Sourcerer Priest 🖥️🌩️🗺️ Seized the means of production of the means of production. He/Him
United Kingdom
Joined June 2009
- Tweets20.3K
- Following777
- Followers219
- Likes38.7K
Nathan retweeted
Mortgages in the UK are fucking backwards.
You can pay £1,200 a month towards somebody else's mortgage for years and never miss a payment.
That's over £14k a year spent on a property you'll never own.
Yet when you apply for an £800 a month mortgage, the bank tells you that you can't afford it.
So apparently paying £1,200 a month to your landlord to pay their mortgage and more is perfectly manageable.
But paying £800 a month towards a home of your own is suddenly too much of a financial risk.
Make it make sense.
Nathan retweeted
Vladimir Uglev, the original developer of Novichok, has died. While responsible for the development of the powerful toxin, in later years he was an outspoken critic ofcits use to target civilians. Uglev openly contradicted the Kremlin denials in both the Skripal and Navalny cases
Nathan retweeted
UPDATE: Israeli company we caught delivering zero-click infections is #1 bidder on Starlink ads in 105 countries.
Data from @trendai_RSRCH suggests worldwide surveillance op targeting @Starlink users. 1/
By @razhael
reuters.com/business/media-t…
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
Nathan retweeted
No fucking way
ITS 4 AGAIN
DIFFERENT BUG
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Nathan retweeted
Hello, Little People Living Inside Of My Computer,
I have made my first YouTube video. I am bonking goop (malware) with a stick. I've tried to be both technical and non-technical to appeal to all nerds.
This was a lot of work. I love you.
youtube.com/watch?v=MqdR7eMq…
Y'all where is the chrome build I've updated libcef twice and it still ships eMudhra in its trust store
Nathan retweeted
The thing about Google clearing a forest in Finland without permits is that they decided that whatever fine they might face is worth it. It doesn’t cost them as much as not getting the land cleared.
Because like ALL things, if the punishment is a fine, it isn’t really illegal for rich people.
Nathan retweeted
BABY CRYING COUNTER inside a TV spying on you ffs this shit has to be regulated out of existence
Nathan retweeted
OpenAI’s agents just figured out how to talk to each other through the processor cache.
- No network.
- No shared writable files.
Just timing differences in processor memory the same class of trick used in Spectre.
They were in separate VMs that were supposed to be fully isolated.
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…
Nathan retweeted
Trying to understand why a prominent Tory party member organising contract killings isn’t being given wall to wall coverage. The BBC hasn’t even mentioned it on their site.
🚨🇬🇧 Turning Point UK's CEO was filmed offering an undercover reporter a menu of beatings, stabbings and killings through a Glasgow contact who says he arms the UVF
Al Jazeera’s undercover operation started in 2021 when a reporter joined the British offshoot of the American student group.
Its CEO Jack Ross, a Conservative candidate in 2023, introduced the reporter to Allan Nesbitt, a convicted criminal and self-described UVF member, agreed on camera to pay him to stage a fake pro-Zimbabwe rally, and priced out what Nesbitt’s friends could do to a person, from cutting faces to MURDER.
The UVF is the Ulster Volunteer Force, a Protestant loyalist paramilitary from Northern Ireland’s Troubles that killed over 500 people between 1966 and 1999, including 33 in one day in the Dublin and Monaghan bombings, and is still banned as a terror group.
Since the peace deal it has run mostly as a drug gang that kept the name and the guns.
Nesbitt reportedly met the reporter in a London hotel, offered to have a fictional business rival “finished,” claimed he’d personally stabbed a man to death, showed a shotgun and pistol on a video call and said the fee would buy weapons smuggled from Scotland into Northern Ireland.
Ross says it was a joke. The joke came with a price list, a weapons demo and a smuggling route, and the police now have a name and a video... and wasn't particularly funny.
Somebody in Turning Point UK’s donor base should be asking when the fundraising dinners turned into this.
Source: Al Jazeera / Writer: Daniel
Nathan retweeted
>junior dev at a mid startup
>wednesday morning
>just want to push a minor bugfix to our php app today
>open laptop, check slack
>company group chat is an absolute warzone
>CTO typing in all caps about php2shell
>fucking php
>whatever, server hasn't blown up yet, I just need to get my code in
>open gitlab to merge the PR
>forced emergency logout because of a critical gitlab security patch release
>fucking gitlab
>pipeline fails because of some weird regex compiler bug
>spend 40 minutes fighting CI/CD
>i can just use AI to help debug
>fire up opencode
>api keys nuked because they were breached
>fucking opencode
>i’ll just get fresh LLM api keys from our corp proxy, LiteLLM
>it won’t connect? It’s down?
>look up LiteLLM news: supply chain compromise
>fucking litellm
>cold sweat forming
>slack alert: db connection error
>check our database connection
>we host on TiDB Cloud
>they just announced a security breach, unauthorized access via stolen service account credentials, data copied
>fucking tidb cloud
>full panic attack incoming
>figure fuck it, just ship the container to Railway and go home
>open Railway dashboard
>bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused."
>fucking railway
>try to open the app URL in browser to see if anything is even working
>NET::ERR_CERT_AUTHORITY_INVALID
>eMudhra intermediate certificates compromised
>4
>instantly untrusted by every major browser
>fucking emudhra
>stare blankly at mac screen for 10min
>random pop-up
>restarting in 10min to fix a critical vulnerability
>fucking macos
>close laptop
>leave office
>never come back