HBX
@hbx.bsky.social
I'm a Futurist, Linux evangelist, Geek, MacOS evangelist, System Admin, Cybersecurity, Hacktivism, and Argentinian American I break things to see how they work. Android4life!! I have an obsession with planets, nebulas and moons. 🇦🇷
A 16-year-old built a hacker badge with a touchscreen AND a theremin?! 🤯 Seriously impressive project for a college fund. Check out this wild creation! 💻 #HackerBadge #TechDIY #Shorts https://www.youtube.com/watch?v=LwNC_ufiJfI
Meet the Clip-Boy: A Hacker's Dream Badge #shorts
Discover the Clip-Boy, a powerful hacker badge created by a 16-year-old for their college fund. Packed with security tools, a touchscreen, and even a theremin, it's a must-have for tech enthusiasts. G
youtube.com
NEW: PSA: Apple's Private Relay, which is supposed to keep your IP address hidden from websites you visit using Safari, can leak your real IP address. The issues underlying this are not fixed. Researchers set up a site to test this. We used it and, indeed, we could see our supposedly hidden IP.
PSA: Apple’s Private Relay can leak your real IP address | TechCrunch
A bug in how Apple implements its Private Relay feature, which in theory masks users’ IP addresses from the sites they visit, can reveal users’ real IP addresses.
techcrunch.com
Sometimes hacking the system means creating tools and resources to protect your rights today. That includes EFF's Privacy Badger, Certbot, and Surveillance Self-Defense guide—all thanks to EFF member support. You can join this community today! eff.org/vv
Break Free of Tech’s Walled Gardens
Take back digital privacy and free speech. Join EFF or renew this week and get a DEF CON 33 puzzle t-shirt.
supporters.eff.org
“The GrapheneOS foundation cannot help, and will not help US prosecutors in any way”
GrapheneOS says its data-wiping "duress" password is perfectly legal, after user faces federal charges
According to the GrapheneOS Foundation, the operating system that got Sam Tunick prosecuted by the US government has nothing to do with unlawful practices. The Toronto, Canada-based...
techspot.com
The DEF CON Beard and Mustache Contest is back on the Contest Stage this Friday from 13:00-15:00. The judges are susceptible to flattery, donations to EFF, and a touching facial hair origin story. defcon.org/html/defcon...
OpenAI wants teachers and profs to foist their work off on ChatGPT
OpenAI wants teachers and profs to foist their work off on ChatGPT
New plugins for K-12 teachers, university instructors, and college kids? Read the room, guys
theregister.com
-Hacker breaches Hungary's State Treasury -Russia to mandate 40 apps on all smartphones next year -Hackers hits Liechtenstein's business database -AI hallucinates 55 vulnerability reports -Pass-ta-key attack recovers passkeys from Chrome N: news.risky.biz/risky-bullet... P: risky.biz/RBNEWS596/
First electronic badge of hacker summer camp the Clip Boy! Designed by a high schooler and it’s one of the coolest have ever seen #defcon #roadtodefcon #cybersecurity
If you've been dying to run macOS on iPad hardware natively, a jailbreak solution has emerged for M1 and M2 iPads running iPadOS 16, though it is extremely experimental.
If SideCar isn't enough, get real macOS on iPad with a new jailbreak tool
If you've been dying to run macOS on iPad hardware natively, a jailbreak solution has emerged for M1 and M2 iPads running iPadOS 16, though it is extremely experimental.
appleinsider.com
Louisa Mason proposes expanding the technosignature search beyond the traditional water-hole to millimeter and submillimeter bands, reanalyzing ALMA Band 3 data around 90.6–93.2 GHz with a Besançon Galactic Model to account for a broader stellar population, which increases th… #disclosure #uap #ufo
Alien Signals May Hide in Unexplored High Radio Frequencies
Confirming the existence of extraterrestrial intelligence via radio signals, also called technosignatures, is the cornerstone of radio astronomy. While humanity has been asking since time immemorial whether or not we’re alone in the universe, radio astronomers are at the frontlines trying to tirelessly answer this longstanding question. To accomplish this, they’ve traditionally focused on a specific radio frequency band called the “water hole”, which resides between 1.42 and 1.66 GHz. This is due to two water-forming molecules, hydrogen and hydroxyl, emitting these frequencies.
ufo-uap.news
A rose made of galaxies... This is Arp 273, where two galaxies are transforming one another from 300 million light-years away. Their gravitational encounter has pulled the larger galaxy into a remarkable rose-like shape. (Credit: NASA, ESA and the Hubble Heritage Team, STSc/IAURA)
Defenders, new C2 tooling to be on the lookout for... Found it in use by Aurora Ransomware group. github.com/XTLS/Xray-core
GitHub - XTLS/Xray-core: Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses. - XTLS/Xray-core
github.com
Grab the slide deck for @adamshostack.bsky.social's Black Hat USA talk introducing the PHANTOM-B model, now available on the Shostack + Friends blog. The talk starts at Wednesday at 11:05am in Oceanside C, Level 2. shostack.org/blog/phantom...
Threat Modeling LLMs: Adam’s talk at Black Hat USA
PHANTOM-B is a practical tool built for threat modeling AI systems
shostack.org
Android app developers may be unwittingly sharing their users’ location data with advertisers
Android app developers may be unwittingly sharing their users’ location data with advertisers
Developers may not realize they are sharing their users' location data with advertisers, per new research.
techcrunch.com
You would think that all of these people pushing for social media bans for kids would be interested in whether or not these bans actually work...but no, I guarantee we will keep on seeing age-gating bills. theconversation.com/more-than-80...
More than 80% of kids still using social media despite ban, new eSafety report finds
The report provides more evidence Australia’s world-leading social media ban isn’t going to plan.
theconversation.com
Feeling like you know less the more you learn? 😅 It's a common cybersecurity struggle! This short dives into imposter syndrome & the Dunning-Kruger effect. Check it out! #Cybersecurity #ImposterSyndrome #DunningKruger https://www.youtube.com/watch?v=_fL1ycENSAw
Overcoming Imposter Syndrome and The Dunning-Kruger Effect in Cybersecurity #shorts
Ever feel like you don't know enough, even in your tech career? It's likely Dunning-Kruger effect, aka imposter syndrome. The more you learn, the more you realize what you *don't* know. You're not alo
youtube.com
Hey, so I’ll be at #DEFCON34 talking about the national fight against ALPRs with my @eff.org friends. (Friday 4pm @ Crypto / Privacy Village) But like, I need @404media.co to slow down its reporting, I’m trying to finalize our slide deck. bsky.app/profile/jaso...
Jason Koebler@jasonkoebler.bsky.social · 2d agoNew: Police are being told to hide the fact that they're using Flock to pull people over and arrest them in both encounters with citizens but ALSO in their official police reports: www.404media.co/do-not-menti...
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.
New XCSSET variant targets macOS devs via compromised Xcode projects
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.
bleepingcomputer.com
By me at this.weekinsecurity.com: A major online ads company that claims to serve 1.5 billion ads a day was hacked and began serving malware designed to steal a person's crypto. This is the latest perfect example why you should use an ad-blocker.
Online advertising giant Adform was hacked, proving once again why ad blockers are necessary
The hacked digital advertiser was caught serving malicious ads that allowed hackers to steal a victim's cryptocurrency.
this.weekinsecurity.com
Samsung monthly updates: August 2026 security patch gets detailed www.sammobile.com/news/samsung...
Samsung monthly updates: August 2026 security patch gets detailed
Samsung has released details about its August 2026 security patch for eligible Galaxy smartphones and tablets.
sammobile.com
IT boss left root session open for bring-your-kid-to-work day
IT boss left root session open for bring-your-kid-to-work day
Daddy, I typed a Unix command! Was it a bad one?
theregister.com
This week, the Senate Commerce Committee is considering a package of internet bills that would expand age verification and restrict online speech. The Youth AI Privacy Act is no exception. Congress should reject it. www.eff.org/deeplinks/2...
The Youth AI Privacy Act’s Privacy Paradox
The Senate Commerce Committee is poised to consider the Youth AI Privacy Act, a bill that would require AI companies to create kids-only privacy rules and implement so-called “safe design features,”
eff.org
Had a great time chatting with the very excellent @firewalldragons.bsky.social about the things I'm thinking about the most in cybersecurity and privacy 👀 Have a listen!
Firewalls Don't Stop Dragons@firewalldragons.bsky.social · 3d agoToday we talk with @zackwhittaker.com from @techcrunch.com about some of top cyber threats, which may not be obvious. We discuss age gating, mercenary spyware, surveillance capitalism and critical infrastructure attacks, and more! podcast.firewallsdontstopdragons.com/2026/08/03/t...
Parents should decide the right level of tech oversight for their family. Congress shouldn’t mandate one model for everyone. But that’s the model of the CHATBOT Act. www.eff.org/deeplinks/2...
The CHATBOT Act Forces One Parenting Model On Every Family
Artificial intelligence is rapidly changing education, and the way people search for information. Parents, teenagers, teachers, and schools are struggling with tough questions about when AI should,
eff.org
China turns up the heat with open model blitz as US model makers panic
China turns up the heat with open model blitz as US model makers panic
For the first time, Alibaba's Qwen team is letting its 'Max' model out of the API pen; meanwhile, DeepSeek V4-Flash gives new meaning to cheap and cheerful competition
theregister.com
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
bleepingcomputer.com
Come check out Veilid and join the revolution at BsidesLV! Veilid bringing the PLUR this year! Privacy Liberty United Revolution Come get Veilid rave candy and hang out!
Russian spies turn public Wi-Fi into malware delivery systems
Russian spies turn public Wi-Fi into malware delivery systems
Keyloggers, audio-visual surveillance, and token theft on CaptivePortal's agenda as hospitality sector put on alert
theregister.com
Cheap H96 #AndroidTV boxes are doing far more than streaming. Researchers found devices that silently rotate between ad fraud and residential proxy abuse, turning home networks into infrastructure for cybercriminals. More: hackread.com/h96-android-... #CyberSecurity #Android #Malware #AdFraud
H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners' home internet connections.
hackread.com
Unidentified anomalous phenomena are increasingly intruding on the U.S. military’s most sensitive sites with deliberate, transmedium incursions—often near nuclear assets and advanced R&D programs—displaying high-G maneuvers, radar evasion, and other characteristics that excee… #disclosure #uap #ufo
Military Base Incursions: Why UAPs Target Strategic Sites
Investigating why UAPs persistently target sensitive military sites and what this means for national security, disclosure, and our UAP understanding.
ufo-uap.news
