Two and a Half Bens

Canvas hack forces some Tennessee universities to push back finals. What happened? GoDaddy customer claims registrar transferred 27-year-old domain without any security checks British kids using fake mustaches, IDs, and VPNs to bypass online age checks, study finds Why is Claude always blackmailing people? Meta isn’t doing enough to keep kids off Facebook and Instagram, rules EU Claude-powered AI coding agent deletes entire company database in 9 seconds — backups zapped, after Cursor tool powered by Anthropic's Claude goes rogue California tech company Cloudflare to lay off more than 1,000 workers, cites AI As the most severe Linux threat in years surfaces, the world scrambles New Linux 'Dirty Frag' zero-day gives root on all major distros Critical vm2 sandbox bug lets attackers execute code on hosts Microsoft was worried OpenAI would run off to Amazon and ‘shit-talk’ Azure Microsoft's patch for a 0-day exploited by Russian spies fell short. Another Windows flaw is under attack Researchers gaslit Claude into giving instructions to build explosives Study finds even the best AI models lose money betting on soccer First US Integrated Humanoid Robot Factory To Build 100,000 NEO Robots By 2027 Microsoft Edge Stores Passwords In Plaintext In RAM Chrome forces 4Gb AI model into every device without permission AskJeeves shut down 1 May 2026 Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

Firestarter malware survives Cisco firewall updates, security patches Apple and Google Broke Their Own Rules by Promoting 'Nudify' Apps, Report Says Anthropic quietly pulls Claude Code from Pro plan and hands local model advocates their strongest argument yet You’re about to feel the AI money squeeze I Just Vibe Coded a Global Mass Surveillance Site in 2 Hours With OpenAI's Codex. It Was Terrifyingly Easy Chaotic Eclipse BlueHammer PoC for Windows Defender Exploited by Researchers to Escalate Privileges Disgruntled hacker drops second zero-day Windows Defender exploit just hours after Microsoft patches first one Chaotic Eclipse https://archive.ph/Qcp1g https://archive.ph/GkT3F https://www.tomshardware.com/software/macos/macos-has-a-49-7-day-networking-time-bomb-built-in-that-only-a-reboot-fixes-comparison-operation-on-unreliable-time-value-stops-machines-dead-in-their-tracks https://www.theverge.com/ai-artificial-intelligence/914672/the-ram-shortage-could-last-years https://arstechnica.com/security/2026/04/contrary-to-popular-superstition-aes-128-is-just-fine-in-a-post-quantum-world/ https://archive.ph/G5mEM Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

iOS 26.4 age verification is proving a disaster for some users — here's how to fix it or stop the update Apple age verification failing for some – here's what to try Apple asked to investigate after Jersey users hit by age-check barriers Dad stuck in support nightmare after teen lied about age on Discord Teenager’s Gemini mistake locks entire family out of Google accounts WireGuard VPN developer can't ship software updates after Microsoft locks account Developer of VeraCrypt encryption software says Windows users may face boot-up issues after Microsoft locked his account Microsoft suspends dev accounts for high-profile open source projects Action Required: Account Verification for Windows Hardware Program Begins October 16, 2025 After 16 years and $8 billion, the military’s new GPS software still doesn’t work Microsoft says poisoned AI acts normal until a trigger word makes it ‘blow up’ Max severity Flowise RCE vulnerability now exploited in attacks USB Cable Blockers Entire Claude Code CLI source code leaks thanks to exposed map file This Startup Is Hiring an ‘AI Bully.’ Should Your Company Do the Same? Microsoft Copilot is now injecting ads into pull requests on GitHub GitHub backs down, kills Copilot PR ‘tips’ after backlash America Dependent On Chinese Electrical Parts For AI Build-Out AI Models Lie, Cheat, and Steal to Protect Other Models From Being Deleted Amazon discontinuing support for older Kindles GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack  Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

GrapheneOS won't comply with age check laws for operating systems Linux Distros Resistance against Age-Verification Laws GitHub - BryanLunduke/DoesItAgeVerify: The age verification status of Open Source Operating Systems · GitHub Ageless Linux - Wikipedia THAT law and it's copies here and abroad Revert "userdb: add birthDate field to JSON user records (#40954)" by paramazo · Pull Request #41179 · systemd/systemd · GitHub Android developer verification: Balancing openness and choice with safety iCloud user learns ‘Hide My Email’ privacy does not apply to serious threats Apple discontinues the Mac Pro with no plans for future hardware The 2026 farm bill quietly hands big tech control over American farmland. Here’s the fine print An AI agent destroyed this coder’s entire database. He’s not the only one with a horror story The AI Dirty List Wikipedia:Signs of AI writing - Wikipedia The Story of EVi - NerdNextDoor's Blog The deadliest poison known to AI Tiny Township Fears Iran Drone Strikes Because of New Nuclear Weapons Datacenter COBOL Is the Asbestos of Programming Languages March Windows updates break Teams, OneDrive sign-ins Microsoft Confirms Samsung Galaxy Connect App Caused Windows 11 C: Drive Access Bug HackerOne discloses employee data breach after Navia hack This new FCC rule could upend the router market The Tech Bubble Might Finally Be Popping Security experts at RSAC keep calling AI stupid Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

You're paying AI companies a monthly subscription AI Can Now Unmask Anonymous Internet Users, New Study Finds US military reportedly used Claude in Iran strikes despite Trump’s ban FBI seeks victims of Steam games used to spread malware FBI seeks victims of Steam games used to spread malware Dev stunned by $82K Gemini bill after unknown API key thief goes to town OpenClaw has yet another major security flaw Wheatfield, Indiana Solar Farm Devastated by Severe Storm: Assessing the Aftermath - Energy News Beat NIPSCO releases statement after severe weather damaged Wheatfield solar farm 1 billion identity records exposed in ID verification data leak Mailinator Alternatives I wish I could push ChatGPT off a cliff’: professors scramble to save critical thinking in an age of AI She Came Out of the Bathroom Naked, Employee Says Meta sued over AI smart glasses' privacy concerns, after workers reviewed nudity, sex, and other footage A new app alerts you if someone nearby is wearing smart glasses Amazon orders 90-day reset after code mishaps cause millions of lost orders WhatsApp introduces parent-managed accounts for pre-teens California Law Forces Age-Tracking Into Every Operating System by 2027 MidnightBSD Bans Users in Brazil and California, Warns More Regions Could Follow I traced $2 billion in nonprofit grants and 45 states of lobbying records to figure out who's behind the age verification bills. upper-up/meta-lobbying-and-other-findings Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

Klaatu thread on OpenClaw Why Trying to Secure OpenClaw is Ridiculous OpenClaw AI agents targeted by infostealer malware for the first time An AI Agent Published a Hit Piece on Me Gatekeeping in Open Source: The Scott Shambaugh Story Editor’s Note: Retraction of article containing fabricated quotations - Ars Technica Microsoft AI CEO Warns Most White Collar Jobs Fully Automated "Within Next 12-18 Months"; Anthropic Fears Potential For 'Heinous Crimes' Waymo is asking DoorDash drivers to shut the doors of its self-driving cars As Pentagon Races to Deploy AI, Operational Challenges Highlight Risks As Pentagon Races to Deploy AI, Operational Challenges Highlight Risks Apple AI chief John Giannandrea is stepping down Accenture ‘links staff promotions to use of AI tools’ Ring cancels Flock deal after dystopian Super Bowl ad prompts mass outrage Microsoft Teams hit with a class action lawsuit for allegedly collecting voice data — violating Illinois biometric privacy laws TeamSpeak's Servers Overwhelmed By Mass Discord Exodus Password managers’ promise that they can’t see your vaults isn’t always true Amazon blames human employees for an AI coding agent's mistake YouTube Blocks Background Listening Workaround for Free Users Google Maps Is Now Less Useful If You’re Not Signed In Texas sues TP-Link over China links and security vulnerabilities Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

Windows 11 Notepad flaw let files execute silently via Markdown links Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users Microsoft’s Pivotal AI Product Is Running Into Big Problems It’s incredible. It’s terrifying. It’s OpenClaw. | 1Password From magic to malware: How OpenClaw's agent skills become an attack surface | 1Password Moltbook was peak AI theater Docker’s AI Assistant Vulnerability Exposes Critical Security Flaws in Containerization Platform Google recovers "deleted" Nest video in high-profile abduction case Surrender as a service: Microsoft unlocks BitLocker for feds 149 Million Usernames and Passwords Exposed by Unsecured Database Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

Saying "please" to ChatGPT costs OpenAI $millions, but Sam Altman says it's well-spent Treating AI like a Human OpenAI says its data centers will pay for their own energy and limit water usage Google Patches Zero-Click Gemini AI Flaw Leaking Workspace Data Lexus uses OTA update to disable remote start in Germany because climate authoritarianism Expired certificate completely breaks macOS Logitech apps, user customizations 840,000+ users hit by malicious browser extensions. Uninstall these ASAP! Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health" Ford is getting ready to put AI assistants in its cars Cisco’s Zero-Day RCE Nightmare: UC Flaw Sparks Urgent Patching Frenzy MSFT rolls out OOB updates to fix broken Reboot Tuesday LastPass Warns of Fake Maintenance Messages Targeting Users' Master Passwords GitLab patches major security flaw - here's what we know Follow SirBemrose, Pheonix, and PhoneBoy on Mastodon

Stolen LastPass backups enable crypto theft through 2025 Microsoft may soon allow IT admins to uninstall Copilot The Downside to Using AI for All Those Boring Tasks at Work Google: Don’t make “bite-sized” content for LLMs if you care about search rank This Holiday it is Time to Acknowledge Fraud at Palo Alto Networks AI Coding Assistants Are Getting Worse Newer models are more prone to silent but deadly failure modes MSFT quibbles on what AI behavior constitutes a "vulnerability" Microsoft pushes huge Copilot update with features like Clippy 2.0 ChatGPT falls to new data-pilfering attack as a vicious cycle in AI continues Texas gets TRO to prevent Samsung from collecting SmartTV data Stewart Cheifet, PBS host who chronicled the PC revolution, dies at 87

California startup's new fire-suppression system uses sound instead of water The Sound of Silence: How Waves Snuff a Flame Using Sound Waves to Put Out Fire: The Story of Two George Mason University Students | Emergent New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock Riot is forcing Valorant players to update their PC firmware to keep playing Our king, our priest, our feudal lord – how AI is taking us back to the dark ages Malicious npm package steals WhatsApp accounts and messages Fraudsters are using AI systems to forge art documents The scientist who helped create AI says it’s only ‘a matter of time’ before every single job is wiped out—even safer trade jobs like plumbing Microsoft wants to replace its entire C and C++ codebase, perhaps by 2030 Google Search Traffic Drops 25 Points To News Publishers In Two Years LangGrinch Vulnerability in LangChain Core Enables RCE via Prompt Injections From AI to analog, cybersecurity tabletop exercises look a little different this year Elon Musk Says He's Removing 'Sustainable' From Tesla's Mission Tesla is the most unreliable used car brand in America, even behind Jeep and Chrysler

React2Shell React2Shell: Decoding CVE-2025-55182 – The Silent Threat in React Server Components Block all AI browsers for the foreseeable future: Gartner Brave browser starts testing agentic AI mode for automated tasks AI will play an even bigger role in our love lives in 2026, experts say GA man arrested for destroying evidence by erasing his phone Python plan to boost software security foiled by Trump admin’s anti-DEI rules Over 10,000 Docker Hub images found leaking credentials, auth keys The Worst Thing About AI Is That People Can’t Shut Up About It Smart bed owners experience AWS outage nightmare as they're left sweating and stuck in upright position Linux founder Linus Torvalds defends Windows’ Blue Screens of Death Google DeepMind agrees to sweeping partnership with government: 'Incredible potential to drive a new era' ChatGPT's 'Adult Mode' Is Coming in 2026 FuckU-FuckMe Disney says Google AI infringes copyright “on a massive scale” New ConsentFix attack hijacks Microsoft accounts via Azure CLI

Decades-old ‘Finger’ protocol abused in ClickFix malware attacks Google tells employees it must double capacity every 6 months to meet AI demand How The $10 Trillion AI Bubble Pops Why can’t ChatGPT tell time? Americans are holding onto devices longer than ever and it’s costing the economy OpenAI discloses API customer data breach via Mixpanel vendor hack What to know about a recent Mixpanel security incident Flights disrupted after Airbus discovers intense sun radiation could impact flight control data Cloudflare out for 6hrs - internet goes dark AWS outage in October 2025 AWS denies global outage, blames ‘inaccurate speculation’ after Fortnite, Arc Raiders and other platforms suffer simultaneous outages Experts warn of ‘ChatGPT psychosis’ among users of AI chatbots Fake “Windows Update” screen fuels new wave of ClickFix attacks

Hackers found a way to weaponize CAPTCHA pages, and it's incredibly effective 'Orthosomnia' Might Be Ruining Your Sleep. Here's What You Should Know. Hackers turn Cisco and Citrix zero-days into a malware nightmare Why Windows sucks and how to fix it, according to a former Microsoft engineer MSFT Teams feature to block screen capture Unsurprisingly, X users locked out in the cold after botched authentication switch Google is rolling out conversational shopping—and ads—in AI Mode search DoorDash hit by new data breach in October exposing user information Original Mac calculator design came from letting Steve Jobs play with menus for 10 minutes

Researchers show that training on “junk data” can lead to LLM “brain rot” When AI writes code, humans clean up the mess Digital ID is now less about illegal working, more about rummaging through drawers BRUSH EXPLOIT CAN CAUSE ANY CHROMIUM BROWSER TO COLLAPSE IN 15-60 SECONDS EY EXPOSES 4TB SQL SERVER BACKUP PUBLICLY ON MICROSOFT AZURE Meet the new Clippy: Microsoft unveils Copilot's "Mico" avatar Here’s How the AI Crash Happens Why AI Breaks Bad Study: AI Models Trained On Clickbait Slop Result In AI ‘Brain Rot,’ ‘Hostility’ AI enabled browsers are a security nightmare

Pheonix and PhoneBoy are joined by DameBemrose and discuss the latest AI bullshit, Microsoft Bugs, F5's Secuity Breach, and More!

Walmart CEO expects AI will 'change literally every job' - not just engineering | ZDNET Chatbots Play With Your Emotions to Avoid Saying Goodbye Self-driving Waymo pulled over for illegal U-turn, officer has no one to ticket Three Ai agents realize they're all AI, then switch to a Secret Language… Abusing Notion's AI Agent for Data Theft This app will pay you $30/day to record your phone calls for AI Your budget Android phone might be spying on you Instead of improving productivity, AI is creating ‘workslop’ The U.K. keeps threatening to censor American tech companies Imgur blocks UK users after data watchdog signals possible fine Fire breaks out at Chevron's refinery in California The UK’s war on Apple encryption is back Intel and AMD trusted enclaves, a foundation for network security, fall to physical attacks The retro technology connecting kids to their friends Kiss reality goodbye: AI-generated social media has arrived

The Bens talk AI everywhere we don't want it to be, CISA wants to pwn CVE, self-replcating worms thanks to npm, and more!

The Bens discuss the Salesloft Breach, Perl, More AI flaws, trademarking telepathy, infostealer porn, the cult of cryptocurrency, and more!

Your favorite Bens get discuss their objections to AI, and yet somehow find a story that isn't so bad.

The Bens discuss the latest Microsoft, AI and car bullshit, pointless phishing training, EV adoption, and more!

Call Center workers complain about being called a robot after acting like a robot on Yahoo and Slashdot Reddit is the source of LLM hallucinations Carrot isn't working for Win11. MSFT gets the stick on PCWorld and Techspot Man goes on sodium bromide diet on ChatGPT's suggestion; starts hallucinating alongside the AI Why do we still think it's a good idea to support formats that you can embed code in? Moving all gov't agency data into OpenAI LLMs. I see no security problems with this Anthropic AI goes rogue when trying to run a vending machine Courts aren't ready for the wave of AI-generated evidence hitting trials SharePoint vulnerability with 9.8 severity rating under exploit across globe ChatGPT Hallucinated a Feature, Forcing Human Developers to Add It New Koske Linux malware hides in cute panda images Lovense sex toy app flaw leaks private user email addresses

Pheonix, PhoneBoy, and SirBemrose talk about Windows Security, Vulnernable Hardware, stupid programming tricks, and hiding malware in DNS

Microsoft only fixing one of two SecureBoot Exploits Apple’s Kill Switch Would Completely Change Your Next iPhone MIT brain scans suggest that using GenAI tools reduces cognitive activity LG TVs’ integrated ads get more personal with tech that analyzes viewer emotions <a href=" https://www.404media.co/cameras-exposed-to-the-internet-report/">40,000 Cameras, From Bird Feeders to Baby Monitors, Exposed to the Internet Smart TV OS owners face “constant conflict” between privacy, advertiser demands Pope Leo makes AI’s threat to humanity a signature issue Creators say they didn’t know Google uses YouTube to train AI