Tech · Culture · Fiction
Article Android leaks keepalive packets past its VPN kill switch
Android VPN lockdown leaks NAT-T keepalive packets on UDP 4500 outside the tunnel. Why the kill switch is partial and how to verify egress off-device.
A claim, not a control
GrapheneOS rewrote its Messages app under a privacy and security claim, but the enforcing controls are not named or independently verifiable.
Forty lines freeze your Mac
How the Deathray technique lets an untrusted website freeze an entire Mac by overloading WindowServer, why the browser sandbox can't stop it, and what to do.
Google Ads became a malware distribution channel
Malvertising turns Google's top search ad into a malware delivery channel. How the attack works, why review misses it, and the steps that stop it.
HuggingFace serves a disclosure channel, not a control
HuggingFace's security.txt defines a disclosure channel, not a security control. Publishing it expanded the commitment surface, not the platform's defenses.
Keep the two claims apart
Consumer AI trains on your chats by default. How to tell the real consent problem from unprovable 'secret breakthrough' claims - and what you can control.
Microsoft's new default is Rust
Microsoft made Rust a tier-1 language because memory-safety bugs drove ~70% of its yearly security patches. Here is what the shift means.
The Wire — latest
All →- A developer's case for making things the hard way in the age of generative AI
- Rust stabilizes the never type after a two-year backward-compatibility fight
- Show HN Project Filters AI Stories Out of Hacker News
- The Case Against Pandas: Most Data Fits on One Machine
- Zoom's Linux Client Silently Reads Every X11 Clipboard Copy
- A 15-Minute On-Ramp to Contributing Open Map Data via OpenStreetMap
- A Field Guide to the Body's Odd Quirks and How Common They Really Are
- Amodei: Slow AI's Pace Before Self-Improving Agent Swarms Outrun Safety
- Android VPN lockdown leaks your real IP through NAT-T keepalive offload
- Berkeley's Snap! Pitches Block-Based Coding as a Serious CS Platform
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.