331
Apple's MacBook Pro DFU port documentation is wrong
According to the Apple support document How to identify the DFU port on Mac , the DFU (device firmware update) port location for MacBook Pro models with Apple silicon is as follows:
New
The latest blog posts to take off on Hacker News. 4,333 posts.
332
Defeating a 40-year-old copy protection dongle
That’s right — this little device is what stood between me and the ability to run an even older piece of software that I recently unearthed during an expedition of software archaeology.
333
Archive.today is directing a DDoS attack against my blog
Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal b…
334
Mobile carriers can get your GPS location
In iOS 26.3, Apple introduced a new privacy feature which limits “precise location” data made available to cellular networks via cell towers. The feature is only available to devices with Apple’s in-house modem introduced in 2025. The announcement1 says https://support.apple.com/en-us/126101 ↩
335
Court Filings: ICE App Identifies Protesters; Global Entry, PreCheck Get Revoked
ICE is using a smartphone app called “Mobile Fortify” to scan faces and capture contactless fingerprints, instantly pulling back names and biographical data — and court filings say the same encounters are being followed by revocations of Global Entry and TSA PreCheck. That turns “trusted traveler” into chilling of…
336
337
Somebody used spoofed ADSB signals to raster the meme of JD Vance
This, if it is still visible: Via: Next up, age verification for ADSB?
338
339
Microsoft mishandling example.com
TL;DR: Since at least February 2020, Microsoft's Autodiscover service has incorrectly routed the IANA-reserved example.com to Sumitomo Electric Industries' mail servers at sei.co.jp , potentially sending test credentials there.
340
Proton spam and the AI consent problem
The one where I get very annoyed with my email provider.
341
IPv6 is not insecure because it lacks a NAT
This post is intended to dispell the mistaken belief that IPv4 is more secure than IPv6 because it includes a NAT which must be configured to allow inbound traffic.
342
The coming industrialisation of exploit generation with LLMs
Recently I ran an experiment where I built agents on top of Opus 4.5 and GPT-5.2 and then challenged them to write exploits for a zeroday vulnerability in the QuickJS Javascript interpreter. I adde…
343
Bypassing Gemma and Qwen safety with raw strings
How a Single Function Call Gates Safety Alignment in Gemma, Qwen, and Other Open-Source LLMs
344
‘ELITE’: The Palantir app ICE uses to find neighborhoods to raid
"Internal ICE material and testimony from an official obtained by 404 Media provides the clearest link yet between the technological infrastructure Palantir is building for ICE and the agency’s activities on the ground."
345
Bubblewrap: A nimble way to prevent agents from accessing your .env files
Last week I wrote a thing about how to run Claude Code when you don’t trust Claude Code. I proposed the creation of a dedicated user account & standard unix access controls. The objective was to stop Claude from dancing through your .env files, eating your secrets. There are some usability problems with that guide- I…
346
Unauthenticated remote code execution in OpenCode
OpenCode is an open-source AI coding assistant. Prior to v1.1.10, it automatically spawned an HTTP server (default port 4096+) on startup. Since v1.1.10, the server is disabled by default but can be enabled via command-line flags or configuration file. When running, the server exposes endpoints for:
347
New information extracted from Snowden PDFs through metadata version analysis
We discovered that entire sections describing domestic U.S. intelligence facilities were deliberately removed from two published documents, while equivalent foreign facilities remained visible. The evidence exists in an unexpected place - the PDF metadata of documents published by The Intercept in 2016, and by The…
348
SendGrid isn’t emailing about ICE or BLM – it’s a phishing attack
For the past several months, I’ve been receiving and then ignoring a steady stream of concerning emails from Sendgrid, the popular email delivery service owned by Twilio that I use for sendin…
349
Handling secrets (somewhat) securely in shells
Sometimes, you need to deal with secrets in an interactive shell. Say, for example, you want to do things with the API of a GitLab instance for which you require authentication:
350
351
Using Hinge as a Command and Control Server
A proof of concept demonstrating how to use the Hinge dating app as a C2.
352
X-Clacks-Overhead
A small HTTP-header tribute to Sir Terry Pratchett
353
The Kimwolf botnet is stalking your local network
The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it’s time for a broader awareness of the threat. The short version is that everything you thought you knew about the security of the…
354
Linux kernel security work
Lots of the CVE world seems to focus on “security bugs” but I’ve found that it is not all that well known exactly how the Linux kernel security process works. I gave a talk about this back in 2023 and at other conferences since then, attempting to explain how it works, but I also thought it would be good to explain…
355
Parental controls aren't for parents
I found a stranger texting my 12-year-old on a 'kid-safe' Gabb phone. Parental controls are broken.
356
Six Harmless Bugs Lead to Remote Code Execution
It was May 2024, and our internal security team was evaluating the LogPoint SIEM/SOAR platform to replace our existing platform, potentially. As part of a habit I’ve built over the years —and honestly, part of our 3rd party due diligence— I gave myself 24 hours to do what I always do with any technology we’re […]
357
On privacy and control
I have 15+ years of software engineering experience across different parts of the tech stack including networking libraries, congestion control, performance improvements, Backend, and Android development.
358
Web Browsers have stopped blocking pop-ups
If you were an Internet user for a few years on either side of the turn of the millennium, you will remember pop-up advertisements.
359
Sabotaging Bitcoin
Source I find myself in the unusual position of defending Bitcoin from its critics, if only reluctantly. In 2024 Soroush Farokhnia & Amir...
360
A Vulnerability in Libsodium
Libsodium is now 13 years old!