Mullvad announced they're phasing out their public encrypted DNS 😥 If you relied on it for maintained malware/tracker/ad filtering, Control D is a solid swap-in. It's best known as a paid service, but the free tier requires no account and offers the exact same filtering.

I'm so happy for them, I hope they are really happy.

Please drink it, don’t save it. Alcohol is God’s apology for making us self aware, and helps shy people have sex.

❗️ Unofficial Telegram Client Nekogram Transmits Account-Phone Number Links to Developer An IT expert who analyzed the Nekogram code informed SOTA about a backdoor discovered within the client: "The backdoor is hidden in the Extra.java file, which differs from the template uploaded to the repository. The obfuscated code sends data as an inline request to the @nekonotificationbot, leaving no trace. The same file implements account 'doxing' via several bots; it is possible that the leaked data is used to populate their databases." Additionally, the developer receives information regarding the linkage of accounts if a user has multiple profiles. The creator of the Nekogram client—presumably a Chinese national named Fan Li—was previously known for conducting DDoS attacks and unethical online behavior (including death threats against acquaintances). In early versions of the client, de-anonymization was applied only to Chinese phone numbers, which could have been used for political surveillance; however, it is now applied to all users. Notably, another unofficial Telegram client, "Telega," utilizes VK servers, providing the state with opportunities to monitor correspondence. Telegram itself has recently implemented an option to warn users if their interlocutor is using an unofficial client of the messenger. Illustration: Nekogram code fragment

Something nerds don't want to admit: they low-key enjoy the chaos Yeah, yeah, ransomware is bad, state sponsored threat actors are bad, but deep down when shit hits the fan it is exciting. Even though it's just a beep boop computer your adrenaline gets pumping

Check out this more minimal Brave Shields Icon!

Try to beat my score of 610 on "Blob Beats"! g.co/arts/SKyMGZavTMqWRwLP8?… via @googlearts

SimpleX Chat apps are 4 years old today! - 2M+ app downloads - 300-500K active users (estimated from store statistics - no accounts or any user IDs) - 1000+ network routers Coming soon: - channels - new UX - non-profit governance of SimpleX Network

They're going to sell a lot more devices to both individuals and businesses because people want devices with official GrapheneOS support. It's not an exclusive partnership and there's no money changing hands right now. It's a mutually beneficial collaboration.

We're happy to announce a long-term partnership with Motorola. We're collaborating on future devices meeting our privacy and security standards with official GrapheneOS support. motorolanews.com/motorola-th…

We reduced memory usage by about 45 MB by refactoring the ad block engine to use FlatBuffers, a more compact and efficient storage format.  Upgrades like this are impossible for adblocker extensions, which are restricted by browser extension APIs and sandboxing.

Do you remember when you joined X? I do! #MyXAnniversary

RT @BullandBaird: No bigger lie

We're not Big Tech pushing disposable gadgets and doorbuster deals. The Tor Project is a nonprofit fighting for a free internet– free from censorship and surveillance. This Cyber Monday, consider redirecting the money you might spend on Big Tech platforms and make a donation today. 🧅 torproject.org/donate/donate…

Exactly my point why JSON prompts suck! Your JSON prompt is broken (malformed) it does not end properly and nesting is left open. Unterminated string "cheeks": "Peachy ❌ Unterminated string value for "cheeks": line ends at "cheeks": "Peachy with no closing quote. ❌ Missing closing quote " after the "Peachy string value. ❌ Missing closing } for the "makeup" object. ❌ Missing closing } for the "subject" object. ❌ Missing closing } for the "image_generation_request" object. ❌ Missing closing } for the root JSON object.

We no longer have any active servers in France and are continuing the process of leaving OVH. We'll be rotating our TLS keys and Let's Encrypt account keys pinned via accounturi. DNSSEC keys may also be rotated. Our backups are encrypted and can remain on OVH for now. Our App Store verifies the app store metadata with a cryptographic signature and downgrade protection along with verification of the packages. Android's package manager also has another layer of signature verification and downgrade protection. Our System Updater verifies updates with a cryptographic signature and downgrade protection along with another layer of both in update_engine and a third layer of both via verified boot. Signing channel release channel names is planned too. Our update mirrors are currently hosted on sponsored servers from ReliableSite (Los Angeles, Miami) and Tempest (London). London is a temporary location due to an emergency move from a provider which left the dedicated server business and will move. More sponsored update mirrors are coming. Our ns1 anycast network is on Vultr and our ns2 anycast network is on BuyVM since both support BGP for announcing our own IP space. We're moving our main website/network servers used for default OS connections to a mix of Vultr+BuyVM locations. We have 5 servers in Canada with OVH with more than static content and basic network services: email, Matrix, discussion forum, Mastodon and attestation. Our plan is to move these to Netcup root servers or a similar provider short term and then colocated servers in Toronto long term. France isn't a safe country for open source privacy projects. They expect backdoors in encryption and for device access too. Secure devices and services are not going to be allowed. We don't feel safe using OVH for even a static website with servers in Canada/US via their Canada/US subsidiaries. We were likely going to be able to release experimental Pixel 10 support very soon and it's getting disrupted. The attacks on our team with ongoing libel and harassment have escalated, raids on our chat rooms have escalated and more. It's rough right now and support is appreciated.

Avoid Cromite/Ungoogled Chromium

People ask how we make money. We rely on search ads and API, opt-in/privacy-preserving browser ads, premium products (VPN, etc.), and crypto deals. Learn how to support us: brave.com/premium/. Our growth is almost all organic, word of mouth. Thanks, and on to 200M! 4/4

Over the past two years, the Brave browser has seen an average of about 2.5 million net new users each month. This September, we officially surpassed 100 million monthly active users worldwide. brave.com/blog/100m-mau/ via @brave