New.

Mandiant:The ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI https://cloud.google.com/blog/topics/threat-intelligence/recovering-active-adfs-signing-keys-machine-dpapi #infosec #Google #threatintel #threatintelligence

https://kb.cert.org/vuls/id/213560

The web server binary /bin/httpd contains an undocumented backdoor authentication mechanism in the login() function. Initially, the function follows a normal authentication path using MD5-based password verification. However, if authentication fails, the function invokes GetValue("sys.rzadmin.password") to retrieve an alternate password value from the device configuration. It then performs a direct strcmp() comparison in plaintext between the user-supplied password and the configuration-stored value. A successful match grants role=2 admin-level access and creates a valid session.

The associated username is not validated, so any provided username will succeed when paired with the backdoor password. This backdoor authentication mechanism is not documented or visible through any administrative interface.

Ausgerechnet jene, deren „Interessenkonflikte" durch die Informationsfreiheit ans Licht kamen, wollen sie nun abschaffen. Man könnte fast von einem Interessenkonflikt sprechen.

Gemeinsam mit über 100 Organisationen der Zivilgesellschaft richtet sich der Chaos Computer Club in einem Brief an die Bundesregierung, das Bundesinnenministerium und die Bundestagsabgeordneten im Innenausschuss:
https://www.ccc.de/updates/2026/abschaffung-der-informationsfreiheit-verhindern

I'm no plane spotter, but this site is great fun.

You heard a jet. You looked up. You asked the eternal question: what plane is flying over my house? Tinfoil Pigeons answers it.

Just take care with it, I would guess it's probably at least a gateway drug to full planespotterdom.

https://tinfoilpigeons.com/

Tips for ethical AI use:

1. Don't

@VeroniqueB99 This. Folded on folding them sensibly, i just embrace chaos now.

If a social media post can be a recession indicator

I'm still in awe of this one. US society, un-influenced by any leftist, keeps coming up with these amazing sabotage campaigns.

https://www.hcn.org/articles/people-are-betting-on-wildfires-should-they/?utm_content=bufferf720c&utm_medium=social&utm_source=bufferapp.com&utm_campaign=buffer

Apple: "Yeah, we got so much issues with spyware we introduced an optional hardened security mode for our devices."

Also Apple: "Btw you can't easily change the Name of the Wifi-Hotspot. We want everybody to know that you are here using an iPhone because f*ck your OPSEC"

Edit: @elosha showed me that it is based by default in the device Name.

#applesucks

Hände weg vom Informationsfreiheitsgesetz!
Mehr als 100 (!) zivilgesellschaftliche Organisationen, Projekte, Verbände und Medien fordern von der Bundesregierung, die Abschaffung der Informationsfreiheit zu stoppen.

Dieses breite Bündnis zeigt: Ein Angriff aufs IFG ist ein Angriff auf die Demokratie – und diesen nehmen wir nicht hin. https://fragdenstaat.de/artikel/policy/2026/07/xy-organisationen-fordern-rettet-die-informationsfreiheit/?pk_campaign=mastodon

Update: Sparkasse Seligenstadt will 0,99€ pro Push-Nachricht
​:neocat_googly_woozy:​

RE: https://gib.schmus.is/notes/aod8bmbuliok04bu

#China fired a long-range #missile from a #nuclear powered #submarine deep into the #Pacific Ocean on Monday, its first known demonstration of a sea-based strategic nuclear strike capability….

Countries in the region, including #Japan, #Australia & #NewZealand, were notified shortly before the test, in which a missile carrying a dummy warhead was launched at 12:01PM Beijing time, acc/to Chinese officials & state media. It is not clear whether the Chinese also notified the #US ahead of time.

Device Code authorization in OAuth 2.0 was intended for input-constrained devices like Smart TVs. It probably shouldn't be used for anything else, especially since attackers are using it effectively for phishing.

https://discourse.ifin.network/t/the-dangers-of-device-code-flow/642

#ThreatIntel #ThreatIntelligence #IFIN

The freedoms will continue until morale improves

(📷 Reuters)

say hello to our newest social media manager: sir möth of lampington

he is very eager to help with all your light train related issues!

Recent discussions about self-hosting and coop services got me thinking...

How absurd is it that we're all expected to surrender our computing needs to for-profit hyperscalers and cloud service providers? How dare these oligarchs try to make us feel weak and incapable of providing for ourselves?

They want us to forget that three decades ago we collectively created one of the world's fastest supercomputers with distributed.net using nothing more than scavenged compute power from our idle PCs.

They want us to forget that most of us have drawers full of old-but-otherwise-servicable smartphones with performance specs meeting or exceeding that of low-tier cloud service provider VMs, which might be brought back to useful life using open source tech like @postmarketOS.

They want us to ignore open source tech like BOINC, web assembly, and @thekhronosgroup 's Vulkan and OpenCL that might allow us to safely run local and distributed compute.

They want us to assume we have no choice but to accept higher electricity bills and greater reliance on fossil fuels to drive oligarch-run computing, and to ignore how the explosion of rooftop solar and the rapid commercialization of sodium ion battery tech could shift our society's power dynamics, both literally and figuratively.

We are mighty.

#solarpunk

99% sure AI spam bot:

I love BLÅHAJ sharks and want to join the community to discuss IKEA shark
related topics and share photos of my BLÅHAJ collection.

100% human:

I like sharks UwU I have a pinky one, shy tho curious to look around ^^ Hobbies include
spreadsheets :3

Okay we all see the difference?

"Massive numbers of students are going to emerge from university with degrees, and into the workforce, who are essentially illiterate."

https://futurism.com/future-society/college-critical-thinking-ai