Sign in

hoodie🐴

@hoodiepony.com
435 followers 1.1K following 233 posts

I'm a pony. Sometimes a cyber sherpa, and helping keep myself safe by helping other be cyber safe. Also sometimes breaks stuff and void warranties. 🏳️‍🌈 (they/them/it) Also, infosec.exchange/@hoodiepony Other Endpoints @ hello.unicorncyber.space

PostsRepliesMedia
Reposted by hoodie🐴
The Conversation AUNZ @aunz.theconversation.com · 28/09/2026
Most Australian government entities are running outdated technology – and AI systems may reveal their weaknesses, intentionally or not.
theconversation.com
Australia’s legacy systems were already a cyber risk. AI agents are raising the stakes
0115
Reposted by hoodie🐴
Jaz @jaz.sh · 27/09/2026
Okay so I've built a new Atlas, this time it lets you explore the conversations on Bluesky over the past 7 days graphically. It should update every ~6 hours and help you navigate the information environment that exists on here. I've learned a LOT about what people do here today... atlas.jazco.dev
atlas.jazco.dev
Atlas
A living map of what Bluesky is talking about: the past week's conversations, grouped into topics and regions and rebuilt every six hours.
1161390409
Reposted by hoodie🐴
BleepingComputer @bleepingcomputer.com · 27/09/2026
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host.
bleepingcomputer.com
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host.
154
hoodie🐴 @hoodiepony.com · 27/09/2026
cyberpunk.fandom.com/wiki/Blackwall
cyberpunk.fandom.com
Blackwall
The Blackwall (or Black Wall)[1] is a firewall developed by NetWatch. Located within the Net, it is tasked with keeping rogue AIs from breaking through into the rest of cyberspace and wreaking havoc. ...
000
Reposted by hoodie🐴
Catalin Cimpanu @campuscodi.risky.biz · 27/09/2026
OpenAI agents tried to bruteforce a UN website's API fields swarmcha.se/posts/openai...
swarmcha.se
OpenAI agents tried to bruteforce a UN website's API fields
From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS game · By Rowan H-J (LinkedIn)
0136
Reposted by hoodie🐴
Asher Wolf @asherwolf.bsky.social · 23/09/2026
So much of “AI hacked us!” is gonna be simply ppl don’t understand they linked files to the open internet
1311028
Reposted by hoodie🐴
Asher Wolf @asherwolf.bsky.social · 16/09/2026
Everything Australians put online could be scraped for AI under proposed new rules www.theguardian.com/australia-ne...
theguardian.com
Everything Australians put online could be scraped for AI under proposed new rules. How will you be affected?
The Albanese government is considering reforms that give US big tech unrestricted access to Australian content
31413
Reposted by hoodie🐴
The Register @theregister.com · 13/09/2026
Security through obscurity is dead, and AI delivered the fatal blow
theregister.com
Security through obscurity is dead, and AI delivered the fatal blow
RIP, you won't be mourned
1138
Reposted by hoodie🐴
ABC News Australia @news.abc.net.au · 11/09/2026
Balcony solar to become legal in Australia. Here's how plug-in systems work
abc.net.au
Being a renter, Jenny missed out on solar boon but that is about to change
Australia readies to lift a ban on plug-in solar, unlocking access to the technology for millions of apartment dwellers and renters for the first time.
010544
Reposted by hoodie🐴
ProPublica @propublica.org · 12/09/2026
Abortion bans make exceptions for ectopic pregnancies, but some people still don’t get care. One doctor told a woman intervening in her pregnancy could land him jail time, according to a lawsuit. “I felt like my life was a risk he couldn’t afford.”
propublica.org
Ectopic Pregnancy Deaths Have Nearly Doubled. It’s Worse in States With Abortion Bans.
With prompt and appropriate medical care, experts say, people shouldn’t die from an ectopic pregnancy. Women in Texas and Oklahoma have sued over delays in care, which, coupled with our new analysis, ...
37803428
Reposted by hoodie🐴
Ars Technica @arstechnica.com · 11/09/2026
arstechnica.com
ChatGPT-using lawyer punished for citing fake testimony from made-up witnesses
I didn't know that AI could hallucinate facts," New Mexico defense lawyer says.
1118051
Reposted by hoodie🐴
The Conversation AUNZ @aunz.theconversation.com · 11/09/2026
As the Albanese government continues to agonise over how to rejig its immigration policy, Peter Malinauskas gives a rare defence of migration.
theconversation.com
View from The Hill: Let’s make the argument for, not against, migration: Malinauskas
052
Reposted by hoodie🐴
The Register @theregister.com · 11/09/2026
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
theregister.com
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform
043
Reposted by hoodie🐴
Zack Whittaker @zackwhittaker.com · 10/09/2026
New, by me: ID verification giant IDScan confirms data breach of driver's licenses. The company checks IDs used in stores and entertainment venues to verify age/identity. IDScan's statement implies hackers contacted the company with a ransom demand. Ad-block bypass: web.archive.org/web/20260910...
techcrunch.com
ID verification giant IDScan confirms data breach with more than 150 million driver's licenses stolen | TechCrunch
The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.
14535
Reposted by hoodie🐴
Andrew Couts @couts.bsky.social · 09/09/2026
NEW: The new Apple Watches double as AI-powered listening bugs for generating convo "recaps" or transcripts of any previous 15 seconds. But fear not, Apple says, this data isn't sent to Apple/gets encrypted, speakers aren't ID'd, and there's a chime for the 15-second thing. @lhn.bsky.social reports:
wired.com
Apple Doesn’t Want You to Worry About the New Apple Watch’s Listening Features
The new Apple Watch includes several “intelligent” listening features that have privacy and security baked in. But the protections can’t change the facts of what the tools do.
81320136
Reposted by hoodie🐴
Alex Hern @hern.bsky.social · 08/09/2026
It's finally happened: the improved quality of machine transcription and the greater ability to extract value from unlabelled data means "your tech is eavesdropping on you for marketing purposes" has crossed from "false conspiracy theory" to "true and concerning" www.theverge.com/tech/991190/...
theverge.com
LG TVs caught spying even when offline or on standby
Gamers Nexus comes for LG again.
14540461756
Reposted by hoodie🐴
The Register @theregister.com · 09/09/2026
Serial Microsoft 0-day hunter drops yet another Defender exploit
theregister.com
Serial Microsoft 0-day hunter drops yet another Defender exploit
A bypass of a bypass of a bypass
0115
Reposted by hoodie🐴
BleepingComputer @bleepingcomputer.com · 09/09/2026
An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldCrash" right after Microsoft rolled out its September 2026 Patch Tuesday security updates.
bleepingcomputer.com
New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access
An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldCrash" right after Microsoft rolled out its September 2026 Patch Tuesday security updates.
1117
hoodie🐴 @hoodiepony.com · 08/09/2026
This is a good step forward. Hope they will open validation process to Australian testers. Also, be careful that this is more than "do threat modelling" for Secure by Design, because it requires more than that to be compliant: www.cyber.gov.au/business-gov...
cyber.gov.au
020
hoodie🐴 @hoodiepony.com · 07/09/2026
👀 all the LG TVs in various meeting rooms of organisations with confidentiality obligations with real penalties. If you work at one of these places, you should probably watch this: youtu.be/6IFVTcM28KA
youtu.be
216,000,000 Spy TVs | The LG Smart TV Problem
YouTube video by Gamers Nexus
010
Reposted by hoodie🐴
The Conversation AUNZ @aunz.theconversation.com · 06/09/2026
Are we optimising too much?
theconversation.com
How ‘hyperselection’ is making modern life efficient, pleasant – and boring
042
Reposted by hoodie🐴
Retro Computers @retrocomps.bsky.social · 05/09/2026
It can't make calls, but it CAN fit in your pocket and take pictures. The Minox Riga was the original "spy camera", used by intelligence agencies the world over - as well as journalists, papparazzi, and people who wanted a little camera that could take photos of their everyday lives. (Source.)
Two examples of a tiny steel bodied camera.  The underside only has a push-pull film advance slide; the top has a focus dial, a shutter speed dial, a shutter release button, and an exposure count window (needed with its 50 photo capacity).  In front is the lens window and viewfinder.
210618
Reposted by hoodie🐴
Evan Greer @evangreer.bsky.social · 04/09/2026
Age verification makes everyone less safe. Age verification makes everyone less safe. Age verification makes everyone less safe. Age verification makes everyone less safe. Age verification makes everyone less safe. Age verification makes everyone less safe.
techdirt.com
Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year.
From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it "age" verification, but it always ends up as identity verification), we've been pointing out that it was a huge privacy nightmare waiting to happen. Or maybe it wasn't waiting. Maybe it was already happening. This week a...
80148267733
Reposted by hoodie🐴
Guardian Australia @australia.theguardian.com · 02/09/2026
Tech giants are trying to obliterate privacy. Australia has a rare chance to take back part of their power | Lizzie O'Shea
theguardian.com
Tech giants are trying to obliterate privacy. Australia has a rare chance to take back part of their power | Lizzie O'Shea
‘Pervert glasses’ are selling out, tick-a-box consent is broken and the spectre of surveillance is invading all aspects of our lives * Get our breaking news email, free app or daily news podcast A mere five years after the government first started talking about it, new changes have finally been proposed for the Privacy Act. They could not be more overdue and urgent. ‘Pervert glasses’ are selling out at Kmart, facial recognition technology is proliferating in our everyday environments, and microtargeting for advertising has filled our algorithms with nonsense and toxic junk. Privacy reform is hugely popular: 93% of Australians say protecting personal information is important to them, and 87% say they are more concerned about their privacy than they were five years ago. But it is practically impossible for us to take personal responsibility for our data footprint, especially in the age of AI. Tick-a-box consent is a broken model. Australians rate protecting our personal information as their number one priority for AI regulation. Continue reading...
23818
Reposted by hoodie🐴
Aftermath @aftermath.site · 01/09/2026
You can't own a video game because other people also own video games, Sony argues in court filing aftermath.site/sony-court-dig...
PlayStation
1630066
Reposted by hoodie🐴
Cynthia Brumfield @metacurity.com · 01/09/2026
Serious cybersecurity nightmare going on at Dropbox.
The compromised accounts weren’t protected by multifactor authentication, Rathschmidt said. The hackers accessed the accounts by using a Lenovo ID, a user name and password that allows users to access products and services made by Lenovo Group Ltd., according to the emails. Dropbox users can access their accounts using verified Lenovo IDs, according to one of the emails.

Because of an “issue” with Lenovo’s email verification process, the hackers were able to register Lenovo IDs using the emails of Dropbox users, even if they hadn’t set up such an account, the notification emails say. The hackers then used the Lenovo IDs’ to access the accounts.
1137
Reposted by hoodie🐴
Railmaps @railmaps.com.au · 31/08/2026
I started the Australian Rail Maps website in 1996, and it's been online for 30 years since then. I opened a Google Adsense account in 2004 and have displayed Google Ads for the 22 years since then. But today, I stopped using Google Adsense, and railmaps.com.au is now free from advertising. 1/10
Australian Rail Map
620990
Reposted by hoodie🐴
Information Age @information-age.bsky.social · 31/08/2026
A well-paid cybersecurity professional has won more than $56,000 in compensation after the Fair Work Commission found his redundancy at fintech Prospa was not genuine. Read more: ia.acs.org.au/article/2026...
ia.acs.org.au
Cybersecurity worker wins $56k over flawed redundancy
Fintech failed to properly consult worker.
001
Reposted by hoodie🐴
Kawaiicon @kawaiicon.bsky.social · 30/08/2026
The schedule is up! kawaiicon.org/schedule/ In the lead up to the con, we wanna ✨ highlight ✨ (on the daily) all the speakers we are lucky to have on stage this year! In no particular order ... 👇
kawaiicon.org
Schedule - Kawaiicon 2026
Find out who's speaking when!
212312
Reposted by hoodie🐴
The Register @theregister.com · 24/08/2026
AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones
theregister.com
AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones
Sawtooth waves you can't hear still mess with your Bluetooth. Firefox and Brave say they've got you covered
0144
Reposted by hoodie🐴
The Register @theregister.com · 24/08/2026
Emperor Penguin Linus Torvalds banishes a bug – with a bot
theregister.com
Emperor Penguin Linus Torvalds banishes a bug – with a bot
The lad himself finds and fixes a tricky one… or does he?
091
Reposted by hoodie🐴
Information Age @information-age.bsky.social · 24/08/2026
Origin Energy has revealed full bank account numbers belonging to about 60 customers were accessed during its July data breach, along with around 100 ID document numbers. Read more: ia.acs.org.au/article/2026...
ia.acs.org.au
Origin Energy reveals full bank account numbers exposed
July breach affected 900,000 customers.
001
Reposted by hoodie🐴
cje @cje.io · 23/08/2026
This is a *really* solid read, mirrors my experience atm, and reinforces the whole "defensive cyber is an economics game" conversation. ty @gadievron for the link: Just a rumour of a bug is enough to find a security exploit these days anil.recoil.org/notes/rumour...
anil.recoil.org
Just a rumour of a bug is enough to find a security exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
0139
Reposted by hoodie🐴
The Register @theregister.com · 22/08/2026
AI slop is good for business if you know what you're doing
theregister.com
AI slop is good for business if you know what you're doing
Your irresponsibility is someone else's opportunity
143
Reposted by hoodie🐴
Holger Hestermeyer @hhesterm.bsky.social · 20/08/2026
This incident needs to be thoroughly investigated. If true, no public office in the EU or any member state can continue to run any microsoft products. nltimes.nl/2026/05/22/m...
nltimes.nl
Microsoft accused of leaking Dutch civil servants' names to U.S. government
Microsoft has reportedly shared the names of Dutch civil servants working for two regulatory agencies with the U.S. House of Representatives. The agencies involved include the Authority for Consumers ...
28783426
Reposted by hoodie🐴
AT Protocol Developers @atproto.com · 20/08/2026
The most significant extension to the protocol since launch—atproto spaces—is now officially alpha software you can start testing with. Here's more about the goals and how to start testing. atproto.com/blog/atproto...
atproto.com
The Atproto Spaces Alpha is Live
Atproto Spaces, formerly known as “the permissioned data protocol,” is a new extension to atproto that enables non-public data. The alpha is now officially open. Here’s how to develop with it and what to expect as we work towards the full release.
26339123
Reposted by hoodie🐴
DEF CON @defcon.bsky.social · 21/08/2026
For your weekend: The first early release talk from DEF CON 34 has made it to our YouTube channel. Please enjoy national treasure Cliff Stoll updating his 'Stalking the Wily Hacker'. If you haven't read 'The Cuckoo's Egg', this is your sign. youtu.be/656058JxTM0 #defcon #defcon34
youtu.be
DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll
YouTube video by DEFCONConference
54515
Reposted by hoodie🐴
The Register @theregister.com · 21/08/2026
Microsoft sounds alarm as perfect-10 Entra ID flaw comes under attack
theregister.com
Microsoft sounds alarm as perfect-10 Entra ID flaw comes under attack
Redmond says the cloud identity bug is already fixed, but isn't saying who exploited it or how widely
076
Reposted by hoodie🐴
The Register @theregister.com · 15/08/2026
ChainDrop worm crawls into npm supply chain, evades standard defenses
theregister.com
ChainDrop worm crawls into npm supply chain, evades standard defenses
Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks
153
Reposted by hoodie🐴
JAMIEvx🏳️‍⚧️ @jamievx.com · 13/08/2026
I just tried this and indeed I could not add the TransRights nor TransRightsAreHumanRights tags to my stream. I had the TransRights tag until I went to change my tags and I got the moderation message below, after which it was gone. (Thread)
15925
Reposted by hoodie🐴
JAMIEvx🏳️‍⚧️ @jamievx.com · 13/08/2026
Just linking the update I posted this morning to the bottom of this thread. bsky.app/profile/jami...
052
Reposted by hoodie🐴
ABC News Australia @news.abc.net.au · 11/08/2026
Private health insurers access patients' full medical records in 'aggressive' audits
abc.net.au
Health insurers access full medical records in 'aggressive' audits
Hospitals and allied health providers are concerned that insurers are asking providers for their patients' full clinical history. 
099
Reposted by hoodie🐴
OWASP Juice Shop @owasp-juice.shop · 11/08/2026
v20.2.0 is here! github.com/juice-shop/j... 🆕: 3 IaC challenges, Angular 22, TypeScript 6, several unintended RCEs fixed, streamlined packaging process, and a lot of small improvements under the hood! Crossposted with @openvibe.social
github.com
Release v20.2.0 · juice-shop/juice-shop · GitHub
🅰️ Frontend Updated frontend to Angular 22.x and Angular Material 22.x Updated TypeScript to 6.0.x Updated angular-eslint to 22.x Switched QR code library from ng-qrcode to angularx-qrcode 2734b6a...
0108
Reposted by hoodie🐴
The Register @theregister.com · 11/08/2026
Signal adds an extra layer of security to make sure you're actually chatting with the right person
theregister.com
Signal adds an extra layer of security to make sure you're actually chatting with the right person
One big caveat, though: You need your contact's phone number
1144
Reposted by hoodie🐴
Tom Williams, tech journo 👨‍💻 @its-tom-williams.bsky.social · 11/08/2026
New: Australia's technology workforce has shrunk for the very first time, according to the latest ACS 'Australia's Digital Pulse' report, released today. It calls for more workers to join the sector and for greater government investment in AI skills and training.
ia.acs.org.au
Australia's tech workforce shrinks for first time
More workers and AI skills needed, Digital Pulse report finds.
053
Reposted by hoodie🐴
ABC News Australia @news.abc.net.au · 10/08/2026
Two subsea communication cables damaged off Perth coast in 'concerning development'
abc.net.au
Federal police urged to investigate 'concerning' subsea cable fault
Two subsea cables off the coast of Perth, vital for international communications, suffered a fault over the weekend, and the company that owns them urgently wants to know what happened.
02313
Reposted by hoodie🐴
Railmaps @railmaps.com.au · 11/08/2026
Mass AI surveillance pilot in WA "in the first week, the algorithm falsely identified one person as being on the watchlist, a better result than the 2023 UK trial of the same tech" "Historically, these systems have performed worse for people of colour and for women" www.abc.net.au/news/2026-08...
abc.net.au
Police mass AI surveillance pilot draws rebuke from privacy experts
More than 130,000 faces have already been scanned under WA Police's landmark facial recognition trial. The privacy watchdog, experts and Aboriginal advocates are raising concerns about who could be ca...
21713
Reposted by hoodie🐴
Firefox @firefox.com · 10/08/2026
Our support for uBlock Origin isn't going anywhere.
271071266
Reposted by hoodie🐴
The Register @theregister.com · 10/08/2026
Advertisers are trying to influence AI bots with secret ads
theregister.com
Advertisers are trying to influence AI bots with secret ads
PLUS: Hiveminds are emerging to hack the planet, and open-weight models are the new new red scare.
1118
Reposted by hoodie🐴
WholesomeMemes @wholesomememe.bsky.social · 08/08/2026
213923