@josephcox@infosec.exchange

Joseph Cox @josephcox@infosec.exchange · Aug 05, 2026

New from 404 Media: Apple's 'Private Relay' is exposing users' real IP addresses. Private Relay is supposed to protect all your browsing in Safari. But researchers found a bunch of issues that are exposing real IPs. I verified they do. Not fixed, a live issue https://www.404media.co/apples-private-relay-is-exposing-users-real-ip-addresses/

404 Media

Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses

Researchers found a group of issues that mean Private Relay isn't actually protecting users' real IP addresses. 404 Media verified the issues do expose IP addresses.

14

0

35

0

Joseph Cox @josephcox@infosec.exchange · Aug 04, 2026

New: Microsoft has introduced new limits to how much its engineers can spend on AI tools at work and told employees that maximizing AI use internally is not the company’s goal, according to an internal Microsoft email obtained by 440 Media. https://www.404media.co/microsoft-tells-engineers-tokenmaxxing-is-not-what-we-are-optimizing-for/

0

Joseph Cox @josephcox@infosec.exchange · Aug 04, 2026

New: police are being explicitly told to hide the fact they're using Flock to pull people over and arrest them. Basically, do not mention this in official police reports. If the tech is completely legal and acceptable, like law enforcement say, why hide it? https://www.404media.co/do-not-mention-alpr-usage-how-cops-are-trying-to-hide-the-existence-of-flock/

404 Media

‘DO NOT MENTION ALPR USAGE’: How Cops Are Trying to Hide Their Use of Flock

“DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE. DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT."

32

4

31

0

Joseph Cox @josephcox@infosec.exchange · Aug 04, 2026

The SEC bought airline ticketing data to monitor worldwide flights. New documents we got show the data wasn't just for U.S. domestic flights, or even international arrivals. It included flights between foreign countries too. All queried without a warrant https://www.404media.co/the-sec-bought-airline-data-to-monitor-flights-worldwide/

404 Media

The SEC Bought Airline Data to Monitor Flights Worldwide

The SEC bought access to worldwide airline ticketing records. Airlines including Delta, United, and American sold the data.

1

0

Joseph Cox @josephcox@infosec.exchange · Aug 03, 2026

New: we've obtained the guide Flock makes for police to try to convince cities to buy Flock cameras, even when there is widespread opposition to it. Encourages police to "own the narrative before someone else does," need to have a "carefully scripted presentation" https://www.404media.co/own-the-narrative-leaked-flock-guide-shows-how-it-teaches-cops-to-promote-its-tech/

404 Media

‘Own the Narrative’: Leaked Flock Guide Shows How It Teaches Cops to Promote Its Tech

"This document shows a coordinated effort from Flock Safety to compel law enforcement agencies to convince our elected leaders to represent their interests as a company rather than the interests of co

23

0

39

0

Joseph Cox @josephcox@infosec.exchange · Aug 03, 2026

New from 404 Media: Jonathan Paz’s job was to convince cities to buy Flock cameras. After initially being enthusiastic about the company, he became disillusioned. I spoke to Paz about how he first joined Flock, what he was lied to about, and why he had to get out https://www.404media.co/why-a-flock-worker-quit-they-lied/

404 Media

Why a Flock Worker Quit: ‘They Lied’

Jonathan Paz’s job was to convince cities to buy Flock cameras. After initially being enthusiastic about the company, he started to get disillusioned.

0

Joseph Cox @josephcox@infosec.exchange · Aug 03, 2026

New: here's why a Flock employee quit. Says he was 'lied to' Jonathan Paz's job was to convince cities to buy Flock cameras. But then something changed and he realized he needed to get out of the company. Watch the full conversation here and subscribe for more: https://www.youtube.com/watch?v=BKYYpLC9u5I

0

Joseph Cox @josephcox@infosec.exchange · Jul 31, 2026

New from 404 Media: Google Earth has introduced an AI feature that lets anyone fabricate completely bullshit satellite images. In our own tests, we added a “bomb blast and crater” to an area of Los Angeles. This is a misinformation time bomb, will 100% be abused https://www.404media.co/google-earths-new-ai-lets-anyone-fabricate-completely-bullshit-satellite-images/

276

31

343

18

Joseph Cox @josephcox@infosec.exchange · Jul 31, 2026

IMPACT: that company that was offering to buy books for AI companies’ training data — and probably destroy them in the process — says it will no longer offer this service following 404 Media’s exposure of it https://www.404media.co/ai-company-training-scanning-books-database-isbndb/

404 Media

Company Offering Printed Books to Train AI Stops After 404 Media Coverage

Citing backlash, ISBNdb removed its webpages about training AI, denied ever buying, scanning, or selling a book for AI training, and said the site was a "test of market interest."

53

3

54

1

Joseph Cox @josephcox@infosec.exchange · Jul 30, 2026

This is happening in just over 30 minutes!!! At 1PM ET We're going to show you how to pry records from the government. This one is especially focused on city councils. Subscribers get the link here: https://www.404media.co/our-new-foia-forum-7-30-1pm-et/ Not a sub? Sign up now to get in

404 Media

Our New FOIA Forum! 7/30, 1PM ET

Join us for our latest FOIA Forum where we teach you how to pry records from the government.

1

0

1

0

Joseph Cox @josephcox@infosec.exchange · Jul 30, 2026

This is an insane story about how a bunch of 20-somethings made a ton of AI slop to push supplements for a company that had an FDA recall. Turns out it's not really a supplement company at all; the same bros making the slop own the company. It's a fiction https://www.404media.co/inside-an-ai-tiktok-shop-slop-factory-that-shills-supplements-recalled-by-the-fda/

404 Media

Inside an AI TikTok Shop Slop Factory That Shills Supplements Recalled By the FDA

How a company called Rosabella used AI content to market its supplements: "If you’re trying to sell health products to a 50-year-old, well, make your avatar 50 years old."

0

Joseph Cox @josephcox@infosec.exchange · Jul 30, 2026

New: LinkedIn just introduced a "seems like AI slop" button. That's literally what the button says. The thought leaders are going to have a meltdown https://www.404media.co/linkedin-introduces-a-seems-like-ai-slop-button/

133

32

85

14

Joseph Cox @josephcox@infosec.exchange · Jul 28, 2026

New: I spoke to Samuel Tunick, the man the U.S. is charging with allegedly wiping his GrapheneOS phone before CBP could search it. “I hope people understand that the charges against me are meant to intimidate people against protecting their data and their privacy.” https://www.404media.co/the-government-hopes-to-set-a-precedent-an-interview-with-the-man-charged-for-allegedly-wiping-his-grapheneos-phone/

404 Media

‘The Government Hopes To Set a Precedent’: An Interview With the Man Charged for Allegedly Wiping Hi

The U.S. government has charged Samuel Tunick with allegedly typing in a passcode to wipe his phone before officers could search it. “I hope people understand that the charges against me are meant to

104

9

154

3

Joseph Cox @josephcox@infosec.exchange · Jul 28, 2026

Substack introduced a feature that detects AI writing. Well, because a ton of people on Substack use AI to write their newsletters, they're now calling the feature a "witch hunt" “I’m not going to apologize for using AI in the creation process.” https://www.404media.co/substackers-say-new-ai-detection-tool-is-a-witch-hunt/

0

Joseph Cox @josephcox@infosec.exchange · Jul 28, 2026

Apple's iMessage scanning flagged a video of my friend's dog laying on her back as nudity; blurred it https://www.404media.co/apples-imessage-scanning-flagged-a-video-of-my-friends-dog-as-nudity/

404 Media

Apple’s iMessage Scanning Flagged a Video of My Friend's Dog as Nudity

Apple’s Sensitive Content Warning is supposed to protect users from unwanted nude images. It accidentally blurred my friend’s dog video.

0

Joseph Cox @josephcox@infosec.exchange · Jul 27, 2026

New from 404 Media: Wikimedia will not voluntarily recognize union a supermajority of its workers want Wikimedia waited until the days following its largest worldwide conference to issue a statement saying it would not voluntarily recognize a union of its workers. https://www.404media.co/wikimedia-waits-until-after-its-massive-conference-to-say-it-wont-voluntarily-recognize-union/

404 Media

Wikimedia Will Not Voluntarily Recognize Union a Supermajority of Its Workers Want

The Wikimedia Foundation waited until immediately after its largest annual conference to say it wouldn't voluntarily recognize its workers' union.

142

26

209

11

Joseph Cox @josephcox@infosec.exchange · Jul 27, 2026

New: a person opposing a data center was arrested for clapping at a city meeting Read more here: https://www.404media.co/person-opposing-data-center-arrested-for-clapping-at-city-meeting/

86

26

143

1

Joseph Cox @josephcox@infosec.exchange · Jul 27, 2026

New: Spotify's AI problem has got so bad that random people are stepping in to track all the slop. There are now multiple sites/leaderboards that people can use to identify “AI artists hiding on Spotify. No bands, no studios, no soul, just machines and melody.” https://www.404media.co/spotifys-ai-problem-is-so-bad-random-people-are-stepping-in-to-track-the-slop/

0

Joseph Cox @josephcox@infosec.exchange · Jul 27, 2026

Tons of peoples' Claude chats are exposed on Google. Cryptocurrency keys, API keys, login credentials, legal discussions, more. This happened with ChatGPT last year. And Claude too. There's clearly an ongoing issue with search engines indexing peoples' AI chats https://www.404media.co/tons-of-peoples-claude-chats-and-creations-are-exposed-on-google/

0

1

Joseph Cox @josephcox@infosec.exchange · Jul 27, 2026

"I first met the Luddites a week earlier in Tompkins Square Park, for a press conference hosted by their official spokesperson: a puppet made of garbage." https://www.404media.co/luddite-events-nyc-off-tech-summer-of-ludd/

25

1

31

0

Joseph Cox @josephcox@infosec.exchange · Jul 23, 2026

Flock's CEO just told local media its license plate readers don't take video. This came after the LAPD cancelled its contract Except, Flock announced a new feature that can turn "all" Flock cameras into live video cameras. Flock has now deleted the announcement https://www.404media.co/flocks-ceo-says-its-alprs-dont-do-video-after-repeatedly-announcing-they-can/

0

Joseph Cox @josephcox@infosec.exchange · Jul 23, 2026

There is a lot of good useful dialogue around Flock. There are also influencers who just make up shit like fake cease and desist letters for clout who aren’t helping anyone but are trying to mislead and monetize the debate. total clowns https://www.404media.co/the-rise-of-anti-flock-influencers-who-make-things-up-for-clout/

0

1

0

Joseph Cox @josephcox@infosec.exchange · Jul 23, 2026

New from 404 Media: a leaked document shows the surveillance tech at ICE's fingerprints. We obtained the document, called "ICE Wide Analytical Tools" and are publishing it in full here. It includes everything from phone location data, to facial rec, to tracking cars https://www.404media.co/leaked-document-shows-the-surveillance-tech-at-ices-fingertips/

0

Joseph Cox @josephcox@infosec.exchange · Jul 23, 2026

Next week we'll teach 404 Media subscribers how to pry records from the government. It's a new FOIA Forum, a livestream where we show you in realtime how to get all sorts of docs. Details: https://www.404media.co/our-new-foia-forum-7-30-1pm-et/ Not a subcriber? Become one here to access: https://404media.co/membership

0

Joseph Cox @josephcox@infosec.exchange · Jul 22, 2026

"For the time being, if you or someone on your crew has availability to secure black plastic bags (or something else) over the cameras, that would be great." https://www.404media.co/flock-objects-to-our-removing-their-equipment-emails-reveal-why-a-town-put-bags-over-its-flock-cameras/

21

1

13

0

Joseph Cox @josephcox@infosec.exchange · Jul 22, 2026

You opened a credit card. ICE now knows where you live. Here's how when you open a credit card your address leaves your bank, goes through middlemen companies, and ends up with ICE. ICE plans to use this data for immigration and 'voter fraud'. No warrant More: https://www.404media.co/you-opened-a-credit-card-ice-now-knows-where-you-live/

0

Joseph Cox @josephcox@infosec.exchange · Jul 21, 2026

New from 404 Media: a company is selling tons of old books specifically to AI companies and says they have a strong NDA to never reveal which AI company bought all of the books. They don't want headlines of 'we scanned and destroyed millions of books for AI' https://www.404media.co/ai-companies-are-buying-tons-of-old-books-because-theyre-free-of-ai-slop/

0

1

0

1

Joseph Cox @josephcox@infosec.exchange · Jul 21, 2026

New: Apple says it has fixed a vulnerability that was revealing the real email addresses of Hide My Email users. Apple knew about this vulnerability for more than a year, but only actually fixed it after 404 Media covered the issue this month https://www.404media.co/apple-fixes-hide-my-email-vulnerability-after-404-media-coverage/

40

3

38

2

Joseph Cox @josephcox@infosec.exchange · Jul 20, 2026

New from 404 Media: police clearly want armed drones. New Orleans cops published a policy document outlining how weaponized drones would work, before quickly walking it back. We got a copy of the original. https://www.404media.co/new-orleans-cops-published-policy-document-allowing-weaponized-drones/

12

0

21

0

Joseph Cox @josephcox@infosec.exchange · Jul 17, 2026

New from 404 Media: ICE plans to pay Thomson Reuters $125 million for data to investigate what it calls 'voters fraud'. News comes day after Trump laying the groundwork to undermine the midterms. ICE says Thomson Reuters can continuously track millions of people. https://www.404media.co/ice-to-pay-thomson-reuters-125-million-to-find-voter-fraud/

0

1

0

1

Joseph Cox @josephcox@infosec.exchange · Jul 16, 2026

New: cops are using Flock to track people, not cars. We reviewed Flock search data and found many, many cases of cops searching for people based on their appearance, race, tattoos, etc. Some searches are so vague like "tall man" that innocent people likely swept up https://www.404media.co/how-cops-use-flock-to-track-people-not-cars/

0

Joseph Cox @josephcox@infosec.exchange · Jul 15, 2026

New: the highly controversial AI music generator Suno was hacked. The hacker sent us Suno source code; it shows the company scraped YouTube Music, Deezer, and Genius. In all, Suno scraped *decades* worth of music from the internet. Obviously didn't pay artists https://www.404media.co/hack-reveals-suno-ai-music-generator-scraped-youtube-deezer-and-genius/

394

26

514

18

Joseph Cox @josephcox@infosec.exchange · Jul 14, 2026

Someone had a cool idea for a game (Tetris but the whole board rotates) and posted a proof of concept to social media. Immediately someone ripped it off and vibe coded it https://www.404media.co/ai-made-cloning-games-easier-than-ever/

0

1

0

Joseph Cox @josephcox@infosec.exchange · Jul 13, 2026

Boosted by

Scary Austin @MaryAustinBooks@mstdn.social

I bought a $3,000 cyber suit that electrocutes your muscles. Celebrities like George Clooney have praised the suit, saying “my arms are twice the size they’ve ever been. It’s crazy.” Bloomberg said it worked. I had a different experience. https://www.404media.co/i-bought-the-3-000-fitness-suit-that-electrocutes-you-im-sending-it-back/

1

0

1

0

Joseph Cox @josephcox@infosec.exchange · Jul 02, 2026

New from 404 Media: we've got leaks from Amazon, GitHub, Adobe, Citi, and more. The big takeaway is that companies in all industries are suddenly throttling their employees' AI use because AI is actually too expensive. Cutting off access to some models entirely https://www.404media.co/companies-are-throttling-employees-ai-use-because-its-too-expensive/

32

6

30

6

Joseph Cox @josephcox@infosec.exchange · Jul 01, 2026

Companies are scrambling to stop spending so much on AI after it turns out people are just using it to convert PDFs to presentations. This is the tokenpocalypse.

Watch here and subscribe for more every single week: https://www.youtube.com/watch?v=Sia4LZGNkVs

12

1

7

1

Joseph Cox @josephcox@infosec.exchange · Jul 01, 2026

New: there is a major vulnerability with Apple’s Hide My Email feature that lets attackers discover peoples’ real emails. Verified it works on my own email. We’re not disclosing how it works because Apple has not fixed it. But Apple has known for more than a year https://www.404media.co/apple-hide-my-email-vulnerability-reveals-peoples-real-email-addresses/

59

6

88

4

Joseph Cox @josephcox@infosec.exchange · Jun 30, 2026

New from 404 Media: Henrico County is a major hub for data centers in Virginia. Its officials said it expects a 25% rise in electricity costs next year, and advised workers to close the blinds and turn off their computers to make up for it. https://www.404media.co/henrico-virginia-datacenter-energy-cost-email/

25

2

29

2

Joseph Cox @josephcox@infosec.exchange · Jun 30, 2026

New from 404 Media: companies are deliberately making Claude and Codex talk like cavemen because it can curb the skyrocketing cost of AI. The 'caveman' plugin keeps LLM answers very, very brief. Got leaked memo showing it's being used; OpenAI dev contributed code too https://www.404media.co/companies-are-making-claude-and-codex-talk-like-cavemen-to-stop-ais-soaring-costs/

18

2

13

0

Joseph Cox @josephcox@infosec.exchange · Jun 30, 2026

Buy 404 Media's course: https://www.404media.co/how-i-bought-a-private-jet-by-selling-10-subscriptions-to-404-media/

37

7

29

5

Joseph Cox @josephcox@infosec.exchange · Jun 29, 2026

This is how easy it is to poison Google's AI search with Reddit comments

Watch here and subscribe for more of this every single week: https://www.youtube.com/watch?v=2uG8ohZHOD8

31

2

27

2

Joseph Cox @josephcox@infosec.exchange · Jun 29, 2026

404 Media went to Cannes, the advertising industry's biggest party where essentially every ad space you can imagine is for sale. This is what we saw, it's overwhelming how every pixel of attention is for sale: https://www.404media.co/inside-cannes-the-advertising-industrys-biggest-party/

7

0

7

0

Joseph Cox @josephcox@infosec.exchange · Jun 25, 2026

Watch: we got the bodycam footage from a data center community meeting where cops arrested a man for speaking slightly too long. We spoke to him too: “I continue to maintain that my arrest was retaliatory, as I was engaging in protected speech at a public meeting.”

https://www.404media.co/bodycam-footage-video-claremore-oklahoma-data-center-meeting/

16

1

23

0

Joseph Cox @josephcox@infosec.exchange · Jun 25, 2026

If AI is conscious, then so is Age of Empires II

Here's how someone built the fundamentals of an LLM in the classic video game, breaking down the whole 'are LLMs conscious' debate

Watch and subscribe here for more every week: https://www.youtube.com/watch?v=LlWJTM18z3E

32

2

17

0

Joseph Cox @josephcox@infosec.exchange · Jun 24, 2026

We tried Snap's new Snap Specs, the 132 grams AI-powered glasses.

The augmented reality was unimpressive, it kept breaking, they cost $2,195 and they look fucking stupid

https://www.404media.co/snaps-ai-ar-specs-lol/

41

8

31

4

Joseph Cox @josephcox@infosec.exchange · Jun 24, 2026

New: here's how hackers broke into Madison Square Garden. As I was going through the data, I noticed a lot came from a specific OneDrive. I found that employees identity in the dump, found their LinkedIn. They work at MSG. Hackers confirmed they voice-phished them https://www.404media.co/how-hackers-broke-into-madison-square-garden/

21

1

14

0

Joseph Cox @josephcox@infosec.exchange · Jun 24, 2026

New: the tokenpocalypse is here, companies scrambling to stop spending so much on AI. I got leaked audio from consulting giant Accenture showing AI token spend/'chewing' is not from supercharged engineers. It's non-technical workers converting PDFs to presentations! https://www.404media.co/the-tokenpocalypse-is-here-companies-are-scrambling-to-stop-spending-so-much-on-ai/

108

5

98

6

Joseph Cox @josephcox@infosec.exchange · Jun 23, 2026

Larry Sanger, one of Wikipedia’s cofounders, was banned from editing the site indefinitely after other editors determined he was canvassing, or in other words, calling on his followers off platform in order to influence Wikipedia’s content.

https://www.404media.co/wikipedia-cofounder-larry-sanger-banned-from-site-for-canvassaing/

28

0

20

1

Joseph Cox @josephcox@infosec.exchange · Jun 23, 2026

New from 404 Media: Madison Square Garden made a dossier on activists who have opposed the venue's facial recognition program. MSG scans faces of people so some can be arbitrarily denied entry. Dossier includes specific activists, their contact info, tweets, etc https://www.404media.co/madison-square-garden-made-dossier-on-activists-who-opposed-facial-recognition/

11

0

15

1

Joseph Cox @josephcox@infosec.exchange · Jun 22, 2026

Popular Front is an outlet that has repeatedly been stymied by big tech platforms like YouTube. It's ended up in a situation where journalists are having to tweak what they say so they don't get booted off or demonetized

Watch, subscribe here: https://www.youtube.com/watch?v=Yf51H5IuRcM

11

0

6

0

Joseph Cox

Posts

Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses

‘DO NOT MENTION ALPR USAGE’: How Cops Are Trying to Hide Their Use of Flock

The SEC Bought Airline Data to Monitor Flights Worldwide

‘Own the Narrative’: Leaked Flock Guide Shows How It Teaches Cops to Promote Its Tech

Why a Flock Worker Quit: ‘They Lied’

Company Offering Printed Books to Train AI Stops After 404 Media Coverage

Our New FOIA Forum! 7/30, 1PM ET

Inside an AI TikTok Shop Slop Factory That Shills Supplements Recalled By the FDA

‘The Government Hopes To Set a Precedent’: An Interview With the Man Charged for Allegedly Wiping Hi

Apple’s iMessage Scanning Flagged a Video of My Friend's Dog as Nudity

Wikimedia Will Not Voluntarily Recognize Union a Supermajority of Its Workers Want

Remote instance

Media