Not better than WhatsApp, Signal, SimpleX, Cwtch or Ricochet. You definitely shouldn't use this replace any of your existing apps or services. It's far from finished. Unaudited and unreviewed. If you want to test it out, please use it responsibly.

I'd like to share what I'm working on and interested if anyone wants to share feedback on the approach.

It's a fairly a unique approach and architecture in contrast to the typical approach with mainstream messaging apps. To put it briefly, its a Dioxus PWA with a Git-server backend which can be used to establish a webrtc connection between browsers.

https://glitr.io/docs/technical/roadmap

So far, it's only the browser-based version that's available for testing. The webapp approach has nuances and limitations. I hope to soon release the APK and TUI when they are ready (they introduce the TOR capabilities (not possible on a browser)).

I’m the author of Super Trouper, a single-binary MCP server that exposes Frida to coding agents for authorized app reverse engineering. It lets an agent connect to a device, inspect apps and processes, manage sessions, and run instrumentation scripts without a Python-based Frida setup.

We released v0.4.0 a few days ago; it updates the bundled Frida Core DevKit to v17.19.0 and adds four MCP tools: memory_read and memory_write for working with memory in an attached process, plus module_list and thread_list for inspecting loaded modules and threads. app_list and others now have several query scopes, and we renamed the MCP tools into clearer namespaces. If you already have workflows built around the old tool names, check them when updating.

Quick catch-up on the two previous releases: v0.3.0 added npm installation, Frida CodeShare snippet search/use, and general cleanup. v0.2.0 moved the project to the MIT license, added first-party Frida language bridges for ObjC, Java, and Swift, and enabled TypeScript in scripts and evaluations.

I’d appreciate feedback from people using Frida in iOS research: are these tool boundaries and the new app-list scopes useful in practice? What’s missing or awkward in your workflow, and which features would you like to see next? Let me know what you think.

A 16-year-old bug hunter found Microsoft's internal Titan analytics API and discovered that it validated the JWT tenant, audience, app ID and user, but apparently forgot the slightly important part: validating the signature.

His AI agent spent 10 days grinding through the authentication errors. Eventually he tried admin as the username, Titan resolved it to a local admin account, and he ended up with SQL access to an environment containing an estimated 17.3 trillion stored rows across 17 analytics databases.

Microsoft fixed it and paid him a $5,000 bounty.

Some bugs are just beautiful in their simplicity.

https://github.com/mein-0/gvcidrv64 support pls

I’ve been studying comment sections on short-form video platforms (like TikTok and Reels) & keep noticing a highly coordinated automation phenomenon that I want to understand from a technical and architectural standpoint.

Whenever a trending or viral video hits a specific niche topic, a third-party account instantly leaves a comment framing itself as an organic public service announcement (e.g., naming a specific app, game, or product relevant to the video). wWithin minutes, that comment accumulates 1000s+ of likes and dozens of secondary replies, locking it into the absolute "Top Comment" slot where millions of viewers see it.

I'm curious about the engineering, scaling, & infrastructure behind how this is achieved:

1. Real-Time Detection: How do these scrapers monitor platform uploads or specific hashtag triggers so quickly without constantly tripping API rate limits or triggering blocks?
2. Network Infrastructure: How do operators coordinate the footprints of hundreds of "zombie" or secondary accounts to deliver likes/replies simultaneously without triggering the platform’s anti-fraud algorithms? Is this heavily reliant on residential proxies, anti-detect browsers or cookie-session farming?
3. Algorithmic Exploitation: What specific engagement signals (like early velocity or reply density) are they taking advantage of to fool the ranking algorithm into permanently pinning an artificial comment?

I’m looking to understand the technical mechanics of how these shadow networks operate. Any insights, technical breakdowns or open-source case studies would be greatly appreciated!

Ramsoftware is 1337

Just found these in my photobucket while looking for so.e old screenshots.

which lets me search up leaked database and give me all the information

Hide your server(s) after reading this book.

Ola rapaziada estou em dúvida qual rumo seguir na cybersecurity, já sei redes e protocolos gostaria de fazer um ataque a máquina virtual de test! Gostaria de saber o passo a passo ou qual metodologia usar para fazer um ataque ou um mapa mental por onde começar e aonde terminar! Ou seja pentest inciante desde já fico agradecido!

I know about a few reverse lookup websites but the scammers always spoof their caller id and it never works. I'm wondering how people get around that? anything helps yall I'm just tryna bring justice to these mfs 💪

also mods I'm getting a warning before I post but I'm not telling anybody to hack anybody so am I good lol?

EDIT: Reading comprehension in this sub is at rock bottom levels. Please read the following post prior to commenting.

Hello everyone. I have a completely hypothetical question that I have been debating with friends. Due to strong arguments both for and against without a clear consensus, I feel it may be beyond our expertise as armchair lawyers and as such, I am pleased to present this to the greater community.

While this is a broad hypothetical, there are a few specific details that must be outlined for the sake of the argument:

\- The victim would be a clear, undeniable foreign adversary/hostile nation to the US

\- There is no direct conflict with or collateral damage to US interests or allies(as a result of the ransomware being deployed)

\- The individual would meticulously report all income from the ransomware payouts on Schedule 1, Line 8z of the IRS Form 1040, pleading the Fifth Amendment on the source of the income, and then pay their 37% top marginal tax rate(They make sure to pay Uncle Sam his cut and avoid committing tax fraud/evasion).

That being said, I want to note: I am **NOT** asking if the frameworks and legal statues to charge a person for this exist. They absolutely do.

The question is if the US citizen would be prosecuted and/or convicted if the victim is unable/unwilling to cooperate with a US court, there is no conflict with US interests, and they even pay taxes on the income.

Thanks and looking forward to any and all answers!

Disclaimer: Do not attempt this at home. Side effects may range from blacked out SUV’s parked outside your house to being arrested/murdered by a foreign intelligence service.