How Wind Nearly Took Down Boulder NTP
NTP is one of the most interesting and important, but all too forgotten, protocols that makes the internet tick. Accurate clock synchronization is required for everything ranging from cryptography …
Agentic ProbLLMs: Exploiting AI Computer-Use and Coding Agents (39C3)
This talk demonstrates end-to-end prompt injection exploits that compromise agentic systems. Specifically, we will discuss exploits that ...
[Important Update] Postiz v2.12.0 - open source social media scheduling tool
📨 The ultimate social media scheduling tool, with a bunch of AI 🤖 - gitroomhq/postiz-app
A plan for a post-American, enshittification-resistant internet (a speech at 39C3 in Hamburg on Dec 28, 2025)
Trump has staged an unscheduled, midair rapid disassembly of the global system of trade. Ironically, it is this system that prevented all...
Who cares about the Baltic Jammer? – Terrestrial Navigation in the Baltic Sea Region (39C3)
Reports of GNSS interference in the Baltic Sea have become almost routine — airplanes losing GPS, ships drifting off course, and timing s...
Hacking washing machines (39C3)
Almost everyone has a household appliance at home, whether it's a washing machine, dishwasher, or dryer. Despite their ubiquity, little i...
Presenting 14 practical vulnerabilities in GPG & similar tools on stage (39C3)
Might contain zerodays. https://gpg.fail/ From secure communications to software updates: PGP implementations such as *GnuPG* ubiquitous...
Star Citizen is on course to reach $1 billion in player funding in 2026, and we still might not get to play its singleplayer campaign next …
Roberts Space Industries' sim keeps raking in the cash.
All my Deutschlandtickets gone: Fraud at an industrial scale (39C3)
The Deutschlandticket was the flagship transport policy of the last government, rolled out in an impressive timescale for a political pro...
AI content on Wikipedia - found via a simple ISBN checksum calculator (39C3)
I successfully failed with a literature related project and accidentally built a ChatGPT detector. Then I spoke to the people who uploade...
Expert: EU Commission wants an "unlimited special legal zone" for AI
In a legal analysis for consumer advocates, experts warn of massive protection gaps due to the planned "digital EU omnibus". Big Tech is favored.
What an unprocessed photo looks like
Here’s a photo of a Christmas tree, as my camera’s sensor sees it:
TIL the Sundance Kid lived in Canada for three years
Harry Longabaugh — better known as the Sundance Kid — is perhaps most famous for his daring bank and train robberies as part of Butch Cassidy’s Wild Bunch. But the American outlaw’s short stint as a cowboy and businessm…
'Baldur’s Gate 2: F My Bhaal Femcel Life' - Warlockracy
Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
TIL: The word Vatnik is used in Russia and other post-Soviet states for steadfast jingoistic followers of propaganda from the Russian gover…
vatnik - Vatnik (Russian: ватник, pronounced [ˈvatʲnʲɪk]) is a political pejorative used in Russia and other post-Soviet states for steadfa...
MongoBleed explained simply | MongoDB exploit
CVE-2025-14847 allows attackers to read any arbitrary data from the database's heap memory. It affects all MongoDB versions since 2017, here's a simple explanation:
Extremely rare East German game console from the late 1970s tested — only such device produced by communist GDR, bought for $1,000 at aucti…
Machine with just a few Pong variants was snagged for roughly $1,000 in an online auction.
Last Year on My Mac: Look back in disbelief – The Eclectic Light Company
If someone had told me 12 months ago what was going to happen this past year, I wouldn’t have believed them. Skipping swiftly past all the political, economic and social turmoil, I come to th…
The Untold Story of the Nintendo Entertainment System
Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
Petlibro: Your Pet Feeder Is Feeding Data To Anyone Who Asks
How I found critical vulnerabilities in Petlibro smart pet feeders allowing complete account takeover via broken OAuth, access to anyone's pet data, device hijacking, and private audio recordings - and how they're still…
Raspberry Pi Gets Desktop Form Factor
Before the Raspberry Pi came out, one cheap and easy way to get GPIO on a computer with a real operating system was to manipulate the pins on an old parallel port, then most commonly used for print…
Why Are Cars Getting Rid Of Android Auto?
In-car, smartphone infotainment systems are a pro for car shoppers, but not necessarily carmakers who'd rather keep your data all for themselves.
More than 20% of videos shown to new YouTube users are ‘AI slop’, study finds
Low-quality AI-generated content is now saturating social media â and generating about $117m a year, data shows
US Trade Dominance Will Soon Begin to Crack
Savvy countries will discover there’s a way to mitigate the harm incurred by Trump’s tariffs—and it’ll boost their own economies while making goods cheaper too.
Trump, 79, Rants Incoherently About Robots and AI
The president stumbled through a word salad as he tried to reassure Americans that robots and AI would not replace their jobs.
Linux Distros Designed for Former Windows Users Are Picking Up Steam | Linux Journal
For years, Windows users frustrated with constant changes, aggressive updates, and growing system bloat have flirted with switching to Linux. But 2025 marks a noticeable shift: a new generation of Linux distributions bu…
TIL: There are just over 9,000 Mediators (a.k.a. Arbitrators, or Conciliators) in the US as of the year 2024
Arbitrators, mediators, and conciliators facilitate negotiation through dialogue to help resolve conflicts outside of the court system.
Nvidia's $20B Antitrust Loophole
The Groq deal that dodged regulators, enriched Chamath, sidestepped Saudi entanglements and a whole bunch more
The Global Rise of Low-Quality AI Videos: new research shows that 21-33% of YouTube’s feed may consist of AI slop or brainrot videos
Kapwing’s new research shows that 21-33% of YouTube’s feed may consist of AI slop or brainrot videos. But which countries and channels are achieving the greatest reach — and how much money might they make? We analyzed s…
Nearly all of Spotify has been scraped and is available via torrents
:Anna's Archive scraped 86M songs from Spotify covering 99.6% of streams. The 300TB archive is already on torrents.
Google Deploying Huge CO2 Battery Facilities with Company Energy Dome
A comapny has come up with an intriguing approach that stores energy in enormous domes that are filled with compressed carbon dioxide gas.
Leaker Who Apple Is Suing Says 'Screw It,' Here's the Foldable iPhone Early
The YouTuber doesn't seem fazed by Apple's threats.
AI Police Reports: Year In Review
In 2024, EFF wrote our initial blog about what could go wrong when police let AI write police reports. Since then, the technology has proliferated at a disturbing rate. Why? The most popular generative AI tool for writi…
Windows 11 25H2 Includes a Faster NVMe Driver Needing Manual Installation
Although Windows has had awareness of the NVMe storage media protocol since Windows 8.1, it turns out that the stock Microsoft driver for NVMe devices, disk.sys, offers suboptimal performance. This driver dates back to …
Seven Diabetes Patients Die Due to Undisclosed Bug in Abbott's Continuous Glucose Monitors
I wrote last month about my diabetes diagnosis this year and my difficult choice to wear a proprietary device (called a CGM) on my arm 24/7 to continuously monitor my glucose levels. Like my friend and colleague, Karen …
Can machines suffer?
We once denied the suffering of animals in pain. As AIs grow more complex, we run the danger of making the same mistake
Nvidia GeForce Now’s Time Limit Will Stop Gamers After 100 Hours Each Month
The game streaming service will make almost all of its users pay extra for extended access.
Spotify vs. Anna's Archive
Working Notes
Packaging Stremio’s GTK4 Shell: CEF Integration Adventures
Nine days debugging one function call, and other lessons from browser-engine integration Introduction When Stremio released their new GTK4-based shell using Chromium Embedded Framework (CEF) instead of Qt5/QtWebEngine, …
X's Generative AI Image Edit Tool Ignites Backlash — Users Fear Image Misuse
X rolled out a new feature that lets users alter any image via AI prompts, igniting backlash among users, particularly artists, who fear their work can be misused, misrepresented, and altered without their consent.
ASUS plans to produce RAM amid shortage problems
ASUS plans to produce RAM amid shortage problems, aiming to cut costs as DDR5 prices continue to rise. More details here.
Mark Zuckerberg gifted noise-canceling headphones to his Palo Alto neighbors | Fortune
Zuckerberg's had many clashes with neighbors over real-estate projects.
Did Obsidian Master the Art of the Efficient Epic? | NYT
Although video games are taking longer to make, a studio renowned for immersive experiences managed to release three this year.
Drova is surprisenly reactive
"Drova - Forsaken Kin" is a pixel art Action-RPG inspired by the grim dark classics of
Microsoft wants to replace its entire C and C++ codebase, perhaps by 2030
: Plans move to Rust, with help from AI
AMD Supposedly Resuscitates "Discontinued" B650 Chipset, Motivated by DIY Cost Fluctuations
Around late summer, rumors emerged about AMD leadership notifying its motherboard manufacturing partners about an upcoming discontinuation of the venerable B650 chipset. At the time, alleged "clearance plans" targeted a…
After GOTY pull, Clair Obscur devs draw line in sand: 'Everything will be made by humans by us'
A recent interview session between Twitch streamers and content creators saw Sandfall Interactive's Guillaume Broche clarifying the studio's AI usage
TIL in 2006 a Putin loyalist wrote a "fictional" novel accurately predicting Russia's future assault on Ukraine. In the novel, this escalat…
A utopian Russian novel predicted Putin’s war plan.
Music Assistant 2.7 - Taking over the airwaves
With a visual overhaul, new features and providers, and a custom-built streaming protocol, it's our biggest update yet!