<unnamed>

Public Key

npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye

Profile Code

nprofile1qqs0uvd8fnn6wdtgj6r2f29akaj63axmj3werdn5ztr4qk9g9fgullgpqqftcksd

Publishing to

Last Notes

2026-08-30 17:54:43 CEST

I suspect something that hurts Mastodon adoption is that when you first join, assuming you don't join Mastodon.social, you get a server list:
https://joinmastodon.org/servers
But many of the top servers block sign ups, e.g. social.vivaldi.net and mstdn.ca
https://cyberplace.social/system/media_attachments/files/117/185/256/902/885/027/original/1d33280e16655eba.png
https://cyberplace.social/system/media_attachments/files/117/185/259/432/081/925/original/1b513d8de14d2680.png

2026-08-26 01:35:58 CEST

Both Xcancel and Nitter have had cease and desist letter from Twitter. You can still follow Twitter account on Mastodon via [email protected] and the like.
https://cyberplace.social/system/media_attachments/files/117/158/765/329/192/734/original/c676589085585ddf.jpeg
https://cyberplace.social/system/media_attachments/files/117/158/765/366/693/105/original/3fdac1b142433310.jpeg

2026-08-17 17:24:10 CEST

- reply

ShieldBreak appears to be CVE-2026-69414 ht @npub12xh…zxeq https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69414

2026-08-17 16:36:22 CEST

- reply

Microsoft working to confirm validity of ShieldBreak. lol, bit slow. https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/

2026-08-14 23:04:59 CEST

I regret to inform you Elon Musk has made a 6 minute AI video of himself as a superhero and it’s the cringiest shit I’ve ever seen.
https://cyberplace.social/system/media_attachments/files/117/095/884/937/487/672/original/833b25bb7d4daef9.mp4

2026-08-12 14:51:00 CEST

Nightmare Eclipse has published an unpatched zero day in Microsoft Defender called ShieldBreak, gets you SYSTEM privileges from any user account
They term it RoguePlanet 2 - however it operates very differently.
https://git.projectnightcrawler.dev/NightmareEclipse/ShieldBreak/src/branch/main/ShieldBreak.cpp
I've tried it, it works on latest Windows 11.

2026-08-07 23:58:13 CEST

- reply

If you run N-enable urgently apply the latest hot fix in this thread. I just spent 3 hours helping a government office hit with ransomware via this. A ransomware group definitely has the exploit, it’s a bypass for the previously issued CVE.

2026-08-07 02:02:03 CEST

- reply

Check your N-central server for traffic to Cloudflare Tunnels, they’re doing persistence via that even after patching.

2026-08-02 20:07:37 CEST

- reply

or Microsoft https://protonvpn.com/blog/windows-is-spyware

2026-07-30 19:16:20 CEST

Well done to the US government for running an AIDS conference, AI generating the slides, and presenting the slides with every country in Africa mislabelled by said AI https://www.theguardian.com/us-news/2026/jul/30/government-map-mislabels-african-countries

2026-07-30 16:16:22 CEST

- reply

RE: https://infosec.exchange/@hacksilon/116990837620035279
Looks like Max spotted it 3 days ago
#note1tr8…ucvz

2026-07-30 16:01:45 CEST

- reply

I didn't cover it in the blog but it does an amusing thing where aside from hijacking the clipboard, it also rewrites browser forms already filled in to change wallet addreses, lol. So if you browse an autofill form it replaces that too.
One of the big crypto firm execs sits on Adform's executive, I think they may have been hit in the incident by this.

2026-07-30 15:39:45 CEST

Adform, a web advertising firm, have been hacked and have been serving a supply chain attack to steal crypto https://doublepulsar.com/adform-compromised-to-serve-crypto-stealer-via-supply-chain-attack-2f1ec024f33e

2026-07-30 14:42:12 CEST

- reply

https://cyberplace.social/@GossiTheDog/117008566099747755
#note1x4j…6jk6

2026-07-30 12:57:08 CEST

The ExfilSquad portal listings are real, they gained access to companies Microsoft Dynamics365 environments (including Microsoft itself).

2026-07-29 18:16:35 CEST

Sense check for people working in cybersecurity in operations roles in the trenches:
I’m not finding or seeing cyber incidents off the back of Generative AI still. Are you? Not ones you’ve read about online - I mean ones you’ve actually dealt with.

2026-07-26 15:33:57 CEST

Elon Musk, an immigrant, was interviewed recently by the editor of the Economist. He said a bunch of dumb shit - for example that money wouldn’t exist in 2036, and that everybody wouldn’t have to work any more as AI would do their job for them.
Anyway, he’s now essentially calling for the assassination of the journalist over her questions about immigration.
https://cyberplace.social/system/media_attachments/files/116/986/523/670/932/738/original/834d0c9cab83b8fe.jpeg
https://cyberplace.social/system/media_attachments/files/116/986/523/725/376/414/original/518c795273ca41ab.jpeg
https://cyberplace.social/system/media_attachments/files/116/986/523/837/211/418/original/a6b85d485904d624.jpeg
https://cyberplace.social/system/media_attachments/files/116/986/523/977/604/522/original/7e34c8188f3d6797.jpeg

2026-07-23 19:44:46 CEST

- reply

Microsoft are telling customers there is no ETA to resolution and they may want to review their DR plans for their SaaS services.
"Customers may wish to review their business continuity and disaster recovery plans and take actions appropriate for their environment."

2026-07-23 19:19:16 CEST

- reply

It's taken several hours but Microsoft finally put impacted services on the Azure status page, prior it was showing no impacted services.
https://cyberplace.social/system/media_attachments/files/116/970/432/289/311/563/original/940dfcca3e04c95a.png

2026-07-23 18:59:33 CEST

- reply

For anybody tracking the Microsoft outages... Azure West US is the cause:
Starting at 14:44 UTC on 23 July, 2026, we began investigating a networking issue affecting connectivity to Azure services in the West US region. Impacted customers may be experiencing intermittent connectivity failures, increased latency, or difficulty accessing Azure services. Customers with traffic traversing the West US region may also experience downstream impact.

2026-07-23 17:46:49 CEST

Microsoft 365 aka Microsoft Copilot aka Office 365 has jumped off a cliff.
https://cyberplace.social/system/media_attachments/files/116/970/067/142/940/405/original/a06fc044349b8a4f.jpeg

2026-07-14 18:39:51 CEST

Pretty funny Cursor issue - if you put a file named git.exe in a repo and open it in Cursor, it blindly runs said git.exe file https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left

2026-07-12 19:47:28 CEST

- reply

I’m really serious about this one btw. Companies have no measurable way of knowing what employees are doing with GenAI. They’re giving Claude Code out like it’s candy and just presuming everybody is an IT power user. They aren’t. They’re converting PDFs and vibe coding garden planning tools.
Copilot M365 has a fake dashboard showing how productive people are.. it has no actual data. It just shows people use it. It’s CIO porn for the CEO. Orgs are pissing money up a wall worldwide.

2026-07-12 19:44:07 CEST

RE: https://mastodon.social/@404mediaco/116908074107231828
Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word.
Giving the 99% of people tools which cost $$$ per user a month and letting them do anything is like giving a child a car, and being surprised when they ram the car into a wall three days later and cost $10k after achieving nothing.
#note1qwv…lwrf

2026-07-05 19:44:59 CEST

The study found that women who submit resumes created with AI assistance are evaluated as less competent and less trustworthy than men who submit identical AI-assisted resumes. To the evaluators, women’s AI use signaled inability, while men’s AI use signaled initiative. https://www.forbes.com/sites/michelletravis/2026/06/25/women-who-use-ai-seen-as-incompetent-men-who-use-ai-seen-as-pragmatic/

2026-06-26 12:44:12 CEST

- reply

There’s a further look at the two Lapsus$ guys here. The NCA are pushing for new powers to intervene with cases like this. https://www.bbc.co.uk/news/articles/cx2kx8jr244o

2026-06-23 00:34:30 CEST

Very funny screw up by Meta. They installed a keylogger on employees PCs, so they could train their AI. However they exposed the collected data online, so anybody could see what anybody who works there has been typing.
https://www.wired.com/story/meta-accidentally-let-employees-access-each-others-keystroke-data/

2026-06-22 18:14:25 CEST

- reply

Two men plead guilty over £39m TfL cyber attack https://www.bbc.co.uk/news/articles/czx5yp9qy0do

2026-06-21 12:24:39 CEST

VMware customers abandoning sinking ship https://www.theregister.com/virtualization/2026/06/17/tesco-is-sprinting-to-quit-vmware-and-broadcom-despite-rapid-migration-risks/5256133

2026-06-20 13:10:03 CEST

Gizmodo's serving ClickFix malware to Mac users [@Gizmodo](https://flipboard.com/@Gizmodo ) https://bsky.app/profile/juliametraux.bsky.social/post/3moomipmam22i
https://cyberplace.social/system/media_attachments/files/116/782/119/723/315/733/original/716d3845d898b134.png

2026-06-20 11:10:12 CEST

- reply

Fortinet have put out a blog about FortiBleed finally - where they don’t mention configuration exports (which is definitely happening at scale, I have receipts) or password hash cracking (we have the bash history of the user doing it).. but instead link Fortibleed to a prior marketing blog called “Attacks at the speed of AI” 🤦‍♀️
https://www.fortinet.com/blog/psirt-blogs/analysis-of-reported-credential-compromise-of-fortigate-devices?lctg=197390370

2026-06-19 18:07:37 CEST

- reply

Canadian Centre for Cyber Security on #FortiBleed
https://www.cyber.gc.ca/en/alerts-advisories/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices

2026-06-19 18:02:04 CEST

- reply

Some kind #FortiBleed victims got me to look at their situations. Some IOCs performing remote config dumps:
193.8.186.7
80.75.212.113
213.21.239.65
Look for inbound TCP traffic to Fortigate devices. If seen log into the devices and look for config dump events from those IPs.
Config dumps (including crackable password hashes) have been going on for around a month.
If you have IPsec site to site VPN tunnels on the impacted Fortinets you need to rebuild the tunnels with new keys both ends.

2026-06-18 22:20:38 CEST

- reply

NCSC UK advice on Fortibleed: https://www.ncsc.gov.uk/news/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways

2026-06-18 20:49:31 CEST

- reply

I fly planes in VR, drones in real life and go VR clubbing at weekends, and even I wouldn't wear these
https://cyberplace.social/system/media_attachments/files/116/772/606/149/092/327/original/fc999cb09cc33bfd.png

2026-06-18 20:42:33 CEST

"previous flops"
$2000 glasses
which do almost nothing
yep, no way this one will flop!
https://cyberplace.social/system/media_attachments/files/116/772/576/776/245/554/original/6a044a238b8884af.png

2026-06-18 10:44:05 CEST

Truly evil lobbying example https://www.politico.eu/article/europe-choose-ai-climate-goals-data-center-chief-warns/

2026-06-17 17:43:12 CEST

- reply

Lol, the #FortiBleed data was found in an opendir on a webserver 🤣 truly GenAI is going to take over 😜
"They accidentally left an open directory with artefacts, connection strings, tooling, scripts and data online. Analytics obtained via their cron jobs, bash histories, logs etc,"
https://www.bleepingcomputer.com/news/security/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices/

2026-06-17 13:35:50 CEST

- reply

It’s similar to the Belsen Group thing, although that was a smaller collection of devices - prior thread
https://cyberplace.social/@GossiTheDog/113834848200229959

2026-06-17 13:22:46 CEST

- reply

Data looks like this, appears they validated creds too.
https://cyberplace.social/system/media_attachments/files/116/765/184/936/319/367/original/309beb6a558e64d0.jpeg

2026-06-17 13:18:44 CEST

An ecrime group has somehow gained access to 75k Fortinet firewall devices - dubbed Fortibleed
Blog https://www.infostealers.com/article/fortibleed-75000-fortinet-firewalls-compromised-global-enterprises-exposed-claim-your-ethical-disclosure/
Check if your domain is impacted: https://www.hudsonrock.com/fortinet
I’ve verified the data is real. They’ve been dumping the Fortinet config - not sure how yet - and then cracking the passwords it appears. Data is being resold online. #fortibleed

2026-06-16 14:50:03 CEST

The US government has intervened in a lawsuit on the side of X, saying Grok is "critical for national security" https://www.wired.com/story/doj-lawyers-argue-xai-vital-national-security-naacp-lawsuit/

2026-06-16 14:27:47 CEST

Zayo Group paid ShinyHunters ransomware group to hide their breach.

2026-06-12 23:25:26 CEST

- reply

The Blob(tm) is back... but almost all the files have been removed now.
https://cyberplace.social/system/media_attachments/files/116/739/241/599/590/768/original/fc7c030d4bf45a79.png

2026-06-12 16:05:50 CEST

- reply

This blob is no longer publicly accessible. 🎉
https://cyberplace.social/system/media_attachments/files/116/737/514/767/505/960/original/4888c190d78c12fe.jpeg

2026-06-12 01:01:52 CEST

- reply

I have an internet scanning thing which records firmware patching times. Generally speaking most orgs aren’t meeting CISA directives to patch, including federal government - they’re often weeks or months late.

2026-06-11 23:55:12 CEST

- reply

REMINDER don't upload everything in a public Azure blob indexed on Google
https://cyberplace.social/system/media_attachments/files/116/733/698/103/326/618/original/3b6b705b7239916f.png

2026-06-11 23:54:22 CEST

While googling something about I just ended up on a Microsoft public Azure blob with meeting recordings, PDFs about how they're selling Copilot and how to get it into business leaders, screenshots with partner data, business strategy etc.
gtmresources.blob.core.windows.net
https://cyberplace.social/system/media_attachments/files/116/733/616/773/884/168/original/991ed9178c70a68a.png
https://cyberplace.social/system/media_attachments/files/116/733/620/361/828/536/original/00db7d0399ebad52.png
https://cyberplace.social/system/media_attachments/files/116/733/633/530/779/876/original/7de32412e2d3d0c6.png
https://cyberplace.social/system/media_attachments/files/116/733/670/841/967/914/original/8febf209b6ef33b1.png

2026-06-08 23:04:19 CEST

- reply

One of the public MS statements about the issue in this thread is it's an "internal technical issue"
https://cyberplace.social/system/media_attachments/files/116/716/510/639/762/800/original/201708bc415c8865.mp4

2026-06-08 21:07:19 CEST

- reply

How it started vs how it’s going.
https://cyberplace.social/system/media_attachments/files/116/716/048/297/043/856/original/b76aaf8e13e1e4cd.jpeg
https://cyberplace.social/system/media_attachments/files/116/716/048/341/431/816/original/4154f390a96d9510.jpeg

2026-06-08 08:47:06 CEST

RE: https://buttplug.zone/@buttplugio/116711889648322798
I opened Mastodon for the first time today and the first post I see is a furry drawing something in Microsoft Paint using a sex toy.
Mom, I’m home.
#note12xa…sye2

2026-06-05 23:38:45 CEST

It looks like Microsoft's DevOps libraries for Azure Functions might have been compromised. No statement yet but Github is nuking Microsoft's own repos.
https://opensourcemalware.com/blog/miasma-reaches-azure

2026-06-05 00:19:57 CEST

- reply

Incogni are back chasing their removal request about publishing another removal request. https://github.com/GossiTheDog/Cyberplace/blob/main/LegalThreats/Re%3A%20Data%20removal%20request%20-%20Felix%20Juhl%20%5BID-EDG1A8611%5D
https://cyberplace.social/system/media_attachments/files/116/694/152/128/564/516/original/515e0a11d979f398.png

2026-06-04 23:47:22 CEST

- reply

the file tree listing is still up on the site and pastebin
https://cyberplace.social/system/media_attachments/files/116/694/032/314/182/485/original/f73c3a2df3cba172.png

2026-06-04 22:50:25 CEST

RE: https://infosec.exchange/@vxdb/116693798620105566
this lego thing is SO dumb
#note173e…anvv

2026-06-04 20:05:56 CEST

I reinstalled Arma Reforger aka Mr Bean War Simulator 5 minutes ago.
Already happened:
- I accidentally fell out of a helicopter
- I got revived by a medic who happened to be passing by in a field in the middle of nowhere
- Then I immediately got run by a truck which happened to cut through the field
I love this game, it's proof human shouldn't do anything.

2026-06-03 21:57:00 CEST

- reply

xAI have asked a court to strip the anonymity of four people suing it over Grok removing their clothing in images without their consent. One was depicted as a child in the Grok images.
It appears to be an attempt to have them drop the case.
https://www.wired.com/story/xai-asks-court-to-strip-alleged-grok-deepfake-nudes-victims-of-anonymity/

2026-06-03 12:04:03 CEST

- reply

The CEO has a 44% pay cut after the LAPSUS$ incident https://www.cityam.com/ms-pay-slashed-after-cyberattack-turmoil/

2026-06-03 12:02:18 CEST

- reply

Marks and Spencer have cut all their staff bonuses, citing the LAPSUS$ cyber incident. https://www.thetimes.com/business/companies-markets/article/m-and-s-cyberattack-wipes-131m-off-annual-profits-xrlldf7lb

2026-05-30 20:15:33 CEST

GenAI is going great (this is real)
https://www.google.com/search?q=how+many+days+of+the+week+have+fish+in+them%3F&sourceid=chrome&ie=UTF-8
https://cyberplace.social/system/media_attachments/files/116/664/887/674/648/830/original/be30e94a7d8ed1ab.png

2026-05-28 17:07:37 CEST

Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub

2026-05-28 13:46:08 CEST

- reply

Do I think the finder was acting rationally? No. Do I think Microsoft gets to decide what is criminal activity around proof of concept exploits? No.

2026-05-28 13:45:09 CEST

I’m deeply uncomfortable with Microsoft attempting to weaponise their extensive law enforcement contacts to arrest people who post zero days in the products.
It comes after the researcher was kicked off GitHub (owned by Microsoft), Gitlab (a Microsoft partner), after they were doxxed on Twitter and had their MSRC - Microsoft vulnerability reporting portal - account disabled.
https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure
https://cyberplace.social/system/media_attachments/files/116/652/001/846/463/920/original/a5f5f906b35414ee.jpeg

2026-05-26 16:22:22 CEST

Well done to Epic Games, who tweeted and then deleted, when called out, this GenAI image of their Porsche partnership.
Butchers the Porsche logo, puts Riot Games logo on the balloon (a competitor) and other things.
https://cyberplace.social/system/media_attachments/files/116/641/312/137/600/352/original/a3513ea3874082e7.png

2026-05-21 21:11:13 CEST

My company has gone AI mad so it's time to get another job but everywhere I look, I look them up on LinkedIn, and it's just people there going mad about AI.
https://cyberplace.social/system/media_attachments/files/116/614/145/658/747/647/original/01d51f1a2a1a48a7.png

2026-05-20 12:10:52 CEST

- reply

I'm still thinking about the Emu War.

2026-05-19 02:01:37 CEST

- reply

Fuck me there’s an Emu War cinematic universe
https://cyberplace.social/system/media_attachments/files/116/598/301/185/553/943/original/586b4c7339e0af0b.jpeg

2026-05-19 01:51:59 CEST

It’s 1am. I googled emus, ended up on the Emu War page (sorry, “Great Emu War” as it was called). Nobody show James Cameron this page or we’ll end up with another 12 Avatar movies.
https://cyberplace.social/system/media_attachments/files/116/598/255/479/693/906/original/285f6402f6af360d.jpeg
https://cyberplace.social/system/media_attachments/files/116/598/255/542/335/097/original/9fe0a0a9184b4c06.jpeg
https://cyberplace.social/system/media_attachments/files/116/598/255/619/327/410/original/d5e5f8ffbc9a5b16.jpeg

2026-05-18 17:37:57 CEST

RE: https://techhub.social/@Techmeme/116596312742431654
This is the dumbest fucking thing I’ve read since the last AI thing.
#note17y5…lmgq

2026-05-18 17:28:48 CEST

For some reason Donald Trump has posted a AI generated picture of him pressing a button and blowing up America, Ireland and himself.
https://cyberplace.social/system/media_attachments/files/116/596/284/093/021/452/original/88ae0471326b4c2f.jpeg

2026-05-18 15:21:09 CEST

A reminder that one of the reasons people love AI as you can ask it to justify any dipshit idea and it'll just write whole documents about it being a great idea, write the PowerPoint decks, the Capex requests etc.
https://cyberplace.social/system/media_attachments/files/116/595/779/051/170/254/original/62679bdd0bae072e.png

2026-05-18 15:15:43 CEST

- reply

incredibly funny. SLIPPY SPIDER!

2026-05-18 15:00:19 CEST

- reply

you can't on personal accounts - it's an enterprise Entra ID feature. Also, not everybody is you - the MS personal account signup directs you to install the app.

2026-05-18 10:01:16 CEST

The consequence of going passswordless:
https://www.reddit.com/r/cybersecurity/s/7KIJL7R0Zz

2026-05-15 12:03:29 CEST

- reply

Regarding CVE-2026-42945 in nginx - no modern (or even old) Linux distribution runs nginx without ASLR.
The way the PoC exploit works is they spawn nginx like this:
> exec setarch x86_64 -R /nginx-src/build/nginx -p /app -c /app/nginx.conf
Setarch -R disables ASLR. I've had a look through Github and I can't find any other software which actually does this for nginx either.
So, cool, sweet technical vuln - it's valid - but the RCE apocalypse ain't coming.
https://cyberplace.social/system/media_attachments/files/116/578/013/298/718/371/original/1e57e928d3bae1b0.png

2026-05-14 19:38:38 CEST

- reply

I have had another request remove posts from my Mastodon server - this time removal of cease and desist requests. https://github.com/GossiTheDog/Cyberplace/blob/main/LegalThreats/Data%20removal%20request%20-%20Felix%20Juhl%20%5BID-EDG1A8611%5D
https://cyberplace.social/system/media_attachments/files/116/574/144/814/370/830/original/9ebdc8a8a2eabe07.png

2026-05-14 13:49:50 CEST

RE: https://masto.deoan.org/@neurovagrant/116569138539026520
If you go through Google for 'booter services' or booters (DDoS), almost all of them are Cloudflare customers - you literally use Cloudflare to reach their service to order a DDoS, which businesses then pay Cloudflare to protect against.
Part of the reason I left my prior employer is the UK side of the business purchased Cloudflare, so I said yep, I'm out.

2026-05-14 13:11:16 CEST

- reply

CVE-2026-34486 - Tomcat
- Only exploitable if a certain feature is used, if it's endpoint is reachable and if port 4000. It's pretty niche.

2026-05-14 13:09:40 CEST

There's serious panic being caused by AI discovered vulnerabilities behind the scenes, where those finding them are basically using them as marketing. Automated vulnerability hype train again, basically.
A thread on a few of them.

2026-05-12 01:20:03 CEST

- reply

Remember those Microsoft employees protesting about Azure being used by Israel to help genocide? That got fired? And tutted at and laughed at by other MSFT employees?
Turns out they were right.
Several MSFT managers in Israel have been fired and management of MS Israel moved abroad about major problems have been uncovered with their relationship with the Israeli government. Staff were serving the government rather than Microsoft to facilitate a genocide. https://en.globes.co.il/en/article-microsoft-israel-chief-leaves-amid-ethical-controversy-1001542602

2026-05-11 21:07:14 CEST

Chuckle chuckle vision, chuckle vision, chuckle chuckle vision!
https://www.bbc.co.uk/news/articles/c5yx757w048o

2026-05-11 17:21:46 CEST

- reply

Microsoft shareholders
https://cyberplace.social/system/media_attachments/files/116/556/621/529/056/321/original/bdce684a9ad33f16.mp4

2026-05-08 23:43:43 CEST

- reply

I’m half an hour into this game and I’ve laughed out loud 5 times and had actual tingles from memories of being a kid. I’m currently frenching a boy.
https://cyberplace.social/system/media_attachments/files/116/541/133/128/072/453/original/84b713978056cef5.jpeg

2026-05-08 23:03:23 CEST

Mixtape is out now. It's the highest rated game by critics of the year so far. It's basically a John Hughes movie as a game. I'm diving in tomorrow.
https://www.youtube.com/watch?v=aQoEd5rnxiQ

2026-05-06 23:10:02 CEST

elon's a fucking weirdo https://www.bbc.co.uk/news/articles/c33243j44p8o

2026-05-04 18:00:31 CEST

me tweet from last week about the world going to shit around the time Gamestop realised it could just pretend to be a functioning mega company, so have this video with the CEO trying to explain how they'll buy eBay instead.
https://cyberplace.social/system/media_attachments/files/116/517/133/324/614/553/original/480e6ab42b1b3e47.mp4

2026-04-29 18:46:09 CEST

- reply

I’ve updated my write up. https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7
https://cyberplace.social/system/media_attachments/files/116/489/005/430/159/646/original/dd403a260d759189.jpeg

2026-04-24 14:25:10 CEST

- reply

Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing.
It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.

2026-04-24 14:22:05 CEST

- reply

Vibing has been suspended and downloads removed pending a compliance review by Microsoft. https://github.com/VibingJustSpeakIt/Vibing
https://cyberplace.social/system/media_attachments/files/116/459/655/209/562/837/original/92bb389d34026f10.jpeg

2026-04-24 01:18:58 CEST

- reply

Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”.
https://cyberplace.social/system/media_attachments/files/116/456/572/411/789/865/original/e475c4ec2d046316.jpeg

2026-04-23 18:07:41 CEST

- reply

This Vibing one is a fun blog btw as every page it gets to be a bigger version of this
https://cyberplace.social/system/media_attachments/files/116/454/877/590/781/137/original/6967f4101ba8c984.mp4

2026-04-23 17:59:01 CEST

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened.
https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7

2026-04-17 15:22:35 CEST

RE: https://infosec.exchange/@metacurity/116420216155655162
Mythos is quickly becoming its own mythological beast.
They’ve automated the vulnerability hype train - an expression I used where researchers would find real vulnerabilities, which had no real impact in the real world. People would get very excited for no reason. Now they’ve automated that process with execs.
#note1e57…du0g

2026-04-10 10:21:27 CEST

lol of the day - noticed I’m quoted in this article, but I never spoke to the publication and the quotes are made up. They use GenAI during article creation and just made up what I thought 🤣 https://www.techbuzz.ai/articles/hacker-siphons-700k-from-u-k-energy-firm-in-payment-redirect
https://cyberplace.social/system/media_attachments/files/116/379/433/857/702/050/original/a29d34dc566d9297.jpeg

2026-03-27 18:10:20 CET

- reply

Handala have phished Kash Patel, the director of the FBI, and released his emails.
https://cyberplace.social/system/media_attachments/files/116/302/244/306/878/776/original/02d76e3c7a1385db.png

2026-03-05 09:05:28 CET

https://cyberplace.social/system/media_attachments/files/116/175/531/342/495/194/original/71d78ee2d4465a91.jpeg
https://cyberplace.social/system/media_attachments/files/116/175/531/384/884/942/original/cead59a46f5992e0.jpeg

2026-02-11 13:29:48 CET

A female OpenAI executive who raised concerns about the upcoming ‘Adult Mode’ - which lets you sex ChatGPT girlfriends - has been fired for ‘sexual discrimination against men’
https://www.wsj.com/tech/ai/openai-executive-who-opposed-adult-mode-fired-for-sexual-discrimination-3159c61b

2026-02-04 14:03:24 CET

- reply

I wrote this about my brother.
https://cyberplace.social/system/media_attachments/files/116/012/484/621/315/911/original/3044b6b8b743d84d.png

2026-02-02 20:55:19 CET

- reply

Thank you to everybody who donated to this. My brother died last night. Enough was raised to save the house for his family, which means a thing.
Also, Fuck Cancer.

2026-01-31 11:07:59 CET

Remember that time I ended up in court with Elon Musk after he bet me the cave diver was a pedo?
Anyway, here’s Elon begging Jeffrey Epstein for crazy parties on his private island, several years after Epstein was convicted of sex trafficking girls.
https://cyberplace.social/system/media_attachments/files/115/989/152/781/483/797/original/6a3321b418dabc6d.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/801/685/071/original/bc2967f3e8b6f93c.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/814/991/715/original/9207647ace61a0e0.jpeg