@ChrisMayLA6 good thread here, this wasn’t some advanced attack: https://cyberplace.social/@GossiTheDog/117429502412235079

RT: @DarrigoMelanie I can’t believe that they found boxes of stolen classified documents in Ilhan Omar’s bathroom?!?

Oh wait, that was Trump’s public bathrooms in Mara a Lago.

Just in case you were wondering what the difference between fascism, and investigating actual crimes looks like.

RE: https://mas.to/@Jyoti/117424812152674491

As a literal inkjet printer engineer, I am forced to agree

#WritersCoffeeClub Oct 13th: What writerly weakness do you overcorrect for?

If I knew I was overcorrecting I'd try not to!

Decades ago I had an (American) editor who got angry with me for what he perceived as my over-use of semicolons; I am now correcting for my editorially-induced over-correction in no longer using them. Perfectly valid punctuation!

I gotta remember that while the boosters say "all software will be LLM developed, you can't avoid it" that NetBSD crushed its funding goal, LibreOffice got record downloads, more people are contributing to Redox, and so on.

It's far from impossible, even if it may feel that way (freakin' Linux kernel grumble grumble)

I woke up to realise something.

There is an assumption that, with the fall of the Berlin wall and the collapse of the Soviet Union, the West won the cold war.

The human mind looks for finality. But the world keeps turning.

Russia has won the cold war without firing a bullet. The US elected Donald Trump twice.

the ambitions of the early days of the space age, especially Von Braun and Ley's plans for how to go to the moon, were truly incredible

Step 1: build a 250m spin gravity space station 1000 miles up

Step 2: build a hundred meter tall moon lander in orbit

JESUS FUCKING CHRIST THERE IS NO ARTIFICIAL SUPER-INTELLIGENCE.

The extent of the widespread belief in it is actually fairly good proof that there's not much natural intelligence, either.

"The big story today is a great one. I had thought that Zelenskyy’s blowing up the Russian oil terminal and thereby thwarting Trump’s plan to get diesel from the Russians was the best thing he could do, but I was wrong. This weekend he blew up a major data center, hitting it with drones three separate times (he had hit two other data centers earlier), and the Russian troll farms went suddenly silent:

–The minute the data center was bombed, there were suddenly far fewer pro-Trump and pro-conservative and pro-MAGA posts. The Reddit conservative sub-groups went silent.

–And it wasn’t just in the US. There was suddenly a complete lack anti-immigration posts in Ireland, right-wing AfD supporters in Germany, and conservative and pro-Brexit groups in the UK.

–This follows the UK Prime Minister Andy Burnham’s statement this weekend that the Brexit election was heavily influenced by the Russians: “It’s clear Russia interfered in the Brexit referendum.”

–Angry drew the obvious conclusion: “None of these far-right movements are organic.”

–By eliminating the data centers, Zelenskyy has destroyed the propaganda structure of Putin’s Russia, which has been a HUGE part of his war effort–and of Putin’s meddling in the US midterms.

–Tech experts say there’s almost no chance of the data centers coming back on line before the midterms are over.

–Even better, the absence of particular accounts tells us exactly which accounts were, in fact, Russian bots, thus rendering them far less dangerous even if they manage somehow to get back online.

–Dan Sutterfield: “From the fascist party in Germany to the Ukraine invasion, climate change, ICE supporters, to the separatist group in Alberta and of course the MAGA bigot brigade in America…one thing in common: When the cloud data centers in Russia were hit this weekend, they all went quiet. MOST OF WHAT YOU SEE ON THESE SUBJECTS IS PROPAGANDA FROM RUSSIA (caps mine).”

–It’s also obvious that Elon Musk was heavily involved in that propaganda. He posted on Twitter: “Zelenskyy has gone too far.”

–Observers are calling the strikes “Operation Quiet Piggy.”

–David Obelcz: “The Russian war machine has suffered more damage than a hundred refinery strikes.”

–Outspoken: “Ukraine took out Russian bot farms, and suddenly the internet has a suspicious shortage of Trump supporters.”

–randym77: “You’re laughing. Your uncle in the Rochester, New York, suburbs just lost all of his online ‘friends’ in a drone strike, and you’re laughing.”

–Andrew Weinstein: “Ukraine is taking on the machinery of foreign disinformation directly at the source. President Zelenskyy deserves our full, unwavering support for doing it.”

–Jack Hopkins: “Zelenskyy should get the Nobel Peace Prize, if for no other reason than silencing so many fucking trolls in one fell swoop. The level of peace that has already (been introduced on social media…holy shit.”

–Christa: “This is the sort of October surprise that we needed!”"
https://azsf.net/cwdaily/2026/10/12/zelenskyy-does-it-again-slava-ukraini/

After hearing about the AI-tech-bros taking up smoking and other hazardous activities as a show of faith that their LLM gods will cure their cancers as a reward for their beliefs, I had to throw a meme together.

Ukraine helps move Russia's Yandex data centers to the cloud.

Yup....

To bypass login send a POST request to /xml.cgi, there’s a write up here: https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers

Shodan search: html:danfoss product:"nginx"

The supermarket impacted today in France put all of their devices directly internet facing and all had the same password, today’s date.

https://beta.shodan.io/search?query=html%3Adanfoss+product%3A%22nginx%22

Regarding the Danfoss fridge thing doing the rounds in the media - there’s several thousand of them that are directly internet facing.

The username is admin and the password changes every day automatically to.. the current date.

Every single one is like this. You can just log in and change the temperature. Anybody can do it, easily scriptable.

Remember the 1990s when Java was everywhere and was going to change the world and everything would be written in Java henceforth?

There's a reason the old hands are waiting out LLMs.

(And yes, I'm aware this comparison is unfair to Java.)

A US appeals court upheld a ruling that AI legal research company Ross Intelligence had broken copyright law by training its legal search engine on proprietary data harvested by their bots, a ruling which presages doom for all AI programs

https://futurism.com/artificial-intelligence/court-finds-copyrighted-material-training-data-fair-use?utm_source=fark&utm_medium=website&utm_content=link&utm_campaign=fark&ICID=ref_fark

#business #AI #interesting

If you actually read the “Passkeys are a trap. Do not use them.” post going around, you’ll find a transparent attempt to clumsily string together a conspiracy.

The post is predicated on the idea that a feature of WebAuthn called “attestation”, which is only used in high-assurance and usually corporate scenarios, and usually with physical hardware security keys, will be leveraged to hurt people, somehow.

The post posits that a website like X will bait and switch users: first, you get a passkey. Then, later, scary “attested” passkeys! This simply isn’t possible to do because attestation isn’t supported on the web for mass market, consumer authentication.

Attestation for passkeys (software-based, syncable credentials) is antithetical to their mass market goals, and would freeze out independent, non-corporate-backed credential managers. It’s an explicit non-goal of the designers of passkeys, who work together in a forum anyone can join.

And trust me, websites and apps like banks repeatedly asked for attestation at the beginning of the industry’s passkey journey. The platforms, browsers, and credential management apps have held firm that the goal of passkeys is reducing phishing and **not** some kind of trusted computing scheme. (And I will note: over my dead body!)

Besides the theory of the case being fundamentally wrong, there are several things that make the post disqualifying in terms of arguing something useful or important in the realm of security, privacy, and user authentication:

1. Intentionally presenting things that are complicated as inherently suspicious. (Delivering security by design can be complicated, yes!)

2. Describing TOTP as a “great solution” for adding security to a password-based account. When the most common threat model on the web is phishing (a word the post never mentions!), TOTP hardly buys you _anything_. TOTP is phishable.

3. Seeming to be unbothered by how many logical leaps are being taken without actually understanding the topic being discussed.

There are bad things happening in tech and untrustworthy people and companies do exist, but they’re largely in the AI space, not the “let’s stop people we love from getting compromised through phishing” space.

Nepal’s authorities ordered residents along the Budhi Gandaki River to evacuate on Sunday, 11 October, after a sudden flash flood swept away homes and other buildings in the country’s mountainous north-central region.

https://www.euronews.com/video/2026/10/11/nepal-orders-evacuations-after-landslide-triggers-budhi-gandaki-flash-flood

#BudiGandaki
#ClimateCatastrophe
#Himalaya
#FlashFlood
#Nepal