Articles
Long-form writing on tech, culture, and the edges of the internet.
Four bits, then a cliff
How to choose LLM quantization for production: why 4-bit is the default, where 1-bit collapses, and why your own eval set is the real deployment gate.
I factored a root CA
Factoring a 1990s Certificate Authority's public key recovered its private signing key, showing that confidentiality resting on computational cost is not a control.
LG Smart TVs branded surveillance risk
A public claim about LG smart TVs is a signal about a device class: connected endpoints inside the enterprise that no one owns, monitors, or governs.
LG TVs recorded audio and mapped your network
LG smart TVs captured audio with the screen off and scanned local devices. The control users operate governs the display, not the microphone.
The backdoor lives in the compiler, not the source
A Thompson-style compiler backdoor passes source audits, signatures, and reproducible builds because the validators are built by the same toolchain.
You can't reset your genome
AlphaGenome Atlas makes genomic prediction cheap and fast, but a genome can't be rotated like a password - reshaping AI safety and data ethics.
Chrome wipes everything but Google
Chrome again retains google.com data through a user-set clear-on-exit wipe. Analysis of the exemption, X-Client-Data, and cookie-theft exposure.
Chrome exempts Google's domains from user site-data controls
Chrome does not enforce user site data settings against Google-owned domains. What the exempt scope means and how to treat the control.
LLMs turned fluency into a forged credential
Perceived intelligence is a sender-controlled signal, not identity. Treating fluency as authorization is the exposure social engineers now produce on demand.
qBittorrent escaped its sandbox and owned the host
A sandbox controls what code can do, not what code is. When qBittorrent escaped confinement, provenance was the control that was never applied.
An anonymity tool is not anonymity
A Meta executive using Tor was unmasked as a torrent pirate by a private rights holder. A privacy tool is not anonymity; anonymity is an outcome.
Chromium executes attacker code across every version
A zero-day sandbox RCE hits all Chromium versions under active exploitation, with no confirmed fixed build and a single containment control shown ineffective.