searchlight institute director of product marketing
New York, NY
Joined February 2018
- Tweets26.8K
- Following1.2K
- Followers836
- Likes47.4K
john brown’s buddy retweeted
Breaking: Donald Trump was "an active participant in Jeffrey Epstein’s abuse of young women in the mid-to-late 1990s,” according to a report issued today by Dems on the House Judiciary Committee. The report includes one new rape allegation against Trump, and calls for a special investigation of the Trump administration's cover-up of Epstein's crimes.
john brown’s buddy retweeted
🚨 URGENTE 🚨 Mais imagens do massacre acontecendo essa noite em Rio Verde, Goiás, mostram um homem morto e uma Mulher Trans espancada até a morte por Bolsonaristas. Acionem : @LulaOficial @AndreJanonesMG a mídia está ignorando
Zionists seeing an ad criticizing Israel and hearing the word “Jews” must be a form of schizophrenia.
john brown’s buddy retweeted
Lula no venció a Bolsonaro, él era solo un títere, le ganó a Trump, a Meta, a los algoritmos, a la tremenda ola de derecha que pretende apoderarse de Latinoamérica, a la iglesia evangélica, a las élites.
La victoria de hoy pasa a la historia. Lula un grande.
john brown’s buddy retweeted
Lula literalmente dando vuelva el resultado
john brown’s buddy retweeted
We finally have an explanation for “Facebook is listening to me through my phone”. They’d never do that (and it’s not really possible).
Turns out literally everyone else was — and then selling that to ad data brokers.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
john brown’s buddy retweeted
Buried on page 30 of 'Sir' David Bellend's report into antisemitism in schools in the UK it explicitly says there hasn't been a rise in antisemitism, only in anti-Israel sentiment. Astonishingly fraudulent crisis/debate, all to shield a genocidal state
john brown’s buddy retweeted
The government's antisemitism in schools report is a travesty.
It's riddled with errors, distortions and contradictions.
And it will be used to silence people over Palestine 👇
zeteo.uk/p/debunked-the-anti…
john brown’s buddy retweeted
Aside from the shocking substance of this story, what's amazing is how it was unearthed by Cole. The short version: The Russians were able to penetrate Jared Kushner's iPhone and extract screenshots and data. Then, a Russian intel official was captured by Dutch intelligence (!) and flipped. The Dutch believed Kushner may have been acting on behalf of Russia, so pursued him as an intel target and were able to get into his phone.
They did not find any evidence of Russian collusion, instead they watched him moving hundreds of millions of dollars from slush funds created by Saudi Arabia and the UAE, one of them housed in Israel's central bank.
Incredible reporting, and if Democrats have any sense, they will pull on these threads and learn a lot more about this money.
Explosive story many years in the making, now out in Vanity Fair by Matthew Cole (who will be on Breaking Points next week, and publishing soon in @DropSiteNews):
Saudi Arabia and the UAE set up multi-billion slush funds for Jared Kushner to use.
Iran-Contra 2 here (except with Iran-Contra, at least the US got some hostages released. Not clear what we got out of this one.)
john brown’s buddy retweeted
Explosive story many years in the making, now out in Vanity Fair by Matthew Cole (who will be on Breaking Points next week, and publishing soon in @DropSiteNews):
Saudi Arabia and the UAE set up multi-billion slush funds for Jared Kushner to use.
Iran-Contra 2 here (except with Iran-Contra, at least the US got some hostages released. Not clear what we got out of this one.)
john brown’s buddy retweeted
Really clever demonstration of how quickly things can become fucked with “agents” everywhere
john brown’s buddy retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
john brown’s buddy retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
john brown’s buddy retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
john brown’s buddy retweeted
EA was bought by a private equity firm a couple of years ago.
I need every single chud gamer to hear this: this is what is ACTUALLY ruining gaming—not “DEI” or “wokeness.”
Private equity wrings out industries for profit—sacrificing quality in the process. Now we won’t get ME4.
EA is shutting down BioWare, the studio behind ‘Dragon Age’ and ‘Mass Effect’.
The next ‘Mass Effect’ game has been cancelled as a result.
(Source: bloomberg.com/news/articles/…)
john brown’s buddy retweeted
Encore des nouvelles plutôt rassurantes de l'hôtel de Ville de Limoges. Je viens de parler avec Muriel Laskar, adjointe au patrimoine (oui, à Limoges, contrairement à Paris, ils ont un adjoint au patrimoine...) : le salon bleu et son plafond n'ont pas brûlé (1/3)
0.4% of the population, 100% of the oxygen in the room
Teachers to be banned from wearing Palestine badges as review finds 3 in 5 Jewish pupils have faced antisemitism at school trib.al/00Lztkq
john brown’s buddy retweeted
ISRAEL is behind the psyop blaming the FRENCH protests on Muslims. Zionists are on national television spreading lies about synagogues being burned but not mosques. All the large hasbara accounts are parroting this with identical posts and scripts. Stay informed. Recognise what psyops and propaganda look like.
