👀 COINBASE HACK WAS AN INSIDER JOB
Coinbase says a former support agent was arrested in Hyderabad, India
• Breach happened in May 2025
• Hackers bribed overseas support staff to misuse internal access
• No code or blockchain exploit involved
• Customer data was accessed (not private keys)
• Attackers demanded a $20M ransom, which Coinbase refused
Now extrapolate to mobile operators, hospitals, banks and tell me your data is safe because we trust the bros that work there not to take bribes... 🤔
espn ✔️
espn@nostriches.club
npub1yxcm...7r4c
'If you're lonely when you're alone, you're in bad company.'
- Jean-Paul Sartre -
We need more of this in the Linux trenches!


It's FOSS
Red Hat Buys an AI Safety Company, Promises to Open Source Its Tech
The new addition brings custom AI security and safety tooling to Red Hat.
Can't wait to test this OS and/or the mobile, good timing too...
#Linux
#linuxOS
#Jolla
#sailfishOS

The Privacy Respecting European OS and AI Solution Provider
The Privacy Respecting European OS and AI Solution Provider
Jolla offers privacy-first OS and Edge AI solutions continuing the legacy of Nokia and MeeGo, driving mobile innovation into the human-centric AI era.
Done with 85K longs, now CEXs are going for the shorts at 92K...
Imagine a world with no CEXs, only DEXs... A world where bitcoiners do self custody and didn't trade/gamble their corn 🌽,...
#Bitcoin
#BTC
#Liquidity


Follow the Liquidity game, accumulate smarter
View quoted note →
👀 Rate cut polymarket signal holding at 85%,
10 of December...
An usual catalyst incoming.
Those who sold #Bitcoin at 80K... Ouch
Where is the next stop? Will it be the ATH of the year?
#askNostr
#Bitcoin and the CEXs chasing liquidity game...
Cleanup shorts up to 89K, now chasing longs down to 85K...


The mental gymnastics of the EU with their surveillance policies and most recently their military "build up" (read taxing excuse for the poor) and now "voluntary" military conscription (read it as propaganda and more decption to cover unemployment) to fight a potential war against the regional empire in 5 years (what a joke)
Those that do not realize the deception are way too naive...
Solution:
Keep buying #Bitcoin, it is a sale, goes a bit more down, so what, keep it off the CEXs, learn to be your own bank and safe self custody, DCA. Star progressively moving towards the #BTC standard, all currencies are going to zero against #Bitcoin


Not surprising but nice to read an article making it quite clear


The Hacker News
Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time
Google reports Rust cut Android memory bugs below 20% while improving speed, safety, and development reliability.
OPEN SOURCE IS MALICIOUS ACCORDING TO GOOGLE
Earlier this month, Immich's immich dot cloud websites were suddenly marked as dangerous by Google Safe Browsing. Users trying to access these sites were greeted with the fear-inducing "red screen of death."
If you didn't know, Safe Browsing is Google's service that looks to protect users by warning them when they try to access malicious websites or download suspicious files. The service is integrated into major browsers like Chrome and Firefox.
A single flag from this can make a website unavailable to most internet users
Do yourself a favor and opt out of everything Google
WhatsApp, a Messenger app that have become a default in some countries for daily communications. The lack of understanding from users is evident, but in my experience is more than ignorance,
is resignation, you explain the risk, they understand but keep using it for convenience or "need", choices, bad ones

Trend Micro
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
Trend™ Research has identified an active campaign spreading via WhatsApp through a ZIP file attachment. When executed, the malware establishes pe...
🚨 Apple on Monday backported fixes for a recently patched security flaw that has been actively exploited in the wild.
The vulnerability in question is CVE-2025-43300 (CVSS score: 8.8), an out-of-bounds write issue in the ImageIO component that could result in memory corruption when processing a malicious image file.
🚨 Microsoft Corp. today issued security updates to fix more than 80
vulnerabilities in its Windows operating systems and software.
There are no
known "zero-day" or actively exploited vulnerabilities in this month's bundle
from Redmond, which nevertheless includes patches for 13 flaws that earned
Microsoft's most-dire "critical" label.
Meanwhile, both Apple and Google
recently released updates to fix zero-day bugs in their devices.
🤔 The more I use LLMs and the more I think about their potential, the more I am convinced that most countries currently behind in terms of development and with a controlled corruption will be able to advance themselves forward at warp speed.
Many fear LLMs, in my opinion, mainly the ones with the most to loose, to loose control over people, to loose resources and profits.
Hopefully exciting times ahead
#APERTUS
An open source, multilingual AI model called "Apertus" that aims to challenge the dominance of proprietary systems like ChatGPT while prioritizing transparency, accessibility, and ethical AI practices.
Considering Switzerland latest developments related to their dead neutrality and their slowly but surely move towards EU Orwellian ideology... (See Proton current position and their consideration to move to another jurisdiction), I will be cautious, yet, interesting.
Using AI? Support Open Source, avoid using closer sourced products.
#AI
#LLM
Considering Switzerland latest developments related to their dead neutrality and their slowly but surely move towards EU Orwellian ideology... (See Proton current position and their consideration to move to another jurisdiction), I will be cautious, yet, interesting.
Using AI? Support Open Source, avoid using closer sourced products.
#AI
#LLM@Vitor Pamplona, maybe Amethyst own repository for F-Droid solves the F-Droid non sense...
Others have done as Samorai Wallet used to and nowadays Session does as well...
If people uses F-Droid they are savvy enough to add your repo.


🚨 Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection
Cybersecurity researchers have shed light on a novel attack chain that employs phishing emails to deliver an open-source backdoor called VShell. The "Linux-specific malware infection chain that starts with a spam email with a malicious RAR archive file," Trellix researcher Sagar Bade said in a technical write-up. "The payload isn't hidden inside the file content or a macro, it's encoded directly.
Cybersecurity researchers have shed light on a novel attack chain that employs phishing emails to deliver an open-source backdoor called VShell. The "Linux-specific malware infection chain that starts with a spam email with a malicious RAR archive file," Trellix researcher Sagar Bade said in a technical write-up. "The payload isn't hidden inside the file content or a macro, it's encoded directly.

Another day, another breech, Airlines are a pickle, the only solution is no accounts with them, which is quite inconvenient, but, as you can see, worth it.


Dark Reading
Air France, KLM Alert Authorities of Data Breach
While no sensitive financial data like credit card information was compromised, the threat actors were able to get away with names, email addresses...
