Omalauncher: AI launcher pre Android s Linuxom a coding agentmi
Prostredie, kde si Android aplikácie a widgety navibecodujete za pár minút
https://blog.opportunist.global/omalauncher-ai-launcher-pre-android-s-linuxom-a-coding-agentmi-bad479fe1679
Wilder
wilder@cypherpunk.today
npub15xkp...krnh
Cryptoanarchist, voluntaryist, perpetual traveler focused on technology and society hacking.
Tesla's Flying Roadster Revealed: Everything That Happened in 10 Minutes
Snuffleupagus is a PHP7+ and PHP8+ module designed to drastically raise the cost of attacks against websites. This is achieved by killing entire bug classes and providing a powerful virtual-patching system, allowing the administrator to fix specific vulnerabilities without having to touch the PHP code.
Snuffleupagus — Snuffleupagus stable documentation
Switch off all your PHP websites NOW!
Until you have the latest patch (which was not released yet)
The exploit
Only for the curious...
Open Source Intelligence (OSINT): Gathering Information on a WhatsApp Account
https://hackers-arise.com/open-source-intelligence-osint-gathering-information-on-a-whatsapp-account/
The PHP security team would like to give advance notice of an upcoming security release.
It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC.
It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available.
PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
Privacy Tips from the Threema Team
Threema
Privacy Tips from the Threema Team – Part 1
If you search the Internet for tips on protecting your online privacy, you’ll find plenty: set a unique password for each service, download u...
Threema
Privacy Tips from the Threema Team – Part 2
There are various ways to protect your online privacy. With so many approaches available, it pays to get tips from people who deal with the subject...
Toto nefunguje ani v úplne totalitných krajinách sveta. Ale v EÚ čoskoro bude:
Platíte hotovosťou? Poprosíme občiansky preukaz. EÚ reguluje hotovosť
Magazín
Platíte hotovosťou? Poprosíme občiansky preukaz. EÚ reguluje hotovosť
Máte radi vôňu čerstvo vytlačených bankoviek a pri pokladni stále radšej vyťahujete peňaženku ako plastovú kartu? Vychutnajte si tento ...
Investigation: EU citizens' private messages are run through Palantir’s software
Citizens of the EU get their private messages scanned under the temporary EU law “Chat Control”. Those messages are then analysed with Palantir’s software.
Investigation: EU citizens' private messages are run through Palantir’s software
Citizens of the EU get their private messages scanned under the temporary EU law “Chat Control”. Those messages are then analysed with Palantir...
Zverejnil som na GitHube vlastný bridge, ktorým som pri presune Aave pôžičiek ušetril viac než 3 000 $ na poplatkoch.
Bridge appky si z každého prevodu berú 0,05–0,5 %. Circle pritom za štandardný prevod USDC, EURC, cirBTC či WETH neberie nič, len na to nemá appku pre bežných ľudí. Tak som si ju nechal napísať AI agentom.
Čo vie:
• USDC medzi Arc, Ethereom a Avalanche
• EURC z Arc na Ethereum prakticky len za gas
• cirBTC a WETH medzi Ethereom a Arc
• dokončiť rozpracovaný prevod podľa hashu transakcie
Bezpečnosť:
• beží lokálne vo vašom prehliadači a každú transakciu podpisujete v hardvérovej peňaženke
• pred každým prevodom overí kontrakty Circle priamo na blockchaine
• príjemca je len vaša peňaženka alebo adresa z vášho adresára (ochrana pred address poisoningom)
• presné povolenia, ochrana pred dvojitým odoslaním a prísna Content-Security-Policy
Používate ho na vlastné riziko a neručíme za žiadne zneužitie ani stratu prostriedkov. Najprv vyskúšajte malú sumu.
👉 
Ako som ho použil pri presune pôžičiek na Aave v4: https://blog.opportunist.global/ako-%C5%BEi%C5%A5-dlhodobo-z-krypto-p%C3%B4%C5%BEi%C4%8Dky-a-leg%C3%A1lne-neplati%C5%A5-dane-odvody-v-roku-2026-487a49e561ab#a7bb
GitHub
GitHub - wilderko/circle-cctp-bridge: Self-hosted Circle CCTP bridge page: USDC, EURC, cirBTC, WETH between Arc, Ethereum and Avalanche for gas only. Unaudited, use at your own risk; no liability for any loss or misuse.
Self-hosted Circle CCTP bridge page: USDC, EURC, cirBTC, WETH between Arc, Ethereum and Avalanche for gas only. Unaudited, use at your own risk; no...
If you run WordPress with UpdraftPlus and your site is connected to UpdraftCentral, please delete the UpdraftCentral key today and check the site.
On the night of 19 October an attacker sent validly signed UpdraftCentral commands to three of our WordPress sites and installed a backdoor plugin on two of them. The sites were fully up to date, on UpdraftPlus 2.26.11, patched against the June vulnerability CVE-2026-10795. The attacker did not break into our servers. The commands were signed with the private dashboard keys that UpdraftCentral Cloud generates and keeps, keys that never existed on our side.
The backdoor waits for a secret link, then creates an account that looks like an ordinary Editor but can change every setting and install plugins, and logs the attacker straight in, bypassing the login form and two-factor authentication. A bug in its code made it crash our sites instead of working. A fixed version would take a few characters.
UpdraftPlus has more than 4 million active installations and every copy contains the UpdraftCentral client. Any site connected to UpdraftCentral is exposed, including the latest version. There is no fix yet.
What to do now:
• delete the key in UpdraftPlus > Advanced Tools > UpdraftCentral
• check the site with our free read-only WP-CLI script
• do not reconnect until TeamUpdraft explains how the keys leaked
We reported it to TeamUpdraft the same day. Because the attack is active and publishing gives the attacker nothing new, we are publishing the analysis, indicators of compromise and the checker right away:
#WordPress #infosec #UpdraftPlus #cybersecurity
Nethemba
Critical security problem in UpdraftCentral: an attacker holding the service's keys planted a backdoor on our websites - Nethemba
An attacker used UpdraftCentral keys (UpdraftPlus, 4M+ installs) to push a backdoor to WordPress sites. Analysis, IOCs and how to check your site.
#89 Jarvis (HackTheBox) (Medium) How To Deal With Connection Issues...
SQL injection (involving a WAF bypass) allows us to write a shell in the webserver root. We then abuse a custom python application to gain more rights as another user. Finally systemctl with SUID rights grants us root access after a period of losing my mind.
Praxeológia súkromia: Ekonomická logika v cypherpunkovej implementácii
Max Hillebrand · Slovenský preklad tretieho vydania
Praxeológia súkromia — Slovenčina | Towards Liberty
Slovenský preklad knihy The Praxeology of Privacy od Maxa Hillebranda: PDF, EPUB a kompletná audiokniha s kapitolami.
The Mixer Rule is Dead, Long Live Outlawing Mixers
On the same day the US Treasury abolished a cryptocurrency mixer rule, SDNY weaponized a newly set precedent that could criminalize the use of financial privacy technologies.
The Rage
The Mixer Rule is Dead, Long Live Outlawing Mixers
On the same day the US Treasury abolished a cryptocurrency mixer rule, SDNY weaponized a newly set precedent that could criminalize the use of fina...
What Comes After Politics?
Why a new generation of builders is abandoning the struggle for power to create a civilization beyond State, Market, and Grievance.
What Comes After Politics?
Why a new generation of builders is abandoning the struggle for power to create a civilization beyond State, Market, and Grievance.
Ak veríte, že Bitcoin pôjde hore a EURO dole (momentálne má euro najnižšiu cenu voči doláru za tento rok a naši kontraktori nám už píšu, že nechcú euro shitcoin, ale preferujú platby v dolároch), tak nemôžete predávať Bitcoin, ale naopak potrebuje shortovať eurá - požičať si ich a len s radosťou čakať na ich devalváciu a znižovanie hodnoty vašej požičky.
Aktualizoval som návod „Ako žiť dlhodobo z krypto pôžičky a legálne neplatiť dane + odvody v roku 2026“.
Nová kapitola 2.10 je o Aave v4:
• eurá (EURC) na sieti Arc za ~0,5 % ročne
• doláre (USDT) na Avalanche za ~1 % ročne
Pre porovnanie: Aave V3 na Ethereu ~4 %, Morpho ~2 %, Firefish ~10 % a viac.
Svoje pôžičky som tam už presunul. Celý presun stál ~0,17 % z výšky pôžičky a vrátil sa za necelý mesiac.
Najviac som ušetril vlastnou bridge appkou. Napísal mi ju AI agent a volá kontrakty Circle priamo. Bridge appky si berú 0,05–0,5 % z každého prevodu, ja platím len gas. EURC z Arc na Ethereum ma tak stojí pár centov a pri dvoch migráciách som ušetril viac než 3 000 $.
V článku nájdete:
→ postup krok za krokom pre eurá na Arc aj doláre na Avalanche,
→ ako z natívneho BTC spraviť cez Lombard BTC.b bez poplatku,
→ čo je v Aave v4 iné (Health Factor pre každú sieť zvlášť, žiadna rezerva pred likvidáciou),
→ chyby, ktoré som takmer urobil,
→ o čo požiadať AI agenta, aby vám napísal vlastný bridge, a ako ho zabezpečiť.
Nízky úrok má svoju cenu: namiesto decentralizovaného tBTC držíte kustodiálne BTC.b alebo cirBTC. A tieto trhy sú mladé, takže úrok sa môže rýchlo zmeniť. Ale ste flexibilní a za pár hodín to viete prehodiť ako správni DeFi oportunistii na akýkoľvek DeFi loan market, ktorý je najlacnejší.
A keďže pôžička nie je predaj, nevzniká zdaniteľná udalosť.
👉 https://blog.opportunist.global/ako-%C5%BEi%C5%A5-dlhodobo-z-krypto-p%C3%B4%C5%BEi%C4%8Dky-a-leg%C3%A1lne-neplati%C5%A5-dane-odvody-v-roku-2026-487a49e561ab#a7bb
Zarábajte na štátnych inflačných peniazoch.
Nie je to finančné ani daňové poradenstvo.
#Bitcoin #DeFi #Aave
Creator of free Adobe clones unveils open-source Microsoft Office Excel, PowerPoint, and Word replications — Autodesk tools and other subscription-based services may come next
Tom
Creator of free Adobe clones unveils open-source Microsoft Office Excel, PowerPoint, and Word replications — Autodesk tools and other subscription-based services may come next
It
Sedem kúzelníckych trikov v jednej AI požiadavke
routstr-confidential je experimentálny dôverný režim pre Routstr, trh s AI inferenciou, kde uzlu zaplatíš cez Cashu ecash alebo Lightning a on tvoju požiadavku pošle poskytovateľovi, napríklad Venice, pod svojím API kľúčom. V dôvernom režime uzol tvoje prompty ani odpovede neprečíta a ty jeho API kľúč nikdy neuvidíš.
Sedem kúzelníckych trikov v jednej AI požiadavke – Juraj Bednar