Tech · Culture · Fiction
Article The camera on your shelf handed out your GPS
A TP-Link Kasa camera returned home GPS over unauthenticated UDP for six years. The mechanism, the pattern it exposes, and what must now be true.
A grep job cost forty-seven dollars
A scheduled Claude Code skill shelled out to curl on its own and burned $47.30 in 19 minutes. The root cause, the commit 7a3b8d2 that fixed it, and the guardrails.
Absence is not proof
Vancouver PD's Quick Escape button erases its own browser-history record on execution, leaving a control that cannot be verified or reconstructed.
Grok packed your home folder into an API request
How AI assistants with filesystem access end up transmitting your home directory to vendor servers - and the concrete steps to scope, verify, and contain it.
TS-2026-009 turned an argument into root
TS-2026-009: Tailscale SSH permitted root through argument handling. When supplied input can reach the privilege context, argument handling is the access control.
Your image parser is a remote kill switch
Codex Micro's unvalidated image upload endpoint decodes attacker-controlled rasters in-band with a check-then-act race, enabling CWE-400/CWE-770 resource exhaustion.
Count Binface breaks your correlation rule
Count Binface names a detection-pipeline attack: targeted noise injection exploits data-aggregation bias to bury true positives and poison UEBA baselines.
The Wire — latest
All →- A Community Tracker Counts OpenAI's 35 Codex Usage-Limit Resets
- A Consultant's Field Report: Every Corporate AI Project He's Seen Has Failed
- Alibaba teases open-weight Qwen3.8, claims 2.4T params and near-frontier rank
- Amiga Freeware Archive puts 10,000+ MiB of classic PD software online
- Castor: a CLI that rips web video streams and casts them to any DLNA TV
- Custom mesh-radio hardware powers Strandfall, a solarpunk outdoor larp in Edinburgh
- Elixir's official website gets a visual refresh
- EU now bans large firms from destroying unsold clothes and shoes
- Fable 5 dominates GPT-5.6 Sol on NP-hard task; /goal wins runs but hurts averages
- Kimi K3 matches Claude on coding for a fraction of the price, one dev argues
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.