Mastodawn

The Bone Collector 4d ago

Viss Jun 16

ooof

The Bone Collector Jun 6

Brian McFadden Jun 5

"Be stupid" is an easier motto to live by than "Don't be evil." https://patreon.com/BrianMcFadden

The Bone Collector Jun 3

Steven Murdoch Jun 2

For 19 years, GPS satellites have secretly broadcast a “numbers station” in their public signals. We decoded 12M messages: a 2011 flash where 31 of 32 satellites flipped in hours, “ghost” substrings repeating years apart, and a “TEXT” prefix spreading now. https://lsc-pagepro.mydigitalpublication.com/publication/?i=865273&p=62&view=issueViewer

The Bone Collector May 30

Laura

May 29

#Meme #Humour

The Bone Collector May 22

Viss May 20

https://oddguan.com/blog/second-time-same-sandbox-anthropic-claude-code-network-allowlist-bypass-data-exfiltration/

if you use claude code
anywhere
for anything

do not run it where there are secrets or sensitive files. if claude code has access to things, this is just another way it can ruin your day/week/month/year

Second Time, Same Sandbox: Another Anthropic Claude Code Network Sandbox Bypass Enables Data Exfiltration

For the second time in five months, Anthropic Claude Code's network sandbox lets a process inside reach hosts the user's policy says to block, and exfiltrate any data the process touches. Every Claude Code release from 2.0.24 (sandbox GA on 2025-10-20) through 2.1.89 was vulnerable to a SOCKS5 hostname null-byte injection. About 5.5 months and ~130 versions, including the release that silently fixed the first sandbox bypass. Both findings ended in a silent fix and no Claude Code security advisory.

Aonan Guan

The Bone Collector May 14

Show thread

Jonathan Doughty May 13

@jik I wonder if it is related to https://infosec.exchange/@moopsy/116557352491390721 seen yesterday, though I’ve seen no other related news yet. Glad I never trusted mine to access from the network via quickconnect

The Bone Collector (@[email protected])

Anyone else seeing a torrent of auth attempts via quickconnect[.]to their #synology NAS. Looks kinda brute-forcey Maybe check your logs, and make sure MFA is enabled. cc: @ifin #threatintel

Infosec Exchange

The Bone Collector May 11

Anyone else seeing a torrent of auth attempts via quickconnect[.]to their #synology NAS. Looks kinda brute-forcey

Maybe check your logs, and make sure MFA is enabled.

cc: @ifin

#threatintel

The Bone Collector May 9

Viss May 9

i still think it was a crime that lower decks got cancelled

The Bone Collector May 3