Posts
2576
Following
627
Followers
1398
"I'm interested in all kinds of astronomy."
repeated

Our first video from RE//verse 2025 is live! Part journey of personal discovery, part technical deep-dive, this presentation from Markus Gaasedelen was the highest rated in the feedback survey and is a must-see talk: https://youtu.be/hGlIkgmhZvc

0
3
1
repeated

My writeup for the KalmarCTF challenge "no sqli" is out, covering the exploitation of CVE-2024-6382, an integer overflow in the Rust's MongoDB library. A very interesting challenge, enjoy! :)

https://worty.fr/post/writeups/kalmarctf2025/

0
4
0
repeated

Robert De Niro on a Netflix show (Zero Day) mentioning the O.MG Cable! šŸ˜Ž

Shoutout to whoever did the text, you got the silent punctuation perfectly.

2
5
0
repeated

Jason āž”ļø šŸŽ’ Oregon Coast Trail

Edited 1 month ago

Perfectly reasonable reaction 🤣

2
17
0
repeated

There’s been a lot written about the Walkman over the years, but no one has really focused on the first ten years to show how its early evolution took shape. Here’s a sneak peek of how the article is coming together. I can’t wait for you all to check it out in Issue 2! Download Issue 1 in PDF for FREE! https://www.patreon.com/posts/get-first-issue-123662381

0
2
0
repeated

Greg Linares (Laughing Mantis)

There have been great women in malware writing and the VX scene:

First and foremost: Gigabyte, she was a pioneer for many other women to get into VX. She was my best friend for many years, I owe so much of my VX years and introduction into cyber security because of her. She was always and inspiration and a huge reason why I encourage women to get into cyber. She went to jail for virus writing and never ratted any of us out. Also a very and capitol Fuck you Graham Cluely for being an asshole to a teenage girl and personally making sure she went to jail because you were offended by her viruses (she made fun of him after he said girls should not be writing viruses and should be doing girly things). She wrote a ton of HLL (high level language) viruses like Sharp, Parrot, Scrambler, And My favorite, Scooter (it was an inside joke for me and her). She recent got married and I wish her nothing but the best in life.

There was Nex: she was a virus author originally from Arizona who specialized in macro viruses, she wrote one of the first viruses to bypass office 97 SP1 which was made to protect against macro viruses. She got in a car accident and was hit by a police officer with no lights and no siren on and lost her ability to walk. After she sued the hell out of the police department she got out of VXing. She's currently living back in Arizona and no longer in the scene.

VxFaerie was another women in VX who was well respected. She wrote one of the first python infectors ever. She was very nice and was always kind to people in the scene.

And we have modern day women who are studying viruses and should be respected just as much as the old VXers like @nikaroxanne - she is doing legit work that would have made heralded in the scene.

Women in VX was always a thing, a few others I know never revealed they were women because of how they were feared they would be treated. If they are still around, I hope they see this and know their work was equal. Most of the VX scene never cared at all about this, we only cared that you put up or shut up. And put the fuck up they did.

https://bird.makeup/@vxunderground/1902193800291709357

1
1
0
repeated

The lovely folk of @WEareTROOPERS are hosting @Blackhoodie_RE for another two days of training, brought to you by Cora, Anso and @Car0line_Le about malware, OSINT and reverse engineering 😊 Registration is now open https://blackhoodie.re/Troopers2025/

0
4
0
repeated
Edited 1 month ago

Building an electric vehicle simulator to research EVSEs: At Automotive, we built a custom device to let the EV chargers "charge". ZDI researcher Thanos Kaliyanakis explains how to put one together for your research. https://www.zerodayinitiative.com/blog/2025/3/14/building-an-electric-vehicle-simulator-to-research-evses

0
4
0
repeated

ā€˜Guys, I’m under attack’ — AI ā€˜vibe coding’ in the wild

https://pivot-to-ai.com/2025/03/18/guys-im-under-attack-ai-vibe-coding-in-the-wild/ - text

https://www.youtube.com/watch?v=HBL_tD_x3OA - video, which came out very well

1
4
0
repeated

I really can't get over how irresponsible it is for MS to tell people to throw away or recycle perfectly working computers. There are so many machines people *could* keep using for much longer if not for Windows 11.
https://mastodon.social/@dosnostalgic/114184937238415364

4
9
0
repeated
repeated
repeated

Computer History Museum šŸ‡øšŸ‡®

šŸ”Ž The museum is seeking stories about Slovenians who cracked copy protections on cassette software in the 1980s šŸŽ®šŸ’¾ (games for Spectrum, Commodore, etc.). Share your experiences in the comments below! ā¬‡ļøšŸ˜Š

0
3
0
repeated
Facial Recognition Company Clearview Attempted to Buy Social Security Numbers and Mugshots for its Database
Show content

Controversial facial recognition company Clearview AI attempted to purchase hundreds of millions of arrest records including social security numbers, mugshots, and even email addresses to incorporate into its product, 404 Media has learned.Ā 

For years, Clearview AI has collected billions of photos from social media websites including Facebook, LinkedIn and others and sold access to its facial recognition tool to law enforcement. The collection and sale of user-generated photos by a private surveillance company to police without that person’s knowledge or consent sparked international outcry when it was first revealed by the New York Times in 2020.Ā 

New documents obtained by 404 Media reveal that Clearview AI spent nearly a million dollars in a bid to purchase ā€œ690 million arrest records and 390 million arrest photosā€ from all 50 states from an intelligence firm. The contract further describes the records as including current and former home addresses, dates of birth, arrest photos, social security and cell phone numbers, and email addresses. Clearview attempted to purchase this data from Investigative Consultant, Inc. (ICI) which billed itself as an intelligence company with access to tens of thousands of databases and the ability to create unique data streams for its clients. The contract was signed in mid-2019, at a time when Clearview AI was quietly collecting billions of photos off the internet and was relatively unknown at the time.Ā 

Ultimately, the entire deal fell apart after Clearview and ICI clashed about the utility of the data with each company filing breach of contract claims. The dispute ultimately went into arbitration where it is common for disputes to be settled privately. The arbiter ultimately sided with Clearview AI in 2024 and ordered ICI to return the contract money. To date, ICI has not paid Clearview, with the company now seeking a court order to enforce the arbiter’s ruling. The president of ICI, Donald Berlin, has been previously accused in a lawsuit of fabricating intelligence reports and libel. Clearview currently advertises to customers that its technology ā€œincludes the largest known database of 50+ billion facial images sourced from public-only web sources, including news media, mugshot websites, public social media, and many other open sources,ā€ and Clearview has previously told customers that it was ā€œworking to acquire all U.S. mugshots nationally from the last 15 years.ā€

ICI and Clearview did not return to multiple requests for comment.Ā 

These court records show that while Clearview AI was building a database of images it was simultaneously attempting to purchase sensitive information such as social security numbers, email addresses or other data. Both in the US and internationally, Clearview AI has faced scrutiny for collecting images from social media websites with the company claiming it hoped to collect enough images to ā€œensure 'almost everyone in the world will be identifiableā€ according to an investor deck reviewed by the Washington Post. The same investor report describes Clearview AI spending millions of dollars on data purchases but the court records reviewed by 404 Media do not make it clear if the purchase of social security numbers were part of the same plans. Clearview has contracts with local, state, and federal law enforcement and government agencies.Ā 

Purchasing booking photos for a facial recognition system raises serious privacy risks according to Jeramie Scott, Senior Counsel & Director of EPIC’s Project on Surveillance Oversight. He points to both the algorithmic biases built into facial recognition systems and the potential for human bias by the police who would review the images. Numerous innocent people have been arrested based on facial recognition technology that misidentified them. This has happened almost exclusively to Black people, in part because the technology is less accurate on Black and brown faces.

ā€œIf Clearview AI’s search results not only return the data from its web scraping but also connect individuals to their supposed mugshots and related data then that will bias the human reviewers,ā€ Scott told 404 Media. ā€œWhen looking at Clearview AI search results and seeing multiple hits, the reviewer will likely be biased toward the person with the mugshot, which will disproportionately impact Black and brown people who are over represented in our criminal justice system.ā€

The purchase of highly personal data such as SSNs and location data has drawn the attention of regulators and Congress. As we’ve previously reported, access to highly personal data can be easily found online with authorities charging some sellers of the data with crimes. The Department of Justice has previously seized websites linked to the purchase of social security numbers and other personal data online and convicted a Ukrainian national of operating the sites.Ā 

Ultimately, Clearview AI is facing an uncertain future after a barrage of lawsuits against the company and fines from regulators across the globe. It has stated that it expects its business to grow under the second Trump administration, especially with a new CEO at its helm. At the same time, Clearview may be forced to turn over nearly a quarter of its ownership to settle at least one complex class-action biometrics lawsuit. Internationally, regulators have fined it multi-millions of dollars for privacy violations, and Clearview AI has also won cases on appeal. Clearview AI may also never recover the over one million dollars from ICI or its president: instead of wiring the money to an escrow service, Clearview instead deposited it directly into Berlin’s personal checking account.Ā 

Freddy Martinez is the co-executive director of Lucy Parsons Labs where he writes about policing, its harms, public records and abolition.

0
2
0
repeated

There are a lot of people who are wrong and have picked something other than Sneakers. I’m very disappointed in y’all

https://bird.makeup/@greynoiseio/1901649140158959889

0
2
0
repeated

WM_WHATSWRONGWITHYOU

0
4
0
repeated
repeated

Do not travel to the US. Under any circumstance. Think you're safe because your paperwork is in order? Fuck you, it does not matter.

https://www.theguardian.com/us-news/2025/mar/19/canadian-detained-us-immigration-jasmine-mooney

1
6
0
repeated

Has anyone actually confirmed real-world compromises from the supposed Apache Tomcat exploitation (CVE-2025-24813) going on? Breathless headlines seem to be quoting a single vague source, and this bug isn't exploitable in anywhere close to a default config https://attackerkb.com/assessments/1a24556d-24fb-4017-be67-e4ab39c76566

2
2
0
repeated

one thing I've learned about teaching over the years is that if I make a negative statement (like ā€œgit commits aren't stored as diffs"), it doesn't really work -- often people will just ignore it, especially if it contradicts their current mental model

so I always have to figure out how to make a positive statement, and make it in a way that will convince people whose mental model is different right now

convincing people to adjust their mental models is really hard!

7
4
1
Show older