Reposted by Evaristenightshade →home, for now @nightshade.technology · 11hoh it's bad. oh it's BAD bad. oh this is CATASTROPHIC, drop-whatever-you're-doing-and-patch-NOW levels of bad cert.europa.eu/publications... 3567181 567
Reposted by EvaristeLyna @blooym.dev · 15h4. fucking 4. i’m doing incident response because of the number fucking 4. 841970 419
Evariste @evaristegal0is.eurosky.social · 15hautomatic firmware updates? firmware updates? updates? in this economy??? 010 1
Reposted by EvaristeMatthew Garrett @mjg59.eicar-test-file.zip · 15hIf you are interested in poking at traffic generated by IoT devices, today would be a good day to ensure that automatic firmware updates are turned off 04912 49
Reposted by EvaristeFilippo Valsorda @filippo.abyssdomain.expert · 19h🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.emudhra.we-have-a-problem.comeMudhra Intermediate CA CompromiseeMudhra Intermediate CA Compromise 1362189 362
Reposted by EvaristeCatalin Cimpanu @campuscodi.risky.biz · 19/10/2026OVHCloud CLI repo compromised in a supply chain attack www.thestack.technology/ovhcloud-cli...thestack.technologyOVHCloud repository hacked: Customer reports incidentCEO: "The hacker used the GitHub account of one of the developers" 063 6
Reposted by EvaristeMatt Blaze @mattblaze.org · 19/10/2026Hacking a voting machine (as suggested in the teaser) isn't the problem. That's how you find and fix weaknesses. The problem is that they were told not to tell the vendor (or anyone else) what they found, so the result could be kept on the shelf and used to cast doubt on election outcomes. Yikes. 412644 126
Reposted by EvaristeJane Lytvynenko @janelytv.bsky.social · 17/10/2026For the first time this year, data centers have become targets for bombardment in global conflicts. Our analysis shows at least 27 such attacks in 2026. Experts worry the targeting of data centers opens a Pandora's box that cannot be closed. www.nbcnews.com/tech/securit... 2629772 297
Reposted by EvaristeMatt Henderson @matthen.com · 18/10/2026Every game of naughts and crosses (tic tac toe) 528132 281
Reposted by EvaristeSmooth Dunk @smoothdunk2.bsky.social · 13/10/2026it’s just great marketing 3792732314 9.3K
Evariste @evaristegal0is.eurosky.social · 18/10/2026*forse* ho un'idea carina per un talk per il 2027, sempre orientato alla community, agli hacker, a chi sta iniziando e assolutamente senza markettate, vediamo se mi riesce 060 6
Reposted by EvaristeCatalin Cimpanu @campuscodi.risky.biz · 18/10/2026Hackers backdoored backup provider AOMEI in a novel, first-of-its-kind supply chain attack. Hackers replaced backup software on the company's servers in short bursts of five to ten minutes. The bursts took place across multiple windows between May and July. cloud.google.com/blog/topics/... 02611 26
Reposted by EvaristeJo Franchetti @thisisjofrank.bsky.social · 16/10/2026I gave a talk at EMF titled "Men in Tech #YesAllMen", in which I told my experience of being a woman in tech. I was afraid to publish it in case it affected my current or future employment. With all the current news I would like to add my 2¢. So here is the recording: youtu.be/WXL6K1lhvt0?...youtu.beMen in tech #YesAllMen - EMF 2026YouTube video by Electromagnetic Field 27504201 504
Reposted by EvaristeAftermath @aftermath.site · 15/10/2026Big Walk isn't on Xbox because of the 'Palestinian-led BDS movement': aftermath.site/big-walk-xbox-... 413142480 3.1K
Reposted by EvaristeDeborah Rose @deborahrosereeves.bsky.social · 16/10/2026In solidarity with Sally Rooney’s commitment to a free Palestine, Books Upstairs in Dublin will be donating the rest of the weeks proceeds from the sale of all her books to Medical Aid Palestine #SpéirGhorm booksupstairs.ie/sally-rooney...booksupstairs.ieSally Rooney | Books Upstairs 221787 217
Reposted by EvaristeFilippo Valsorda @filippo.abyssdomain.expert · 16/10/2026Anthropic found the origin of the NIST elliptic curve seeds: they were generated with drand48()! No one was seriously worried, but this should put some FUD to rest, completing the NIST ECC rehabilitation arc… just in time to be retired in favor of PQ. Also, we raised $36 Ki for ISRG. Yay!words.filippo.ioThe NIST Elliptic Curves Seeds Bounty Has Been ClaimedWe now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98. 424662 246
Reposted by EvaristeRon Deibert @rondeibert.bsky.social · 15/10/2026NEW @citizenlab.ca report We uncovered an Israeli firm using online ads to run vast spy operation This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. 45 devices at @aljazeera.com confirmed infected citizenlab.ca/research/how...citizenlab.caExposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen LabThis is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Ca... 9268201 268
Reposted by EvaristeP(aul) Frazee @pfrazee.com · 13/10/2026Meanwhile, at every home office in the world 3329462 294
Reposted by EvaristeCatalin Cimpanu @campuscodi.risky.biz · 15/10/2026Israeli ad company helped a spyware firm target Al Jazeera through online ads Researchers say Discover-Tech used online ads to deliver zero-click spyware, the first public evidence of the technique, with its ads reaching nearly 200,000 websites and apps www.nbcnews.com/tech/securit...nbcnews.comIsraeli ad company helped a spyware firm target Al Jazeera through online ads, researchers sayResearchers say Discover-Tech used online ads to deliver zero-click spyware, the first public evidence of the technique, with its ads reaching nearly 200,000 websites and apps. 096 9
Evariste @evaristegal0is.eurosky.social · 15/10/2026just a question: what would those who favored remote e-voting platforms think now, given that modern LLMs can find exploits in solid codebases? we dodged a bullet 210 2
Reposted by EvaristeThe Verge @theverge.com · 15/10/2026‘We’ve made this decision with the belief that meaningful change can be made in the world.’ www.theverge.com/games/101178...theverge.comBig Walk skipped Xbox to boycott Microsoft’s involvement with IsraelThe omittance was intentional. 211815 118
Reposted by EvaristeHouse House @househouse.com · 15/10/2026An explanation on why Big Walk isn't available on Xbox. bigwalk.game/xbox 0302219456 30.2K
Reposted by EvaristeCatalin Cimpanu @campuscodi.risky.biz · 14/10/2026Wow... Twitter suspended some influence operations clusters for the first time in years x.com/GlobalAffair...x.comGlobal Government Affairs (@GlobalAffairs) on XPeople come to X to talk about what's happening in the world, including the upcoming 2026 US midterms. Free speech is the bedrock of a functioning democracy, and we are proud that X is the global town... 152 5
Reposted by EvaristeCatalin Cimpanu @campuscodi.risky.biz · 14/10/2026Nextcloud patches zero-day exploited last month github.com/CollaboraOnl...github.comSecurity issue - Hack · Issue #354 · CollaboraOnline/richdocumentscodeI'm not sure if this is the right place for this report, but anyway. We're hosting a bunch of Nextcloud servers with richdocumentscode aka Collabora Online - Built-in CODE Server. Since yesterday w... 1114 11
Reposted by EvaristeCourtney Milan @courtneymilan.com · 14/10/2026This is such important work, and the thing to keep in mind is that when AI people tell you that games will be personalized for you, this is the kind of thing they are more likely to mean. 141489664 1.5K
Reposted by EvaristeThe Verge @theverge.com · 14/10/2026Anyone can click a link and join an end-to-end encrypted WhatsApp call, without installing an app or creating an account. www.theverge.com/tech/1011202...theverge.comNow you can call anyone with WhatsApp, even if they don’t have WhatsAppNo WhatsApp account required. 2213 21
Reposted by EvaristeTony Cheddarbiscuits @glass0milkad.bsky.social · 13/10/2026Yup, that's autumn 3941273 941
Reposted by EvaristeLiz Fong-Jones (方禮真) @lizthegrey.com · 13/10/2026cpu is dogshit slow for inference, and self-replicating worms already exist (you may know them as rVPNs or botnets) alas they're just repackaging an existing problem as "you should be afraid of everyone's ai except ours" 23611151 611
Reposted by EvaristeStefano Zanero @raistolo.bsky.social · 13/10/2026I signed this letter. It's time for the AI giants to step up, not because of remote existential risks, but because of very practical and dangerous mishaps. 0111 11
Reposted by Evaristeevacide @evacide.bsky.social · 13/10/2026A lot of people I know shared posts about the Yandex datacenter bombing resulting in a decrease in Russian misinformation/disinformation bot activity, sometimes with charts. Let this be a reminder every one of us could be fooled by a story that we really want to be true. 20833196 833
Reposted by EvaristeBrian Honan @brianhonan.bsky.social · 13/10/2026Oh FFS!! Stop regurgitating press releases from AI companies and taking their claims as gospel!! Validate their claims! Yes IoT devices are insecure but can they run an AI model? Probably no. Do they retain persistence? No. Will criminals use AI models over current scripts, e.g. Mirai? No. 95323 53
Reposted by EvaristeBeshearStan @beshearstan.bsky.social · 11/10/2026D+15 Midterm indicator 1036772994 6.8K
Reposted by Evariste404 Media @404media.co · 12/10/2026Magent Forensics, the owner of the GrayKey phone unlocking tool, says it can bypass an iPhone rebooting feature that was locking cops out. www.404media.co/cops-can-byp...404media.coCops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video ClaimsMagent Forensics, the owner of the GrayKey phone unlocking tool, says it can bypass an iPhone rebooting feature that was locking cops out. 11245141 245
Reposted by EvaristeJoseph Menn @joemenn.bsky.social · 11/10/2026No, bombing Yandex has not impacted automated Russian trolling operations in the U.S. 581414485 1.4K
Reposted by EvaristeSam (ABeardedPanda) @abeardedpanda.bsky.social · 11/10/2026>but that's basically bot activity No it's not! The guy operating 30 smartphones at the same time isn't a bot and he isn't detected as a bot because he's a real person 116510 165
Reposted by EvaristeSimpsonsQOTD @simpsonsqotd.bsky.social · 11/10/2026"This is where I come to cry." "Cool." 024955 249
Reposted by EvaristeSimpsonsQOTD @simpsonsqotd.bsky.social · 10/10/2026"We're doomed!" "It's times like this I wish I were a religious man." "It's all over, people!" 116939 169
Reposted by EvaristeStefano Zanero @raistolo.bsky.social · 11/10/2026Ma tu guarda… chi avrebbe mai potuto immaginarlo tranne ogni singolo esperto di tecnologia che ne ha parlato all’epoca? Milioni di euro buttati per un singolo referendum di nessun effetto. 3248 24
Reposted by EvaristeStefano Zanero @raistolo.bsky.social · 11/10/2026While I agree to some extent, it’s not an emergency brake: LLMs are opaque, and prone to derail in their generation of text… they should never be able to act without human supervision. 072 7
Reposted by EvaristeGabriele @gabry89.bsky.social · 11/10/2026Lo sentite questo silenzio? È il silenzio di milioni di bot andati a nanna. 🥰 0184 18
Reposted by EvaristeMarco Maroni @marcomaroni.it · 11/10/2026Grande stime per Luca Sofri ma intaccata negli ultimi mesi dalla sua persistenza su X, ha tanti follower, scrive post disabilitando i commenti consapevole della fogna in cui scrive, ma sta li imperterrito, pigro al cambiamento, illuso di poter far la differenza diluendo acqua nella merda. Un mistero 071 7
Reposted by EvaristeJ. L. Westover @mrlovenstein.bsky.social · 10/10/2026shoutout to the guest artists for my new book, including Sarah's Scribbles! Get the book HERE ❤️ kickstarter.com/projects/mrlovenstein/mr-lovenstein-presents-fun 85377757 5.4K
Reposted by EvaristeT4T5 @t4t5.com · 09/10/2026airdrop fully reverse-engineered! works flawlessly on my framework laptop 949459 494
Reposted by Evaristeevacide @evacide.bsky.social · 09/10/2026I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. www.anthropic.com/research/lau...anthropic.comAn opt-in vulnerability-finding service for open-source softwareWe’re launching OSS Scanner, an opt-in vulnerability scanner for the open-source ecosystem informed by our experience using Claude to find vulnerabilities during Project Glasswing. Projects that join ... 1314134 141
Reposted by EvaristeGavan Reilly @gavreilly.com · 09/10/2026You know the xkcd strip about how all modern internet architecture is eventually built on something a hobbyist maintains for free? Someone went out and found them all. sheets.works/data-viz/hol... 12561274 561
