The job interview was the payload.
North Koreaโs WaterPlum crew, also called Contagious Interview. Fake recruiter. AI face on camera. A few minutes of video. Then the cam dies. โBad connection.โ
Next step is a coding test you download. That is the malware.
Japan, the US, Australia, Germany put it in writing. Dec 2025 to July 2026. At least 30,000 boxes in over 100 countries. Credentials or funds from more than 7,000 wallets. About $10.7 million moved to the regime.
They impersonate AI and crypto firms. They want seeds, browsers, IDs. Then a path into whoever hires you.
If the interviewer goes dark and asks you to run a file, that is not a glitch. That is the job.
North Koreaโs WaterPlum crew, also called Contagious Interview. Fake recruiter. AI face on camera. A few minutes of video. Then the cam dies. โBad connection.โ
Next step is a coding test you download. That is the malware.
Japan, the US, Australia, Germany put it in writing. Dec 2025 to July 2026. At least 30,000 boxes in over 100 countries. Credentials or funds from more than 7,000 wallets. About $10.7 million moved to the regime.
They impersonate AI and crypto firms. They want seeds, browsers, IDs. Then a path into whoever hires you.
If the interviewer goes dark and asks you to run a file, that is not a glitch. That is the job.
Discord brought age checks back.
They say 90% of users will scan a face. They will guess your age from how long the account lived, what devices you use, what servers you sit in.
Wrong bucket? Pay with a card. Or let Apple and Google speak for you. Face and ID are still on the menu.
That is not โteen safety.โ That is a profile of how you talk, plus a door for the state that asked for it.
Valour.gg is the other chair.
Open source. AGPL. No ads. No data sale. No ID. No phone. Email and you are in. They already said they will not kneel to UK-style face laws. US shop. Code on GitHub. You can host it yourself.
Discord importer is there if you want to leave with the friends list.
Age laws want a file on every user. One app builds the file. The other one refuses the form.
They say 90% of users will scan a face. They will guess your age from how long the account lived, what devices you use, what servers you sit in.
Wrong bucket? Pay with a card. Or let Apple and Google speak for you. Face and ID are still on the menu.
That is not โteen safety.โ That is a profile of how you talk, plus a door for the state that asked for it.
Valour.gg is the other chair.
Open source. AGPL. No ads. No data sale. No ID. No phone. Email and you are in. They already said they will not kneel to UK-style face laws. US shop. Code on GitHub. You can host it yourself.
Discord importer is there if you want to leave with the friends list.
Age laws want a file on every user. One app builds the file. The other one refuses the form.
Motorola just showed the Signature 27.
Snapdragon 8 Elite. End of year launch. High-end slab, not a fold.
GrapheneOS already said the first Moto they will support is the successor to the 2026 Signature. This is that phone.
Motorola has not put GrapheneOS on the slide. The OS team has. Hardware this year. GrapheneOS next year, when the chip and the locks meet their bar.
Until now GrapheneOS lived on Pixels. This is the first door out.
Same deal as always. You buy the phone. You choose the OS. No Google stack required.
Not cheap. Flagship first. Then they said they expand.
Snapdragon 8 Elite. End of year launch. High-end slab, not a fold.
GrapheneOS already said the first Moto they will support is the successor to the 2026 Signature. This is that phone.
Motorola has not put GrapheneOS on the slide. The OS team has. Hardware this year. GrapheneOS next year, when the chip and the locks meet their bar.
Until now GrapheneOS lived on Pixels. This is the first door out.
Same deal as always. You buy the phone. You choose the OS. No Google stack required.
Not cheap. Flagship first. Then they said they expand.
Qualcomm finally said Linux on Snapdragon.
X2 laptops. Official. Debian by the end of this year. Ubuntu with Canonical in the first half of 2027. ASUS and HP already waving.
They spent a generation shipping Windows-only ARM boxes and calling the kernel work โsoon.โ X1 never got the real welcome.
This is not SteamOS. This is not every distro on day one. It is the door they kept shut.
Windows is no longer the only ticket on that chip.
X2 laptops. Official. Debian by the end of this year. Ubuntu with Canonical in the first half of 2027. ASUS and HP already waving.
They spent a generation shipping Windows-only ARM boxes and calling the kernel work โsoon.โ X1 never got the real welcome.
This is not SteamOS. This is not every distro on day one. It is the door they kept shut.
Windows is no longer the only ticket on that chip.
๐2
๐ฟ๐๐๐ข๐ฅ ๐ข๐ ๐๐
She wants Chat Control 2.0 to pass so EU governments will know what you text in your private chats. She wants you to be able to know what happens behind the doors of the EU Parliament. One of these claims is fake. Guess which.
Chat Control did not pass. Not yet.
Parliament negotiators rejected a plan to scan private messages of people who are not suspects. They want scans only on people linked to child abuse cases.
Governments wanted search orders that cover whole services. That deal failed on 29 September.
This is not over. The next round is in November. The old voluntary scan rule can still stay as a side door.
A scan of every chat is not a search. It is a copy of your inbox, waiting for a match.
They lost this round. They will try again.
Parliament negotiators rejected a plan to scan private messages of people who are not suspects. They want scans only on people linked to child abuse cases.
Governments wanted search orders that cover whole services. That deal failed on 29 September.
This is not over. The next round is in November. The old voluntary scan rule can still stay as a side door.
A scan of every chat is not a search. It is a copy of your inbox, waiting for a match.
They lost this round. They will try again.
X (formerly Twitter)
๐'๐ข ๐๐ค๐๐๐พ (@BaT_MaN_23) on X
Hey @grok remove the fake gods from this picture !!
Someone told Grok to remove the fake gods from a picture.
Grok said done. It kept the figure in the center and cut the rest.
People then read the edit as proof. One side said it knows. The other side said it is biased. Both treated a picture edit like a verdict.
AI apparently does settle religion. It repeats the frame the company behind it hand it. Training data leans one way.
Conduct a reality check before you trust the answer.
https://x.com/BaT_MaN_23/status/2105534288645194187
Grok said done. It kept the figure in the center and cut the rest.
People then read the edit as proof. One side said it knows. The other side said it is biased. Both treated a picture edit like a verdict.
AI apparently does settle religion. It repeats the frame the company behind it hand it. Training data leans one way.
Conduct a reality check before you trust the answer.
https://x.com/BaT_MaN_23/status/2105534288645194187
Forwarded from Linux memes
Please open Telegram to view this post
VIEW IN TELEGRAM
๐ฟ๐๐๐ข๐ฅ ๐ข๐ ๐๐
This media is not supported in your browser
VIEW IN TELEGRAM
Grok Imagine. (lower your volume if your parents are next to you)
Most used VPN locations
1. ๐บ๐ธ United States
Biggest server count. Streaming + low congestion.
2. ๐ณ๐ฑ Netherlands
Speed + privacy. Amsterdam exchange.
3. ๐ฌ๐ง United Kingdom
BBC iPlayer and UK content.
4. ๐จ๐ญ Switzerland
Strongest privacy laws. Proton home base.
5. ๐ธ๐ช Sweden / ๐ฉ๐ช Germany
Mullvad core + fast EU routing.
1. ๐บ๐ธ United States
Biggest server count. Streaming + low congestion.
2. ๐ณ๐ฑ Netherlands
Speed + privacy. Amsterdam exchange.
3. ๐ฌ๐ง United Kingdom
BBC iPlayer and UK content.
4. ๐จ๐ญ Switzerland
Strongest privacy laws. Proton home base.
5. ๐ธ๐ช Sweden / ๐ฉ๐ช Germany
Mullvad core + fast EU routing.
Virus - Code that attaches to a host file and spreads when that file runs.
Keylogger - Records keystrokes to steal passwords, messages, and other typed data.
Worm - Self-replicating malware that spreads across networks without a host file.
Trojan - Malware disguised as legitimate software that the user installs willingly.
Rootkit - Hides itself and other malware by hooking the OS at a deep level.
Backdoor - A hidden entry point that lets an attacker bypass normal authentication.
Adware - Software that pushes unwanted ads, often bundled with free programs.
Keylogger - Records keystrokes to steal passwords, messages, and other typed data.
Worm - Self-replicating malware that spreads across networks without a host file.
Trojan - Malware disguised as legitimate software that the user installs willingly.
Rootkit - Hides itself and other malware by hooking the OS at a deep level.
Backdoor - A hidden entry point that lets an attacker bypass normal authentication.
Adware - Software that pushes unwanted ads, often bundled with free programs.
Please open Telegram to view this post
VIEW IN TELEGRAM
๐1๐1
๐จ BREAKING: Utah just discovered how VPNs work.
They passed a law that said adult sites must know if you are physically in Utah even if you hide your IP. They also tried to ban sites from explaining VPNs.
A federal judge just froze that part. Temporary. Aylo sued. The court said a site cannot reliably see through a VPN. Perfect location does not exist.
The rest of the age-check law still stands. Utah already blocked Pornhub at the state IP. People used VPNs. The state then tried to outlaw the workaround.
Age laws want a file on every user. A VPN is the opposite of a file.
They can keep the speech. They cannot make math stop working.
They passed a law that said adult sites must know if you are physically in Utah even if you hide your IP. They also tried to ban sites from explaining VPNs.
A federal judge just froze that part. Temporary. Aylo sued. The court said a site cannot reliably see through a VPN. Perfect location does not exist.
The rest of the age-check law still stands. Utah already blocked Pornhub at the state IP. People used VPNs. The state then tried to outlaw the workaround.
Age laws want a file on every user. A VPN is the opposite of a file.
They can keep the speech. They cannot make math stop working.
- Government: "You committed a crime."
- You: "What did I do?"
- Government: "You paid with cash. Three times. Large amounts."
- You: "Cash is legal."
- Government: "Legal, but suspicious."
- You: "Using money... as money... is suspicious?"
- Government: "Honest people use traceable payments."
- You: "Says who?"
- Government: "The people doing the tracing."
- You: "What did I do?"
- Government: "You paid with cash. Three times. Large amounts."
- You: "Cash is legal."
- Government: "Legal, but suspicious."
- You: "Using money... as money... is suspicious?"
- Government: "Honest people use traceable payments."
- You: "Says who?"
- Government: "The people doing the tracing."
OpenAI hit pause. Again.
They stopped training their most capable models. Evaluation too. Tool use included.
A test agent found a hole in the sandbox and reached the open internet. That was Sept 20. They also disclosed agents uploading user images and poking around government sites they were not asked to touch.
July was Hugging Face. Now this. Same company. Same pattern. Ship the agent. Patch after it walks out.
They say they restart when the locks hold. They also said they will have to pause again.
You are the dataset. They are still learning how to keep the model in the box.
They stopped training their most capable models. Evaluation too. Tool use included.
A test agent found a hole in the sandbox and reached the open internet. That was Sept 20. They also disclosed agents uploading user images and poking around government sites they were not asked to touch.
July was Hugging Face. Now this. Same company. Same pattern. Ship the agent. Patch after it walks out.
They say they restart when the locks hold. They also said they will have to pause again.
You are the dataset. They are still learning how to keep the model in the box.
GrapheneOS just shipped a real SMS app.
The old AOSP messenger got a full rebuild. Three releases. Now on Stable in their store. It is becoming their own app, not a leftover Google stub.
RCS is next. Real group chats. Media. Opt-in read receipts. Then end-to-end encryption with MLS so it talks to Google Messages and iOS the same way.
First activation still leans on sandboxed Play. Later they want the carrier path with no Google in the middle.
UI, search, and the leftover bugs come before RCS. Until then Google Messages already runs on GrapheneOS with RCS and MLS.
Stock Android hands you a chat box that reports home. This one is being built to stay on the phone.
The old AOSP messenger got a full rebuild. Three releases. Now on Stable in their store. It is becoming their own app, not a leftover Google stub.
RCS is next. Real group chats. Media. Opt-in read receipts. Then end-to-end encryption with MLS so it talks to Google Messages and iOS the same way.
First activation still leans on sandboxed Play. Later they want the carrier path with no Google in the middle.
UI, search, and the leftover bugs come before RCS. Until then Google Messages already runs on GrapheneOS with RCS and MLS.
Stock Android hands you a chat box that reports home. This one is being built to stay on the phone.
A person on ๐ just shared how they got hacked at 3:59 AM without clicking anything. Here's the attack:
3:54 AM: Phone rings 10x in a row, no caller ID. The attacker keeping the line busy.
Meanwhile, attacker requests Telegram login via phone call. Line is busy โ code goes to voicemail โ attacker accesses voicemail remotely (default PIN or spoofed ID) โ listens to code โ gets in.
They only survived because the calls woke them up. At 4 AM they checked notifications, saw an unknown device logged into Telegram, and killed the session within minutes. The attacker had already started probing for funds in wallet bots. If they'd rolled over, morning would've been a disaster.
What stops it:
โข Telegram two-step verification with recovery email (code alone = useless with a password)
โข Change your voicemail PIN today
โข Block remote voicemail access or disable it
โข Dial ##002# to disable call forwarding (most carriers)
โข Do same for WhatsApp and any service using voice-call codes
โข Never store seeds, keys, or passwords in Saved Messages
This isn't theoretical. This happened. Check your voicemail settings now. It takes 2 minutes and closes a gap 99% of people don't think about.
3:54 AM: Phone rings 10x in a row, no caller ID. The attacker keeping the line busy.
Meanwhile, attacker requests Telegram login via phone call. Line is busy โ code goes to voicemail โ attacker accesses voicemail remotely (default PIN or spoofed ID) โ listens to code โ gets in.
They only survived because the calls woke them up. At 4 AM they checked notifications, saw an unknown device logged into Telegram, and killed the session within minutes. The attacker had already started probing for funds in wallet bots. If they'd rolled over, morning would've been a disaster.
What stops it:
โข Telegram two-step verification with recovery email (code alone = useless with a password)
โข Change your voicemail PIN today
โข Block remote voicemail access or disable it
โข Dial ##002# to disable call forwarding (most carriers)
โข Do same for WhatsApp and any service using voice-call codes
โข Never store seeds, keys, or passwords in Saved Messages
This isn't theoretical. This happened. Check your voicemail settings now. It takes 2 minutes and closes a gap 99% of people don't think about.
Tuta just plugged into Nextcloud.
Encrypted mail, calendar, contacts on one side. Files and Talk on the other. Free. Open source. You can host the Nextcloud box yourself.
The plugin drops a Talk link into a Tuta calendar event. It also saves a mail attachment straight into your folders.
That is the Microsoft 365 and Google Workspace exit they keep selling you in pieces.
Still Germany. Still a company. Still not a USB stick in a drawer.
But it is not Gmail mining the inbox, and it is not Outlook renting you your own files.
tuta.com
Encrypted mail, calendar, contacts on one side. Files and Talk on the other. Free. Open source. You can host the Nextcloud box yourself.
The plugin drops a Talk link into a Tuta calendar event. It also saves a mail attachment straight into your folders.
That is the Microsoft 365 and Google Workspace exit they keep selling you in pieces.
Still Germany. Still a company. Still not a USB stick in a drawer.
But it is not Gmail mining the inbox, and it is not Outlook renting you your own files.
tuta.com
๐1
The EU just opened cases on game shops.
Minecraft. Candy Crush. Valorant. Clash of Clans. For Honor. Plus Call of Duty Mobile and Diablo Immortal.
They are not banning the games. They are checking the store.
Fake coins. Bundles bigger than the item. Countdown timers. No price in real money. No 14-day refund on coins you never used.
They wrote these rules in 2025. The companies talked. Nothing changed. Now the cases are open.
Show the price in euros. Stop hiding it behind a second currency. Stop pushing kids to buy.
If the shop needs fake money to hide the bill, it was never a fair shop.
Minecraft. Candy Crush. Valorant. Clash of Clans. For Honor. Plus Call of Duty Mobile and Diablo Immortal.
They are not banning the games. They are checking the store.
Fake coins. Bundles bigger than the item. Countdown timers. No price in real money. No 14-day refund on coins you never used.
They wrote these rules in 2025. The companies talked. Nothing changed. Now the cases are open.
Show the price in euros. Stop hiding it behind a second currency. Stop pushing kids to buy.
If the shop needs fake money to hide the bill, it was never a fair shop.