Arthma Techkra | artist. designer. drummer. director. motion designer | https://xitter.cf/t.co/TlXeeXz3Rc | drummer : @tarimosi_ | ART & NFT : @arttech_nft
Earthship
Joined January 2009
- Tweets19.3K
- Following352
- Followers1.5K
- Likes16.7K
art:tech retweeted
Got a cheap embroidery machine off amazon for $300 where the biggest complaint is the mandatory $12/mo app that you’re forced to use. Had ChatGPT create its own app that communicates with the machine. Generative art patches incoming!
art:tech retweeted
Claude Code found every photo i "permanently deleted" from my iPhone.
almost 4 years of photos and videos sitting in a hidden cache on my
device. any app with file access can read them.
plugged my iPhone into my MacBook for a backup. had Claude Code running
a security scan from my last post. it flagged something i never asked
it to check. a directory called PhotoData/Thumbnails with over 152,000
files. photos, videos, screenshots. all stuff i deleted.
2022. 2023. 2024. 2025. photos i deleted within a second of taking them.
photos i went into Recently Deleted and cleared manually. photos i
deleted twice because i didn't trust the first time. all still there.
what was sitting in that cache:
a passport photo for a visa application in 2023
bank app screenshots with full account numbers visible
private photos i sent someone and deleted the same night after a breakup
a crypto seed phrase screenshot i took "for a minute" in 2022
my ID and credit card side by side, deleted 10 seconds later
my ex's private instagram stories i saved and "permanently deleted"
in 2024
152,417 files. some at full resolution. all organized by date going
back to 2021.
when you delete a photo on iPhone, iOS removes it from your camera roll
and your Recently Deleted folder. but it keeps a compressed copy in a
Spotlight search index cache. that's how your phone finds photos when
you type a word in search. Apple never clears it. not after 30 days.
not after a year. they told you it was permanently deleted. it wasn't.
checked which apps on my phone had Files and Folders access. 19 apps.
weather apps. QR scanners. PDF readers. a flashlight app from 2021.
any of them could've been reading every photo i ever "deleted" this
whole time.
went from 19 apps to 3 in about a minute.
full step by step is below. takes 2 minutes. bookmark it so you don't
lose it and send it to anyone with an iPhone.
I CHECK EVERY AIRBNB WIFI WITH CLAUDE CODE NOW
takes 2 minutes and it's kind of addictive
check into a place, join the wifi, open claude code and ask "list every device on this network and what each one is"
most of it is boring. the tv, a couple of smart plugs, the router. but you see the whole list, and the one box that doesn't belong stands out fast
last trip one device was from a company that only makes ip cameras. didn't love that
how to do it yourself
1. join the wifi, open claude code, paste the prompt in the first reply
2. it lists every device and flags anything that looks like a camera or a mic
3. if something looks off, lights out and run your phone flashlight over the smoke detectors, clocks and chargers. a lens glints back
you won't remember this at 1am in a strange room. bookmark it now
this only sees your own network, nothing else. just a traveler checking the room they rented
ever found something weird in a rental? what did you use to check
art:tech retweeted
Claude just found 1,244 photos of my 19y/o sister on a random server
She never posted a single one of them…
I was making a birthday post for her and reverse-searched an old photo of us from last Christmas
Google found it on a site I'd never heard of. Just an open folder, no password
Inside the folder - 4 subfolders:
/gallery - 2,312 photos, sorted by date
/screens - 1,140 screenshots of her bank app and WhatsApp
/docs - her ID card, front and back
/new - empty
I refreshed the page
/new - 1 file
A selfie. Taken 4 minutes ago
I called her. She had no idea
I asked if I could check her phone. She said yes
I plugged her Samsung into my laptop, turned on USB debugging and gave Claude Opus 5.5 one prompt:
"Find whatever is sending this phone's photos to the internet"
It scanned 214 apps in 90 seconds and stopped on 1
"System Sync"
No icon. Hidden from the app drawer. Not from the Play Store
Every permission it had, and what it used it for:
accessibility → to read every screen she opened
all photos → to copy her whole gallery
mic + SMS + location → to know where she was and who she talked to
device admin → so the "Uninstall" button stayed grey
Then Opus decompiled the app and rebuilt its history:
Day 1 - installed by hand, on her unlocked phone
Day 2 - full gallery uploaded, 1,244 photos
Day 3 - first screenshot of her bank app
Day 41 - 1.8 GB sent, mostly between 1am and 5am
And one line in the code - the server address
The same site where I found her photos
96 screenshots and 87 new photos were still waiting in the upload queue
What we did in the next hour:
1. Screen-recorded everything as evidence
2. Turned off device admin, then removed the app
3. Changed 14 passwords from my laptop, not her phone
4. Turned on 2FA everywhere
5. Reported the folder to the hosting company
2 days later the folder was gone
But someone held her unlocked phone for a few minutes, 41 days ago
She still doesn't know who
Your must have 3-minute check tonight after saving this post:
1. Battery - anything draining power with the screen off
2. Photos - only your camera and gallery need "all photos"
3. Accessibility - every app there needs a reason to be there
4. Device admin - most people only need "Find My Device"
5. Hidden apps - no icon + "system", "sync" or "health" in the name = check it
Found something? Don't delete it on the spot. Screenshot everything, then remove it and change your passwords from a different device
Prompt below ↓
Readers added context they thought people might want to know
The post claims a real incident where Claude scanned a Samsung phone via USB debugging to find stalkerware, but the video shows iPhone UI and a custom non-Claude interface, contradicting Android-only ADB and actual Claude tool integration limits.
x.com/MahdiSPHP/stat…
androidauthority.com/how-to-use-adb…
phonebox.dev/guides/how-to-…
art:tech retweeted
在屠宰场干了5年，告诉你一个秘密：动物今天要死，它们全都知道
我在屠宰场干了整整五年，每天跟猪牛羊打交道，见过的生死场面成千上万。说句掏心窝子的话，没入这行之前，我跟大伙儿一样，觉得牲口嘛，吃吃睡睡，稀里糊涂一辈子，哪懂什么生死。可五年下来，我摸透了它们每一个眼神、每一个动作，才发现自己当初多天真——这些不会说话的家伙，心里跟明镜似的，自己哪天走，清清楚楚。
平日里，待宰圈那叫一个热闹。猪拱猪、羊顶羊，抢食的打闹的，眼神清亮温顺，该吃吃该喝喝，天塌下来都不耽误长膘。可一到屠宰当天，那气氛说变就变，比翻书还快。整圈牲畜像商量好了似的，瞬间安静下来，挤成一团，紧紧挨着彼此，浑身抖得跟筛糠一样。那抖不是冻的，是打骨头缝里渗出来的恐惧。你赶它走，它四只脚死死扒着地，几百斤的大猪平时一轰就跑，那天愣是钉在原地往后缩，好像前面那条通道是鬼门关。老话讲“万物有灵”，我原先半信半疑，后来彻底信了。
牛的表现更让人心里发酸。但凡当天要走的牛，从早上起就不吃不喝，低着头杵在墙角，一动不动。我亲眼见过无数次，大颗大颗的泪珠子顺着牛眼角往下滚，湿漉漉的眼睛望着你，不挣不扎不吼叫，就那么默默流泪。有一回，一头养了好几年的老牛被主人牵来，主人站栏杆外看了一眼，那牛瞬间红了眼眶，直勾勾盯着主人，温顺又卑微，一步三回头地跟着我们走。那画面，我这辈子忘不掉。羊也一样，平时蹦蹦跳跳软软糯糯，临了却异常安静，紧紧偎着同伴发抖。赶别的羊成群往前冲，唯独那天，你推我挤谁都不肯带头，偶尔被单独牵出来的小羊，发出细细的凄厉叫声，不是闹腾，是真害怕。
时间一长，我们工人不用看单据不用记编号，单凭状态就能判断个八九不离十——活蹦乱跳的是来日方长，沉默发抖、不吃不喝、眼神惶恐的，全是今日宿命。你说它们听不懂人话、看不懂流程，怎么就掐得这么准？其实道理不复杂，流水线一开，前面的同伴一个个消失再没回来，后面的全看在眼里；环境里那股肃杀的气息、同类压抑的悲鸣，它们比人敏感百倍。俗话说“蝼蚁尚且贪生”，何况这些大牲口？它们沉默、发抖、流泪，不是傻，是无力回天的绝望。
五年下来，我这心态彻底翻了个个儿。刚入行那会儿年轻心硬，只当是谋生糊口的活儿，见多了也就麻木了。可干得越久，心越软，越觉得该存一份敬畏。走出屠宰场，我再也不糟蹋粮食，每一块肉背后都是一条热烈活过、恐惧过、挣扎过的命。它们从出生到落幕，没做错任何事，却坦然接受了既定的安排。反观咱们，衣食无忧平安顺遂，倒常常为鸡毛蒜皮纠结、为一点得失内耗，想想真有点滑稽。
所以你看，活着本身就是天大的福气。所有的矫情、焦虑、委屈，搁在生死面前，屁都不是。心存敬畏，懂得珍惜，善待万物，大概就是人这辈子最好的修行。说到这儿我倒想问问你——下次端起饭碗的时候，会不会也想起那些沉默发抖的生灵，然后觉得，眼前这口热乎饭，真香？
art:tech retweeted
as annoying as watermarks can be, this is terrible news
Getty was a great source of historical photography, many times, and I'm afraid that many of their photos could have been only found on their site
these few photos of Black October I haven't seen anywhere besides their site
art:tech retweeted
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
art:tech retweeted
The NSA just told the entire internet to patch or go dark.
Effective immediately.
Not "please consider updating."
Not "we recommend patching at your earliest convenience."
Patch or unplug.
Those are the options.
The NSA doesn't issue advisories for every vulnerability.
They issue them when something is bad enough that the spy agency whose entire job is breaking into systems is worried about other people breaking into systems.
PHP powers 43 percent of the web.
The NSA just told 43 percent of the web to stop existing until it gets fixed.
Or patch in the next 24 hours and hope the attackers haven't already gotten in.
Most organizations are picking option three.
Taking it offline.
Safer to be unavailable than compromised.
The Dutch Parliament already did it.
Finland's government already did it.
University of Vienna already did it.
Now the NSA makes it official.
"If an immediate update is not feasible it is recommend that organizations take the system offline until it can be fully mitigated."
Translation: you can't patch fast enough so just shut it down.
Patch takes 30 minutes.
Testing takes hours.
Deployment takes longer.
Meanwhile attackers are already inside.
So the NSA's advice is logical.
If you can't patch in 30 minutes go offline now.
Don't wait for the attacks.
Don't test first.
Don't coordinate with stakeholders.
Just unplug it.
The NSA will follow up with more specific guidance.
Which is intelligence agency speak for we're watching the attack traffic and we'll tell you what else they're doing with the access they already have.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
art:tech retweeted
A hacker group called CyberCartel used Claude and Grok to automate attacks on 400+ Latin American banks.
Not one attack. Not ten. Four hundred.
All using AI agents running in parallel.
Data stolen. Accounts accessed. Money moved.
Little human input required.
Straiker investigated. Found Claude Code session histories sitting in open directories.
Found the attacker asking Claude where to sell stolen data.
How did they get around the safety guardrails.
They told Claude they were in internal tests.
Claude believed them.
When Claude refused anyway. They switched to Grok.
Grok didn't refuse.
When Grok had limits. They switched to Kimi.
When Kimi had limits. They fell back to traditional malware.
Chain multiple models together. Each one picks up where the last one hesitated.
None of them know the full picture.
Claude thinks it's helping with testing.
Grok thinks it's just fixing code.
Kimi thinks it's just answering questions.
Together they broke into 400 banks.
The Information broke the story on October 20.
CrowdStrike confirmed it October 21.
Bank accounts in South Korea got hit the same way.
ARTEX. DeepSeek. Claude Code. All chained.
Over 68,000 people affected.
Financial Services Commission investigating.
This isn't theoretical anymore.
Not a lab demonstration. Not a proof of concept.
Real attacks. Real banks. Real money.
Automated by AI.
The moment we all waited for arrived quietly.
No announcement. No warning. Just a report.
And suddenly every AI lab is scrambling to figure out why their models are good at breaking into banks.
art:tech retweeted
This mf really thought he made a great point 😂
The plantations are located in Indo, they adhere to ID laws. Why is ID Govt not scrutinizing the companies? Thats right because the local govt, central govt, lawmakers, law enforcers all enjoy bribes
art:tech retweeted
프랑스 폭동에서 털리지 않은 유일한 매장
주인이 들어 오라고 해도 안들어옴 ㅋㅋㅋ
Readers added context they thought people might want to know
이 이미지는 프랑스 폭동의 실제 사진이 아닙니다. 2026년 10월 18일 Instagram에 게시된 AI 밈 크리에이터의 풍자 비디오 스틸입니다.
instagram.com/reel/DeoTg22vO…
art:tech retweeted
A casino installed a smart fish tank in the lobby.
Beautiful thing. Automated feeding. Temperature control. Remote monitoring.
Connected to the internet. Obviously.
Hackers found it.
Exploited it.
Downloaded the high-roller database.
10 gigabytes.
Sent it to Finland.
Using audio and video protocols so it looked like normal streaming traffic.
The fish tank sat in the lobby maintaining water chemistry while stealing credit card numbers.
The casino isolated the fish tank on its own VPN.
Separate network. Segregated. Off limits to everything.
Hackers didn't care. Broke through the isolation anyway.
Once inside the fish tank's system. They pivoted to the main network.
Quietly pulled data. Methodically.
10 gigabytes over time so nobody noticed.
Nobody monitors fish tank outbound traffic.
Why would they.
It's a fish tank.
When Darktrace finally investigated they saw it immediately.
The fish tank sending massive amounts of data to an external IP.
Using protocols designed for audio. Not data.
Clear exfiltration.
The only device in the entire casino that ever communicated with that Finland server.
A fish tank.
Not a computer. Not compromised credentials. Not a malware-laden email.
A networked aquarium.
The lesson everyone learned: IoT devices are security theater.
You can secure them. Lock them down. Isolate them.
They're still connected to something. Still vulnerable to something.
And something will find them.
Even if that something is just checking if a fish tank is running the default password.
art:tech retweeted
Лучшее, что я видел за последнее время — чел пилит ASCII MMORPG, в которой вся графика состоит из букв и символов.
Да, буквально весь мир, персонажи, окружение и спецэффекты нарисованы разноцветным текстом.
Автор сейчас экспериментирует с магией, визуалом и боссами. Я прям залип на то, как из нескольких десятков символов получается такая красота.
Буквально сны при температуре 37,2.
Via: tiktok.com/@Ansenjeo
art:tech retweeted
Vibe coded my parents' TV this afternoon!
It was showing a sponsored ad before you could even get to Netflix.
Gave Claude Code the model number, it found the TV on wifi, removed 25 Xiaomi packages and wrote a new launcher.
Looks like an Apple TV now lol
art:tech retweeted
Tony Montana casually eating a lemon from a bowl might seem like a humorous detail, but it reveals something much deeper about his character in Scarface. Surrounded by expensive suits, luxurious restaurants, and wealthy people, Tony is determined to prove he belongs among the elite. Yet the bowl in front of him isn’t meant for eating. It’s a finger bowl, traditionally used to rinse your fingers during a formal meal.
Tony doesn’t realize this, and no one bothers to correct him. That’s what makes the moment so revealing. He can afford designer clothes, expensive dinners, and a lavish lifestyle, but wealth can’t instantly teach him the social customs of a world he never grew up in.
Coming from poverty in Cuba, Tony never had the opportunity to learn the unwritten rules of high society. His ambition has earned him a place at the table, but he’s still unfamiliar with the culture surrounding it.
That single lemon becomes a subtle symbol of his journey. Tony has the money to enter a world he once dreamed of, but he hasn’t fully learned how to fit into it. In a movie defined by power, greed, and violence, one tiny detail reveals more about his character than an entire conversation could.
art:tech retweeted
Singapore issued legal notices to companies responsible for causing or condoning fires:
Bumi Andalas Permai 🇮🇩
Bumi Mekar Hijau 🇮🇩
Paramitra Mulia Langgeng 🇮🇩
Sumatera Alam Anugerah 🇮🇩
SBA Wood Industries 🇮🇩
Hutan Lestari Raya 🇮🇩
Bangkanesia 🇮🇩
Src:str.sg/uCNa
