I built a new tool called Frag. A CSS-only token exfiltration tool. No JavaScript needed. Inject a stylesheet, steal the token. Uses De Bruijn graphs to reconstruct secrets from overlapping CSS attribute selector fragments. Built on research by me and Alex.
Here’s some news footage of a Microsoft AI data centre site in Amsterdam being overrun today. Protesters jumped over a fence to get in.
Un peu de brumes
AMSTERDAM, Nov 6 (Reuters) - Protesters broke into a Microsoft data centre site in Amsterdam on Friday.
The incident occurred during a demonstration against the facility on the outskirts of the Dutch capital.
https://www.reuters.com/technology/protesters-enter-microsoft-data-centre-site-amsterdam-2026-11-06/
"Dutch" has been added to the OpSec Failures page.
Direct file: https://darkwebinformer.com/opsec-failures/#file-dutch
🚨🇮🇹 Initial Access: Italian Industrial Manufacturer
A threat actor is advertising WordPress admin panel access to an unnamed Italian industrial manufacturing company reportedly generating around €2M in revenue.
The actor shared a screenshot of the WordPress dashboard as alleged proof of access and is asking $80.
Claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
I wanna talk about the political movement of the Open Source community. If you spend enough time on fedi, you surely will have heard *plenty* of criticisms of what's going on in Open Source, and rightfully so.
So I'm curious, what do we think the Open Source community *should be doing* in order to achieve important progressive and anti-authoritarian goals? What should the next generation of programmers be thinking of and working on in this space?
A special rule: You're only allowed to say "don't X" if you have at least as many "do Y" recommendations. Preferably, I'd like to see more do's than don't's.
Boosts welcome :cyber_boost_request:
In honor of Elon reportedly canning the Cybertruck, here are some key insights from the original HN announcement thread
Well done Samsung 🤨
They’re withdrawing #SmartThings API access with only 30 days notice unless I move to a $4.99pcm developer account.
So it looks like I’ll lose access to my Samsung devices in #homeAssistant 😒
There’s an integration called “localthings”, but it doesn’t support media devices like TVs and speakers (yet, the dev’s working on it apparently):
