← Feed

Posts

• Post #4199917

  I wonder how this will impact the ongoing litigation against Suno, which is currently in discovery. https://kolektiva.social/@ddosecrets/117003379075632338

• Post #4173677

  RE: https://cyberplace.social/@GossiTheDog/116968523424168330 sk8tinglife.co.uk has removed the leak message. The site's owners did not respond to a request for comment, but Wayback Machine archives suggest it was removed on the 24th. An archived copy can be found here: https://megalodon.jp/2026-0723-2312-43/https://sk8tinglife.co.uk:443/stickerhub/ The alleged leaked data is also archived on the Wayback Machine.

• Post #4152963

  @hans Not because there's anything illegal or incriminating on it, it's the principle: this is private, this is mine, and I'll do with it what I please. Not a lawyer. Wiping your phone in order to prevent law enforcement from searching it would probably be illegal, regardless of if there is evidence on the phone itself. In Federal law, this falls under 18 U.S. Code § 2232. Different states have their own statutes for destruction of evidence, e.g. Ohio. I don't think this is a...

• Post #4077029

  Since early July, 313 Team has used DDoS service Cypher to conduct their attacks. 313 Team has also promoted Cypher on their Telegram. According to Cypher's owner, they provide their services to 313 Team in exchange for 313 Team promoting Cypher. The owner said they started working with 313 Team while the group used their previous service. According to the owner, Cypher has over 100 active users, including 313 Team.

• Post #4069956

  @ai6yr@m.ai6yr.org I've heard the name but no idea who they are (I count that as a "no" and voted accordingly). TV person, maybe? I don't watch TV.

• Post #4038645

  I am trying to determine the legitimacy of the data allegedly leaked from Sticker Hub. If you are or were a Sticker Hub customer, please contact me. #StickerHub #Cybersecurity #AskFedi

• Post #4023394

  Credit to @tante@tldr.nettime.org Codeberg has greatly restricted AI generated code on their platform, banning all projects which "mostly consist of code written by generative AI-tools". https://codeberg.org/Codeberg/org/pulls/1253 The actual discussion and vote was only available to members of Codeberg. Codeberg has said this change will not be immediately enforced. #Codeberg #AI

• Post #3990143

  How does the current legal landscape harm security research? A study published earlier last month aimed to document the impact of legal risk on security researchers, focusing on the US and UK. The study was conducted by Sunoo Park (New York University, US) and Daniel R. Thomas (University of Strathclyde, UK). Article: https://www.lawfaremedia.org/article/the-legal-risks-that-chill-good-faith-security-research Study: https://eprint.iacr.org/2026/1207 The authors intend to present at the 35th US...

• Post #3990053

  313 Team has launched an attack on OVHcloud. 313 Team said the attack disabled OVH's internal servers and login.

• Post #3889460

  Last night, Trump made a variety of claims about election security, and once again declassified information he says supports his claims. https://www.youtube.com/watch?v=x1kY4HHytFI https://www.justsecurity.org/147633/trump-election-interference-speech/ (Behind CloudFlare) The White House released these files as four separate ZIP files, so I have put them together and removed some unnecessary artifacts: https://iam-py-test.github.io/16%20July%202026%20Election%20Integrity%20declassification.zi...

• Post #3866269

  PSA: btdig[.]com appears to now be redirecting to a variety of advertising sites, and pornography. I haven't seen any evidence of anything outright malicious yet, but I would avoid btdig[.]com for now. See https://www.reddit.com/r/torrents/comments/1ut7n25/btdigcom_domain_takeover/ https://en.wikipedia.org/wiki/Talk:BTDigg#special:diff/1364087436 Sandbox: https://urlscan.io/result/019f6c4c-0ba0-77f6-8b07-be609b803a24/ Video: https://video.infosec.exchange/w/i6qG7TDif2HycNYwbqGyxz

• Post #3838538

  According to posts on Telegram, 313 Team has claimed responsibility for taking down Saudi Arabia's Qiwa platform with a DDoS attack. The attack began yesterday (Central Time), but was extended into today. #Qiwa #313Team

• Post #3752027

  The Discord account of Minecraft YouTuber avatardotpng has been compromised, according to a post in his official Discord server and posts in Kenadian's Discord server. Fellow YouTuber Stayed is at present in control of avatar's Discord server, as avatar gave her ownership prior to the compromise. She has muted the compromised account. According to a message from avatar's friend Adder, his computer was infected with malware. #avatardotpng #Discord

• Post #3522568

  According to internal discussions, EasyList has applied for the Claude for Open Source Program. At present, it is unclear how they intend to use Claude. It is also not known if EasyList maintainer Ryan Brown consulted with other members of the EasyList team. The Claude for Open Source Program is a program by AI company Anthropic which offers 6 months of free Claude Max to qualifying open source maintainers. Repositories must have 5,000+ GitHub stars and activity within the last three months, th...

• Post #3473952

  The Actually Legitimate URL Shortener—along with Dandelion Sprout's other filterlists—do not and will not support any Manifest Version 3 content filtering extension. This decision was made by Imre—after consulting with me and with my full support. These lists will not function in MV3 extensions; they will exclude all rules from being enforced when loaded in an MV3 extension. Moreover, uBlock Origin Lite does not currently support one of the critical features used by Legit URL: regex remov...

• Post #3438755

  RE: https://masto.ai/@transworld/116824552438170757 In making this film, what surprised us most was not anti-trans opposition, but silence from our own community and industry. People and institutions that express support privately, but will not support it publicly. This project has taught us that the opposite of courage isn’t fear, it’s silence.

• Post #3418781

  On 25 June, pro-Iran hacktivist group 313 Team claimed responsibility for taking down Reddit with a DDoS attack. According to messages in their Telegram channel, 313 Team is now using a platform known as Elite Stress to conduct their DDoS attacks. 313 Team previously used a controversial service known as Beamed.su: https://infosec.exchange/@iampytest1/116774693782663286 #313Team #EliteStress

• Post #3413981

  Something on my computer keeps trying to access Microsoft Copilot, fails because its not installed, and writes an error to the Windows Event Log. Every second. On loop. Forever.

• Post #3319394

  My family members ask me for privacy and infosec advice, and I just don't know what to say.

• Post #3030970

  I don't think a lot of people realize it is possible to copy a key from a photo; I didn't until I saw a recording of one of @deviantollam@defcon.social's talks a year or two ago. https://youtu.be/XkfjWoniybU?t=2665 (I imagine most of the people on infosec fedi already know this; it's pretty well known, but figured I'd share it anyway) #OPSEC

• Post #2479866

  Instructure has published a statement on the Shiny Hunters breach and the status of their recovery. https://www.instructure.com/incident_update Instructure says they will be publishing a summary of the forensics report in the coming days.

• Post #2479864

  According to a post on Telegram, 313 Team has taken down wordpress.com with a DDoS attack. While the wordpress.com homepage is online, attempting to login or create an account results in an error message. Wordpress' status page shows all systems are operational. https://automatticstatus.com/ #Wordpress #313Team

• Post #2479863

  RE: https://infosec.exchange/@iampytest1/116562338573566145 Update from 313 Team: The attack on WordPress servers has been stopped due to the activation of multiple layers of protection, including browser verification to filter out overload. We may resume the attack soon or move to another target.

• Post #2479861

  According to a post on Telegram, 313 Team has launched a DDoS attack on Spotify. Spotify's website appears online but slow. 313 Team said their attack should last one hour. #Spotify #SpotifyDown #313Team

• Post #2479860

  RE: https://infosec.exchange/@iampytest1/116562802737738495 In a post on their Telegram channel about the DDoS of Spotify, 313 Team said this and other attacks were in retaliation of the US and Israel's killing of Iran's Supreme Leader Ali Khamenei. Spotify is a Swedish company, and it is unclear why they are being targeted. 313 Team also said they increased the severity of their attack, taking down Spotify's login page. I have been unable to confirm this.

• Post #2396570

  Full, unredacted, copy of my conversation with 313 Team: https://github.com/iam-py-test/iam-py-test.github.io/blob/main/iam-py-test%20and%20313%20Team%20DMs.zip There isn't much there.

• Post #2396569

  RE: https://mastodon.social/@theleftistlawyer/116545503922049830 The comments on this post make me lose faith in the fediverse. Allies in name only.

• Post #2396567

  An update on the project to remove archive.today from Wikipedia. https://en.wikipedia.org/wiki/Wikipedia_talk:Archive.today_guidance#c-GreenC-20260510040300-6%_done I haven't been following this effort at all, so I can't really comment on it. #Wikipedia #archiveToday

• Post #2391607

  @deviantollam on vape detection. https://www.youtube.com/watch?v=lHmjjNxj4sI Someone in the comments (see the pinned comment) pointed out this interesting talk which I haven't had time to watch to: https://www.youtube.com/watch?v=WCnojaEpF2I I didn't even consider the privacy/civil liberties consequences of these devices until I saw the pinned comment.

• Post #2391606

  RE: https://mastodon.social/@arstechnica/116516524090737057 Renewables are actually good for national security for many reasons, one of them being they are less vulnerable to supply chain issues with oil and gas.