Nerd content and light-hearted snarkiness. Formerly affiliated with the (still wonderful) LinuxWelt Magazine. This account is now dormant.

Joined January 2024
LinuxWelt retweeted
🚨 Wiz update >> stolen cloud secrets are being used within hours. We tracked TeamPCP turning supply chain attacks into real cloud access - fast. From Trivy to LiteLLM, stolen creds, keys, and configs were validated and abused immediately. Full breakdown 👇 wiz.io/blog/tracking-teampcp…
1
15
1
61
9,417
After U.S. forces turned China’s most advanced anti-stealth radar—the JY-27A—into little more than lawn art, Xi reportedly ordered the execution of its chief designer, Yang Wei. Engineering with Chinese characteristics…
Reportedly, Yang was probed after 🇨🇳’s JY-series anti-stealth radars sold to 🇻🇪 & 🇮🇷 proved ineffective. 🇨🇳 had used the J-20 as a test target & falsely told Xi the radars could detect 🇺🇸 F-35 & F-22 stealth jets. This raised doubts about the J-20’s claimed stealth capabilities.
432
1,822
197
7,986
1,845,195
LinuxWelt retweeted
Looks like the postInstall setup script grabbed a second stage from GitHub repos which have been taken down so the threat should be neutralized as it stands now.
2
1
1
30
9,814
Apple deceived users. They once took the government to court over its refusal to build a backdoor to your private data. But now Apple is happy to use laws to collect information on you. Even when it didn’t have to. Two-faced.
35 million UK iPhone users now have to provide a credit card or ID just to use their phone normally. The recent update mentioned new emojis & updates to Apple Music, only for users to be confronted with an Age Verification screen. Apple said UK law requires this. It doesn't.
48
241
4
1,447
43,359
LinuxWelt retweeted
Archinstall 4.0 introduces a modern textual UI, replacing the curses interface to enhance usability and accessibility in the Arch Linux installer. linuxiac.com/archinstall-4-0… #Linux #ArchLinux #OpenSource
11
15
4
138
11,226
LinuxWelt retweeted
It's our birthday! 🎉 We're feeling nostalgic, so to celebrate, here are a few things turning 5 alongside AlmaLinux. Ah, memories!
2
10
1
43
2,463
LinuxWelt retweeted
BREAKING: Marc Andreessen says AI is a “silver bullet excuse” for layoffs actually due to over-staffing during COVID.
238
524
166
7,398
443,131
LinuxWelt retweeted
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
533
3,955
1,821
15,959
12,494,148
📹 India Set to Ban Sale of Hikvision, TP-Link, CCTV Products From April Source: cybersecuritynews.com/india-… Starting April 1, 2026, the Indian government will effectively ban Chinese video surveillance giants, including Hikvision, Dahua, and TP-Link, from selling internet-connected CCTV cameras in the country. This decisive market restriction stems from new mandatory certification rules driven by national security concerns regarding foreign hardware. The Ministry of Electronics and Information Technology (MeitY) has implemented strict Standardisation Testing and Quality Certification (STQC) requirements for all internet-connected surveillance equipment under the IS 13252-1 cybersecurity standard to mitigate foreign espionage risks. #cybersecuritynews
5
36
6
127
7,142
Microsoft / GitHub injecting ads into CoPilot generated PRs: welcome to the future! notes.zachmanson.com/copilot… (yes, this was a confirmed "feature" from someone on the CoPilot team; apparently they are disabling it after backlash)
48
191
56
1,886
156,696
LinuxWelt retweeted
BestBuy just dumped prices on its Kingston DDR5 to keep up with MicroCenter. MicroCenter already cut GSkill 50% today. It’s becoming a price war in RAM 👀 $MU $SNDK
167
360
133
5,846
1,081,028
🚨‼️ BREAKING: Databricks allegedly compromised in a TeamPCP supply chain attack. Databricks is the leading cloud-based data analytics platform: used by organizations worldwide to manage massive datasets. We notified them last week. They scaled up to investigate. We haven't heard back since.
38
209
42
1,322
236,384
🚨BREAKING: European Commission confirms its website was breached after a hacker said they stole more than 350GB of data. The hacker plans to publish it online.
138
866
156
3,328
561,399
LinuxWelt retweeted
This is a cool hack. I had a misbehaving atomic clock. Was it broken or was it unable to catch the 60khz signal over the air? I was about to start disassembling and getting out my radio gear. But then I found the “Clock Wave” app. It plays a signal over the speakers of a phone/tablet. The speakers obviously can’t hit 60khz, but it can play frequencies that have a 60khz harmonic! The speakers obviously aren’t producing radio waves… but the oscillating magnetic field of the speakers DOES create near-field effects that are picked up by the clock’s antenna. Using a speaker to induce near field energy, and then leveraging harmonics to hit a frequency 3X higher than its capable of. There is ALWAYS a way :)
35
80
16
1,100
120,534
🚨 MASSIVE CYBERATTACK: The EU Commission, ENISA, and the DG for Digital Services have been compromised by threat actor ShinyHunters. Leaked data includes: ▪️ Emails & attachments ▪️ Full SSO user directory ▪️ DKIM signing keys ▪️ AWS config snapshots ▪️ NextCloud/Athena data ▪️ Internal admin URLs It's a mess!
112
788
151
2,453
200,649
LinuxWelt retweeted
🚨 RAM prices are plummeting after OpenAi failed to fulfill its commitment to purchase 40% of World supply and terminated its $71 billion SKHynix promise. $MU
331
3,014
671
31,331
6,436,385
Delve: "We are not an auditor, just as tax preparation software is not an accountant. We have never signed an audit report." Also Delve: Customer websites display certifications that says "Secured by Delve." You simply cannot have it both ways, and now this bites back.
Over the past week, you may have seen an anonymous post about Delve. While we responded to it in a day, we want to provide more details about what’s true, what's not, and some changes we’ve made. There’s one question behind everything: did Delve fabricate compliance evidence or issue fraudulent audit reports? No. We did not. → Delve is an AI compliance platform that connects customers with independent auditors. We are not an auditor, just as tax preparation software is not an accountant. We have never signed an audit report. → Using default templates for our customers, just like any other compliance platform, is not “faking evidence.” These are meant to serve as a starting point for customers. → Delve does have automation in the platform, with 600+ automated integration tests, an AI Copilot to guide customers through compliance, AI code scanning, and more. -- We built Delve to accelerate innovation by bringing AI to compliance. In doing that, we pushed hard on automation. However, we now realize we didn’t provide enough clarity about what is automated, what is customer-provided, and what is independently audited. We have been working relentlessly to make improvements over the last week. -- On our auditor network: Delve connects customers with independent auditors. Some customers choose their own auditors, but many use firms in our network. Questions have been raised about some of those firms, including ones used by other platforms. Going forward we will set a higher bar in how our auditor relationships are structured and how the process is experienced by customers. Delve is rebuilding our auditor network, removing firms that don’t meet our standards, and offering complimentary re-audits and penetration tests to every customer. On platform templates for our customers: Delve provides default templates, just like many other platforms, for policies, board meetings, risk assessments, and more. These are designed to be starting points only. We should have been more explicit about how they are meant to be reviewed and customized by customers. We are making that indisputably clearer within the platform. On draft audit reports: Third-party auditors are responsible for independently reviewing all evidence and issuing final reports. We built automation that interacts closely with independent audit workflows to help expedite the process on behalf of our customers. However, this contributed to confusion about where automation ends and independent judgment begins. From now on, Delve will no longer automate these parts of the process. Furthermore, customers have a direct line of communication with their auditor to enhance transparency in any audit communications. -- We started Delve because we went through compliance ourselves and saw how slow, expensive, and manual it was. To anyone that wants to sit down and discuss our product philosophy and improvements, please reach out and let’s chat about it.
51
61
3
1,438
130,437
LinuxWelt retweeted
BREAKING: DOJ confirms FBI Director Kash Patel’s personal email has been hacked.
878
1,797
854
19,446
2,493,631