Tag
A security researcher discovered that registering as a FIFA agent granted access to FIFA's Microsoft Entra tenant, allowing them to bypass client-side authentication and access the live production streaming management panel for the 2026 World Cup, including RTMP stream keys for all matches. The researcher had to contact FIFA, MediaKind, HBS, CISA, and the FBI to get the issue fixed.
The article describes a creative project that stores arbitrary data (e.g., a to-do list) using iNaturalist observation IDs, encoding information through sequence and value bits in an unordered set of integers, and introduces the demo app YouDidIt.Bio.
Chinese Tesla drivers are using cheap plastic celebrity head figurines to trick the car's driver monitoring camera, allowing them to be distracted while using Autopilot features.
Hackers exploited a bug in Meta's AI support chatbot to hijack over 20,000 Instagram accounts without two-factor authentication, prompting Meta to disable the tool and implement security measures.
A developer reverse-engineered Instacart's private APIs to build a CLI tool, now allowing voice-based order adjustments for Costco via Telegram.
The author describes a common user onboarding problem with MCP servers—users opening the endpoint in a browser and seeing a 401 error—and shares a simple hack: returning an HTML page that explains how to properly add the server to an LLM client, which drastically reduced support tickets.
Fabien Sanglard describes his attempt to recreate the Horizon live wallpaper after migrating to a Pixel 7, using a simple WallpaperService that swaps screen captures based on battery level.