stuff i repost

Using a HTTP desync attack to see what media.discordapp.net attachments are being viewed, in real time, across the entire platform.

France is transitioning government desktops to Linux, with each ministry required to formalize its implementation plan by autumn 2026.

From the anthropic read team.

The official White House Android app has a cookie/paywall bypass injector, tracks your GPS every 4.5 minutes, and loads JavaScript from some guy's GitHub Pages.

ReVanced has been stealing code from Morphe without credit. Open source is generally free for others to use, but open source does not mean "can use without restrictions". There still are requirements to use open source code, and ReVanced is not following them.

A documented collection of Meta's lobbying activity and policy influence — the kind of thing that doesn't make headlines but shapes the rules everyone has to live by.

The EU Parliament voted to reject untargeted surveillance of all private messages. A significant win for encrypted communication, though the fight is far from over.

A new California law mandates some form of age verification at account setup for all operating systems. The implications for open-source software and user privacy are significant.

A thoughtful post on identity, online personas, and the gap between who we present ourselves to be and who we actually are.

A technical breakdown of what "age verification" really means in practice — and why every proposed implementation either doesn't work or creates a surveillance infrastructure far worse than the problem it claims to solve.

The follow-up to the original bug report: further research uncovering the scale and implications of the Snapchat vulnerability.

fingerprinting TTP via WhatsApp and Signal to find out when someone is active, at work, at home, etc

The EU is building its own payment infrastructure to reduce dependence on US-based processors — part of a broader push for digital sovereignty.

A teenager discovers a significant security flaw in a widely-used service through methodical, independent research — a good reminder that age isn't a barrier to serious security work.

The EU law that has led to the rise of cookie banner popups is flawed. It's time for a fix.