0-Click Attack

Stop Calling It Vandalism. It’s Self-Defense.

When a grand jury refused to indict a man for destroying a Flock surveillance camera, it wasn’t a failure of justiceโ€”it was a declaration. Over 100 police officers have abused the same technology. The jury sent a clear message: when the state won’t police its own surveillance abusers, the public will police the cameras. This is the start of vigilante privacy.

You Don’t Own Your Cricut. Here’s How to Steal It Back.

A hacker reverse-engineered a locked Cricut Maker, turning e-waste into a working machine. The real story isn’t the hack โ€” it’s the community’s fight against corporate control over hardware you thought you owned. Here’s how to steal back your stuff.

Trump’s New Cyber Memo Isn’t About Stopping Crime. It’s a Precedent for Unchecked Power.

The Trump administration’s new cyber memo sounds like a win against crime, but it’s actually a Trojan horse. By authorizing offensive cyber operations against non-state actors, the U.S. is blurring the lines between law enforcement and military force, creating a dangerous global precedent that threatens digital privacy and civil liberties worldwide.

Your Inbox Is a Browser. And It’s Leaking Your Secrets.

Every HTML email you open is executing code in a browser you didn’t know you had. CSS attacks can exfiltrate your data, map your behavior, and impersonate trusted contacts. The only robust defense is to sandbox every message as an untrusted iframeโ€”treating email as a hostile website, not a benign document.

You’re Not the Audience Anymore. The AI Is.

Time magazine is now serving ads directly to AI agents โ€” not to humans. This marks a fundamental shift: publishers are no longer optimizing for readers but for algorithms that gatekeep information. The ads aren’t meant to persuade you; they’re meant to influence the AI’s future behavior and training data. You’re no longer the audience. The machine is.

The Most Dangerous Thing in Your Inbox Doesn’t Require You to Click Anything

We are trained to fear links and attachments in emails. But the real danger is invisible. CSSโ€”the innocent styling code used to make emails look goodโ€”is being weaponized to exfiltrate your data and track your behavior without you ever clicking a thing. Your inbox is no longer a safe space.