Experimental News Clipping Site

Tag: security practices

  • Hacker News: 0click deanonymization attack targeting Signal, Discord and other platforms

    —

    by

    Kurt Seifried
    in

    Source URL: https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117 Source: Hacker News Title: 0click deanonymization attack targeting Signal, Discord and other platforms Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text outlines a novel deanonymization attack targeting popular applications, particularly highlighting vulnerabilities in Cloudflare’s caching system. It emphasizes the dangers posed to users, especially those in sensitive roles, such…

  • Hacker News: Official DeepSeek R1 Now on Ollama

    —

    by

    Kurt Seifried
    in

    Source URL: https://ollama.com/library/deepseek-r1 Source: Hacker News Title: Official DeepSeek R1 Now on Ollama Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides an overview of DeepSeek’s first-generation reasoning models that exhibit performance comparable to OpenAI’s offerings across math, code, and reasoning tasks. This information is highly relevant for practitioners in AI and…

  • Slashdot: The Powerful AI Tool That Cops (Or Stalkers) Can Use To Geolocate Photos In Seconds

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/01/20/2132207/the-powerful-ai-tool-cops-or-stalkers-can-use-to-geolocate-photos-in-seconds Source: Slashdot Title: The Powerful AI Tool That Cops (Or Stalkers) Can Use To Geolocate Photos In Seconds Feedly Summary: AI Summary and Description: Yes Summary: The text discusses GeoSpy, an AI tool developed by Graylark Technologies that can accurately predict the location of photos using features within the images. This technology,…

  • Simon Willison’s Weblog: DeepSeek-R1 and exploring DeepSeek-R1-Distill-Llama-8B

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/20/deepseek-r1/ Source: Simon Willison’s Weblog Title: DeepSeek-R1 and exploring DeepSeek-R1-Distill-Llama-8B Feedly Summary: DeepSeek are the Chinese AI lab who dropped the best currently available open weights LLM on Christmas day, DeepSeek v3. That model was trained in part using their unreleased R1 “reasoning" model. Today they’ve released R1 itself, along with a whole…

  • Schneier on Security: Biden Signs New Cybersecurity Order

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/01/biden-signs-new-cybersecurity-order.html Source: Schneier on Security Title: Biden Signs New Cybersecurity Order Feedly Summary: President Biden has signed a new cybersecurity order. It has a bunch of provisions, most notably using the US governments procurement power to improve cybersecurity practices industry-wide. Some details: The core of the executive order is an array of mandates…

  • The Register: Datacus extractus: Harry Potter publisher breached without resorting to magic

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/20/harry_potter_publisher_breach/ Source: The Register Title: Datacus extractus: Harry Potter publisher breached without resorting to magic Feedly Summary: PLUS: Allstate sued for allegedly tracking drivers; Dutch DDoS; More fake jobs from Pyongyang; and more Infosec in brief Hogwarts doesn’t teach an incantation that could have saved Harry Potter publisher Scholastic from feeling the power…

  • Hacker News: Bambu Connect’s Authentication X.509 Certificate and Private Key Extracted

    —

    by

    Kurt Seifried
    in

    Source URL: https://hackaday.com/2025/01/19/bambu-connects-authentication-x-509-certificate-and-private-key-extracted/ Source: Hacker News Title: Bambu Connect’s Authentication X.509 Certificate and Private Key Extracted Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a significant security vulnerability discovered in Bambu Lab’s software, particularly regarding their X1-series 3D printers. The extraction of sensitive cryptographic credentials threatens the integrity of the secure…

  • The Register: OpenAI’s ChatGPT crawler can be tricked into DDoSing sites, answering your queries

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/19/openais_chatgpt_crawler_vulnerability/ Source: The Register Title: OpenAI’s ChatGPT crawler can be tricked into DDoSing sites, answering your queries Feedly Summary: The S in LLM stands for Security OpenAI’s ChatGPT crawler appears to be willing to initiate distributed denial of service (DDoS) attacks on arbitrary websites, a reported vulnerability the tech giant has yet to…