stealmybitcoin was just solved by @killa. Or rather solved a few hours ago. He was confused because the wallet address was wrong. Turns out the server didn't have the right wallet :P

Interesting that with all the "PoC" claims flying around nobody claimed this yet: stealmybitcoin.com/ news.ycombinator.com/item?id…. Is the author trolling hosting a patched PHP server or is the exploit really not that easy, contrary to what everyone and their agent is shouting?

this is pretty evil and clever. so if your samsung TV model doesnt have a microphone, it will look for connected devices with one, such as a soundbar or a connected bluetooth device. this gets shipped off to bixby.

chainyourmac.com (under $20) thank me later.

github.com/francescotinti/ph… hahahaahh

Good morning 045fa83b7c7a42dba1acb2c19794c1bf1091c448eb9c483503e8f8e110fcec42 github.com/kubernetes/kubern…

Calling it now: Chrome and Mozilla will remove eMudhra as a G1 root, nulling them as a CA. On 20 Oct, eMudhra had 24 hours to give an explanation of what exactly happened with the mis-signed certificate. They did not; asked for more time; and now blame “investors/customers” 🤡

Yes, social media is at fault for amplifying the fact that you put - and are still putting - us all at great risk. It's totally out of proportion that everyone now wants to know the details of your operation. Delusional.

As if PHP2Shell wasn't enough for one day... now GitLab. 😅 🚨 CRITICAL GITLAB ALERT (CVSS 10.0) CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers. ⚠️ Potentially affects 12 years of releases, dating back to 2014. Patches available. Update immediately! docs.gitlab.com/releases/pat… #gitlab #cybersecurity

the audacity to lie in a public statement, no HSM would ever generate a “weak key” like 4 lol

private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…

a trusted intermediate CA just "leaked" (the private key was 4)

This is like saying smelling McDonalds when you walk by is them intentionally baiting and forcing you into obesity. People have agency and willpower and are free to make their own decisions. Nobody is forcing anyone to fill out a credit card application.

It is becoming f*cking dangerous A 23-year-old dev from China just ran 300 Claude Code agents in parallel and hooked them to a verification layer so none of them could bullshit him He opens the live dashboard: - 300 agents writing and checking at the same time - Every output verified against the source in ~100 ms - Three passes over 100 company profiles → zero errors left - Everything dumped straight into an Obsidian vault The trick is the split: one model does the work, a cheaper one decides if the claim is actually true. The loop doesn’t stop until everything checks out An analyst team would bill weeks for this. He got it in one run Same kind of Second Brain + swarm setup that keeps circulating. Bookmark the full breakdown

Your wealth is digital. The device you manage it with should be built for that. Meet Ledger Atom™: the security of industry leading hardware, the convenience of your everyday apps, plus control over your AI tools, and a rapidly expanding platform of apps, all in one quantum ready device. Agents propose. You approve. Your Ledger signer enforces.