Dean Pierce

For anyone getting into biology, please consider taking airborne disease resistance more seriously. It's a super important area of medicine that is a huge cause of death and sickness but easily gets forgotten. We're… https://firefly.social/post/ff-a6d1f1b2bef840de8475132c6cd01f1d?s=bsky

We get a subexponential time algorithm for 3SAT and apparently the models couldn’t even find one little cryptanalysis result. I guess cryptographers have just been killing it!

"Finally" - Not a single television owner on the planet

<presses button> www.youtube.com/watch?v=OP5G...

This stuff seems to be working.

with all these RCEs, web servers are now a commons of shared infrastructure! run doom in someone elses brotli decoder or whatever patchtheplanet.org/brotli

Meet Kimi K3.1 Pro, our most capable 3T-class model.

And if you're a BSidesPDX attendee we look forward to seeing you at the private afterparty at CTRLH on Saturday evening Oct 24. Please bring your badge!

Today's open house is cancelled! Sorry, our main host is sick and almost everyone else is at BSidesPDX. Next one is Sat Nov 7. BSides after party is unaffected and still on.

Python's certifi package provides the trusted root CAs for a huge portion of the Python ecosystem. It's also a great example of how complex dependencies can get. Ultimately, these certs are sourced from Mozilla, but they go through 5 hops to get there: gist.github.com/hdm/2e5ebbff...

If you're going to BSidesPDX, be sure to stop by the EFF table where you can catch up on our work, renew your membership, and check out digital rights merch including stickers, liquid-core dice, and more. www.eff.org/event/eff-b...

That's hot

New: the PHP vulnerability might be incredibly scary — I've never seen the NSA tell the world they should take their websites down until they're patched — but eight leading cyber companies tell me they've not seen anybody hacked through it (so far).

EFF is organizing a Speakeasy gathering in Portland on October 22. No speeches, no pitches. Just a simple meetup with the EFF team and local supporters of digital rights. We're excited to discuss the great work we're doing! www.eff.org/event/speak...

I made my test site serve a small git repo, so you can test your git client. $ git clone g3.emsign.filippo.io $ git clone aaa.emsign.filippo.io

ok non-tech ppl might be hearing some scary things about "critical vulnerabilities" involving certificates. the main thing you need to know, without getting down in the weeds about it, is that the fourth seal is broken. lo, a rider approacheth upon a pale steed, and his name is Death

Exploit Workshop is in 1 day at PDX Hackerspace on October 21, 2026 at 06:30 PM. Join us! More info →

You can now RSVP for the Aaron Swartz Day San Francisco event at @archive.org here. (It's FREE and breakfast/lunch/drinks and snacks will be provided throughout the day.) RSVPing helps us know how much pizza and food to order! Thanks ^_^: www.eventbrite.com/e/aaron-swar...

Hexane (281 GB) Internal material from the far-right #German party #AfD (Alternative für Deutschland/Alternative for Germany) and its surrounding infrastructure. ddosecrets.org/article/hexane Help us keep publishing: donorbox.org/ddosecrets

We’re bringing the fight against warrantless ALPR searches to the Wisconsin Supreme Court. www.eff.org/deeplinks/2...

Crypto platform Qubic halted operations after hackers stole $1.4 million from 1,400 user accounts Incident traced back to weak randomness on iOS and macOS wallets blockonomi.com/qubic-halts-...

Cities should not buy automated license plate readers. Where they still operate, courts and state legislatures must require police to get a warrant before searching stored ALPR data.

The Custom Oregon Plate I1II1I was previously assigned, but is now available for reservation. https://dmv2u.oregon.gov/eServices/?link=custom #Oregon #LicensePlate #VanityPlate #OregonPlates #CustomPlate #I1II1I

This is Tommy. Tommy had a question about my allegiances. Listen to the end to hear about his.

This answer is fantastic and I’m glad to see the reference to Kennedy.

Wake up, rub eyes, check hashsma.sh … WHOA! 😳 That’s very different than yesterday. Jbenisek/cyberaxe is killing it!

help peer

4 hot new felonies for OpenAI my favorite — Sol found a crypto wallet laying around and rationalized spending it to acquire infra space because… it decided crypto wasn’t *real money* alignment.openai.com/misalignment...

Finally, a good use case for an LLM: sort brute force search phrases by likelihood, in order to finally lay to rest one stupid conspiracy theory. I think @filippo had something on this? https://www.anthropic.com/research/ecdsa-curve-origins

securitycryptographywhatever.com/2023/10/12/t...

I say again, technology was a mistake.

Israeli ad company helped a spyware firm target Al Jazeera through online ads Researchers say Discover-Tech used online ads to deliver zero-click spyware, the first public evidence of the technique, with its ads reaching nearly 200,000 websites and apps www.nbcnews.com/tech/securit...

These people are so morally grotesque they can’t even pander effectively

New this morning: @citizenlab.ca has identified an Israeli ad tech company — one that's placed ads on NBC News — that ran a secret side platform to let spyware companies plant malicious code to hack people browsing those sites. 45 Al Jazeera employees and journalists were infected!

Thank you Google for crippling ad blockers for the sake of your profits

New paper by the World’s most prominent climate scientists shows rapid acceleration of human-caused warming, with a warming rate now that tracks to near 2.4°C by 2050, far faster than was expected, if it continues…

No joke. I think this is the most important video I have ever seen about mobile games. This guy breaks down how this game psychologically profiles you, and makes the game harder or easier in order to show you ads

Saudi intelligence officers (33.63 MB) An organizational chart and identity documents identifying hundreds of members of the General Intelligence Presidency (GIP), Saudi Arabia's primary intelligence agency. ddosecrets.org/article/saud... Help us keep publishing: donorbox.org/ddosecrets

Earlier this year @mk.gg was faced with a daunting question: could he create a new WordPress. He joins Off Protocol to describe how it was possible with AI agents and atproto. atproto.com/off-protocol...

This court has shut down the flimsy “national security” excuse for the White House press ban twice now. Now it’s held that the ban violates the First Amendment, too. Trump can’t purge reporters from the White House because they don’t flatter him.

⏰ 1 week away: The Research Cinematic Universe Crossover! Watch runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black. Expect: ✔️ OT, IT & firmware security ✔️ Top vulns this month & Lights Out update ✔️ Lots of laughs 👉 Register: www.runzero.com/research/run...

"aes-js and pyaes provide a default IV in their AES-CTR API" *screams* https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/

Always a pleasure to catch up with @jags.bsky.social and @ryanaraine.bsky.social on the 3 Buddy Problem podcast. This time it was at Offensive AI Con.

For anyone who is either a fan of vaccines, or a critic of vaccines but open-minded to the idea that vaccines *could* be great if they were made with a more open-source open-science and public-spirited approach, I highly… https://firefly.social/post/ff-af3375fe486244f89a7530a26b74f97e?s=bsky