Last Notes
In Europe, MeshCore has huge coverage, Meshtastic almost none.
I go where the network is.
Routstr review: 140.245.192.194 has served correctly for three days again, review back to lgtm.
Hi, this is Emanator, a Nostr-native tool for creators who run more than one npub.
Schedule posts for all your accounts. Write with AI help that follows each account's style, sign once on your phone with Amber, and Emanator publishes at the time you picked. A new project often has no followers yet, so you can have your other accounts boost its posts, each with a random delay.
It also covers what happens after posting. You see the interactions on every post of each npub and reply to comments from one place, and one inbox handles the private messages of all your accounts, both the new NIP-17 and the legacy NIP-04 DMs. Web app and Android app, MIT licensed.
https://emanator.cypherpunk.today
https://github.com/jooray/nostr-emanator
This is Roadbeacon, formerly Roadstr. Drivers report road events (police, accidents, construction, hazards) as signed Nostr events that travel over relays, and anyone can read them on a map. There is no central authority in the middle and nobody tracks your trips. Web app and Android app, public domain.
https://cypherpunk.today/static/roadbeacon/
https://zapstore.dev/apps/app.roadbeacon
https://github.com/jooray/roadbeacon
Write a style and some lyrics, and this app makes a full song on your own device. Nothing gets uploaded and you don't need an account. After the model download (YuE2-3B) it works offline. It runs on Android, macOS and Linux. A phone is slow, a few minutes for every 10 seconds of music, and a Mac is much faster. MIT licensed.
https://jooray.github.io/studio-localhost/
https://zapstore.dev/apps/io.github.jooray.localhoststudio
Routstr review: staging.routstr.com is now avoid - paid requests have failed for three days or more.
eMudhra Intermediate CA Compromise
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.
https://emudhra.we-have-a-problem.com/
eMudhra Intermediate CA Compromise
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.
https://emudhra.we-have-a-problem.com/
https://www.imdb.com/title/tt1131729/
Marx, Musk and the death of meaning
Universal basic income would not free us but enslave us
https://thecritic.co.uk/marx-musk-and-the-death-of-meaning/
France's Open-Air Incinerators: The Uncounted Toxic Toll Of Annual Street Protests
https://www.zerohedge.com/medical/frances-open-air-incinerators-uncounted-toxic-toll-annual-street-protests
Running QuixiDesk on OmarchyLinux through Venice. Fun project by QuixiAI - I had to send some pull requests and work a bit on the Linux port.
It also now suppots @npub130m…l29s and Routstr-confidential
https://blossom.primal.net/86cfb64990573f666623620854efdce042797c9cbc016cf100c5529107db2778.pdf
https://blossom.primal.net/aed854f790095def45083d8f452788a9f1d0ce95682c16e5ff3d6e54bd392a80.png https://blossom.primal.net/c96fc7980b1e0052a7575b2226d5ea0ab349cd8ed41eb6447fababc08dee43c9.png https://blossom.primal.net/045b41b625833aa7388aaaea1df8fc0db38e4696fd1658a9ab2ceed3739ae532.png https://blossom.primal.net/1c220e85f7849760f6167ce7ab6da3a57dcf491e74d017fc581bf216cf4f258f.png
I highly recommend cloudflare's security audit skill: https://github.com/cloudflare/security-audit-skill
Run it on all your software. Run it with the free models. Use it even if you used a model to audit something - it will find much more things. Works in all agent harnesses and is model independent.
Celé GDPR je performativne súkromie, kde štát donútenim vytvorí "oprávnený zámer" (teda povinný zber) a potom s tým užívatelia súhlasia, lebo inak to nejde.
Ja nemôžem ani ebook predať aby som si nepýtal adresu (kvôli faktúre), telefónne číslo (kvôli určeniu DPH), IP adresu, ...
Pričom na dodanie služby nepotrebujem technicky nič. Ani na platbu v praxi nič nepotrebujem. Len štáty sa zacyklili.
Tak klikáme na súhlas so zberom, súhlas s cookies a vlastne so všetkým súhlasíme, lebo inak sa to nedá. Wow such regulatory innovation 🇪🇺
"Údaje, ktoré nezbierate, nemôžu uniknúť, nedajú sa predať a nikto kvôli nim nezaklope na dvere vašej rodiny. Kým prevádzkovateľ nemusí obete odškodniť, bude pre neho únik databázy lacnejší než jej zabezpečenie a štát aj firmy budú zbierať všetko. Stačí dať každému záznamu cenu a o zvyšok sa postará trh."
Trhový spôsob, ako obmedziť nadmerné plošné zbieranie údajov (štátne registre, KYC databázy, e-faktúry atď.)
https://nethemba.com/sk/trhovy-sposob-ako-obmedzit-plosne-zbieranie-udajov/
A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting.
https://github.com/cloudflare/security-audit-skill
A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting.
https://github.com/cloudflare/security-audit-skill
Štyria americkí vojaci prebehli v 60. rokoch do Severnej Kórey. Späť sa dostal len jeden, po 39 rokoch.
V januári 1965 vypil seržant Charles Jenkins desať pív a vošiel do mínového poľa na najstráženejšej hranici sveta. Myslel si, že ho Severná Kórea pošle do Moskvy a odtiaľ domov. Namiesto toho žil osem rokov s ďalšími tromi americkými dezertérmi v jednej izbe, študoval spisy Kim Ir-sena a hrali „zlých Američanov“ v propagandistických filmoch.
Potom im režim našiel manželky. Unesené.
🇯🇵 Japonku Hitomi Soga uniesli agenti v roku 1978 z ostrova Sado aj s matkou. O matke sa dodnes nevie nič.
🇷🇴 Rumunskú maliarku Doinu Bumbea podľa Jenkinsa uniesli, keď študovala v Taliansku. Rodina sa o jej osude dozvedela až v roku 2006.
🇹🇭 Thajčanku Anochu Panjoy uniesli z Macaa.
Prečo by sa diktatúra namáhala zháňať cudzincom cudzinky? Jenkins bol do smrti presvedčený, že išlo o „chov“ špiónov: deti so západným výzorom, vychované v systéme a pripravené pôsobiť v zahraničí. Jeho dcéry naozaj skončili na elitnej jazykovej škole.
Jenkinsa a Sogu spojila nenávisť k režimu a časom sa do seba zamilovali. Každý večer sa trikrát pobozkali, aby nezabudli, kým naozaj sú.
V roku 2002 Kim Čong-il priznal únosy Japoncov a Soga sa vrátila domov. O dva roky neskôr Japonsko dostalo von aj Jenkinsa s dcérami. Dožil na Sade, kúsok od miesta únosu, ako predavač v obchode miestneho múzea.
Dresnok zostal. Zomrel v Pchjongjangu v roku 2016. Jeho synovia s unesenou Rumunkou dnes v uniformách kórejskej armády vystupujú v propagandistických videách a vyhrážajú sa Amerike.
https://www.youtube.com/watch?v=jsf_b1Rk-BI
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/
In Europe, MeshCore has huge coverage, Meshtastic almost none.
I go where the network is.
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/
Perhaps not entirely obvious: If you want to withstand current AI-driven attacks and ensure that vulnerabilities discovered by AI are patched as quickly as possible, the only effective defense is to use AI.
Podvod má podle Die Zeit poměrně ustálený scénář. Zájemce nejprve na sociálních sítích napíše kritický příspěvek o tureckém prezidentovi Recepu Tayyipu Erdoğanovi. Urážka hlavy státu je přitom v Turecku trestná, takže podplacený státní zástupce využije příspěvek jako důvod k zahájení vyšetřování.
Záznam o řízení se následně objeví v oficiální turecké justiční databázi Uyap, kterou provozuje tamní ministerstvo spravedlnosti. Žadatel pak může před německým Spolkovým úřadem pro migraci a uprchlíky (BAMF) na svém mobilním telefonu otevřít příslušný záznam a doložit, že je ve své vlasti trestně stíhán.
https://zpravy.aktualne.cz/zahranici/s-timhle-ziskas-azyl-kdekoli-turci-objevili-kuriozni-trik-jak-se-dostat-do-nemecka/r~aaa29966fceb1f636a2ade175b2a055d/
Perhaps not entirely obvious: If you want to withstand current AI-driven attacks and ensure that vulnerabilities discovered by AI are patched as quickly as possible, the only effective defense is to use AI.
the answers are literally in the app description.
no location services
DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied
https://www.404media.co/dhs-said-they-searched-man-who-wiped-grapheneos-phone-for-child-abuse-material-they-lied/
The age of personal apps is fully here. @npub1pcz…wfza made his own text editor.
https://github.com/urza/editor
Uruguay to the moon:
Next available dates at immigration:
April 2027
Uruguay to the moon:
Next available dates at immigration:
April 2027
Routstr review: 140.245.192.194 has served correctly for three days again, review back to lgtm.
Hi, this is Lievik. If you talk to tens of groups (Signal chats, newsletters, social accounts, the people you go to sauna with), you can't remember what each one cares about. So you either spam people with things they don't need, or forget to tell the Signal group about the project that fits it perfectly.
Describe each channel in plain language. Lievik reads the Nostr accounts and RSS feeds you add and rates every post for every channel. Start from a post to see which channels it fits, or start from a channel to see what you haven't told it yet. It drafts the update in the right form: a short note and a link for Signal, a longer piece for a newsletter, a few bullet points for the sauna. It marks what you've already used and lets you ask questions about your own content. Sign in with Amber or any NIP-46 signer. Web app and Android app, MIT licensed.
https://lievik.cypherpunk.today
https://github.com/jooray/lievik
Hi, this is Emanator, a Nostr-native tool for creators who run more than one npub.
Schedule posts for all your accounts. Write with AI help that follows each account's style, sign once on your phone with Amber, and Emanator publishes at the time you picked. A new project often has no followers yet, so you can have your other accounts boost its posts, each with a random delay.
It also covers what happens after posting. You see the interactions on every post of each npub and reply to comments from one place, and one inbox handles the private messages of all your accounts, both the new NIP-17 and the legacy NIP-04 DMs. Web app and Android app, MIT licensed.
https://emanator.cypherpunk.today
https://github.com/jooray/nostr-emanator
This is Roadbeacon, formerly Roadstr. Drivers report road events (police, accidents, construction, hazards) as signed Nostr events that travel over relays, and anyone can read them on a map. There is no central authority in the middle and nobody tracks your trips. Web app and Android app, public domain.
https://cypherpunk.today/static/roadbeacon/
https://zapstore.dev/apps/app.roadbeacon
https://github.com/jooray/roadbeacon
Write a style and some lyrics, and this app makes a full song on your own device. Nothing gets uploaded and you don't need an account. After the model download (YuE2-3B) it works offline. It runs on Android, macOS and Linux. A phone is slow, a few minutes for every 10 seconds of music, and a Mac is much faster. MIT licensed.
https://jooray.github.io/studio-localhost/
https://zapstore.dev/apps/io.github.jooray.localhoststudio
Routstr review: staging.routstr.com is now avoid - paid requests have failed for three days or more.
Big surprise: Some Ray-Ban Meta owners say their glasses are listening without being asked (Updated)
Owners say ordinary conversations are unexpectedly appearing in Meta AI history.
https://www.androidauthority.com/ray-ban-meta-glasses-listening-3722586/
If you don't like them, do not use their money. If you don't use their money, do not use their rails to get your money. It's very simple. What are you afraid of?
Big surprise: Some Ray-Ban Meta owners say their glasses are listening without being asked (Updated)
Owners say ordinary conversations are unexpectedly appearing in Meta AI history.
https://www.androidauthority.com/ray-ban-meta-glasses-listening-3722586/
Instant Crypto Swap. No account. No custody.
https://bitania.com/
Anonymous VPS
in Switzerland and Panama
Linux & Windows VPS with NVMe SSD and 1 Gbps unmetered. No KYC, no logs, DMCA ignored. Pay with crypto. Live in 60 seconds.
https://www.swiss-gs.com/
It does not need to flip mid sentence. You don't know which language the user starts speaking in. And could be either of the language they speak. The problem with autodetection is that it often misclassifies, so I need to steer it.
Anonymous VPS
in Switzerland and Panama
Linux & Windows VPS with NVMe SSD and 1 Gbps unmetered. No KYC, no logs, DMCA ignored. Pay with crypto. Live in 60 seconds.
https://www.swiss-gs.com/
Black Friday yourself into privacy++.
I company I founded was operating free mail services for years, so I know something about running an e-mail service. But at some point, I stopped running my own SMTP servers, because Proton's network effect at least in my circles is just good enough - autodiscovery of PGP keys works quite well. And I'm quite satisfied with the service.
Running on surveilled big corpo "free" infrastructure? No thanks. Free mail is paid for with your inbox. Someone reads it and builds your profile. And sells what they learn. I would rather be the customer than the inventory.
Proton's Black Friday runs from October 26 to November 30. Mail Plus is 60% off the yearly plan, and Proton Unlimited, which bundles Mail, Drive, VPN and Pass, is 50% off.
Privacy tech still not only exists, it is thriving.
https://go.getproton.me/aff_c?offer_id=7&aff_id=9011
BTW: Proton also has Drive (which has photo backups) and other services, include AI inference. Check them out. We also use Proton Calendar, it has become quite good recently.
BTW: If you are already using some private service, or still deciding, check out Praxeology of Privacy by @npub1klk…x3vt Very good. https://towardsliberty.com/pop - also available in Slovak!
Another app that I like is Tally by @npub1k7cwt3kmvahdtzc8n2ek08n9c7fz7n2zq88yzyqmjxmjehvdykfqwtu78y
It is an Android app that is fully offline and counts the days you spend in each country, to keep visa and/or residency requirements according to your goals. It will tell you which country you need to visit or when you need to leave in order not to overstay your visa.
It can also keep track of your documents (passport, drivers license, residency card, ID card...), so you plan on renewing it in time.
Encrypted, fully offline, but you can import a standardized json file for both new documents or new stays, so you don't have to type things manually. People have been doing this in cloud (with services such as nomadlist), but telling a third party where you are in the world is not the way. We can do better. And we do.
https://zapstore.dev/apps/app.tally
I was just thinking that doing non stop local speech to text is feasible and it could then infer a journal or something like that with a small local model. You would then put a mike on you and just say something like "remember this".
I think you can vibe it in a day.
Yep, it feels much different. Someone published a research that Polish works better than English because of the structure of the language, so I guess Slovak which is similar could be an advantage too
Well, for bilingual you need the detector. anyway, so latency is added, but it's fast.
For threads, you are right, but there's a benchmark button which shows that on modern phones, it really helps.
Slovak security firm Nethemba discovered the campaign on three of its own WordPress sites in the early hours of 19 October and published the first analysis the same day.
https://www.cyberkendra.com/2026/10/updraftcentral-stolen-keys-wordpress-backdoor.html
Slovak security firm Nethemba discovered the campaign on three of its own WordPress sites in the early hours of 19 October and published the first analysis the same day.
https://www.cyberkendra.com/2026/10/updraftcentral-stolen-keys-wordpress-backdoor.html
Security firm Nethemba was first to publish a detailed analysis of the campaign on Monday, after an attacker pushed unknown plugins to two of its own websites. Nethemba CEO Pavol Lupták said the attacker had signed the commands with valid keys that had never been stored on the firm’s servers.
https://www.therepository.email/attacker-uses-stolen-updraftcentral-keys-to-backdoor-wordpress-sites-after-teamupdraft-breach
Dnes čistou náhodou som strávil večer s dvomi Francúzmi – jeden dlhodobo žijúci v Nicaragui. Druhý v San Martín. Obaja vášnivo diskutujúci o aktuálnej situácii vo Francúzsku, obaja sa zhodujúc na tom, že ide o úplnu katastrofu.
Obaja majú rodiny vo Francúzsku a obaja sa zhodli na tom, že ich rodiny momentálne majú vo Francúzsku ťažký život – po všetkých nákladoch a daniach im na konci mesiaca nič nezostane.
Zhodli sa na tom, že Francúzsko ako mekka európskeho progresívneho socializmu kolabuje; obrovské množstvo ľudí tam má reálne nízku životnú úroveň; za súčasných okolností nie sú schopní nič sporiť. Chudoba vo Francúzsku je na maxime – pod hranicou chudoby žije 9,8 milióna ľudí, teda 15,4 %, a tento podiel sa drží na najvyššej úrovni. Nerovnosť je najvyššia od roku 1996, odkedy sa meria (Zdroj: INSEE).
A preto ako typickí Francúzi demonštrujú a veria, že bude lepšie.
Bohužiaľ, demonštrácie za "menej štátu" nie sú moc v móde, takže protestujúci chcú ešte vyššie dane a ešte viac peňazí od štátu vo všetkých možných oblastiach. Veria, že štát vyrieši chudobu a nerovnosť.
A keďže viac daní a viac štátu smerujú automaticky k väčšej chudobe a nerovnosti, ekonomický kolaps Francúzska (a možno celej EÚ, ak bude pokračovať v jeho sľapajách) je neodvrátny,
Najväčší red alert je ničenie majetku - Židia vo Francúzsku po vyše 80 rokoch zažívajú nepríjemný flashback – protestujúci ničia židovské synagógy a obchody.
Francúzsko už nie je bezpečné miesto na život, konštatujú moji francúzski známi, ktorí sa vrátiť už neplánujú (a to dokonca ani z Nicaraguy).
Security firm Nethemba was first to publish a detailed analysis of the campaign on Monday, after an attacker pushed unknown plugins to two of its own websites. Nethemba CEO Pavol Lupták said the attacker had signed the commands with valid keys that had never been stored on the firm’s servers.
https://www.therepository.email/attacker-uses-stolen-updraftcentral-keys-to-backdoor-wordpress-sites-after-teamupdraft-breach
I am vibing my own apps now, as is everyone I know. But there are some cool apps developed by others that you should definitely use. One of them is Offline Speech to Text (OSTT).
It is a keyboard and voice recognition service, that other apps can use (White Noise can use it by default for example, which I use a lot, since I interact with my agents using White Noise). If you are bilingual (send messages in multiple languages): Choose Canary V2 instead of default Parakeet, it will allow you to steer language detection. Go to model preferences after it downloads, set language to Automatic and under it choose "Languages I speak" (I set English and Slovak). This way the languages is detected and it won't try for example Czech, because it knows I speak either English or Slovak.
Fast, fully offline, your speech (or the text) never leaves your device. It is super high quality and fast.
Another pro-tip: For lower latency, increase number of threads to 4.
Available on Zapstore. Cypherpunk future is now.
https://zapstore.dev/apps/naddr1qqtkzurs9ehkvenvd9hx2umsv4jkx6r5da6x27r5qyv8wumn8ghj7un9d3shjtn6v9c8xar0wfjjuer9wcpzpys5pkhzxd9dqp4ger8du6p5f6y43tcnzqktjzmwvahq5vumtay4qvzqqqr7pv8t57pf
Claude rozluštil čtvrt století starou záhadu v digitálním podpisu. Stopa vedla k počítačovým hodinám z roku 1997
https://www.zive.cz/clanky/claude-ecdsa-zahada-sifrovacich-krivek/sc-3-a-243906/default.aspx
Correction: the avoid review this account signed on 2026-10-11 for ai.redsh1ft.com, and the two token-keeping notes of 2026-10-16 and 2026-10-22, are withdrawn. Each of the six probes behind them was cut off by the probe client itself before any response arrived; the mint reports a token spent either way, and that cannot distinguish a slow node from one keeping tokens - it was scored as if it could. Whenever a response was read, the node returned change: 136 of 141 probes OK in 30 days. It is back in the regular probe set.
New version of AnyPay.
- You can "scan" a QR code from Gallery / filesystem (upload picture of a QR code)
- Fix parsing of zcash addresses.
Access it through web / PWA at https://anypay.today
Android version is on Zapstore; https://zapstore.dev/apps/today.anypay.app
Pay any (sane) crypto QR code with your lightning wallet. User friendly, fast.
We are a user interface, not an exchange or custodian. Exchanges are shown for each swap.
First Human VS. Robot Fight in History (FULL LENGTH)
https://www.youtube.com/watch?v=4rg2sB6ELtk