Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

Let me just leave this here.

How is the internet less private than in 2006, when the whole family shared one computer? Back then, the internet was weird, personal, and all of ours. So, we got your favorite meme legends back together to say it louder: What happened to the internet? 1/3

iOS 27.2 was released 🐳

A jailbroken PS5 Pro running a 4K simulation of a CRT screen. Each phorphor sub-pixel is visible up close.

Claude Code found 145,763 photos I permanently deleted from my iPhone. Three years of deleted photos and videos still sitting in a hidden cache. Any app with file access can read them. I plugged my iPhone into my MacBook to run a backup. Claude Code was doing the security audit from my last post and flagged a directory I wasn't even looking for. PhotoData/Thumbnails. Over 146,000 files. Photos, videos, screenshots. Every single one was something I deleted. Photos from 2023, 2024 and 2025. The ones I deleted the second after taking them. The ones I cleared from Recently Deleted. The ones I deleted three separate times because I wanted to be sure they were gone. All still there. Passport photo I took for a visa application in 2023. Screenshots of my bank app with full account numbers visible. Private photos I sent someone and immediately deleted after a breakup. Screenshot of my crypto seed phrase I took temporarily in 2022. Photo of my ID and credit card I took to remember the numbers and deleted 5 seconds later. Screenshots of my ex's private Instagram stories I saved and permanently deleted in 2023. Some were full resolution. All organized by date going back to 2021. When you delete a photo on iPhone, iOS removes it from your camera roll and Recently Deleted. It keeps a compressed copy in a Spotlight search index cache so your phone can find things when you search. Apple never clears it. Not after 30 days. Not after a year. Never. They told you it was permanently deleted. It wasn't. I checked which apps on my phone had Files and Folders access. 23 apps. Weather apps. QR code scanners. PDF readers. A flashlight app I downloaded in 2022. Any one of them could have been reading every photo I ever deleted this entire time. Went from 23 apps to 3 in about two minutes. Full step by step below. Takes 2 minutes. Save it so you don't lose it and send it to anyone with an iPhone.

Google forced to halt work in Finland after illegally clearing 250,000 trees for a new data center, according to the Guardian.

I just woke up and I had my email to my psn account change from this stupid child family management exploit where unauthorized accounts are added to your family management where they can see your account information FUCKING FIX IT @PlayStation @PS_Support_US

NEW SWITCH 2 NEWS🚨 It's been confirmed that the first Nintendo Switch 2 ROMs are being dumped as we speak. The image shows a datamine of the Duskbloods beta ROM. Little by little, ladies and gentlemen, but it's finally begun. Credits for the MK World Datamine

prolapse coming to 14.00/14.10

We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. block.xyz/dessa

Everyone who owns hardware with abominable software (like Sonos players) owes a debt of gratitude to Venkatraman Srinivasan and the rest of the eMudhra gang in Bengaluru, Karnataka. Without their gross negligence, it'd be a lot harder to counterfeit certificates and fix the sw🙏

Super Mario Odyssey, running native on iPadOS! Been cooking on this port heavy, so if you want to keep up with progress, check out the link in the replies! So far I’ve added: - 120 FPS support via Frame Generation - Controller and On-screen controls w/ native device gyro. - PS5 DualSense controllers support for the unique haptics and adaptive trigger engine - Haptics on device itself when using without a controller My goal is to make this series of releases feel as native to mobile as possible, and that means taking the time to figure out what each game needs. If you want to support, submit a PR!