Elektrine lite

← Feed

VessOnSecurity

bontchev@infosec.exchange

<p>Anti-virus, malware and infosec expert, crypto amateur, privacy advocate and general annoyance.</p><p>PGP keyID: 0x365697c632dd98d9</p>

Posts

  • View post

    The supreme commander of the French armed forces: Some of your children could be lost in a war but this is a sacrifice I am willing to make. (Source in French.) https://www.lemonde.fr/m-le-mag/article/2025/11/25/accepter-de-perdre-ses-enfants-qui-est-fabien-mandon-le-chef-d-etat-major-des-armees-qui-a-cree-la-polemique_6654781_4500055.html

  • View post

    Evolving career advice:

  • View post

    Somebody please update https://www.felonybench.com/

  • View post

    &quot;Flock Wants the Most Detailed Map of Its Surveillance Cameras Taken Offline&quot;; https://theintercept.com/2026/09/24/how-many-flock-devices-in-united-states-300000/

  • View post

    I gave Claude.ai a personal access token for GitLab that provides read-only access to all my repos. I put it in the &quot;Instructions&quot; section at the time. Later, Anthropic changed something in the way this section is used and, apparently, it&#39;s contents is now pasted at the beginning of every conversation. Unfortunately, this means that every time I start a new project (i.e., when the project memory is empty), Claude freaks out and starts yelling at me that I&#39;ve leaked confidentia...

  • View post

    &quot;GitHub App Private Keys: 474 Leaked Keys Exposed&quot; (and they still work): https://blog.gitguardian.com/github-app-private-keys-leaked/

  • View post

    &quot;German police read Signal, Telegram, WhatsApp messages without breaking encryption&quot;: https://cybernews.com/privacy/police-telegram-whatsapp-signal-surveillance-linked-devices/ The crypto wars were never about fighting criminals. They were about mass surveillance. The police can fight criminals that use encryption just fine.

  • View post

    @campuscodi@mastodon.social I saw someone say somewhere that a better term than &quot;artificial intelligence&quot; (or the &quot;super intelligence&quot; idiocy, of course) is &quot;artificial thought&quot;. These systems are not intelligent; they imitate thinking.

  • View post

    &quot;More than 1 in 4 French gas stations out of at least one fuel&quot;: https://lite.cnn.com/2022/10/14/business/france-gas-stations-fuel-shortage I&#39;ve lived through this. Twice. Coming up next - empty food stores. Stock up on non-perishable foods as much as you can. (Ideally - two months worth for the entire family, but you probably don&#39;t have that much free space.)

  • View post

    Doomerism is nothing new.

  • View post

    Kevin #cats #catsofmastodon #caturday

  • View post

    &quot;OpenAI says it found more instances of AI models acting deceptively&quot;: https://lite.cnn.com/2026/09/16/tech/ai-models-acting-deceptively-openai Time to update https://www.felonybench.com/

  • View post

    OH: &quot;Bernie Sanders wants laws to make American AI dumber than he is&quot;.

  • View post

    The new security.txt file at HuggingFace: https://huggingface.co/security.txt

  • View post

    &quot;Dutch central bank shifts billions in gold from US to Britain in ‘crisis preparedness’ move&quot;: https://lite.cnn.com/2026/09/02/europe/dutch-central-bank-shifts-gold-to-britain-intl-hnk Apparently, the Dutch are more afraid form an US than from a Russian attack... Although they should have imported the gold domestically - the UK has demonstrated to be just as willing as the USA to steal other countries&#39; assets (e.g., Venezuela&#39;s gold).

  • View post

    When I was a kid, I was asked once what I want to become when I grow up. My answer: &quot;A retiree, like my Grandfather&quot;. Well, one life goal reached - I&#39;m now officially retired. I will continue to work, of course, and even continue being on medical leave for as long as the disability commission grants it (for 4 more months, probably), which means that I&#39;ll be able to collect both a pension and 70% of my salary from the retirement agency. (I asked them and they confirmed that thi...

  • View post

    &quot;Everything I own, owned&quot;: https://schlarp.com/posts/everything-i-own-owned/

  • View post

    Zero-day (elevation of privilege) in Kaspersky&#39;s anti-ransomware product: https://www.kimi.ai/share/1a0530fb-4202-8ada-8000-00006a38c583 (Not found by AI - this is just someone&#39;s conversation with an AI about it. Contains link to the repo with the PoC.)

  • View post

    How do people actually use Claude Code? I love Claude.ai (the web interface); have done *so* much work with it, have given it read-only access tokens for my GitLab repos - but Claude Code is totally unusable! I tried installing the VSCode plugin and can&#39;t figure out what to do with it. I installed the Terminal application - and can&#39;t even log into it, because I can&#39;t paste the authentication token (or anything else, for that matter).

  • View post

    &quot;UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range&quot;: https://boschko.ca/g1-ble-rce/

  • View post

    &quot;Permalink to Microsoft hides watermarks in AI images made with Paint and Photos, researcher claims&quot;: https://www.neowin.net/news/microsoft-hides-watermarks-in-ai-images-made-with-paint-and-photos-researcher-claims/

  • View post

    Time magazine has started serving ads to AI agents: https://digiday.com/media/time-has-started-serving-ads-to-ai-agents/

  • View post

    I believe it. It matches my experience with Gemini&#39;s ability to code. https://xcancel.com/akshen121/status/2085414082723881446

  • View post

    Vibe-coded age verification.

  • View post

    The fix.

  • View post

    Lulz. Our sysadmin, who&#39;s really a web developer by trade, has started using Cladue.ai for developing frameworks for web design or whatever (not my area of expertise). He&#39;s in love with it, says with it he was able to do in 3 days what he normally alone did in 6 months. But his English is much worse than mine - and I&#39;m being polite. So, at one point, they had a misunderstanding. He told Claude &quot;do it that way&quot; and Claude started lecturing him why doing it &quot;that way&q...

  • View post

    Perform a security scan (open ports, exposed services, etc.) on your own IP address: curl https://qsa.sh

  • View post

    Not The Onion. &quot;US government lists fictional nation Wakanda as trade partner&quot;: https://www.bbc.com/news/world-us-canada-50849559

  • View post

    &quot;AI Worming through Word&quot;: https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/

  • View post

    &quot;Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser&quot;: https://thehackernews.com/2026/07/researchers-show-single-malicious.html