Hubert retweeted
Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud.
V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything.
Two separate critical bugs: arbitrary read and RCE.
Here's how. 🧵
Hubert retweeted
Reverse-engineering Apple's Find My People to stalk ̶ ̶m̶y̶ ̶e̶x̶ a friend (@Lymdun_Sama), cause I can.
Featuring: pretending Linux is an Apple device, talking to IDS/APNs, recovering encryption keys, and decrypting live locations without a Mac.
zerotistic.blog/posts/find-m…
Hubert retweeted
Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.
signal.org/blog/pdfs/2026-06…
Hubert retweeted
🚨 New blog post: ELEGANTBOUNCER - Catch iOS 0-click exploits without having the samples.
Features iOS backup forensics & messaging app scanning for iMessage, WhatsApp, Signal, Telegram & Viber attachments.
🔗 Link -> msuiche.com/posts/elegantbou…
Hubert retweeted
NPR EXCLUSIVE: A whistleblower tells Congress and NPR that DOGE may have taken sensitive labor data from the NLRB and hid its tracks.
A must-read from @JennaMC_Laugh.
npr.org/2025/04/15/nx-s1-535…
Hubert retweeted
Shingles vax appears to prevent dementia! Our Nature paper is first of many from my group to show this. We use a really neat natural experiment to provide causal (not just correlational!) evidence. Paper: nature.com/articles/s41586-0…; video (👏 @DrMayaAdam): bit.ly/4ciRfLh
Hubert retweeted
There are so many great reasons to be on Signal.
Now including the opportunity for the vice president of the United States of America to randomly add you to a group chat for coordination of sensitive military operations.
Don’t sleep on this opportunity…
Hubert retweeted
As OpenAI and Meta introduce LLM-driven searchbots, I'd like to once again remind people that neither LLMs nor chatbots are good technology for information access.
A thread, with links:
>>
Hubert retweeted
The Nobel prize just supercharged corporations' data theft, labor exploitation & plundering of the environment by lending credence to the notion that they have built "superintelligent" things that are gonna either take us out or bring us utopia any day now (who knows which one).
Hubert retweeted
Leading article in NYT this morning: why can’t the US do anything to stop Israel’s aggression? They’re powerless, bumbling around in the dark looking for their dicks. Oh well
8 paragraphs in: Well, Biden can stop Israel but just doesn’t want to? Anyway moving on.
Hubert retweeted
As @RachelTobac points out, this auto opting in craze has to stop. Just like the EU cookie directive, which yes had a terrible implementation, made many aware of the pervasive nature of ad tracking, we need the same for AI data training
Hubert retweeted
At the height of One Million Checkboxes's popularity I thought I'd been hacked. A few hours later I was tearing up, extraordinarily proud of some brilliant teens.
A thread about my favorite story from running OMCB....
Hubert retweeted
Excellent new essay by Ted Chiang, who gets to the heart of why language and art are inherently about conveying meaning and experience, not just form:
newyorker.com/culture/the-we…
Hubert retweeted
If only #Crowdstrike consulted @BretHart this all could have been avoided.
Hubert retweeted
Train vendor in Poland is suing Polish ethical hackers who identified logic bombs making trains stop. I'm not sure how the courts will handle this case. But I am sure how it would fare in Court of Justice of European Union. It would be a precedent! Perhaps it's worth it :-)
It's finally happened! NEWAG IP Management just sued us for copyright infringement and unfair competition.
Here's a symbolic picture of the lawsuit as a whole: Newag quoting q3k's own code as supposedly their IP :)
More: infosec.exchange/@q3k@hacker…
