wooter retweeted
‼️ A hacker got the national ID numbers of signers on eSignFlow, the e-signature tool used by 120+ Belgian councils.
Its maker Vanden Broele says the hashed numbers are easy to reverse. Some handwritten signatures leaked too.
On Monday, its CEO said mostly metadata leaked.
wooter retweeted
I don’t think Europeans fully appreciate what is happening to the European Union right now.
The EU is under an extraordinary, multi-front assault, both from outside and from within. And I struggle to think of another period in its history when so many powerful actors had an interest in weakening it simultaneously.
Russia has spent years waging hybrid warfare against Europe. Weaponised migration, sabotage, cyberattacks, coordinated disinformation campaigns, bot networks and political interference. The objective is clear: undermine trust in democratic institutions, deepen social divisions and weaken European unity.
China has different motivations, primarily economic and geopolitical. A fragmented Europe is easier to pressure, easier to negotiate with individually and less capable of defending its economic interests.
And then there is the United States. Perhaps the most disturbing development of all.
Under Trump and MAGA, a country that helped rebuild the old continent and then spent decades supporting European integration now has an administration openly hostile to much of what the EU represents. Its own National Security Strategy even calls for cultivating resistance to Europe’s current political direction.
Think about that for a moment.
Meanwhile, within Europe, parts of the far right and far left amplify these divisions, whether through ideological alignment, political opportunism or outright sympathy for authoritarian regimes.
This doesn’t mean Russia, China and MAGA are all following some jointly coordinated master plan. They don’t have to. Their interests increasingly overlap, and Europe’s internal divisions make their work considerably easier.
What makes this particularly alarming is what is actually at stake.
For all its flaws, the EU remains one of the world’s most consequential projects built around liberal democracy, the rule of law, individual freedoms and cooperation between nations.
At a time when authoritarianism is gaining ground and even longstanding democracies are showing disturbing tendencies, that matters enormously.
Europe is far from perfect. Its bureaucracy, indecision and inability to act decisively are real problems. But the answer cannot be to retreat into 27 competing nation-states, each too small to meaningfully influence a world increasingly dominated by continental powers.
Quite the opposite.
Europe needs deeper integration, stronger common institutions, genuine strategic autonomy and the political courage to defend its interests and values.
Because fragmentation is precisely what so many external actors want.
And perhaps that’s the central irony of our time: people are being deliberately manipulated into believing that the reverse is true — that national identity and sovereignty can only be protected by weakening European cooperation. In reality, a divided Europe is less sovereign, less secure and far easier for outside powers to pressure. Therefore the very thing that will make Europe stronger is the thing its adversaries are working hardest to prevent.
A united Europe is a geopolitical power. A divided Europe is a collection of countries waiting to be played against one another.
wooter retweeted
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
wooter retweeted
These people have been walking around since the beginning of time with no way to answer these questions. We are actually saved
wooter retweeted
It’s to a point where it’s cheaper to buy a brand spanking new electric car, pay for it monthly, and charge it, than to keep buying petrol.
wooter retweeted
Any government that delays this technology is injuring and killing their own citizens
Full Self Driving Supervised now available in Belgium! 🇧🇪
Book your test drive here: tesla.com/nl_be/drive?source…
wooter retweeted
De @Tesla community houdt hier al geruime tijd de vinger aan de pols over de toelating voor de FSD-technologie op onze Vlaamse en Belgische wegen.
Uit waardering voor jullie niet-aflatende interesse (en aanmoediging 😉), krijgen jullie hierbij de primeur: ik heb net de toelating getekend! 🚘
Deze beslissing gaat nu naar onze dienst homologatie, zij zullen @RDWnl op de hoogte brengen van de goedkeuring. Vlaanderen omarmt innovatie!
wooter retweeted
🎙️Final testing, hopefully a quick homologation in Flanders @elonmusk ?
Het testen van het Tesla FSD-systeem (Full Self-Driving) zal eerstdaags kunnen starten op de Vlaamse wegen. “Het voertuig zal over ongeveer 5.000 kilometer worden getest om eventuele verschillen met de Nederlandse weginfrastructuur en verkeersregels te evalueren. Als de resultaten positief zijn, kan snel werk worden gemaakt van een voorlopige Europese typegoedkeuring die geldig is op het volledige Belgische grondgebied”. Dank aan mijn federale collega om de testen toe te laten, hopelijk verlopen die vlot, en kunnen we vervolgens op zeer korte termijn tot homologatie overgaan! 💪 #Innovatie
annickderidder.be/nieuws/tes…
wooter retweeted
This was one of the most striking situations @pvandamcom and I encountered during our drive on @Tesla FSD Supervised. The car was waiting patiently at the right spots, but then it saw and read the intention of other cars hundreds of meters away to then decide whether to stop of continue on this very narrow road. Simply amazing! 😍 @teslaeurope @TeslaOwnersNL @KRoelandschap @teslaownersSV @SawyerMerritt @wholemars @elonmusk
wooter retweeted
Tesla FSD brakes for an invisible van 👀
Just two guys casually talking while being driven around by FSD.. we thought: HUH?!
Why would it stop, ah ofcourse FSD already saw what two Human Pilots failed to recognize.
A wild invisible van appeared
FSD didn’t even blink & said: hold my beer
@robotinreallife
wooter retweeted
Hacking the #EU #AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..."
I did. It didn't take long to find what looks like a serious #privacy issue.
The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well.
But, the source image used to collect that data is written to disk without encryption and not deleted correctly.
For NFC biometric data:
It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them.
For selfie pictures:
Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them.
This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary.
From a #GDPR standpoint:
Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach.
youtube.com/watch?v=4VRRriyD…
wooter retweeted
Replying to @RubenBaetens
De grap is dat deze federale ploeg graag wil vergelijken met de crisis die vorige regering het hoofd moest bieden toen de gasprijs even 8x hoger lag dan vandaag. 😱
If you use a personal phone/laptop for your work, pay very close attention to this little detail.
Iran attackers wipe 200k devices at a company called Stryker. Within those devices appears to be employees PERSONAL devices.
The attackers used the company’s MDM software, which is basically IT management software running on everything. It’s an incredibly attractive backdoor to an attacker. I successfully targeted MDM software for several Red Team engagements. It’s… lots of fun :)
Anyway, a lot of companies require you to install their MDM software on your personal devices before you can access resources like Corp email. It’s used to keep devices updated, lock things down if they get stolen, etc. The company often promises that they won’t access personal data, erase any personal data, etc. But this is often ONLY POLICY. If a bad actor gains access to the MDM tool, as was the case here, then anything can happen.
People should be aware of these risks. I refused to run MDM software on any of my personal devices. The company needs to provide me with hardware if they want that. I personally isolate all corp devices to their own network too. If an adversary can get into the corp laptop, then can then get inside my network… there have been cases of it happening in the past.
Replying to @KimZetter
I've published more details about the cyberattack in this piece: zetter-zeroday.com/iranian-h…
wooter retweeted
FSD Supervised navigates Munich city center 🇩🇪
Ein Wahnsinn.
Liebe EU Regulierungsbehörde es funktioniert. Erlebt es selbst. Der beste Fahrer im Auto ist man nicht selbst sondern der FSD (Fahrer).
@TeslaClubAT
@Tesla









































