Linux & GrapheneOS β’ Monero β’ Spreading awareness of privacy rights β’ Locked and loaded against mass surveillance & censorship
In space
Joined July 2024
- Tweets16.5K
- Following401
- Followers4.4K
- Likes126K
A 2016 Google Pixel 1 now runs unmodified iOS 16.7.16 userland on a ported XNU kernel.
The developer forked ios-sweet, added a kernel GPU driver for the Adreno 530, and ported Mesa's Freedreno driver. Core Animation now renders the UI through the old OpenGL ES path on the phone's own GPU. Boot time dropped to about 20 seconds.
Wi-Fi, cellular, camera, audio, and Metal features still do not work. The project remains experimental and erases Android data on install.
Anyone with an unlocked Pixel 1 can follow the GitHub instructions, but the result is a demo, not a daily driver.
French courts ordered Proton VPN, NordVPN and Surfshark to block specific pirate IPTV and sports streaming sites for users in France.
The providers applied partial blocks through DNS on their servers in France. On 7 October the Paris court called those steps a reasonable effort and refused daily fines of 10,000 euros per domain. The original orders remain in force until the end of the relevant sports seasons.
Quad9 refused any blocks. The court imposed a reduced daily penalty. Quad9 is now withdrawing its service from France as of 24 November.
Users in France encounter these restrictions when they try to reach the listed sites through those networks.
Here we go again
Ditch Revolut RIGHT away.
π¨ Revolut vient d'Γ©crire noir sur blanc ce qu'il faisait dΓ©jΓ en douce.
Dans ses nouvelles conditions, qui s'appliqueront en décembre, une ligne impose désormais « d'utiliser le système d'exploitation d'origine de votre appareil ». Autrement dit, un téléphone sous GrapheneOS, l'un des systèmes Android les plus sécurisés qui existent, devient une infraction au contrat.
Depuis août, GrapheneOS accuse déjà Revolut de bloquer les connexions de ses utilisateurs. La banque parle de sécurité. GrapheneOS répond que l'application Revolut fonctionne encore sur des versions d'Android qui ne reçoivent plus de mises à jour depuis 2018.
Et ce n'est pas la seule nouveauté. à partir du 23 décembre, Revolut pourra fermer un compte sans préavis s'il estime que son client risque de « nuire à sa réputation » ou s'il juge qu'il utilise le service client « de façon abusive ». Qui décide ? Revolut.
On accepte en se taisant, ou on part.
Moi jβai dΓ©cidΓ© de partir.
A New Mexico judge ordered Meta to pay $25 billion after a jury found the company misled Facebook users about data privacy, hate speech, and misinformation.
The jury counted more than 43 million violations of state consumer protection law. Most came from public statements around the Cambridge Analytica data harvest and later claims about content controls.
State law allowed up to about $219 billion. The judge cut the award to $25 billion. The money goes to New Mexico schools. Interest runs at 15 percent a year until Meta pays.
Meta said it will appeal. The company called the ruling a tax on speech that makes doing business in the state nearly impossible.
If the award holds, New Mexico collects more than a year of its general fund revenue from one company for years of statements a jury called deceptive.
Claude Code just discovered a spyware on a girl's phone that was spying on her and sending data to T-Mobile, apparently.
This is disgusting for this girl, who is was the victim of this spyware, and for @TMobile that looks to be the bad actor behind this.
Claude Code found spyware on my sisterβs phone. It had been tracking her for 11 weeksβ¦
She asked me to check her phone. Someone always seemed to know where she was and she couldnβt figure out how
I plugged it into Claude Code and asked whatβs running that she never installed. It walked every app, including the hidden ones, and flagged one disguised as βSystem Serviceβ, no icon, not on any store
It had been there 11 weeks, logging her location every 2 minutes. Claude pulled the details on whoever was running it:
reports to β +1 (415) *** **72
carrier β T-Mobile US
device id β IMEI 35 ********** 47
last ping it sent β 40.7**, -73.9** Β· 2 min ago
We saved everything the app had recorded and passed it to the people who do this professionally. Then Claude shut it down and wiped it off her phone
The full step-by-step is below, takes 5 minutes. Save it so you don't lose it, and send it to anyone who might need it
A California man filed a proposed class action on October 19 accusing Meta of recording private conversations through its Ray-Ban and Oakley Meta glasses without the βHey Metaβ wake phrase.
The complaint says ordinary talks with family, doctors, and others appeared in his Voice Activity Log and were sent to Meta without consent, violating Californiaβs wiretapping law.
Meta previously said the issue was fixed. No class is certified and the allegations remain unproven.
AI glasses that capture speech you never directed at them put ordinary conversations on a companyβs servers.
GrapheneOS π
You are vulnerable, but GrapheneOS will KILL ITSELF preemptively to stop hackers from accessing their Forum.
With the recent php2shell incident, the GOS team took the safest way possible to protect the users. They didn't take any chances when the PHP security team published a warning, they had 3 options:
1. Run their forum and cross fingers that the vulnerability will not be exploited before the patch is shipped.
2. Try to patch it on their own with duct tape and dreams.
3. SHUT OFF the service and remove the attack surface.
They chose the safest option.
For such a non-essential service like a forum, the 3rd option seems like overkill.But the GOS team has always highlighted the importance of security update frequency. Because of advances in AI and hackers' ability to create malicious code in hours to exploit the most recently discovered vulnerabilities, speed is important.
That's why they don't support devices and apps that don't ship security updates as frequently as possible.
Attackers won't wait for you to patch.
Improve your OpSec before it's too late.
Get GOS.
A public exploit for two critical PHP remote code execution bugs went online hours before the scheduled patch.
The author, posting as J4ck3LSyN, shared downloadable code and called one bug weaponized in lab tests. The same page was later updated to say the first attack chain does not work.
A separate video credited to security firm Calif showed an exploit running commands on a WordPress test site. Copies spread after the original was removed.
PHP released the fixes at 14:00 UTC on 21 October. The patched versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
Any PHP site still on an older version can be taken over by an unauthenticated attacker. Update immediately or isolate the server until you do.
He didn't do anything wrong.
π¨ BREAKING: The UK government just discovered democracy (in other countries).
Ofcom has effectively conceded defeat in its fight with 4chan.
The UK regulator tried to force 4chan to comply with the Online Safety Act and threatened enforcement action, despite 4chan being a US-based platform.
βIf foreign courts decide toβ¦ try and get in our way, there will be a point at which we have to accept that we wonβt be able to recover that money.β
Open source is gonna win.
Apple is in PANIC MODE right now!!!
Developers have ported iOS 16 to Android devices like the Nothing Phone (3), Xiaomi Redmi Note 10, Redmi Note 12 and other similar devices. Guides are even being published on Github to help people do it.
Apple has kept iMessage, FaceTime and its entire ecosystem exclusive to the iPhone for years, making iOS one of its biggest reasons for customer loyalty.
This is the power of open source devs πͺ
Apple is in PANIC MODE right now!!!
Developers have ported iOS 16 to Android devices like the Nothing Phone (3), Xiaomi Redmi Note 10, Redmi Note 12 and other similar devices. Guides are even being published on Github to help people do it.
Apple has kept iMessage, FaceTime and its entire ecosystem exclusive to the iPhone for years, making iOS one of its biggest reasons for customer loyalty.