Posts
3199Following
706Followers
1563
repeated
Erik McClure
cloudhop@equestria.social
Show content
Bose recently did an unambiguously good thing, by open-sourcing audio hardware they were originally going to brick: https://www.theverge.com/news/858501/bose-soundtouch-smart-speakers-open-source
However, I've seen some people say "don't praise Bose for this, they didn't do this until there was backlash".
SHUT UP. Shut the FUCK UP. I'm DONE living in a society where you get dragged through hell if you make a mistake, EVEN AFTER YOU CORRECT THE MISTAKE. I'm so fucking tired of hearing stupid excuses for this kind of puritanism like "they should've known better" NOBODY KNOWS BETTER UNTIL *AFTER THEY MAKE THE MISTAKE*. THAT'S HOW LEARNING *WORKS*.
And before you say "Companies aren't your friend" PUNISHING THEM FOR FIXING THEIR MISTAKES WON'T MAKE THEM DO THE RIGHT THING EITHER. If other people, or companies, see someone get punished for both messing up AND attempting to fix the mistake, they just won't bother at all!
People HAVE to be allowed to make mistakes. They HAVE to be given a chance to improve.
6
18
1
repeated
Frederik Braun �
freddy@security.plumbingHello internet, I am actively looking for speaking opportunities in central Europe (e.g., a train-ride from Berlin) to talk about Web security, XSS, `innerHTML` and the Sanitizer API. Ideally to an audience of web developers, framework engineers and the like :)
0
2
0
repeated
Anderson Nascimento
andersonc0d3@infosec.exchangeInputPlumber: Lack of D-Bus Authorization and Input Verification allows UI Input Injection and Denial-of-Service (CVE-2025-66005, CVE-2025-14338)
https://security.opensuse.org/2026/01/09/inputplumber-lack-of-dbus-auth.html
0
2
0
repeated
Cory Doctorow
pluralistic@mamot.frIf Andrew "bunnie" Huang didn't exist, I'd swear he was a character out of a(n extraordinarily technologically well-informed) cyberpunk novel. Every time I interact with this legendary hardware hacker, he blows my mind with some project or insight that permanently alters how I think about tech.
-
If you'd like an essay-formatted version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:
https://pluralistic.net/2026/01/09/quantity-break/#so-many-chips
1/
9
7
0
repeated
Ian Betteridge
ianbetteridge@vivaldi.netNow this is how you exit a "smart" tech business. Bose is open-sourcing the API for SmartTouch speakers, moving as much functionality as possible to an app, and extending support.
https://www.theverge.com/news/858501/bose-soundtouch-smart-speakers-open-source
1
6
0
buherator
buheratorhttps://www.thezdi.com/blog/2026/1/8/breaking-down-the-attack-surface-of-the-kenwood-dnr1007xr-part-two
0
0
0
buherator
buherator
Narrator: It was "../"
This thread shows how 90s security mindset is alive and kicking in 2026.
RE: https://bird.makeup/users/watchtowrcyber/statuses/2009445270019620901
0
1
4
repeated
buherator
buheratorhttps://horizon3.ai/attack-research/attack-blogs/the-ni8mare-test-n8n-rce-under-the-microscope-cve-2026-21858/
0
3
3
repeated
Phrack
phrack@haunted.computerThe Conscience of a Hacker, also known as The Hacker Manifesto, turns 40 today!
Written by Loyd "The Mentor" Blankenship, its spirit still resonates with hackers and makers everywhere. A cornerstone of hacker culture.
"My crime is that of curiosity."
Read it here: https://phrack.org/issues/7/3
#HackThePlanet #HackerManifesto
0
6
0
repeated
/r/netsec
_r_netsec@infosec.exchangeDo Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691) - watchTowr Labs https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/
0
3
0
repeated
buherator
buheratorhttp://blog.quarkslab.com/clang-hardening-cheat-sheet-ten-years-later.html
0
3
0
repeated
Chris Wysopal
Weld@infosec.exchange“The Conscience of a Hacker” by The Mentor is 40 years old today.
1
6
0
buherator
buheratorGod have mercy on my soul!
(context: https://scrapco.de/blog/reshare-ramblings-bad-vibes-with-ida.html )
0
0
1
repeated
Trail of Bits
trailofbits@infosec.exchangeWe're now accepting applications for our 2026 summer internship program!
Trail of Bits is hiring interns across our software assurance, security engineering, and research & development teams. Over the summer, you'll work on real projects that might include conducting security assessments for critical systems, developing open-source tools, and contributing research that advances the field.
Applications are open now through February! Learn more and apply here!
https://apply.workable.com/trailofbits/j/0C784B6D41/
0
3
0