I'm not going to be at @defcon.bsky.social in person this year but you can hear me on the soundtrack, which is out today! If you are there have fun/don't die and be sure to catch @int0x80.com Saturday! defconcommunications.bandcamp.com/album/def-co...

DEF CON 34: The Official Soundtrack, by DEF CON Communications

25 track album

defconcommunications.bandcamp.com

Excited to be giving a keynote at CppCon 2026 this September, go check it out!

welp… 6 months of radio silence and then finally today an automated rejection letter from m$. at least i have closure, i guess. anyone want some microslop ‘sploits? suddenly (mysteriously) far less motivated to coordinate their disclosure… 🤫

New from 404 Media: Apple's 'Private Relay' is exposing users' real IP addresses. Private Relay is supposed to protect all your browsing in Safari. But researchers found a bunch of issues that are exposing real IPs. I verified they do. Not fixed, a live issue www.404media.co/apples-priva...

Apple's ‘Private Relay’ Is Exposing Users' Real IP Addresses

Researchers found a group of issues that mean Private Relay isn't actually protecting users' real IP addresses. 404 Media verified the issues do expose IP addresses.

404media.co

New: Police in Wisconsin used Flock to create a pretext to search a man's car for weed. Their justification? He drove from Wisconsin to Michigan, a “known source state for marijuana as it is legal there,” and Flock showed he "travels to Michigan frequently." www.404media.co/cops-used-fl...

Cops Used Flock to Track a Man Across State Lines to Create Pretext to Search His Car for Weed

"The vehicle travels to Michigan frequently which is a known source state for marijuana as it is legal there," a probable cause justification reads.

404media.co

This man might go to prison for allegedly wiping his phone before DHS officials could search it. No warrant for the phone, no specific claim of what 'evidence' might be on it. But he used a duress/wipe password, leading to the charge Watch more and subscribe here: www.youtube.com/watch?v=lmik...

as a cryptography nerd, it's real confusing seeing everyone's posts about AES all of a sudden.

hide yo kids, hide yo tailpipes

Oh my god the dietician who is telling everyone in the White House to only eat steak and sauerkraut doesn't wipe his ass.

Regretfully, full story here:

I Tried the Trump Cabinet’s Steak and Sauerkraut Diet. It Was (Mostly) Fantastic. (Gift Article)

Steak, fermented foods — and that’s about it.

nytimes.com

what bsideslv talks have you enjoyed so far, or what ones are you most looking forward to? plz include which track they’re on so others can also easily find the streams or get to the talks while they’re going. thanks!

Claude and I have made a spicy or not for fruit. Go find out whether you maybe have a food allergy or not. Not medical advice and all that jazz. spicy.sgc.rayandhon.com * the decision to code with Claude is between me and my conscience, thanks I rewrote all the goddamn copy because ugh

Dan Hon@danhon.com · 2d ago

Spicy fruit thing

The SEC bought airline ticketing data to monitor worldwide flights. New documents we got show the data wasn't just for U.S. domestic flights, or even international arrivals. It included flights between foreign countries too. All queried without a warrant www.404media.co/the-sec-boug...

The SEC Bought Airline Data to Monitor Flights Worldwide

The SEC bought access to worldwide airline ticketing records. Airlines including Delta, United, and American sold the data.

404media.co

New: police are being explicitly told to hide the fact they're using Flock to pull people over and arrest them. Basically, do not mention this in official police reports. If the tech is completely legal and acceptable, like law enforcement say, why hide it? www.404media.co/do-not-menti...

‘DO NOT MENTION ALPR USAGE’: How Cops Are Trying to Hide Their Use of Flock

“DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE. DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT."

404media.co

automatically running signal messages through a stranger's AI is, I think, the worst pitch and idea I've ever been cold pitched in my life and that is saying a lot

Exclusive: We obtained a leaked playbook that Flock gives to cops to coach them on "how to speak to city council" to avoid getting their contracts canceled. Includes strategies like "own the narrative" by talking to mayor "before public comment periods" www.404media.co/own-the-narr...

‘Own the Narrative’: Leaked Flock Guide Shows How It Teaches Cops to Promote Its Tech

"This document shows a coordinated effort from Flock Safety to compel law enforcement agencies to convince our elected leaders to represent their interests as a company rather than the interests of co...

404media.co

New: we've obtained the guide Flock makes for police to try to convince cities to buy Flock cameras, even when there is widespread opposition to it. Encourages police to "own the narrative before someone else does," need to have a "carefully scripted presentation" www.404media.co/own-the-narr...

‘Own the Narrative’: Leaked Flock Guide Shows How It Teaches Cops to Promote Its Tech

"This document shows a coordinated effort from Flock Safety to compel law enforcement agencies to convince our elected leaders to represent their interests as a company rather than the interests of co...

404media.co

I think it also revealed just how quickly a bunch of otherwise very hard problems can be to solve with global collective action. The fuckin Ganga was running clear water for the only time in my lifetime because for 2 weeks nobody threw garbage in it. The canals in Venice had fish.

Dave Andress@davidandress.bsky.social · 4d ago

Covid lockdowns demonstrated, in a deeply imperfect way, the possibility of large-scale social solidarity for a higher cause. That is a prime reason why so many powerful people want us to run screaming away from them into the comforting arms of selfish individualist competition.

It’s important to understand that when 1.2 million Americans are dying from a disease, any government action is excessive and tyrannical, but if a dozen trans women want to play soccer no government action can go far enough

There is no version of yourself you could become that would satisfy the people who hate you. So you might as well be who you are.

i’m going through a lot right now and not comfortable sharing it all publicly, but if you could send positive vibes and maybe some cat pics that’d be great tbh

Honestly if you still have Exchange Servers and SharePoint Servers on premises today, you should earmark them as hostile, as if they're assets you no longer control. Because every time you think you've lasso'd that bull and gotten him under control? He's going to gore you again. Retire them. ASAP.

IMPACT: that company that was offering to buy books for AI companies’ training data — and probably destroy them in the process — says it will no longer offer this service following 404 Media’s exposure of it www.404media.co/ai-company-t...

Company Offering Printed Books to Train AI Stops After 404 Media Coverage

Citing backlash, ISBNdb removed its webpages about training AI, denied ever buying, scanning, or selling a book for AI training, and said the site was a "test of market interest."

404media.co

New: YouTube banned a wave of ASMR artists this week for violating the platforms’ rules against “sexually gratifying” content, leaving creators confused and angry. “We have reviewed your content and found severe or repeated violations of our sex and nudity policy.” www.404media.co/youtube-asmr...

YouTube Bans Popular ASMR Artists, Accusing Them of Making 'Sexually Gratifying' Videos

YouTube told ASMR artists including Bunnii, Slight Sounds, Rose, and others that their content broke the platform's sex and nudity policy. Creators say these bans are unfair and potentially life-alter...

404media.co

Update: Google just sent me a statement saying it is “rolling back” this AI feature that let anyone make completely bullshit satellite images. Comes after our demos of the tool and those from OSINT researchers. One of the worst AI tools I’ve ever seen bsky.app/profile/jose...

Joseph Cox@josephcox.bsky.social · 5d ago

New from 404 Media: Google Earth has introduced an AI feature that lets anyone fabricate completely bullshit satellite images. In our own tests, we added a “bomb blast and crater” to an area of Los Angeles. This is a misinformation time bomb, will 100% be abused www.404media.co/google-earth...

New: LinkedIn just introduced a "seems like AI slop" button. That's literally what the button says. The thought leaders are going to have a meltdown www.404media.co/linkedin-int...

LinkedIn Introduces a 'Seems Like AI Slop' Button

Following 404 Media's reporting on how LinkedIn is full of AI slop, the platform is giving users a chance to report it when they see it.

404media.co

How a group of 20-something YouTubers created a supplement empire on TikTok Shop by spamming it with AI content with stolen scripts and wild claims that targeted the "elderly." The company's products have been recalled by the FDA and now they're being sued: www.404media.co/inside-an-ai...

Inside an AI TikTok Shop Slop Factory That Shills Supplements Recalled By the FDA

How a company called Rosabella used AI content to market its supplements: "If you’re trying to sell health products to a 50-year-old, well, make your avatar 50 years old."

404media.co

This is an insane story about how a bunch of 20-somethings made a ton of AI slop to push supplements for a company that had an FDA recall. Turns out it's not really a supplement company at all; the same bros making the slop own the company. It's a fiction www.404media.co/inside-an-ai...

Inside an AI TikTok Shop Slop Factory That Shills Supplements Recalled By the FDA

How a company called Rosabella used AI content to market its supplements: "If you’re trying to sell health products to a 50-year-old, well, make your avatar 50 years old."

404media.co