Ten days after the Punchbowl phish, a Partiful-themed invite arrived the same way: from a real, compromised Gmail account, blind-copied to its contacts. This one runs on a different kit, a PHP fake Google sign-in with a live operator panel, reached through a QR-code redirect the operator can repoint at will. A honeypot run watched the operator check a password in 12 seconds and take over a test account in about a minute. Here is the chain, the timing, and signatures for hunting it.
luad is an early-alpha Rust CLI and library for inspecting compiled Lua extracted from firmware: bytecode profiles, disassembly, byte-level evidence, and structured exports.
A party invitation arrived from a friend's real, DKIM-validated Gmail account. It passed every authentication check because it genuinely came from her, after her account was taken over by an Adversary-in-the-Middle phishing kit that reverse-proxies Google sign-in and walks straight through two-factor. Here is the full chain, a controlled honeypot result, attribution to the VoidProxy framework, defanged indicators, and detection guidance.
You could retrofit an ordinary treadmill with a sensor mat underneath and get clinical-grade gait analysis, plus a heart rate reading during rest intervals, for about $200. Nobody's built it. Someone should.
Cyrinx is now open source and live at cyrinx.org. It's a research modem that moves real data through the air as sound, from a laptop speaker to a phone microphone, with no radio, no pairing, and no network. Byte-verified at 36.6 kbps between a MacBook and a Pixel 7a.
A phishing email landed on a mailing list I'm on. Google had scanned the attachment and called it safe. It wasn't: behind it was a live Browser-in-the-Middle kit that steals your Google session in real time and walks straight through two-factor. Here's what was hiding behind the blob URL, and how it builds on what other researchers have found.
A new Vendor Spending page, under Budget, indexes a decade-plus of district checks: search any vendor, see year-by-year totals, browse by category. And it answers the obvious question — did we really triple our spending? Mostly no: the big swings are bond construction and pass-through, not baseline operating.
The board's 619 policies now have searchable Spanish titles. Every school page shows who teaches there. The site behaves on a phone. And two bugs in our own data — doubled English Learner counts and 22 broken Spanish transcripts — that we found and fixed.
There's a search box now. Type a school, a topic, a dollar figure — it searches six years of public record in English or Spanish, and links straight to the document, not just the meeting that mentioned it.
We just shipped the first fully symmetrical, closed-loop 2x2 MIMO acoustic transport protocol. By combining analytical SVD spatial solvers, orthogonal Zadoff-Chu pilots, and dynamic Total Harmonic Distortion (THD) sensing, we are laying the protocol and signal processing groundwork for 24 kbps over sound.
I want to chat with my family finances without handing the data to anyone, and without abandoning a decade of Quicken history. Here is how, plus why Agent Skills are beating MCP servers as the shape of these integrations.
Three RCSD-authorized charters were a 404 on the site for months because a branch never merged. Tonight they're live, the /schools/ index has three sections instead of one, and the MCP tool can finally see what each board item actually proposes.
A while back my home network started acting strange. Not broken, exactly. Just a low-grade wrongness. Video calls would glitch for a few seconds and come back. Large file uploads would stall and resume. Speed tests mostly looked fine. Occasional ones didn't. Every tool I pointed at the problem said "looks ok to me."...
I was pulling apart a Netgear Orbi WiFi 7 mesh system for Network Weatherhttps://networkweather.com and found an undocumented 31-byte Qualcomm vendor IE in the 5 GHz beacons from each mesh node. In these captures, one six-byte field appears to encode the node's current upstream parent, another matches the BSSID of the radio sending the beacon, and the parent field changes when the mesh re-parents...
I connected with a friend yesterday about his job search. He's a scientist with 20+ years of experience leading drug development teams, recently laid off because his company is winding down. Tough market right now. Biotech capital has gotten scared and shifted toward late-stage assets, which means a lot of very qualified people are looking....
A great leader inspires a team with possibility, vision, agency, and genuine caring for their people at every level. They are willing to fearlessly dive into the details and roll up their sleeves alongside their team when needed to get the job done. They actively solicit feedback and critique to improve and create a culture where it's safe to speak up. When a hard call needs to get made, they own...
I re-coded a Rust library in Swift 6 this week and was surprised to see it was a third the size. It ended up with no third party dependencies beyond the system Frameworks, whereas the Rust crate pulled in several third party crates that in turn pulled in innumerable other libraries - creating a situation with multiple versions of the same library ultimately needing to be included....
Folks; thanks for all the kind comments on my transition last week. It's time to start sharing what I'm working on now - fixing employees' remote & hybrid connectivity....
After seven+ months of work, studying my ass off for my written, and a retest after I went long on my first power-off 180, I've finally achieved a life long goal of becoming a Commercially-rated airplane pilot....