itintheory

Huh. I remember playing a very similar game on Apple II, but I believe it had a Dutch / European theme, and was called something like "Ooperhoofd". I can't find any reference to it online. Maybe it was a 'modded' version of this? That one, and Odell Lake[0] were the best disks in the library computer lab in middle school.

[0] https://classicreload.com/apple2-odell-lake.html

For some reason this made me think of Pirates Constructible Strategy Game [0]

[0]: https://en.wikipedia.org/wiki/Pirates_Constructible_Strategy...

They should have called this "WishingWell". I'm wishing them well, but some of these projects are so over the top pie-in-the-sky silly, and funded with $0.25.

Care to share any specifics?

Same. I have used the controller as a container. Take a backup of the configuration and you don't even need to keep it running. I returned to a network after two years, fired up a controller, imported the config backup and g2g

Gonna need a description of the correct way to do these things. I have a feeling I'll be one of today's lucky 10,000.

It has a name in the security industry, Insecure Direct Object Reference (IDOR) [1]. Somewhat related to Path Traversal [2]. Unfortunately CFAA is very broad and can be (mis)interpreted in wild ways.

[1] https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Dire... [2] https://owasp.org/www-community/attacks/Path_Traversal

There are many good options. [1]

[1] https://news.ycombinator.com/item?id=48321089

I was thinking along similar lines to what you've suggested here, but then I considered how many VPS might be configured by folks following some random web tutorial, to set up their LAMP stack (or whatever), that end up doing something like what was described.

This feels like using sudo is just inherently unsafe.

Parallel construction is when they use illegally obtained evidence to construct a separate set of ostensibly legitimate evidence. Like, an illegal wiretap might lead to someone being in the right place at the right time to witness a crime.

<always has been meme>

While containers have some useful properties, it was never intended to be, and never really functioned as a strict security boundary. We've duct-taped around that, and it's reasonably good now, but that only goes so far.

I'm surprised that this has apparently been ongoing for 6-7 months. I thought outfits like GitGuardian, or solo researchers with trufflehog (etc) would find leaked keys in days, not months. Maybe this is related to the major growth of github? The scanners can't keep up?

Yep, that's the advice from AWS for the previous set of vulnerabilities:

https://aws.amazon.com/security/security-bulletins/2026-027-...

That one also includes disabling user namespaces. Could be problematic if they're in use.

Sounds like this one is in the same kernel modules as dirtyfrag, so the existing mitigations (if in place) are sufficient.

Did we read different articles? That's right in there...

My interpretation would be that cars are necessary to live in places where urban design assumes that we'll use cars to get around. Many cities are designed this way.

Similarly, phones are required now for some activities, like online banking. First it was an option, then it became the norm.

> Currently implemented with support for 7 popular games.

The enhancement engine sounds great, but it'd be nice to know which games it's for...

This definitely happens. Last time Dead & Company came to town, it was simulcast in the local movie theater. Tickets to the show were only available on a raffle basis since the venue didn't hold nearly enough people.

Then again, the Dead were also pioneers of permitting and encouraging the bootleg scene.

Anyone have suggestions for backing up Google Drive + local files? I keep reading the horror stories about people getting locked out of cloud services, and worry about my 20 years of history stored in Drive. Less worried about local files which are sync'd to an external disk, but it'd be nice to have something in place for everything.

I saw an entire physical switch configured for bridging VLANs. It was even labeled as such. 802.1q is hard and confusing if you don't know what you're doing.

Where are you finding cheap WiiUs? I've wanted to pick one up for a while and find them to be exorbitantly expensive, especially the controllers.

> https://magicshifter.net/

I get a cert mismatch on that site, and when clicking the shop link I end up at https://hackerspaceshop.com/ which is advertising an online fax service.

It's 2026, and these PLCs etc. are directly connected to the internet? I think that's the most surprising aspect here.

> But it doesn't extend to even other people's kids!

I think it's a question of exposure and tolerance, otherwise it'd be much harder for daycare workers, for instance.

Every response to the original post calls it out as being factually incorrect...

This threat actor is also using Internet Computer Protocol (ICP) "Canisters" to deliver payloads. I'm not too familiar with the project, but I'm not sure blocking domains in DNS would help there.

Thanks for putting this together. I've been seeing the name TeamPCP pop up all over, but hadn't seen everything in one place.

That's between you and git.

Why does it have to have AI? Ugh.