Sign in

Arrigo Triulzi

@cynicalsecurity.bsky.social
498 followers 157 following 974 posts

IT Security, cynically aged. Maths. Some nukes. Longing for Symbolics and Connection Machines. Keeper of Ancient Computing Lore. Wassenaar intangible Ⓐ

PostsRepliesMedia
Reposted by Arrigo Triulzi
JP Aumasson @aumasson.jp · 25/09/2026
on Markku breaking bad crypto from China www.bfswa.blog/p/cryptograp...
bfswa.blog
Cryptographic mass murder
China’s cryptography standardization project
042
Arrigo Triulzi @cynicalsecurity.bsky.social · 22/09/2026
Chtulu only knows what they are trying to do but yes, it seems that they are creating embeddings for everything.
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/09/2026
By the time I get Markdown to do what I want I am basically writing LaTeX…
060
Reposted by Arrigo Triulzi
Robert Graham @erratarob.bsky.social · 16/09/2026
"Anthropomorphizing" the HuggingFace incident is a problem. In most respects, the AI no more went rogue than your car went rogue when you failed set the brake and it started rolling down the hill. The metaphysics here is that the AGENCY and the REASONING are two different parts.
1136
Arrigo Triulzi @cynicalsecurity.bsky.social · 16/09/2026
The fix is to disable the Apple Stupidity daemons with launchctl (exercise left to the reader, no not really… see Alt-text for c&p content ;P ).
UID=$(id -u)

# Disable Apple Intelligence search daemons (user session)
launchctl disable gui/$UID/com.apple.assistantd
launchctl disable gui/$UID/com.apple.assistant_service
launchctl disable gui/$UID/com.apple.assistant_cdmd
launchctl disable gui/$UID/com.apple.siriknowledged
launchctl disable gui/$UID/com.apple.siriinferenced
launchctl disable gui/$UID/com.apple.Siri.agent

# Disable system-wide AI search components (may require sudo)
sudo launchctl disable system/com.apple.contextstored
sudo launchctl disable system/com.apple.modelmanagerd

# Stop the running hybridsearchd process immediately
sudo launchctl bootout gui/$UID/com.apple.hybridsearchd 2>/dev/null || true
sudo pkill -9 hybridsearchd 2>/dev/null || true
031
Arrigo Triulzi @cynicalsecurity.bsky.social · 16/09/2026
Just to show the folly, a couple of images of Activity Monitor...
Activity Monitor output showing the following tasks writing large amounts of data:

hybridsearchd
SetStoreUpdateService
corespotlightd
storagekit
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 16/09/2026
Dear #Apple, Who on Earth came up with the idea of running LLM quantisation of all my data after upgrading to #macOS 27 making it impossible to run anything which needs I/O like Parallels? The machine is floored and, after 24hrs, it is still at 7.1% of the job. Can the adults come back, please?
plutil -extract SpotlightKnowledgeV2.embeddingGenComplete raw ~/Library/Preferences/com.apple.spotlightknowledge.plist | awk '{printf "%.1f%%\n", $1 * 100}'
7.1%
260
Reposted by Arrigo Triulzi
Renaud Lifchitz ⠵ @nono2357.bsky.social · 14/09/2026
[France Identité] Justificatif d’identité à usage unique
france-identite.gouv.fr
justificatif d’identité à usage unique
Le justificatif d’identité à usage unique, remplacez vos photocopies de titre d’identité par un document sécurisé pour éviter les fraudes
112
Reposted by Arrigo Triulzi
Robin Berjon @robin.berjon.com · 27/08/2026
The US State Department has designated A/I, a small Italian provider of open source infrastructure for political activists, as a global terrorist group. They will reach into our very homes to grab us — if we let them. www.state.gov/releases/off...
state.gov
Designation of Autistici/Inventati as a Specially Designated Global Terrorist - United States Department of State
Today, the Department of State, in partnership with the Department of the Treasury, is announcing the designation of Autistici/Inventati as a Specially Designated Global Terrorist. Autistici/Inventati...
619787
Arrigo Triulzi @cynicalsecurity.bsky.social · 27/08/2026
Would you mind checking if we get details of the Chinese warhead design? #askingforafriend
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/08/2026
I don’t understand “gatekeeping” with respect to pasta, it is like calling “gatekeeping” the execution of anyone who likes systemd when the Revolution comes.
200
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/08/2026
would have terrified any kindergarten-age child
100
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/08/2026
It is not gatekeeping, it is the Inquisition.
120
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/08/2026
Probably Pasta Team 6, “Rummo”
011
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/08/2026
“Sydney goes to neutron star” not “neutron star goes to Sydney” :)
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 21/08/2026
The Pasta Tactical Strike Group “Col Parmigian” is on its way.
130
Arrigo Triulzi @cynicalsecurity.bsky.social · 17/08/2026
only when slathered with beryllium spoons
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 16/08/2026
what you rapidly realise is that, if you are sensible, just like with any opinion you need verification. So, you now need two subscriptions. But then you worry about the training data which might be identical, so here comes the third. Then, you find one better for a specific task… four…
000
Reposted by Arrigo Triulzi
Andrea Barisani @andreabarisani.bsky.social · 14/08/2026
The TamaGo 1.26.6 release is so huge that a screenshot of its changes does not fit my screen! This release features support for LoongArch 64-bit on Loongson 3A5000/3A6000 + LS7A and major improvements to Microchip LAN969x support. Go check it out: github.com/usbarmory/ta...
github.com
Release v1.26.6 · usbarmory/tamago
This release features: support for a new architecture and related SoC: LoongArch 64-bit on Loongson 3A5000/3A6000 + LS7A major improvements to Microchip LAN969x support transition of Ethernet PHY ...
051
Reposted by Arrigo Triulzi
Zack Whittaker @zackwhittaker.com · 13/08/2026
New, by me: Apple told me it's sending out threat notifications to customers in 110 countries saying they've been targeted with spyware. This latest batch also features a new push notification, warning users to take action and what to do next. Bypass for ad-blockers: web.archive.org/web/20260813...
techcrunch.com
If Apple sends you a push notification alerting you to a spyware attack, take it seriously | TechCrunch
Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone's devices.
213888
Reposted by Arrigo Triulzi
Marco Arment @marcoarment.bsky.social · 14/08/2026
My new app is now released! Unforgetful: marco.org/2026/08/14/unforgetful Imagine if Reminders was optimized for ADHD, procrastination, and forgetfulness. Never lose a task. You'll always be reminded, with zero shame or judgment. That's Unforgetful.
3016522
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
it is worth a long discussion, perhaps a paper, on the consequences of Letters of Marque in the real world.
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
we have been here before, many times, this time it is "more official" which makes the ramifications far more complex than the current administration can cope with.
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
"booooriiing" ;P
020
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
For temporal reference: I was wiring an RS-232 shielded cable.
020
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
I have an involuntary version where the bakelite plug of my soldering iron literally disintegrated as I was pulling it out so that I grabbed the live 230V wires. Distinct memories of no memories until I came to several metres from the socket.
220
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
I still remember my first sighting of that multiple layer intersection somewhere near San Jose. Still have nightmares about it, and that was in dry weather. It is safer to try the ungrounded 230V.
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
oh come on, that was "entry level" in our age group when grounding was purely theoretical.
020
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
Yes, I can see Machiavelli banging his fists on the floor, laughing so much that Borgia doesn't know if he should consider "looking at the US" for his new issue of "Mediaeval Torture for Tyrants".
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
yeah, the "fire ant" is definitely "pro-level" by any criteria.
020
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
I am not sure they are as good, they are far far more openly visible. They are much closer to Fascist thugs in the 1920s.
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
what if one has multiple events?
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
Also, from the Lee Anderson (Reform UK) interview: "If Nigel gets up on stage and says he's been advised not to attend the event, then I believe Nigel above the police and especially above you lot," he says. We've heard this kind of talk before ... www.bbc.com/news/live/c5...
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
Also, confirmed by the BBC: "The BBC understands Essex Police did not advise any candidate not to attend." www.bbc.com/news/live/c5...
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
… and quite rightly so. Every respectable politician has had to face hecklers, surely the non-respectable ones can do too?
100
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
Ah, the BBC also says Essex Police never told anyone to stay away¹: "Essex Police has not advised any candidate that they should not attend the Clacton by-election count, the BBC understands." www.bbc.com/news/live/c5...
100
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
I quite liked that video where he smiles for photos with a pint in his hand, puts it down on the table next to him after the photos had been taken, and picks up a glass of wine. If that isn't telling, I really don't know what is.
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
Assuming this is true, I cannot corroborate, I suspect that this is going to turn into one of those very British situations when a politician suddenly finds himself ridiculed at every corner. I still have hopes for the UK, despite everything. bsky.app/profile/harr...
100
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
It is my understanding that the "Astonishing" in the skeet is ironic, for American audiences out there ;P
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 14/08/2026
Still, that's not exactly "two friends at the pub" kind of digits. There have been seats where there Tories would have cried with joy had they had Count Binface's numbers. "Winning" with just over twice the vote against, well, Count Binface is hardly the validation you go advertising widly.
100
Reposted by Arrigo Triulzi
Zack Whittaker @zackwhittaker.com · 12/08/2026
New: A security researcher called Nightmare Eclipse has published details of a new zero-day bug in Windows, seemingly undettered by Microsoft's legal threat earlier this year. The bug affects latest versions of Windows, and currently no patch. Bypass for ad-blockers: web.archive.org/web/20260812...
techcrunch.com
After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug | TechCrunch
This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.
23914
Arrigo Triulzi @cynicalsecurity.bsky.social · 13/08/2026
New pastime when bored: select "This is AI slop" on all the adverts I get shown on LinkedIn. Probably not even lying…
020
Arrigo Triulzi @cynicalsecurity.bsky.social · 13/08/2026
technically, a descendent of an Archaeopteryx … yum ;P
000
Arrigo Triulzi @cynicalsecurity.bsky.social · 13/08/2026
I like the "dinosaur skeleton excavation site" vibes it gives off at first glance.
100
Arrigo Triulzi @cynicalsecurity.bsky.social · 13/08/2026
WUT?!? This is a joke, right?
A CAPTCHA which requires you to scan a QR code with a mobile device to "prove you are human".
120
Reposted by Arrigo Triulzi
Chris Wysopal @weld.bsky.social · 13/08/2026
This is a pretty big shift in US cyber policy. The White House is setting up a program that would let private cybersecurity companies conduct gov-authorized operations against foreign cybercriminal groups, inc surveillance & disruption of their infrastructure www.whitehouse.gov/presidential...
whitehouse.gov
Expanding Capabilities to Combat Transnational Cyber-Enabled Crime
MEMORANDUM FOR THE VICE PRESIDENT THE SECRETARY OF STATE THE SECRETARY OF THE TREASURY THE SECRETARY OF WAR THE ATTORNEY GENERAL THE SECRETARY OF COMMERCE
53225
Arrigo Triulzi @cynicalsecurity.bsky.social · 13/08/2026
#TeamBinface
020
Arrigo Triulzi @cynicalsecurity.bsky.social · 12/08/2026
“casa mia” :)
010
Arrigo Triulzi @cynicalsecurity.bsky.social · 12/08/2026
Ah, Feltrinelli Stazione Centrale?
110
Arrigo Triulzi @cynicalsecurity.bsky.social · 12/08/2026
Ah, yes. Welcome.
010