 13/08/2026

New pastime when bored: select "This is AI slop" on all the adverts I get shown on LinkedIn. Probably not even lying…

020

Reposted by Arrigo Triulzi

Chris Wysopal @weld.bsky.social · 13/08/2026

This is a pretty big shift in US cyber policy. The White House is setting up a program that would let private cybersecurity companies conduct gov-authorized operations against foreign cybercriminal groups, inc surveillance & disruption of their infrastructure www.whitehouse.gov/presidential...

whitehouse.gov

Expanding Capabilities to Combat Transnational Cyber-Enabled Crime

MEMORANDUM FOR THE VICE PRESIDENT THE SECRETARY OF STATE THE SECRETARY OF THE TREASURY THE SECRETARY OF WAR THE ATTORNEY GENERAL THE SECRETARY OF COMMERCE

53125

Arrigo Triulzi @cynicalsecurity.bsky.social · 11/08/2026

Missing detail: the "ruse" was actually because he followed a trail of hamburgers into the food truck and couldn't get him out.

010

Reposted by Arrigo Triulzi

Grant W. Trent @grantwtrent.bsky.social · 11/08/2026

I recall the account I lifted this from but not sure who to credit. :/ A particle accelerator+model train set must be some kind of winner though. :D "Unique equipment used to position the cyclotron beam targets -- the Crocker Laboratory at U.C. Davis."

"Unique equipment used to position the cyclotron beam targets -- the Crocker Laboratory at U.C. Davis."

58119

Reposted by Arrigo Triulzi

Riding With Robots @ridingrobots.bsky.social · 10/08/2026

How can you not admire the Voyagers' seemingly eternal second lives, if nothing else as a tribute to engineering? From NASA: Engineers have freed up power on Voyager 2 by simultaneously turning off certain devices and substituting them with lower-power alternatives. science.nasa.gov/blogs/voyage...

Illustration showing a Voyager robotic spacecraft, bristling with antennas and instruments, in deep space.

48834

Reposted by Arrigo Triulzi

Stefano Zanero @raistolo.bsky.social · 04/08/2026

Cyber insurer (Chatham house forbids me from saying who) at BH CISO summit: “so far this year 0 payouts for claims even remotely connected to a AI-driven breach, 85% of payouts related to social engineering”. Sobering statistic.

36431

Arrigo Triulzi @cynicalsecurity.bsky.social · 09/08/2026

Escaping containment seems to have become fashionable marketing. One hopes the nuclear reactor industry or, indeed, the chemicals industry, don’t pick up on the trend.

084

Reposted by Arrigo Triulzi

GrapheneOS @grapheneos.org · 06/08/2026

Revolut recently banned using GrapheneOS without any justification. They're falsely claiming to do be doing it for security reasons. In reality, they're enforcing licensing Google Play. Revolut doesn't enforce security standards. It runs on Android 9 with no patches since 2018.

319736

Arrigo Triulzi @cynicalsecurity.bsky.social · 06/08/2026

I guess nobody really expected Copilot to hack anything, did they? Now Gemini I am more disappointed in, perhaps it found the original motto, Do no Evil”, in the learning corpus and believed it?

010

Arrigo Triulzi @cynicalsecurity.bsky.social · 03/08/2026

Can I suggest dropping pineapple pizza to the Pentagon for their "creative and unconventional ideas" competition?

100

Reposted by Arrigo Triulzi

PoemOfTheDay @poemoftheday.bsky.social · 31/07/2026

📖 MONTEZUMA. 👤 Richmond, Hiram Hoyt (1900—1982) As mariner upon the rocky sea, Without a compass, helm, or heavenly hope, A part of Earth's great ancestry to be Upon the plains of Shinar; and they grope In nature's darkness; they have lost the way

versologie.cz

📖 MONTEZUMA. 👤 Richmond, Hiram Hoyt (1900—1982)

112

Arrigo Triulzi @cynicalsecurity.bsky.social · 31/07/2026

The AI Singularity might end up being the name of the financial crash when someone actually shouts "the Emperor is naked"...

030

Arrigo Triulzi @cynicalsecurity.bsky.social · 30/07/2026

If you use WireGuard on FreeBSD you urgently need to patch¹. And I mean urgently. __ ¹ security.freebsd.org/advisories/F...

II. Problem Description

After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded.
The driver thus silently accepted packets with an invalid Poly1305
authentication tag.

III. Impact

A remote attacker who can send UDP packets to a WireGuard endpoint, and who can guess the bounds of the receiver's replay window, can inject forged or modified transport data packets into the tunnel.

A remote attacker who can intercept WireGuard packets bound for a FreeBSD host can modify the ciphertext and authenticated data without detection by the receiver.

062

Reposted by Arrigo Triulzi

Andy Scollick @andyscollick.bsky.social · 24/07/2026

Fire danger forecast between 22 and 29 July Very extreme conditions dominate southwestern France and extend into northern Spain, with additional pockets across Portugal and the British Isles and Ireland.

154

Arrigo Triulzi @cynicalsecurity.bsky.social · 24/07/2026

The lyrics of "Spirits in a Material World"¹ by The Police resonate more and more… To think it was the height of the Cold War and we thought it was bad. We had seen nothing :( __ ¹ genius.com/The-police-s...

[Verse 1]
There is no political solution
To our troubled evolution
Have no faith in constitution
There is no bloody revolution

[Chorus]
We are spirits in the material world
Are spirits in the material world
We are spirits in the material world
Are spirits in the material world

[Verse 2]
Our so-called leaders speak
With words, they try to jail you
They subjugate the meek
But it's the rhetoric of failure

[Chorus]
We are spirits in the material world
Are spirits in the material world
We are spirits in the material world
Are spirits in the material world

[Verse 3]
Where does the answer lie?
Living from day to day
If it's something we can't buy
There must be another way
[Outro]
We are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world...

040

Arrigo Triulzi @cynicalsecurity.bsky.social · 24/07/2026

So, @tychotithonus.infosec.exchange.ap.brid.gy ruined my week telling me that Yubikey has been bought by DigiCert. Someone please tell me we have an alternative?

210

Reposted by Arrigo Triulzi

Retro Computers @retrocomps.bsky.social · 24/07/2026

Rogue (DOS, 1984)

ROGUE: The Adventure Game. The game of Rogue was originated by: Michael C. Toy and Kenneth C.R.C. Arnold Adapted for the IBM PC by: John Lane. Significant design contributions by: Glenn Wichman and scores of others. Public Domain Software - 1984, not to be sold. Rogue's Name? Player

4516

Reposted by Arrigo Triulzi

MAGIC @magic-horizon.bsky.social · 24/06/2026

Meet the people behind MAGIC 🎥 This intro video highlights some of the researchers and industry partners working across the MAGIC consortium - bringing together expertise from academia and industry to tackle shared challenges and create new opportunities through collaboration. #MAGICConsortium

012

Reposted by Arrigo Triulzi

Laurent Cheylus @lcheylus.bsky.social · 23/07/2026

Phantomdrive: an open source encrypted USB drive with a stealth mechanism to hide its second partition - Firmware and hardware (PCB) available on GitHub - Project by Ryan Walker #DIY #Infosec #Privacy rootkitlabs.com/2026/06/22/I...

rootkitlabs.com

I'm Building a Secure USB Drive That Hides Itself

This article was written by a human, for humans. Many places don’t respect privacy laws, in certain situations you may be forced to unencrypt …

033

Arrigo Triulzi @cynicalsecurity.bsky.social · 23/07/2026

Is it just me getting Hunt for Red October vibes, when the Soviet Lyra XO tells the Captain “you idiot, you killed us all!”, each time the US Boss says “Big Attack”, “Hige Attack”, etc.?

000

Reposted by Arrigo Triulzi

Jeffrey Lewis @armscontrolwonk.bsky.social · 23/07/2026

Some news! As many of you know, I've been a Distinguished Research Fellow at @fpri.bsky.social consulting with @aaronstein1.bsky.social on space and missile defense. Today it gets much better: the whole freaking open-source research team is joining FPRI full time. (1/4)

59914

Reposted by Arrigo Triulzi

JP Aumasson @aumasson.jp · 16/07/2026

possibly my most inspired post bfswa.substack.com/p/no-country...

bfswa.substack.com

No Country for Old Men & The Road

The Eras Tour, Cormac McCarthy (5/6)

011

Reposted by Arrigo Triulzi

Retro Computers @retrocomps.bsky.social · 10/07/2026

People have been complaining that "In my day, we had to OPTIMIZE our code" since the dawn of computing. Here's a pull quote from 1977. (Source.)

A callout text in the middle of an article that reads: "When you had only a little memory, you wrote clever little programs, and prided yourself on doing something efficiently and elegantly." From ROM: Computer Applications for Living Magazine, Volume 1, Number 2, page 24, the article "Memory, Memory, How Much Memory?" by Stan Veit.

47115

Arrigo Triulzi @cynicalsecurity.bsky.social · 10/07/2026

On "chat control": * LinkedIn: www.linkedin.com/posts/arrigo... * Mastodon (preferred): bsd.network/@cynicalsecu...

000

Arrigo Triulzi @cynicalsecurity.bsky.social · 07/07/2026

Techbros building nuclear reactors is really really not funny…

030

Arrigo Triulzi @cynicalsecurity.bsky.social · 07/07/2026

Options available to Infantino: 1. claim Belgium was not on the court, 2-0 "in absentia", 2. claim the referee made a mistake, score was 1-4, 3. wind speed over legal limit, result invalid, 4. football games on Mondays have to be played again, 5. claim Belgium kit was illegal, 2-0 "kit exception".

110

Arrigo Triulzi @cynicalsecurity.bsky.social · 07/07/2026

The USA plays football as well as it goes to war, clearly.

011

Arrigo Triulzi @cynicalsecurity.bsky.social · 23/06/2026

Nobody ever realised that "all your data are belong to us" should have been read "all your data are belong to US".

101

Reposted by Arrigo Triulzi

Sven-Erik Volberg @volberg.bsky.social · 19/06/2026

Ukraine launches TrophyLab: they are opening access to captured russian weapon technologies for our global partners. Every missile, drone, and vehicle seized on the battlefield is now a source of knowledge for the free world.🧵 1/2 trophylab.mod.gov.ua/en/

15489179