💀

Tom

Windows Server vulnerability can grant system privileges with just a malformed packet — domain controllers are being exploited in the wild

System administrators, run the May 12 patch immediately if you haven

🤣

The Verge

Meta’s own AI was exploited to hijack Instagram accounts

Does this count as vibe hacking?

@Karnage 👀

XDA

I replaced Claude Design with this open-source tool, and I'm not paying for design software again

Open Design is what everyone should be using.

👀

The feedback has been good on this! I am saddened to have stopped working on something I put a lot of time and effort into, but I think it was the right decision, especially so I can dedicate entirely to Nymchat. Thankfully, the Plebs project will still "live on" through the default GitHub pages hosted version. So, if you did want to try Plebs or keep using it, you can. It is just the primary domain I was using that won't be renewed by me and I will no longer be contributing to the project.

Watch Videos on Nostr with Plebs

Plebs is a censorship-resistant, decentralized video platform powered by the Nostr social protocol

View quoted note →

Heads up, I won't be renewing the Plebs domain on 1st June and have sunset the project. It was great to be the first truly decentralized, Nostr-native YouTube-esque platform, which was the first to utilize Blossom hosts with mirrors for censorship-resistance, redundancy and failover. It was also the first to have a analytics engine for content creators. There are many reasons for this decision, but the main one is the realization that most content creators don't actually give a shit about censorship-resistance or decentralization, they're just concerned about views, which is just something only a centralized platform can really excel at serving. The code is open, so feel free to fork and keep it alive, or it can stay sunset for good. Either way, my entire focus is on Nymchat.

GitHub

GitHub - Spl0itable/plebs-app: Plebs is a censorship-resistant, decentralized video platform powered by the Nostr social protocol

Plebs is a censorship-resistant, decentralized video platform powered by the Nostr social protocol - Spl0itable/plebs-app

With Bitchat's DMs the claimed sender (rumor.pubkey) is an unauthenticated, self-asserted plaintext field. Nothing cryptographically ties the message to that identity and the only key that signs anything is a random per-message ephemeral key. Anyone can set rumor.pubkey to any identity and Bitchat will display it as from that person. So it's a genuine deviation from NIP-17, and it means Bitchat's DMs has no sender authentication at all. Whether this was intended as a deniability/privacy choice or an oversight, I can't say from the code alone. That said, starting today on #Nymchat, each message in 1:1 PM or group chat now shows a padlock icon with colored status and a detailed explanation when clicked.

Pseudonymously Chat with Nymchat

Ephemeral pseudonymous chat messaging over Nostr. Bridged with Bitchat geohash channels.

Microslop

The Hacker News

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft urged coordinated disclosure after three Windows zero-days were actively exploited, increasing customer security risks.

Accidental photo or Art?

Probably nothing. P2P audio/video calling is now available for 1:1 PMs and group chats on #Nymchat! There is also a new setting to adjust who can call you.

Pseudonymously Chat with Nymchat

Ephemeral pseudonymous chat messaging over Nostr. Bridged with Bitchat geohash channels.