Wild

A GitHub Issue Title Compromised 4,000 Developer Machines

A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The at...

Replace Buzz with an LLM and it’s true

The internet without ad blocker

Because it’s not about your safety… it’s about Google knowing what sites you visited. I disable this shit immediately.

Huginn Report: February 2026 | Norn Labs

Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. Here's what we found and what it means.

I’m pretty excited with what I’ve just launched for #nymchat I’ve solved 3 problems. Little known fact, all Chromium browsers are locked to a maximum 30 websockets. It has been called out before, but they just never fixed it. This obviously lowers the censorship-resistance of a Nostr app. But I’ve gotten around this. Nymchat, when run locally, directly connects to as many relays as possible. The average has been about 170. But I haven’t been able to verify if all of them are handling messages. Either way, all those connections clogged up the browser’s memory and sucked up bandwidth. I think I’ve solved this as well. All of those connections were direct from the client to the Nostr relays. That’s a lot of exposure of your connecting IPs across the network. I’ve got a solution for this now. I’m a big Cloudflare Workers platform fan. I’ve built so many serverless tooling now. For those that don’t know I also have a Nostr relay implementation called Nosflare that runs entirely on Workers. If you’re unfamiliar, Workers are basically micro JS servers that live and duplicate across Cloudflare’s global network, making the application incredibly fast and scalable. Almost everything I build runs on Workers. A bare metal or VPS just is too antiquated at this point for what I’m running. All that to say, I’ve deployed a new feature on nymchat that detects when it’s running on it’s default hostname or a Cloudflare Workers domain. If so, it creates only a single websocket to a proxy Worker and that proxied worker is what then establishes all the websocket connections to relays, dedupes events, etc. This was built off my blaster relay code! This should greatly reduce bandwidth to the client, help with app performance and stability, it gets around that arbitrary max of 30 websocket connections with Chromium, and best of all the Nostr relays never see your real IP and instead only see a Cloudflare IP. So if a sneaky 3-letter agency wanted to create a honeypot relay, they’ll just be getting Cloudflare worker IPs instead. Sorry glowies. And if the app detects it’s running locally or not on its default hostname (where it wouldn’t be on Cloudflare infra) it reverts back to the direct relay connections like before.

Anonymously Chat with Nymchat

Ephemeral anonymous chat messaging over Nostr. Bridged with Bitchat geohash channels.

#nymchat now supports video uploads and polls! The video uploading support will be rolling out to iOS/android apps soon.

Anonymously Chat with Nymchat

Ephemeral anonymous chat messaging over Nostr. Bridged with Bitchat geohash channels.

😂#F1

👀

There’s literally nothing more annoying than the bowl getting molten lava hot and your food lukewarm in the microwave

👀

TechCrunch

Hacktivists claim to have hacked Homeland Security to release ICE contract data | TechCrunch

A hacking group called Department of Peace said they hacked a specific office within Homeland Security to protest ICE’s mass deportation campaign...

Ugh https://www.reuters.com/business/openai-is-developing-alternative-microsofts-github-information-reports-2026-03-03/

It uses… umm code, yeah

Pretty neat ngl

Android Authority

Your Pixel can now double up as a full Android PC with nothing more than a USB-C cable

Landing with the March Pixel Drop, your Google Pixel phone can now become a mini PC thanks to Android's Desktop Mode.