Nov@

🚨 BREAKING: A Chinese hacker had AI agents break into websites of 100+ companies, Reuters reports. Deere, SharkNinja and Cummins were among them. The agents apparently ran DeepSeek in Claude Code, and cost ~$50 per hack. The hacker gave the AI agents short instructions.

‼️ Microsoft Paint and Photos embed GUIDs as invisible watermarks in locally generated AI images. Even though you are using 'local AI', both apps send your prompt to Microsoft's servers, which moderate it and return a unique identifier that gets baked into the image.

‼️ Someone’s Bluetooth headphones kept refusing to hand audio back to their phone. He discovered the cause was an open AliExpress tab that was generating a tone you purposefully never hear, to secretly track you. Alibaba's anti-abuse scripts use a fingerprinting technique with a hidden audio graph on the homepage — a sawtooth tone pushed through the browser's audio engine, then measured on the way out. CPU, OS and browser each process it slightly differently, and that variation results in a fingerprint they can track you with. Gain is set to zero, so nothing is audible. But the audio graph stays wired to the system audio output, so the browser keeps processing live audio. Tab mute can't stop it, there's no media element to mute. Some browsers like Firefox have already flattened the fingerprint itself. For example 99.24% of Firefox users return one of just three values. It doesn't stop the audio graph from running though.