pull down to refresh
You wake up and: PHP has two critical unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), both rated 9.2. Exploitation started before the fix was published, and older versions (PHP 8.1 and below) have no official patch.…
If you run any sort of infrastructure, website, self-hosted service, cloud service etc etc etc it might be a good idea to just have an agent run daily if not hourly scans for any security disclosures that affect those systems, and notify you immediately if any vulnerabilities relevant to you are…
A critical bug in the Linux kernel was discovered. It's called CVE-2026-98432. It is rated 9.8 out of 10. Anthropic just showed that it can be used to take over a server remotely. If you have a VPS, you are most likely affected. Ubuntu hasn't released a fix yet. Make sure to update as soon as a fix…
The Stash #01: What Monero Hides, and What It Doesn't Level: Intermediate Reading time: \~10 min Last verified: 26 Oct 2026 Version covered: Monero v0.18.5.4 "Fluorine Fermi" (GitHub release ) Contents In short Scenario Stop 1: Exchange Stop 2: Swap Stop 3: Payment Deadly zone: network and OPSEC…
One place i worked, during the lunch break, i ate this hoagie with off white cheese, greyish meat and it was all wet for no apparent reason. After downing it in a mountain dew to kill off the odd taste in my mouth I returned to my desk. Very quickly I was almost rendered unconscious by abrupt pain…
A leaked Cellebrite flyer shows forensic labs a remote iPhone unlock appliance with a range of about 8 metres. It covers the iPhone 11 to 16, even with Stolen Device Protection on. Source: https://justin.sh/blog/2026/10/cellebrite-advanced-unlocks/
Just as a hypothetical chat starter (because obviously I would never never ever do this, who would?) but is it possible to make a truly private website. Say for example I wanted to sell T-shirts with illegal abouts of nipples painted onto them and I wanted to post worldwide, accept monero but I…
Monero Research Lab meeting - October 21, 2026 The Monero Research Lab met on Wednesday, October 21, chaired by Rucknium. In updates, Rucknium is doing further analysis for his eclipse-attack fix (#11527); tevador is working on Share or Perish and relative time locks; vtnerd is adding tests to the…
I've been thinking about how to use Monero transactions as a means of communicating covertly with another person. For example, if I sent you 0.000009830316 XMR using the code table above (you might need to download it to see it clearly) I would have communicated with you "WTB Fake ID". WTB =…
I think many of us use LLMs for work. But I cannot help the instinctive distrust when I see a vibe-coded project. Especially if it is new and not by someone I already know and trust. Before, a non-professional project was obvious. Now the more polished it looks the less I trust it. The practical…
https://www.youtube.com/watch?v=n3_sMAAERwo In this video I explain how a zero day vulnerability in Dread's anti DDoS software, along with it's head technical admin accidentally uploading a private key, lead to the sites main onion domain getting hijacked, and the site being taken offline…
Hey everyone, first post here! We've been building an app called Horus. We wanted to code from our phones, so we got agents like Claude Code and Codex running natively on Android in a real Alpine Linux terminal. No root needed. Give the agent a task, lock your screen, and it keeps working in the…
X announced this weekend that long-pressing the Like button will send someone $1 through X Money. Convenient, sure. But look at what happens under the hood. That tip goes through X's payment service. Both parties are identified, the transaction is on their ledger, tied to your account history, your…
Monero 0.18.5.3 'Fluorine Fermi' released. This is a highly recommended release that includes a large number of bug fixes: P2P stalls, tx relay, remote node hardening, RPC privacy, multisig nonces, log injection and more. https://www.getmonero.org/2026/10/06/monero-0.18.5.3-released.html GUI:…
is there actually a point to learning new things right now? taking a gap year because i have no idea what to learn, or if it will even matter by the time i am done. feels like studying for a world that is already gone. dad was a programmer and did startups. i liked coding in school and thought that…
We just expanded our proxy shipping service to offer a cheaper Amazon-only shipping service What is it? We offer a service that we'll ship Amazon items to you to a local Amazon Locker or Amazon Counter near you. 1. Reach out to us 2. Share the links to items on Amazon, with the specific order…
If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle. The Art of War, Sun Tzu This was…
Hello. From a couple years ago i made an experiment called: shadowstrike. It was a tor onion site where you can pay lightning invoices with monero zero conf. The main premise was I fucking hate waiting but love privacy. I am rerunning the experiment but this time with a better lightning node and…