Pinned Tweet
We act like the center of everything, yet we’re just a speck on a pale blue dot suspended in a sunbeam. That tiny image holds the whole of human history, every war, love story,empire all on that dust mote. If we remembered how small we really are, we’d treat each other better.
GenXer MFer Gearless Joe retweeted
🚨Cyber Alert ‼️
🇻🇳Vietnam - 𝗩𝗶𝗲𝘁𝗻𝗮𝗺 𝗔𝗶𝗿𝗹𝗶𝗻𝗲𝘀
The Gentlemen ransomware group claims to have breached Vietnam Airlines.
Threat actor: The Gentlemen
Sector: Transportation
Data exposure (claimed): Not specified
Data type: Not specified
Observed: Oct 26, 2026
Status: Pending verification
ESIX©: 5.94
Full details and impact assessment on HackRisk.io
GenXer MFer Gearless Joe retweeted
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-we-…
Readers added context they thought people might want to know
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…
msrc.microsoft.com/update-guide/v…
GenXer MFer Gearless Joe retweeted
Claude Code found 214,856 photos and videos I permanently deleted from my Android.
Three years of deleted photos and videos still sitting in a hidden cache. Any app with storage access can read them.
After the iPhone post I plugged my Pixel into the MacBook and asked Claude Code to check for leftover deleted files. It immediately pointed at a folder I had never opened.
DCIM/.thumbnails. Over 215,000 files. Photos, videos, screenshots. Every single one was something I deleted. Claude Code said most of them were not listed in the gallery trash or in MediaStore.
Photos from 2022, 2023, 2024 and 2025. The ones I deleted the second after taking them. The ones I cleared from Trash. The ones I deleted three separate times because I wanted to be sure they were gone. All still there.
Passport photo I took for a visa application in 2024. Screenshots of my bank app with full account numbers visible. Private photos I sent someone and immediately deleted after a breakup. Screenshot of my crypto seed phrase I took temporarily in 2023. Photo of my ID and credit card I took to remember the numbers and deleted 5 seconds later. Screenshots of my ex’s private stories I saved and permanently deleted in 2024.
Most were compressed previews. A few dozen were close to full size. All organized by date going back to 2021.
When you delete a photo on Android, the gallery removes it from your camera roll and Trash holds it for 30 days. It keeps a compressed copy in the thumbnail cache and MediaStore so your phone can show previews when you search or scroll. The system almost never cleans this folder. Files from 2022 were still sitting there.
They told you it was permanently deleted. It wasn’t.
I checked which apps on my phone had storage access. 27 apps. Weather apps. QR code scanners. PDF readers. A flashlight app I downloaded in 2021 that I forgot I even had. A calculator. Two of them still asked for full file access every time I opened them. Any one of them could have been reading every photo I ever deleted this entire time.
Went from 27 apps to 5 in about two minutes.
On iPhone the cache was harder to reach. On Android any app with storage permission can open this folder directly.
Full step by step below. Takes 2 minutes. Save it so you don’t lose it and send it to anyone with an Android phone.
Claude Code found 145,763 photos I permanently deleted from my iPhone.
Three years of deleted photos and videos still sitting in a hidden cache. Any app with file access can read them.
I plugged my iPhone into my MacBook to run a backup. Claude Code was doing the security audit from my last post and flagged a directory I wasn't even looking for.
PhotoData/Thumbnails. Over 146,000 files. Photos, videos, screenshots. Every single one was something I deleted.
Photos from 2023, 2024 and 2025. The ones I deleted the second after taking them. The ones I cleared from Recently Deleted. The ones I deleted three separate times because I wanted to be sure they were gone. All still there.
Passport photo I took for a visa application in 2023.
Screenshots of my bank app with full account numbers visible.
Private photos I sent someone and immediately deleted after a breakup.
Screenshot of my crypto seed phrase I took temporarily in 2022.
Photo of my ID and credit card I took to remember the numbers and deleted 5 seconds later.
Screenshots of my ex's private Instagram stories I saved and permanently deleted in 2023.
Some were full resolution. All organized by date going back to 2021.
When you delete a photo on iPhone, iOS removes it from your camera roll and Recently Deleted. It keeps a compressed copy in a Spotlight search index cache so your phone can find things when you search. Apple never clears it. Not after 30 days. Not after a year. Never.
They told you it was permanently deleted. It wasn't.
I checked which apps on my phone had Files and Folders access. 23 apps. Weather apps. QR code scanners. PDF readers. A flashlight app I downloaded in 2022. Any one of them could have been reading every photo I ever deleted this entire time.
Went from 23 apps to 3 in about two minutes.
Full step by step below. Takes 2 minutes. Save it so you don't lose it and send it to anyone with an iPhone.
GenXer MFer Gearless Joe retweeted
Claude Code found my wife's private photos and videos on 3 websites she never uploaded to. then it found a hidden app on my 13 year old daughter's phone sending her entire camera roll to a server every 6 hours. both found in the same scan.
someone sent my wife a link to a site she'd never heard of. her photos and videos were there. original files from her camera roll that were only ever on her phone.
i connected her iPhone to my MacBook and ran Claude Code. it found an active iCloud session logged in since March 2023.
IP → 116.25.***.91
location → Guangzhou, China
device → Windows 10 Pro
last sync → 6 hours ago
recovery email → x*****[email protected]
someone got her Apple ID from a leaked database and synced her entire library for over a year. she changed her password twice. they had a recovery email she never set up and got back in every time.
found on:
→ www.l**k-vault cc
→ www ph***dump to
→ telegram → t me/le***vault_asia (14,000+ subscribers)
the last thing Claude Code pulled from her account was photos and videos of our daughter. that made me check her phone next.
she's 13. she had a photo editor app with 2.7 million downloads from the App Store. Claude Code found it uploading her camera roll to a server in Vietnam every 6 hours.
server → 103.56.***.12
location → Ho Chi Minh City, Vietnam
total uploaded → 11,400 files
access → camera, photos, location, microphone
her face, her school, her friends, her exact location every day for 8 months. Apple approved the app. it's still live right now.
what we did that night:
→ killed the iCloud session and removed the recovery email
→ changed every password from my phone, not from hers
→ deleted the app and revoked every unnecessary permission on both phones
→ filed DMCA takedowns on all 3 sites
2 of the 3 sites took the content down. the telegram channel is still up.
my wife cried. my daughter still thinks i deleted her app because it was using too much battery. i'm not going to tell her the real reason.
the full step by step is below. takes 3 minutes. run it on every phone in your house tonight. save it so you don't lose it and send it to anyone with a family.
GenXer MFer Gearless Joe retweeted
ELECTRUM BITCOIN WALLET CONFIRMS CRITICAL SECURITY VULNERABILITY EXPLOITED IN THE WILD
Electrum has disclosed a high-severity vulnerability allowing malicious servers to trick users into sending Bitcoin to an attacker when increasing a transaction fee.
The attack works by intercepting a broadcast transaction and replacing it in the wallet’s history with a fake transaction redirecting funds to an attacker-controlled address.
If the user attempts to increase the fee using Replace-by-Fee (RBF), Electrum can sign the malicious transaction, sending the Bitcoin to the attacker.
Electrum confirmed two reported incidents, including one user who lost funds. Attackers even generated addresses matching the last four characters of the intended recipient’s address.
The vulnerability affects versions before 4.8.3 and has been patched in the latest release.
Users are urged to update immediately and verify all destination addresses and amounts before signing transactions.
Vulnerability disclosure: github.com/spesmilo/electrum…
GenXer MFer Gearless Joe retweeted
turns out it classifies what audio it hears, before reporting back to samsung.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
Carl Sagan was absolutely correct because we are exactly as he described. Ignorant Rage bait , stupidity and superstitions are celebrated.
Really enjoying Lighter exchange @Lighter_xyz . Clean, fast, Great on fees , Decentralized , ZK infrastructure
GenXer MFer Gearless Joe retweeted
The Benin bronzes are in the British Museum.
More than 900 of them.
They were taken in 1897, when a British punitive expedition burned the royal palace of the Kingdom of Benin, a kingdom with which Britain had diplomatic and trade relations, and whose metalwork was among the most technically sophisticated on the planet.
Taken. As loot. During a raid.
They are still there.
The British Museum has had decades of requests for their return.
The responses have involved long conversations about legal frameworks and cultural heritage law and the logistics of preservation and the importance of these objects being seen by international audiences.
The objects have seen international audiences.
From inside Britain.
The argument is, essentially: we took these things, we built an institution around the taking, the institution now benefits from housing them, and their presence here proves their importance, which justifies our continued possession of them.
This is not a difficult argument to identify.
It is the colonial argument in miniature, running in the present tense.
The history was removed.
The evidence of the history was also removed.
Sometimes to museums.
ALT Benin City, 18 February 1897. Three British soldiers stand inside the burned royal compound of the Kingdom of Benin, present-day Nigeria. In the foreground lie bronze plaques from the royal palace, amid the destruction left by the British punitive expedition. Thousands of royal and sacred artefacts were looted and dispersed into Western collections, including the British Museum. Before they became museum exhibits, they were spoils of colonial conquest. Photograph: Reginald Kerr Granville, 1897.
GenXer MFer Gearless Joe retweeted
“GEN Z DOESN’T DRINK”
“GEN Z DOESN’T DATE”
“GEN Z DOESN’T BUY HOUSES”
“GEN Z DOESN’T HAVE KIDS”
“GEN Z DOESN’T SMILE”
Maybe because:
• They graduated into a pandemic
• Job hunted into an AI apocalypse
• Entered the housing market when rates hit 8%
• Watched a world war start before they turned 25
• Got their first paycheck and lost 30% to taxes they’ll never see benefits from
• Student loans kicked in the same month rent doubled
• Were told to “just network” during two years of lockdown
• Grew up on social media designed to make them feel worthless
• Watched billionaires add trillions during COVID while they lost their jobs
• Inherited a planet that’s literally on fire
• Were promised the American Dream and handed the American Bill
But yeah.
It’s the avocado toast.
