Archivists: suppose you have to scrape large amounts of media for preservation from an unfriendly service. How do you ensure that the retrieved media didn't get corrupted along the way? (I don't want to watch/listen to 1000s of hours A/V)

#archiving #scraping

"Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters" by Rasmus Moorats

https://blog.nns.ee/2026/01/06/aike-ble/

“Maybe don’t fill every available silence with the sound of people talking” is why I almost never listen to podcasts (or audiobooks)

I put my mouse in the microwave !!

Seriously. I have a bluetooth mouse that wouldn't enter pairing mode. It was connecting to *something*... maybe a smart switch or whatever. This cheap mouse has no way to enter pairing mode if it's connected to something.

So anyway, a microwave oven is a faraday cage. I turned the mouse on, tossed it in, shut the door and waited. It entered pairing mode quickly, and boom, connected to my tablet.

A+++ life hack by yours truly. Just don't start the nuker or magic smoke will come out 😆

#lifehack #bluetooth

Hot* take,

Phishing tests are a symptom of a failed security organization.

There's many potential causes for the failures - I'm not necessarily saying that the individuals in the org are incompetent; frequently the failure of the org is at the political level within the wider-scope org - but if a phishing test appears in a user's inbox, the security org has already failed and needs complete replacement.

* keep your opinions as to the heat value of this take to yourself.

there’s a windows 7 key in the epstein files and it’s totally functional and activates windows 7 home premium

https://www.justice.gov/epstein/files/DataSet%201/EFTA00002467.pdf

When Google restricted AlphaFold 3's commercial use, three MIT PhD students rebuilt the protein folding model in four months. Their open-source version, Boltz-1, now has $28M in funding and a Pfizer partnership. The move highlights tensions between proprietary AI research and scientific openness in drug discovery infrastructure. #OpenScience #ProteinFolding #AIResearch https://www.implicator.ai/when-google-locked-the-door-three-mit-students-picked-the-lock/

If Seatbelt Guidance Worked Like Cybersecurity Guidance

https://scribe.rip/@boblord/if-seatbelt-guidance-worked-like-cybersecurity-guidance-01dbe8b88c96

It is a long-standing tradition for Microsoft to use a runtime copy of Windows as a part of Windows Setup. But the copy is so stripped-down, it cannot run anything but the setup program (winsetup.bin).

OR IS IT?

A mini-challenge for myself: create a semi-working desktop only based on runtime Windows 3.10 shipped with Windows 95 installer but not using any other Microsoft products.

Lots of nostalgic and weird screenshots in this 🧵 thread

"The media has largely let [tech companies] set the terms of the debate, right down to the terminology used in any discussion of these systems."

From Nanna Inie and me in Tech Policy Press on how to spot and resist anthropomorphizing language in the discourse about so-called "AI".

https://www.techpolicy.press/we-need-to-talk-about-how-we-talk-about-ai/

Hello internet, I am actively looking for speaking opportunities in central Europe (e.g., a train-ride from Berlin) to talk about Web security, XSS, `innerHTML` and the Sanitizer API. Ideally to an audience of web developers, framework engineers and the like :)

InputPlumber: Lack of D-Bus Authorization and Input Verification allows UI Input Injection and Denial-of-Service (CVE-2025-66005, CVE-2025-14338)

https://security.opensuse.org/2026/01/09/inputplumber-lack-of-dbus-auth.html

If Andrew "bunnie" Huang didn't exist, I'd swear he was a character out of a(n extraordinarily technologically well-informed) cyberpunk novel. Every time I interact with this legendary hardware hacker, he blows my mind with some project or insight that permanently alters how I think about tech.

-

If you'd like an essay-formatted version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2026/01/09/quantity-break/#so-many-chips

1/

Now this is how you exit a "smart" tech business. Bose is open-sourcing the API for SmartTouch speakers, moving as much functionality as possible to an app, and extending support.

https://www.theverge.com/news/858501/bose-soundtouch-smart-speakers-open-source

[RSS] Breaking Down the Attack Surface of the Kenwood DNR1007XR - Part Two

https://www.thezdi.com/blog/2026/1/8/breaking-down-the-attack-surface-of-the-kenwood-dnr1007xr-part-two

SmarterTools CCO: "the steps for replication were rather intricate"
Narrator: It was "../"

This thread shows how 90s security mindset is alive and kicking in 2026.

RE: https://bird.makeup/users/watchtowrcyber/statuses/2009445270019620901

M

[RSS] The Ni8mare Test: n8n RCE Under the Microscope (CVE-2026-21858)

https://horizon3.ai/attack-research/attack-blogs/the-ni8mare-test-n8n-rce-under-the-microscope-cve-2026-21858/