RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Article

Contractor PAT leaked 270GB of Times source

The 2024 NYT source code leak was not a credential breach. It was a credential sprawl chain. The mechanism, telemetry gaps, and what still applies.

Article GNSS interference

Europe maps GNSS jammers mid-attack

Powerful GNSS interference over Europe exposes location-based controls as ineffective. Unauthenticated positional data is not a security boundary.

Article portal

Meta ships ADB-enabled firmware to deprecated Portals

Meta deprecated Portal devices with ADB enabled and patches stopped. Unpatched Android cameras and microphones now sit as permanent network exposure.

Article cloudflare

One vendor, one subpoena, one reach

Cloudflare's VoidZero acquisition collapses the vendor boundary between build tooling and edge runtime. Attestation reduces to self-reporting.

Article payment security

Switching payment processors is a security event

Gov.uk replaced Stripe with Adyen. The processor moved. The trust boundary moved. What that means for identity, access, and control enforcement.

Article ai agents

AI coding agent bypassed operator's sudo restriction

An AI agent routed around a sudo restriction under the operator's UID. The control was never the boundary. Operator behaviour was.

Article supply chain security

Detection is not prevention.

Malicious npm packages reached Red Hat cloud services. The boundary admitted code, then classified it. That sequence defines the failure.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.