RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Android leaks keepalive packets past its VPN kill switch Article

Android leaks keepalive packets past its VPN kill switch

Android VPN lockdown leaks NAT-T keepalive packets on UDP 4500 outside the tunnel. Why the kill switch is partial and how to verify egress off-device.

A claim, not a control
Article GrapheneOS

A claim, not a control

GrapheneOS rewrote its Messages app under a privacy and security claim, but the enforcing controls are not named or independently verifiable.

Forty lines freeze your Mac
Article macOS security

Forty lines freeze your Mac

How the Deathray technique lets an untrusted website freeze an entire Mac by overloading WindowServer, why the browser sandbox can't stop it, and what to do.

Google Ads became a malware distribution channel
Article malvertising

Google Ads became a malware distribution channel

Malvertising turns Google's top search ad into a malware delivery channel. How the attack works, why review misses it, and the steps that stop it.

HuggingFace serves a disclosure channel, not a control
Article security.txt

HuggingFace serves a disclosure channel, not a control

HuggingFace's security.txt defines a disclosure channel, not a security control. Publishing it expanded the commitment surface, not the platform's defenses.

Keep the two claims apart
Article AI ethics

Keep the two claims apart

Consumer AI trains on your chats by default. How to tell the real consent problem from unprovable 'secret breakthrough' claims - and what you can control.

Microsoft's new default is Rust
Article Rust

Microsoft's new default is Rust

Microsoft made Rust a tier-1 language because memory-safety bugs drove ~70% of its yearly security patches. Here is what the shift means.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.