Nerd content and light-hearted snarkiness. Formerly affiliated with the (still wonderful) LinuxWelt Magazine. This account is now dormant.

Joined January 2024
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Account is dormant.
23
LinuxWelt retweeted
🚨 Wiz update >> stolen cloud secrets are being used within hours. We tracked TeamPCP turning supply chain attacks into real cloud access - fast. From Trivy to LiteLLM, stolen creds, keys, and configs were validated and abused immediately. Full breakdown 👇 wiz.io/blog/tracking-teampcp…
1
15
1
61
9,417
Location spoofing requires more than a VPN. A SOCKS5 proxy will give you better options than most VPN clients.
You turn on your VPN and your IP changes. It feels like you should be invisible, but some websites still know exactly where you are. Your IP is just one clue. Websites also look at your browser’s timezone (for example, "Asia/Kolkata" doesn’t match a German IP), your Accept-Language header (en-IN gives you away), and your DNS resolver, which is probably still set to your ISP’s servers back home instead of your VPN’s. One of the sneakiest trick is WebRTC. Your browser has a built-in feature for video calls that can fetch your real IP address at the operating system level, completely bypassing the VPN tunnel. A website can get it with just 10 lines of JavaScript. Some VPNs don’t block this by default. And if you’re logged in, it’s game over. Netflix, Google and Spotify don’t care about your IP address. They care about your account. Your registered country is stored in their database, not in your connection. Using a VPN while logged in means the VPN isn’t helping you at all. A VPN gives you a different postal address, but your timezone, language, DNS, WebRTC, browser fingerprint, and login details are still the same.
61
First reforms and consolidations, then AI. Otherwise, AI will work with skewed rules and bogus data.
🦔 The IRS paid Palantir $1.8 million last year to build a tool called SNAP, the Selection and Analytic Platform, designed to identify the highest-value targets for audits, tax collection, and potential criminal investigations. The system pulls from more than 100 legacy IRS databases built over decades and is being piloted across three areas: disaster zone tax relief claims, residential clean energy credits, and gift tax returns. Palantir has received more than $200 million in IRS contracts since 2014. The agency has lost more than 25,000 staff since February 2025 through resignations and early retirement offers. My Take Using AI to modernize a tax agency running on 100 fragmented legacy systems built over decades is not inherently a bad idea. The IRS has failed to update its technology repeatedly since the 1960s and a smarter case selection system that catches genuine fraud more accurately than a decades-old scoring algorithm is a reasonable goal. The concern worth focusing on is what you get when you combine an agency that has shed 25,000 experienced staff with an AI system selecting audit targets from a process nobody fully understands. The existing DIF scoring system is already described as a black box by researchers. SNAP adds another layer of complexity on top of that. Who gets flagged and who doesn't is ultimately answered by the people configuring the system and the data they feed it, and with fewer experienced staff to apply judgment, the margin for error gets wider, not narrower. Hedgie🤗
29
After U.S. forces turned China’s most advanced anti-stealth radar—the JY-27A—into little more than lawn art, Xi reportedly ordered the execution of its chief designer, Yang Wei. Engineering with Chinese characteristics…
Reportedly, Yang was probed after 🇨🇳’s JY-series anti-stealth radars sold to 🇻🇪 & 🇮🇷 proved ineffective. 🇨🇳 had used the J-20 as a test target & falsely told Xi the radars could detect 🇺🇸 F-35 & F-22 stealth jets. This raised doubts about the J-20’s claimed stealth capabilities.
432
1,822
197
7,986
1,845,111
LinuxWelt retweeted
Looks like the postInstall setup script grabbed a second stage from GitHub repos which have been taken down so the threat should be neutralized as it stands now.
2
1
1
30
9,814
Apple deceived users. They once took the government to court over its refusal to build a backdoor to your private data. But now Apple is happy to use laws to collect information on you. Even when it didn’t have to. Two-faced.
35 million UK iPhone users now have to provide a credit card or ID just to use their phone normally. The recent update mentioned new emojis & updates to Apple Music, only for users to be confronted with an Age Verification screen. Apple said UK law requires this. It doesn't.
48
241
4
1,447
43,359
LinuxWelt retweeted
Archinstall 4.0 introduces a modern textual UI, replacing the curses interface to enhance usability and accessibility in the Arch Linux installer. linuxiac.com/archinstall-4-0… #Linux #ArchLinux #OpenSource
11
15
4
138
11,226
LinuxWelt retweeted
It's our birthday! 🎉 We're feeling nostalgic, so to celebrate, here are a few things turning 5 alongside AlmaLinux. Ah, memories!
2
10
1
43
2,462
LinuxWelt retweeted
Polymarket
@PolymarketMar 31
BREAKING: Marc Andreessen says AI is a “silver bullet excuse” for layoffs actually due to over-staffing during COVID.
238
524
166
7,403
443,130
LinuxWelt retweeted
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
533
3,955
1,821
15,960
12,493,976
Das kommt einer intellektuellen Bankrotterklärung gleich.
3
📹 India Set to Ban Sale of Hikvision, TP-Link, CCTV Products From April Source: cybersecuritynews.com/india-… Starting April 1, 2026, the Indian government will effectively ban Chinese video surveillance giants, including Hikvision, Dahua, and TP-Link, from selling internet-connected CCTV cameras in the country. This decisive market restriction stems from new mandatory certification rules driven by national security concerns regarding foreign hardware. The Ministry of Electronics and Information Technology (MeitY) has implemented strict Standardisation Testing and Quality Certification (STQC) requirements for all internet-connected surveillance equipment under the IS 13252-1 cybersecurity standard to mitigate foreign espionage risks. #cybersecuritynews
5
36
6
127
7,142
Microsoft / GitHub injecting ads into CoPilot generated PRs: welcome to the future! notes.zachmanson.com/copilot… (yes, this was a confirmed "feature" from someone on the CoPilot team; apparently they are disabling it after backlash)
48
191
56
1,886
156,696
LinuxWelt retweeted
BestBuy just dumped prices on its Kingston DDR5 to keep up with MicroCenter. MicroCenter already cut GSkill 50% today. It’s becoming a price war in RAM 👀 $MU $SNDK
167
360
133
5,843
1,081,025
That is incorrect, MATE is still receiving updates. See github.com/mate-desktop Also, Ubuntu is not "Wayland" only. Even Gnome has to maintain X11 compatibility via Xwayland. There just is no X11 session anymore and most parts are now running on Wayland, including GDM.
1
4
70
Martin's work was fantastic. Ubuntu MATE was one of the first beginner-friendly Linux distributions that greeted new users with a "Software Boutique" to set up the system with a couple of popular programs.
19
🚨‼️ BREAKING: Databricks allegedly compromised in a TeamPCP supply chain attack. Databricks is the leading cloud-based data analytics platform: used by organizations worldwide to manage massive datasets. We notified them last week. They scaled up to investigate. We haven't heard back since.
38
209
42
1,322
236,384
Replying to @hey_itsmyturn
Goooood morning Teheran صبح بخیر، تهران
4
378
I like this. Don't like the food, but this crew is alright.
76