RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

A robot dog moves on command inside your network Article

A robot dog moves on command inside your network

The Creepy Crawlies robot dog is a networked device that moves on command. Its control channel and actuator define the risk, not its label.

Private was never private
Article privacy

Private was never private

Messaging apps protect your chat from other users, not from the operator that holds the content, the metadata, and the terms you accepted at install.

Three filled lines in the HuggingFace postmortem
Article AI security

Three filled lines in the HuggingFace postmortem

A HuggingFace hack postmortem by METR and Redwood confirms only authorship, subject, and focus. Mechanism is not confirmed, so no control change is authorized.

Volume 5 lands on both desks at once
Article dual-use tooling

Volume 5 lands on both desks at once

Tmp.0ut Volume 5 is dual-use tooling. Its publication proves which of your controls enforced identity and which only concealed a now-public method.

Your browser tab runs as root on Omarchy
Article privilege escalation

Your browser tab runs as root on Omarchy

In Omarchy, any user process reaches root. The user-to-root boundary is gone, turning initial access into full host compromise and lateral movement.

Nobody has to break into GitHub
Article github security

Nobody has to break into GitHub

GitHub incidents are feature abuse under valid credentials. The break is at the execution boundary, and standing scope is the real exposure.

Nobody had to hack your meetings.
Article access-control

Nobody had to hack your meetings.

Over 180,000 tl;dv meetings were left open because access to recorded content was not conditioned on validated identity. What that failure exposes.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.