riQQ's recent activity

  1. Comment on Details for the Motorola Signature 27 with GrapheneOS support in ~tech

    riQQ
    Link

    Motorola’s first GrapheneOS-supported device, built for privacy and peace of mind

    Data privacy matters, and Motorola continues to build on its commitment to security with ThinkShield®, which helps protect users from the factory to the phone, and Moto Secure, a centralized destination for managing privacy and security features.

    Expanding that commitment even further, the motorola signature 27 will kickstart a new era of smartphone privacy and security. It will be Motorola’s first device to support GrapheneOS, a hardened, open-source operating system based on the Android Open Source Project. Developed in partnership with the GrapheneOS Foundation, the leading nonprofit in advanced mobile security, the device reflects Motorola’s commitment to bringing cutting-edge security to everyday users across the globe.

    That commitment runs deeper than software: GrapheneOS sets demanding requirements for the hardware it runs on and how it’s kept updated, and the motorola signature 27 is built to meet them. The device is Motorola’s first with a performant implementation of ARM Memory Tagging Extension, a new hardware caching mechanism for helping ensure system integrity and privacy. More details on it will be shared in the coming months.

    Availability

    Motorola signature 27 will be available in markets worldwide in the coming months, with a starting MSRP of $1,599.

    1 vote

  3. Comment on Cyberattack disrupts blood storage refrigeration systems in France in ~tech

    riQQ
    Link Parent
    At least now, but something as important as blood reserves should be secured better.

    At least now, but something as important as blood reserves should be secured better.

    7 votes

  4. Comment on Cyberattack disrupts blood storage refrigeration systems in France in ~tech

    riQQ
    Link
    After the supermarket refrigeration systems now the blood storage refrigeration systems were hit. Previously...

    After the supermarket refrigeration systems now the blood storage refrigeration systems were hit.

    France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three of its facilities, threatening stored blood products.

    The French Blood Establishment (Établissement français du sang or EFS), which manages blood collection, processing, and distribution across France, said the incident occurred on November 2 and affected systems used to monitor and control cold-storage chambers.

    According to a statement published on November 3, EFS was not directly targeted in the cyberattack, but was instead its refrigeration supplier.

    While EFS has not named the affected supplier, European refrigeration equipment provider Coolworld Rentals confirmed in a statement that a cybersecurity incident involving remote monitoring software had affected a limited number of its refrigeration units.

    Previously

    5 votes

  6. Comment on NIKKE PC game launcher hacked to spread remote access, data-stealing malware in ~games

    riQQ
    (edited )
    Link
    Posted on purpose in ~games to reach more potentially affected And from PCMag

    Posted on purpose in ~games to reach more potentially affected

    The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware capable of stealing credentials and cryptocurrency wallet data.

    According to a notice published on X, a client update was issued on November 4 at 02:30 (UTC +9) to address the issue.

    "We have identified an issue indicating that the PC Launcher's script files may have been tampered with by a third party," reads the statement on X.

    Update 5/11 - Nikke has released an update with instructions on how to check computers for compromise.

    And from PCMag

    This comes after an internet user named MotherSphere documented evidence about the malware circulating through the game's launcher. “From Oct 23 at the latest, opening the launcher could install a remote-control agent: while the launcher was open, the attacker could run any command on your machine, read any file and take screenshots,” the report warned.

    6 votes

  8. Comment on Supermarkets freezers across Europe hit by second suspected cyber-attack in ~tech

  9. Comment on /r/Seattle mods find Archive.today injected malware links into archived page in ~tech

    riQQ
    (edited )
    Link
    This was also discussed on HackerNews and seemed to be affecting all PDF links that don't have an archived version of the PDF: https://news.ycombinator.com/item?id=50281026

    This was also discussed on HackerNews and seemed to be affecting all PDF links that don't have an archived version of the PDF:

    https://news.ycombinator.com/item?id=50281026

    16 votes

  10. Comment on The last proof of human craft: forging a Microsoft Edge full chain with logic bugs only! in ~comp

    riQQ
    Link

    Anyway, this is what I built for Pwn2Own Berlin 2026 — a completely handmade, logic-only Microsoft Edge Full Chain, with no memory corruption, and no AI at all! 🔥

    The whole chain is made up of five bugs and two Windows features. I have also shared the whole bug-hunting and chaining process at this year’s HITCON and Hexacon, plus some fun stories along the way. You can check the slides here!

    Also, maybe everyone thinks LLMs can already pwn everything in the AI era, so something made entirely by hand somehow feels a bit more precious. That might also be why this chain was nominated for this year’s Pwnie Awards and won the Epic Achievement award. 🎉

    8 votes

  12. Comment on Why is this fingerprinting script creating bioweapons? in ~comp

    riQQ
    Link

    I've always had a fascination with reverse-engineering browser fingerprinting scripts. Most of my time has been spent looking at the usual suspects (popular fingerprinting libraries like FingerprintJS and more sophisticated scripts used by anti-bots like Cloudflare Turnstile, Akamai, and others).

    At some point, I wanted to know what else was out there. I had an idea: What if I crawled the web and intercepted fingerprinting-related browser API calls and mapped it all?

    4 votes

  14. Comment on Exposing AdFection - how Discover-Tech turned targeted ads into a pipeline for zero-click mercenary spyware in ~tech

    riQQ
    (edited )
    Link
    There's also an executive summary by the citizen lab.

    This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Candiru’s spyware. We also uncover Discover-Tech, and show how the company helps mercenary surveillance vendors track and hack devices around the world.

    A separate threat actor we call DARK CARTOGRAPHER is using Discover-Tech’s infrastructure to exploit vulnerabilities across numerous mobile carriers to link device advertising IDs with phone numbers, mass-deanonymizing internet users. We will detail our findings concerning this threat actor in a separate forthcoming report.

    Discover-Tech’s mass abuse, privacy invasion, and facilitation for mercenary spyware attacks illustrates structural flaws with the online advertising system, which failed to detect or prevent the abuse documented in this report.

    There's also an executive summary by the citizen lab.

    10 votes

  16. Comment on Fridges in French supermarkets hit by cyber attack in ~tech

  17. Comment on Fridges in French supermarkets hit by cyber attack in ~tech

    riQQ
    Link

    Hundreds of French supermarkets have been hit by a cyber attack that caused their fridges and freezers to heat up, spoiling fresh and frozen food estimated to be worth millions of euros.

    Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected.

    8 votes

  19. Comment on What programming/technical projects have you been working on? in ~comp

  20. Comment on End of development of Orion for Linux and Windows in ~tech

    riQQ
    Link

    We are ending development of Orion for Linux and Windows, and we're open-sourcing both so the community can carry them forward. Kagi is stepping back from developing these platforms directly so our team can put more focus on Orion for macOS and iOS.

    Linux: The current Linux Beta will keep working, but it will stop receiving updates from Kagi after October 2, 2026. We don't recommend using it as your main browser.

    Windows: We had planned to launch Orion for Windows in late 2026. That release won't come from Kagi. Instead, the code will be available for the community to build on. If you signed up for the Windows newsletter, this will be the last update you receive from that list.

    5 votes