Haveno Brought Back the Arbitrator Multisig and Attackers Just Hijacked It
At 03:43 UTC on May 20, woodser opened an eight-line patch in TradeProtocol.java, and by the time it went up the exploit was already running against live RetoSwap trades.
Sam Bent
Darknet & Darkweb News, OpSec, OSINT and More
Latest posts
Ageless Linux: Civil Disobedience Through Operating System
Ageless Linux is a Debian-based operating system project that has declared "full, knowing, and intentional noncompliance" with California's Digital Age…
Perplexity's Incognito Mode Is a Lie
A class action complaint alleges Perplexity shipped complete conversation transcripts to Meta and Google, even when Incognito Mode was switched on.
Proton Meet Isn't What They Told You It Was
Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the government when asked. Proton hid them from their privacy policy.
Apple Obeyed Russia and Britain in the Same Week
This week Apple pulled VPN apps in Russia at Roskomnadzor's request and forced UK users to hand over government ID to keep using their phones normally.
axios Got Hijacked and Your Machine May Be Compromised
A stolen npm token was all it took to poison axios, the package with 100 million weekly downloads, and drop a cross-platform RAT on every developer who ran npm install this morning.
Europol Busted a Man Who Was Scamming Pedophiles
A Chinese national collected €345,000 from 10,000 people trying to buy CSAM, delivered nothing, and is still free — while 440 of his customers are now criminal suspects.
Fedware: 13 Government Apps That Spy Harder Than the Apps They Ban
The White House app ships with a sanctioned Chinese tracking SDK, the FBI app serves ads, and FEMA wants 28 permissions to show you weather alerts.
Canonical's GRUB Saboteur Has a 10-Year Plan
Julian Klode has been systematically stripping features from GRUB since 2021, and he built the replacement a decade ago.
Why I2P Sites Load So Slowly
Every I2P packet takes 12 hops just to complete a round trip, and the streaming library has to fake TCP on top of all that latency.
Tails 7.6 Hides Bridge Requests Behind CDN Traffic
Tails 7.6 uses domain fronting to hide Tor bridge requests from censors, replaces KeePassXC with GNOME Secrets for accessibility, and catches up on 18 months of Electrum releases.
Microsoft's "Fix" for Windows 11: Flowers After the Beating
Microsoft spent four years stuffing Windows 11 with ads, forced Copilot integrations, and bloatware, now they want applause for promising to remove it.
The Engineer Who Tried to Put Age Verification Into Linux
Dylan, useful idiot with commit access, pushed age verification PRs to systemd, Ubuntu & Arch, got 2 Microslop employees to merge it, called it 'hilariously pointless' in the PR itself, then watched Lennart personally block the revert. Unpaid compliance simp.
Ring Divorced Flock... Now they Spy with Axon
Amazon just canceled Ring's partnership with Flock Safety, a surveillance company operating over 100,000 automated license plate reader cameras…
Crystal Lake Man Gets 8 Years for Dark Web Facebook Meth Sales
James Ettleson ordered meth through dark web markets then advertised it on Facebook, earning 100 months in federal prison.