AOC growing on me. This is spot on. I’ve heard no politician with a better take. She is not saying it’s going to murder everyone. She is saying what it’s actually doing to society, and what it will lead to—a cognitively disabled population with a monthly bill for knowledge.

Getting tired of people thinking software is either a god or a demon. I assure you it is not. It’s far easier to understand what’s going on if you use the correct language. mind-war.com/p/thiels-antich…

Amazing detail in this @wsj article about Kimberly Guilfoyle, US ambassador to Greece: she told a Greek minister, in a conversation about the collapse of the Romanian government,“We can do that to any country we want. We can do that here." wsj.com/articles/kimberly-gu…

Italian zero-day maker Dataflow Security generated €63 million in revenue in three years, and the company also has strong ties with former Israeli intelligence veterans, according to an investigation by @RositaRijtano. irpimedia.irpi.eu/en-inside-…

If you’ve ever wondered why Peter Thiel is such a Nazi, or why he creates coercive stories like the Singularity, QAnon & Dark Enlightenment, he grew up in a town in SW Africa which LARPed as Nazi Germany through the 70s. This is how a young, gay chess player grew up. Peter Thiel learned to hate people like himself—and to greet people with “Heil Hitler!” as instructed. Then he moved to America at 11. He hated it so much he resolved to destroy it and make it closer to his childhood in Swakopmund.

A PSA: do NOT download the White House app. It is doing something very weird with the sandbox permissions you give it. Which I’m not sure yet, but is likely against every service term and developer agreement on earth. I downloaded it so you don’t have to onto an air gapped old iPad. It is phoning home, asking for way too much personal data, and attempting to bypass location services permissions. Aside from the propaganda, it’s a security nightmare.

~ Personal news ~ I left TechCrunch. I will now focus on finishing my book about Hacking Team and the history of government spyware. After that, and in the meantime, I will be freelancing. Contact me: Lorenzofb.writes@gmail.com or Signal @ LorenzoFB.1337 (+1 917 257 1382)

🚨 Holy Hell.... this angle shows that the Butler Assassination attempt was 100% FAKED in order to get Trump his triumphant propaganda FIGHT FIGHT FIGHT moment and photo... watch how it was coordinated. Secret Service would never wait for photographers to get into position, and slow play getting Trump to safety. Nope, Trump murdered 2 people to get this photo op.

You’ll never guess who the chief patron and keynote speaker of the first Effective Altruism gathering was. In 2013, Peter Thiel was funding MIRI, Eliezer Yudkowsky’s doomer “research institute.” At the same time, Thiel was promoting the “debate” between “hostile” and “friendly” AI. Thiel says “general intelligence” would be like “extraterrestrials landing on the planet”—“the most important event in the history of mankind.” Note the Terminator slide. Simultaneously, Thiel was being “coached” by crypto-Nazi propagandist Curtis Yarvin—whose company (Tlon/Urbit) he funded. The next year, Thiel began conspiring with Jeffrey Epstein and the Russians to influence the 2016 election. It’s right in the files. ICYMI, like all cowardly Nazis, Thiel has recently escaped to Argentina—where he is currently trying to take over that nation’s failing economy to experiment with. The Antichrist is a chameleon who has been at or near the origin of almost every major harmful American movement for decades. He must be held accountable by the next administration, and his dangerous surveillance software must be ripped out of the government. #PFT

‼️ Google says a zero-click Pixel cellular modem vulnerability has been spotted being used in the wild in limited, targeted attacks. A logic error lets an attacker bypass permission checks and gain elevated access, though the CVE record indicates attackers need to be nearby. The September update (patch level 2026-09-05 or later) fixes CVE-2026-58704. CISA has added it to its Known Exploited Vulnerabilities catalog.

🚨 We need to Streisand the SHIT out of this documentary. Fuck Elon Musk, Universal, Comcast, and anyone else who gets in the way of hearing the truth about the most dangerous Nazi on the planet.

NOVITÀ DELL’ULTIMA ORA SU REVOLUT Iniziamo dall’elemento mancante fino a ieri: la casella di posta certificata violata appartiene alla Prefettura di Reggio Calabria (nello specifico, l'ufficio Enti Locali, che fa capo al Ministero dell'Interno). Ma c’è un aspetto grottesco, sollevato oggi da testate specializzate, di natura prettamente giuridico-procedurale. Infatti formalmente la Prefettura coordina l'ordine pubblico, ma non ha la competenza penale per emettere ordini di acquisizione di dati bancari all'estero (i quali spettano alle Procure della Repubblica tramite canali giudiziari dedicati). Il team legale di Revolut ha quindi accettato un finto Ordine Europeo di Indagine (OEI) formalmente inviato da un ufficio amministrativo che non avrebbe mai dovuto emetterlo. E qui a mio avviso la responsabilità di Revolut diventa palese, al netto dei legittimi tentativi della banca fintech di ridimensionare le proprie omissioni, È cosa ben nota infatti che gli accessi PEC governativi siano in vendita sul dark web da anni. Per questo motivo, molti analisti di cyber-risk sostengono che la responsabilità non sia affatto da dividere al 50%, ma che Revolut abbia mostrato una grave "negligenza procedurale". E su questo punto concordo totalmente. Infatti qui siamo davanti al classico conflitto tra Conferma del server vs Conferma del mittente. Come evidenziato dagli esperti di AML intelligence, i sistemi di conformità delle fintech spesso verificano solo che la mail arrivi da un dominio certificato (il server), senza accertarsi se la persona fisica che scrive sia un investigatore realmente autorizzato a richiedere quei dati. E qui passiamo all’errore fatale commesso da Revolut: la mancata verifica "Out-of-Band" Trattandosi di dati sensibilissimi di circa 700 clienti (selezionati chirurgicamente dai criminali tra i profili con i più ingenti portafogli di criptovalute) lo standard di sicurezza avrebbe imposto un controllo incrociato "fuori banda" (es. una telefonata di verifica ai canali istituzionali centrali del Ministero o a Europol), anziché limitarsi a rispondere alla stessa catena di email controllata dagli hacker. E a tal proposito, un dettaglio emerso oggi rende tutta la vicenda ancora più grottesca: è stata la stessa Revolut ad accorgersi dell'inganno dopo ben 5 mesi (un'eternità in termini di cybersecurity). Gli analisti della banca (alla buon’ora) si sono insospettiti per via di alcune anomalie e hanno contattato la Prefettura per altre vie, scoprendo che l'ufficio non sapeva nulla di quelle richieste. Naturalmente adesso il Ministero dell'Interno italiano si trova al centro di un polverone politico, poiché l'account PEC è rimasto in mano ai criminali da marzo a luglio senza che i sistemi di monitoraggio statali se ne accorgessero. In tale ambito, siamo ancora in attesa di una nota del ministero che giustifichi la falla sulla PEC (insistere sulla linea del silenzio sarebbe oltremodo imbarazzante). Per concludere, dibattito ora si sta spostando sui rimborsi e sulle sanzioni dei Garanti della Privacy (italiano ed europeo), che ragionevolmente commineranno delle multe a Revolut, per aver consegnato i dati dei clienti senza adeguate verifiche, come previsto dal GDPR. Una cosa è certa: questa storia ha scoperchiato il vaso di Pandora sulle enormi criticità delle attuali procedure di anti riciclaggio, alla luce dell’incapacità di garantire la sicurezza dei dati personali di milioni di persone. La concentrazione crescente di dati identificativi e finanziari nei sistemi AML e KYC, si sta rivelando fallace. Infatti, più informazioni vengono aggregate e interconnesse, più questi archivi diventano bersagli ad altissimo valore per cybercriminali e furti di identità. #Revolut #Hack

Some details: Kremlev, the Russian who sponsored Don Jr's wedding, is a former member of the Night Wolves biker gang, went to China with Putin and is personally sanctioned by Ukraine for his role in abducting children

Security (nightmare) by obscurity. #google #wtf

American foreign policy under Trump is not isolationist. On the contrary, MAGA ideologues want to build an international empire run by far-right political movements who serve the interests of American crypto, mineral and tech companies, especially if they have links to the president. They think of themselves as "the vanguard of a movement that will alter not just America, but the world." Read more here: theatlantic.com/magazine/202…

I built a new home for my book, JavaScript for Hackers. Every payload on the page is real. Click one and it pops in your browser. Then learn to build your own: parenthesis-free calls, non-alpha JS from just !+[]{}, DOM clobbering, SOP bypasses, the latest XSS. 1/4

The guy who vibecoded scripts to install someone else’s distribution as his own thinks everyone else in the ecosystem is a clown

Ummm yeah... cringe.

RT @Cthulhu_Answers: White nationalists use coded phrases (“heritage,” “Western civ,” “demographic change”) that sound like normal conserva…

RT @Cthulhu_Answers: It’s like they want us worried about AI killing us all as a distraction from these old white boomers actually in the p…