Google Project Zero just dropped a full 0-click exploit chain for Pixel 9 targeting CVE-2025-54957 in Dolby's audio decoder. Android's AI transcription features auto-decode incoming audio, so attackers just need to send you a malicious RCS message. #GrapheneOS users aren't immune to the initial bug since it's in Dolby's proprietary blob with its own internal allocator, but hardened_malloc and improved mediacodec sandboxing make privilege escalation significantly harder. Patch to January 2026 security level now!

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby

Over the past few years, several AI-powered features have been added to mobile phones that allow ...

@Final any thoughts on this?

The historical record proves that competent intelligence services will infiltrate any movement they consider threatening. But decades of documented cases reveal that detection-focused security culture consistently fails while breeding the very paranoia the state wants to create. The cypherpunk solution applies here too: design systems where the adversary's presence cannot achieve its goals. View article →

Living outside the state means living outside its protection racket. How do communities of individualists defend themselves without recreating the very structures they escaped? The answer lies in deterrence over firepower, distributed capability over centralized protection, and vigilance toward those who claim to guard you as much as toward external threats. View article →

Agent context files and skills designed for security audits of your software.

GitHub

GitHub - trailofbits/skills: Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows - trailofbits/skills

The Future is NOSTR - Max Hillbrand Bitcoin Study Sessions Max Hillbrand (Wasabi Wallet co-founder) presents Nostr as a cryptographic protocol where clients sign events (JSON messages) and relays distribute them untrusted—verification is signature-based, not consensus-dependent. Unlike Bitcoin's global agreement requirement, Nostr enables censorship-resistant publishing, micropayments (zaps), and marketplaces without mining or central intermediaries. Hill

The Future is NOSTR - Max Hillbrand Bitcoin Study Sessions The money is broken, and we all feel it. Our platforms of expression are less obvious...they work for most people. But it's that tiny ...

GrapheneOS now supports hardware-virtualized Linux environments on Pixel devices. Combined with OpenCode, you can run a complete vibe coding setup from your phone, with no vendor lock-in on either the operating system or the AI tooling. Here is how to set it up. View article →

The libertarian movement has spent decades oscillating between political reform and territorial escape, both of which have failed to deliver meaningful sovereignty. A third path exists: build parallel institutions that coexist with the state through systematic separation. Bitcoin, Nostr, and physical meetups have begun realizing this vision, offering practical sovereignty without waiting for seasteads or electoral victories. View article →

I love it when there are comments that actually make me think and go deeper into logic. View quoted note →