Sign in

Karl

@karlh.bsky.social
94 followers 182 following 21 posts

Cyber security, software engineer, investor, 🇺🇸 geek living in 🇪🇸 . opinions are my own.

PostsRepliesMedia
Karl @karlh.bsky.social · 16/10/2026
Introducing a new MacOS Sandbox I've been working on. blog.virustotal.com/2026/10/intr...
blog.virustotal.com
Introducing macOS Mirage: Next-Generation Apple Silicon Dynamic Analysis and Sigma Detections
In November 2015, we released our first in-house macOS sandbox, Box of Apples , followed by an update in March 2018 that introduced HTML be...
000 0
Reposted by Karl
By Cory Doctorow (GPG 0xBF3D9110957E5F4C) @doctorow.pluralistic.net · 10/08/2026
Today's threads (a thread) Inside: The bureaucratic AI arms-race is mutually assured destruction; and more! Archived at: pluralistic.net/2026/08/10/d... #Pluralistic 1/
Boston's brutalist city hall; it is surrounded by warring armies of vintage pulp robots, under a flaming sky.
13810 38
Reposted by Karl
BWJones @bwjones.bsky.social · 06/08/2026
I got to work with Don Pettit relatively recently (he was *my* photo assistant, if that makes any sense), and we talked extensively about his photographic work onboard the ISS. He is a remarkable talent and all of this is absolutely real: petapixel.com/2026/08/06/d...
petapixel.com
Don Pettit's Staggering Photo Confounds Skeptics
'I have a hard time believing this is real.'
14011 40
Reposted by Karl
BSides Las Vegas @bsideslv.org · 11/07/2026
The BSides Las Vegas schedule is out. We have a lot of talks across several tracks this year. All the details are online at: bsideslv.org/schedule
069 9
Karl @karlh.bsky.social · 03/05/2026
Sailing trip yesterday sailties.net/voyage/81EFA...
010 1
Karl @karlh.bsky.social · 22/04/2026
Pain point living in Spain, not having 2nd last name for some required form.
000 0
Karl @karlh.bsky.social · 14/04/2026
Updated my personal website for the first time in 25 years. What do you think? Yes, AI helped me. karl.hiramoto.org
karl.hiramoto.org
Karl Hiramoto | Software Engineer
Staff Software Engineer at Google. Specializing in malware analysis, Linux/Unix systems, embedded development, and high-performance networking.
020 2
Karl @karlh.bsky.social · 05/04/2026
NASA astronaut and Artemis II Commander Reid Wiseman peers out of one of the Orion spacecraft's main cabin windows, looking back at Earth, as the crew travels towards the Moon.
NASA astronaut and Artemis II Commander Reid Wiseman peers out of one of the Orion spacecraft's main cabin windows, looking back at Earth, as the crew travels towards the Moon.
000 0
Reposted by Karl
BleepingComputer @bleepingcomputer.com · 04/04/2026
The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign believed to have been conducted by North Korean threat actors.
bleepingcomputer.com
Axios npm hack used fake Teams error fix to hijack maintainer account
The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign believed to have been conducted by North Korean threat actors.
0125 12
Reposted by Karl
CosmoQuest @cosmoquest.org · 02/04/2026
There are now 10 toilets in Space International Space Station: 4 Crew Dragon Docked at ISS: 1 Soyuz Docked at ISS: 1 Tiangong Space Station: 2 Shenzhou Docked at TSS: 1 Artemis II on way around Moon: 1 This will be the first time a toilet has left low earth orbit!
15456731595 5.7K
Karl @karlh.bsky.social · 21/03/2026
Claude to Bernie sanders. "your absolutely right" 😅 youtu.be/h3AtWdeu_G0?...
youtu.be
Bernie vs. Claude
YouTube video by Senator Bernie Sanders
000 0
Karl @karlh.bsky.social · 29/11/2025
Interesting read on Google TPUs newsletter.semianalysis.com/p/tpuv7-goog...
newsletter.semianalysis.com
Google TPUv7: The 900lb Gorilla In the Room
Anthropic’s 1GW+ TPUs, New customers Meta/SSI/xAI/OAI, Full Stack Review of v7 Ironwood, CUDA Moat at risk, Next Generation TPUv8AX and TPUv8X versus Vera Rubin
010 1
Karl @karlh.bsky.social · 19/08/2025
Is AI enshitifying things? www.prospectmagazine.co.uk/ideas/techno...
prospectmagazine.co.uk
LinkedIn is the fakest platform of them all
It was meant for professionals—but it is filled with chatbots
020 2
Reposted by Karl
Raw Story @rawstory.com · 12/08/2025
Despite all of tech billionaire Elon Musk's efforts to make his AI chatbot on X give right-wing approved answers, it once again went after President Donald Trump this week, The Daily Beast reported.
bit.ly
Trump nailed as 'most notorious criminal' by Elon Musk's AI chatbot amid DC takeover
Despite all of tech billionaire Elon Musk's efforts to make his AI chatbot on X give right-wing approved answers, it once again went after President Donald Trump this week, The Daily Beast reported.Grok's response came about in response to questioning about Trump's decision to deploy the National Gu...
89237 92
Reposted by Karl
Bellingcat @bellingcat.com · 16/05/2025
We were thrilled that the amazing @gralhix.bsky.social agreed to design a set of challenges for us this month- and what a walk down memory lane! 👣 If you've not had a go at them yet you can find them at: challenge.bellingcat.com
challenge.bellingcat.com
Bellingcat Open Source Challenge
Test your open source research skills.
05316 53
Reposted by Karl
Bellingcat @bellingcat.com · 02/05/2025
You can watch the film in full here: www.youtube.com/watch?v=3XfV...
youtube.com
Reporting and Satellite Imagery Show Unseen Side of Israel-Hamas Conflict | A Hidden War | Evident
YouTube video by Evident
27925 79
Reposted by Karl
Bellingcat @bellingcat.com · 27/04/2025
This week we spoke with @conplnk.bsky.social & @johnmooneyirl.bsky.social on reporting on transnational organised crime and how they found a hidden side to one of Irelands most notorious cartel bosses. On podcast platforms search 'Stage Talks with Bellingcat' to listen back. rss.com/podcasts/bel...
rss.com
"Tracing a Drug Cartel" with John Mooney and Connor Plunkett | Podcast Episode on RSS.com
This week we spoke to John Mooney and Connor Plunkett about their investigation into the Kinahan cartel. We discussed the considerations you need to make when reporting on large scale operations and h...
310933 109
Reposted by Karl
Matt Johansen @mattjay.com · 18/04/2025
Who’s the whistleblower? Daniel Berulis — a senior DevSecOps architect at the National Labor Relations Board (NLRB), formerly with TS/SCI clearance. He just told Congress the Department of Government Efficiency (DOGE) pulled off a covert cyber op inside a federal agency.
183124808 3.1K
Reposted by Karl
Joe Ura @joeura.bsky.social · 13/04/2025
If the government can pay a foreign state to imprison you and, in so doing, remove you from the protection of US law, the Constitution is worthless.
8842631417 4.3K
Reposted by Karl
Myrtus @malwareindepth.com · 08/04/2025
New timer ;) www.operation-endgame.com
operation-endgame.com
Operation Endgame
Operation endgame
3135 13
Reposted by Karl
Catalin Cimpanu @campuscodi.risky.biz · 29/03/2025
Talks from the 0xCON 2024 security conference, which took place last November, are available on YouTube Just three now... hoping for more: www.youtube.com/playlist?lis...
0104 10
Reposted by Karl
Jay 🦋 @jay.bsky.team · 10/03/2025
the feminine urge to
mashable.com
Bluesky CEO: imagine a 'world without Caesars'
Jay Graber dunks on Mark Zuckerberg without mentioning his name.
1245730479813 73K
Reposted by Karl
TechCrunch @techcrunch.com · 10/03/2025
At SXSW, Bluesky CEO Jay Graber pokes fun at Mark Zuckerberg with Latin phrase T-shirt
tcrn.ch
At SXSW, Bluesky CEO Jay Graber pokes fun at Mark Zuckerberg with Latin phrase T-shirt
When Bluesky CEO Jay Graber walked on stage at SXSW 2025 for her keynote discussion, she wore a large black T-shirt with her hair pulled back into a bun. At first glance, it might appear as though she’s following the same playbook that so many women in…
15503115 503
Karl @karlh.bsky.social · 07/03/2025
open.substack.com/pub/cdibona/...
open.substack.com
60 Hours a week? How about 4 uninterrupted hours a day?
..or...the AGI meetings will continue until morale improves.
010 1
Reposted by Karl
Kim Zetter @kimzetter.bsky.social · 04/03/2025
Two stories published Friday reporting that Trump admin had ordered US Cyber Command and CISA to "stand down" on their work to detect/counter Russian cyber threats. But new info has come out to contradict them. I dug into what we know and don't know. www.zetter-zeroday.com/did-trump-ad...
zetter-zeroday.com
Did Trump Admin Order U.S. Cyber Command and CISA to Stand Down on Russia?
Two blockbuster stories published on Friday that appear to confirm what many Americans suspected would occur under the Trump administration – that the new regime is going to be softer on Russia than p...
32918 29
Karl @karlh.bsky.social · 25/02/2025
Interesting research by checkpoint, using VirusTotal to search and pivot research.checkpoint.com/2025/large-s...
research.checkpoint.com
Silent Killers: Unmasking a Large-Scale Legacy Driver Exploitation Campaign - Check Point Research
Highlights Introduction While the abuse of vulnerable drivers has been around for a while, those that can terminate arbitrary processes have drawn increasing attention in recent years. As Windows secu...
010 1
Reposted by Karl
InfoSec @infosec.skyfleet.blue · 21/02/2025
Top Polish anti-corruption official resigns amid spyware probe
therecord.media
Top Polish anti-corruption official resigns amid spyware probe
The head of the Polish government’s anti-corruption bureau resigned under pressure Thursday after officials leading the country’s commission investigating wide-scale spyware abuse criticized her for allegedly withholding information.
032 3
Reposted by Karl
Financial Times @financialtimes.com · 17/02/2025
Delta Air Lines plane flips over on landing at Toronto airport www.ft.com/content/855bdcb2-aca4-4e…
ft.com
Delta Air Lines plane flips over on landing at Toronto airport
Paramedics treat more than a dozen people at the scene with no fatalities reported
77218 72
Reposted by Karl
ex-Lethality Jane @lethalityjane.bsky.social · 15/02/2025
The measles outbreak in Texas is reminding me of the public letter Roald Dahl wrote about losing his daughter to measles in 1962, just before the vaccine was publicly available.
Excerpt from a public letter Roald Dahl wrote encouraging people to vaccinate their children.

Olivia, my eldest daughter, caught measles when she was seven years old. As the illness took its usual course I can remember reading to her often in bed and not feeling particularly alarmed about it. Then one morning, when she was well on the road to recovery, I was sitting on her bed showing her how to fashion little animals out of coloured pipe-cleaners, and when it came to her turn to make one herself, I noticed that her fingers and her mind were not working together and she couldn’t do anything.

“Are you feeling all right?” I asked her.

“I feel all sleepy,” she said.

In an hour, she was unconscious. In twelve hours she was dead.

The measles had turned into a terrible thing called measles encephalitis and there was nothing the doctors could do to save her. That was twenty-four years ago in 1962, but even now, if a child with measles happens to develop the same deadly reaction from measles as Olivia did, there would still be nothing the doctors could do to help her.

On the other hand, there is today something that parents can do to make sure that this sort of tragedy does not happen to a child of theirs. They can insist that their child is immunized against measles. I was unable to do that for Olivia in 1962 because in those days a reliable measles vaccine had not been discovered. Today a good and safe vaccine is available to every family and all you have to do is to ask your doctor to administer it.
3972657411681 26.6K
Reposted by Karl
Sahil Kapur @sahilkapur.bsky.social · 15/02/2025
Trump administration wants to un-fire nuclear safety workers but can’t figure out how to reach them www.nbcnews.com/politics/nat...
nbcnews.com
Trump administration wants to un-fire nuclear safety workers but can’t figure out how to reach them
The individuals, who work in an agency that oversees the nation's nuclear stockpile, had been fired on Thursday and lost access to their federal government email accounts.
2782573753 2.6K
Reposted by Karl
Lauren Bauer @laurenhlb.bsky.social · 14/02/2025
Great reporting from @marychilds.bsky.social about @hamiltonproject.org's federal outlay tracker. Give a listen! Only quibble is that superstars Noadia Steinmetz-Silber + Riki Matsumoto didn't get their deserved shout-out. So I shout here. www.hamiltonproject.org/data/trackin...
hamiltonproject.org
Tracking federal expenditures in real time - The Hamilton Project
Track federal expenditures by department and program. Data are updated daily.
11411 14
Reposted by Karl
The Tennessee Holler @thetnholler.bsky.social · 15/02/2025
“Sources told CNN the officials did not seem to know this agency oversees America’s nuclear weapons.” 🫣 www.cnn.com/2025/02/14/c...
1982412808 2.4K
Reposted by Karl
2600 - The Hacker Quarterly @2600.com · 14/02/2025
Yes, it's true. doge.gov was hacked. We all knew this was inevitable. www.404media.co/anyone-can-p...
doge.gov
Work | DOGE: Department of Government Efficiency | DOGE: Department of Government Efficiency
Work | DOGE: Department of Government Efficiency.
14320 43
Reposted by Karl
InfoSec @infosec.skyfleet.blue · 04/02/2025
Beware of Fake DeepSeek PyPI Packages That Delivers Malware
cybersecuritynews.com
Beware of Fake DeepSeek PyPI Packages That Delivers Malware
082 8
Reposted by Karl
Catalin Cimpanu @campuscodi.risky.biz · 03/12/2024
Talks from the VirusBulletin 2024 security conference, which took place in early October, are available on YouTube www.youtube.com/playlist?lis...
youtube.com
VB2024 - YouTube
VB2024 Dublin (2-4 October 2024)
0102 10
Karl @karlh.bsky.social · 26/01/2025
DeepSeek won't talk about china.
010 1
Reposted by Karl
Electronic Frontier Foundation @eff.org · 24/01/2025
VICTORY! After over a decade, a federal court has declared that warrantless backdoor searches of US person’s communications collected under Section 702 of FISA is unconstitutional.
eff.org
VICTORY! Federal Court (Finally) Rules Backdoor Searches of 702 Data Unconstitutional
In a landmark ruling, a federal district court held that backdoor searches of databases full of Americans’ private communications collected under Section 702 ordinarily require a warrant. Congress sho...
7727171 727
Karl @karlh.bsky.social · 24/01/2025
Meme coins are monetizing attention.
010 1
Reposted by Karl
Bellingcat @bellingcat.com · 24/01/2025
Watch along as we share our investigation into the deadly opioids Nitazenes, revealing what the online advertisements look like and sharing how the drugs, that can cause an overdose even with trace quantities, are being smuggled into Europe... www.youtube.com/watch?v=j0qU...
youtube.com
The Rise of Nitazenes: The Deadly Opioids Targeting Europe
YouTube video by Bellingcat
218774 187
Reposted by Karl
NPR @npr.org · 22/01/2025
Ulbricht operated the anonymous digital marketplace known as Silk Road when law enforcement arrested him. The pardon fulfills a campaign pledge Trump made to Ulbricht's Libertarian supporters.
npr.org
Trump pardons dark web marketplace creator Ross Ulbricht
Ulbricht operated the anonymous digital marketplace known as Silk Road when law enforcement arrested him. The pardon fulfills a campaign pledge Trump made to Ulbricht's Libertarian supporters.
73364102 364
Karl @karlh.bsky.social · 22/01/2025
How much do apps spy on us? misskey.de/notes/a3ax4t...
misskey.de
Linux Is Best (@Linux_Is_Best)
Anyone who goes through my post history, knows I work for Meta (Facebook). I am "Consumer Content Administrative Manager". My primary duties include content appeals, account appeals, account revie...
000 0
Reposted by Karl
Hackmanac @hackmanac.com · 10/01/2025
🚨Cyberattack Alert ‼️ 🇪🇸Spain - Xtremmedia RansomHub ransomware group claims to have breached Xtremmedia. Allegedly, 25 GB of miscellaneous documents including customer data were exfiltrated. Ransom deadline: 22nd Jan 25.
025 5
Reposted by Karl
Mark Cuban @mcuban.bsky.social · 06/01/2025
x X has ~18m daily USA users. @bsky.app, ~1.5m. Is it worth 20 MINS a day to proactively recruit and bring your friends, neighbors,relatives, businesses, anyone who is or could be a user, to @bsky.app? If Bluesky ends up with more users than the others, you destabilize musk, zuck, trump.
27797990618769 79.9K
Karl @karlh.bsky.social · 08/01/2025
😂 enron.com/pages/the-egg
010 1
Reposted by Karl
P(aul) Frazee @pfrazee.com · 06/01/2025
We’re aware of the bot followers. We know it’s really irritating for yall. The blade runners are working hard and we’re looking at bigger steps.
1112244262334 24.4K
Karl @karlh.bsky.social · 24/10/2024
JA4 hashes and how to use them on VirusTotal. blog.virustotal.com/2024/10/unve...
blog.virustotal.com
Unveiling Hidden Connections: JA4 Client Fingerprinting on VirusTotal
VirusTotal has incorporated a powerful new tool to fight against malware: JA4 client fingerprinting . This feature allows secur...
020 2
Karl @karlh.bsky.social · 17/11/2023
Why the f does a government think this is OK to track?
020 2
Reposted by Karl
David Ho @davidho.bsky.social · 12/11/2023
I often see this comparison of glaciers on Svalbard posted without attribution. It’s from a whole series comparing photos taken by the Norwegian Polar Institute in 1928 and by Christian Åslund, a Stockholm-based photographer, in 2002. See the others here: www.christian.se/global-warmi...
15780299 780
Karl @karlh.bsky.social · 11/11/2023
Is there any way to disable the video playing on the MacOS 14 Sonoma login lock screen? My screen locks then the fan revs up.
010 1