Austin Foss retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.
More: 404media.co/heres-what-teleg…
Austin Foss retweeted
fun fact: satoshi refused to use the NIST seeds probably because he was somewhat of a bunker mode retard himself, instead used the more obscure secp256k1, and most other cryptocurrencies followed
this is why we can’t directly use industry standards like passkeys in blockchains, and instead we ship people purpose-built hardware wallets made by fucking amateurs, leading to routine 9 figure hacks
anthropic’s discovery reveals that in retrospect his panic wasn’t necessary and we could’ve just used the standards
thanks bunker mode retards!
(this comment is exaggerated for comedic effect but it’s not wrong)
Big news: @FrameworkPuter is more than tripling its sponsorship of CachyOS, from $250/month to $10,200/year! 🎉
This helps keep our infrastructure running and brings us closer to working on CachyOS full-time.
Thank you, Framework! 💚
discuss.cachyos.org/t/announ…
If someone is only moral downstream from abundance, and in scarcity becomes immoral, they were never moral to begin with
Austin Foss retweeted
Every time there is a catastrophic security failure in the Bitcoin industry, it is to my great chagrin that the common response is "we can no longer trust X, move to Y."
And it's a mass migration from Single Point of Failure X to Single Point of Failure Y. 🤦♂️
Austin Foss retweeted
Tonight’s amazing aurora after significant solar activity! As seen from station.
Austin Foss retweeted
🏅 5th Place: LeekWallet
LeekWallet DIY HardwareWallet is a low-cost, open-source hardware wallet that independently verifies and signs crypto transactions. It keeps private keys off host devices, supports air-gapped QR signing, and is designed to make hardware wallet security accessible, reproducible, and fully auditable.
👨💻 Built by: Oucan Oucan
🔗 Check the demo: devfolio.co/projects/leekwal…
Austin Foss retweeted
🚨 RESEARCHER ACHIEVES FULL KVM VM ESCAPE → HOST ROOT
A potentially major virtualization zero-day has just surfaced.
Security researcher Paulos Yibelo says he achieved:
GUEST VM
↓
KVM ESCAPE
↓
HOST ROOT
in what he describes as a:
"Full VM escape zeroday"
Vercel CEO Guillermo Rauch has now publicly CONFIRMED that Vercel's Sandbox bounty program validated a:
KVM 0DAY
Rauch said the vulnerability affects what he called the industry's "gold standard" for Linux virtualization.
The research emerged from Vercel's Sandbox security challenge, designed specifically to test the isolation boundary protecting environments that execute:
* Untrusted code
* AI-generated code
* Agent workloads
Yibelo reportedly received:
$50,000
the maximum single-report bounty tier.
Why this matters:
Modern cloud and AI sandbox architectures increasingly depend on microVM isolation.
The security assumption is:
UNTRUSTED WORKLOAD
↓
GUEST
❌
HOST
A genuine KVM guest-to-host ROOT escape breaks that boundary.
However, several critical details are NOT PUBLIC yet:
* No CVE
* No affected kernel versions
* No exploit chain
* No public PoC
* No confirmed exploitation in the wild
* No evidence that every KVM/Firecracker deployment is vulnerable
* No evidence of customer-data compromise
Vercel says a full technical write-up is coming.
⚠️ Analyst Note:
This could become particularly important for agentic AI security.
Giving an AI agent a sandbox only works if the sandbox remains a reliable security boundary.
Prompt injection → malicious code execution is one problem.
Prompt injection → sandbox escape → HOST ROOT is an entirely different threat model.
For now:
DO NOT assume unrelated KVM patches mitigate this vulnerability.
We are monitoring for the technical disclosure, CVE and Linux/vendor remediation guidance.
Original researcher disclosure:
xitter.cf/PaulosYibelo
Vercel CEO confirmation:
xitter.cf/rauchg
#KVM #ZeroDay #VMEscape #Linux #AISecurity #AgenticAI #CloudSecurity #ThreatIntel #DDW
Austin Foss retweeted
Your ad blocker could fit behind your router.
meet ESP32-C3 AdBlock, an open-source DIY DNS ad blocker by ZedAxis, built around a roughly $2 ESP32-C3 Super Mini board
inside: 400 KB of RAM, 4 MB of flash, built-in Wi-Fi and a USB adapter, tucked into a printed case
no subscription
no browser extension
no separate power brick
plug it into your router’s USB port for power, connect over Wi-Fi and set it as your DNS server to block listed ad and tracker domains.
compact 40-bit hashes save RAM. a web dashboard lets you check blocked requests and add domains,
while open-source code and case files let you build your own.
follow for more hardware you can see working
Austin Foss retweeted
"Humans are ingesting so much AI content that prompt language, fawning feedback and “caveman speak” are officially bleeding into real-world meetings," per WSJ
Best Google free map app
It's replaced both Google Maps and Strava for me
Ready to roll? The September update brings improved alternative routes, a setting to optimize the order of route stops, clearer markings for intermittent water areas, and an eye icon to hide individual tracks, along with many other fixes and improvements: organicmaps.app/news/
Austin Foss retweeted
If this guy was going to torture something, I’d rather it be a next-token-prediction calculation than an animal, a bug, etc. much less a human. Is that controversial?
Some folks have power stuff to work out. Happily for them, LLMs will try real hard to give you what you want. Happily for us, it’s obviously gross even at this early stage and yet compared to the alternatives it’s probably a better path through it than anything we have ever had before.
🤖 Made with AI
#1 🐧🎮
In the September Steam Hardware Survey, CachyOS is now the most-used Linux distro on Steam, at 18.12% of Linux gamers (+2.65% this month).
Huge thanks to everyone who installed, tested, reported bugs & spread the word. We're just getting started. 💙
Steam On Linux Dives Down To 3.05% For September
And wow! @CachyOS now even outpacing SteamOS Holo in the Steam Survey! 18%!
phoronix.com/news/Steam-Surv…
Austin Foss retweeted
Bad art is the worst thing in the world. Bad art is worse than any dictator or tyrant in human history. A genocidal tyrant may maim the flesh, but bad art maims the soul.
When AI art is bad, on the contrary, it's merely tedious.






































