Chromatic
2.3K posts
@TheRipCord Another qoinkidink..
WH posted 👇6d ago
x.com/i/status/20452…
Found it interesting the "Let Him Cook" post literally says
le T h IM COOK posted on 4/17 announced resignation on 4/20
Interesting init👀😎
The White House@WhiteHouse
LET HIM COOK.
English
Chromatic retweetledi
Connect the dots...
Tim Cook of Apple announced he was stepping down as CEO the day before the SPLC announcement came out.
Following the 2017 Charlottesville incident, Apple and CEO Tim Cook pledged $1 million each to the Southern Poverty Law Center (SPLC) and the ADL. Apple also matched employee donations 2-to-1 and created an iTunes donation tool to support the SPLC.
"Track Resignations." The coincidences are piling up...👀
English
Chromatic retweetledi
Chromatic retweetledi
🚨HAPPENING NOW: Justice Department announces indictment against Southern Poverty Law Center ("SPLC"). Our indictment alleges SPLC secretly funneled MORE THAN $3 MILLION in funds to members of white supremacist and extremist groups.
English
OMG, Herr Weimer.
Das „breitfaeltige System“, das er meint, ist doch genau das, was von Politikern in den Rundfunkräten seit Jahrzehnten gesteuert wird wie ein Parteien-Kartell auf GEZ-Koks. Da sitzen sie alle fein säuberlich verteilt: Die CDU/CSU-Truppe mit ihren Ministerpräsidenten und Staatssekretären, die SPD mit ihren Alt- und Neulinken, die Grünen mit ihrem Moral-Kommissariat, die FDP (wenn’s reicht), die Linke und sogar ein paar AfD-Vertreter als Alibi – alle zusammen in den Gremien von ARD, ZDF, MDR, WDR, NDR, RBB, SWR, HR, BR, Deutschlandradio & Co.
Das ist deren „breites Feld“?
Ein politisch durchgewobenes, staatsnahes Aufsichtssystem, das jahrelang eine Einheitsmeinung gepflegt hat, während die Leser und Zuschauer mit den Füßen abgestimmt haben: Abo-Crash, Quote im Keller, Vertrauen im Keller.
Und jetzt, wo Google & Co. den Leuten einfach ermöglichen, sich selbst zu informieren, ohne eure „Einordnung“, kommt der Schrei nach Rettung durch neue Steuern und Regeln. Klassiker. Statt den Spiegel vorzuhalten und zu fragen, warum die eigenen Inhalte so viele Menschen nicht mehr wollen, wird wieder der böse Tech-Gatekeeper erfunden.
Dabei ist das wahre Gatekeeping genau das gewesen: Die Rundfunkrats-Politiker-Clique, die über Quoten, Intendanten und Linie wacht. Mediazid? Nee, Mediasuizid durch jahrelange Selbstbedienung und Realitätsverweigerung. Das „breitfaeltige System“ hat sich selbst breit gemacht – auf Kosten der Bürger. Zeit, dass es endlich schrumpft. Der Markt räumt auf. Und das ist kein Genozid, das ist Evolution. #Mediazid #Gatekeeper #Rundfunkrat #Weimer
Deutsch
Wolfram Weimer spricht beim Medientag Mitteldeutschland von einem drohenden „Mediazid“, der vor allem „alte und klassische Medien“ betreffe. Hierfür verantwortlich wäre „BigTech“. Google und Co. wären „so erfolgreich“, dass sie zum „Problem“ würden. nius.de/politik/wolfra…
Deutsch
Höchste Eisenbahn. Kaum auszumalen, was mit einem anderen Wahlausgang in Ungarn passiert wäre. Zum Glück kam alles anders. Zum Glück für die Ukraine, zum Glück für die Sicherheit Europas.
Deutsch
Chromatic retweetledi
Chromatic retweetledi
I wondered if Grok 4.3 (beta) could create a real-time brainwave visualization for different mental states, and it absolutely crushed it! 😱😱
English
🚨 DEUTSCHE ARBEITNEHMER AUF X – AUFRUF! 🚨
Die Regierung (Merz & Co.) verspricht 1000€ Entlastungsprämie für die Bürger wegen Energie & Spritpreisen.
Aber: Freiwillig vom Chef! Kein Anspruch. Viele Firmen sagen schon „nein“ oder drücken sich.
ZEIT ZU HANDELN:Geht zu eurem Chef / in die Firma und NERVT sie richtig!
„Hey Boss – wo bleiben meine 1000 Euro?! Zahl die Prämie, die uns die Politik versprochen hat!“
Lasst euch nicht verarschen. Die Entlastung ist für UNS, nicht damit die Konzerne sich wieder mal rauswinden.
Macht Druck – einzeln, im Team, in der WhatsApp-Gruppe, im Betriebsrat!
Teilt diesen Post massiv. Je mehr nerven, desto eher zahlen sie. 💰😤
#1000Euro #Entlastungsprämie #WoBleibenDie1000Euro #ChefNerven #ArbeitnehmerRechte #MerzPrämie
Los jetzt – die 1000 Euro gehören euch! 🔥
Deutsch
Nius hetzt gegen Migranten, trans Menschen, verbreitet völkisches Gedankengut. AfDler freuen sich über die Normalisierung, sagen, Nius sei für sie eine Brücke: »Sie hilft Leuten, die eigentlich eher zur CDU tendieren, ohne Umwege zu uns herüberzulaufen.«
spiegel.de/kultur/julian-…
Deutsch
Chromatic retweetledi
What an unbelievable assist by Musiala 😍 He‘s slowly returning x.com/SackArtetaa/st…
English
Der „Hack“ ist kein hochkomplexer Zero-Day, sondern ein sehr einfacher File-Edit-Angriff, der fundamentale Designfehler aufdeckt. Er ist ernst, weil er zeigt, dass die Kern-Sicherheitsmechanismen (Authentifizierung + Datenschutz sensibler Biometrie) schwach sind – genau dort, wo die App am stärksten sein müsste. Für eine App, die sensible Identitäts- und Altersdaten handhabt und EU-weit eingeführt werden soll, ist das ein klarer Fail in der Grundsicherheit.
Paul Moore - Security Consultant @Paul_Reviews
Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
Deutsch
Chromatic retweetledi
Hacking the #EU #AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
Paul Moore - Security Consultant @Paul_Reviews
.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..." I did. It didn't take long to find what looks like a serious #privacy issue. The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well. But, the source image used to collect that data is written to disk without encryption and not deleted correctly. For NFC biometric data: It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them. For selfie pictures: Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them. This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary. From a #GDPR standpoint: Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach. youtube.com/watch?v=4VRRri…
English
It is for parents to raise their children. Not platforms.
The European Age Verification App is ready ↓ twitter.com/i/broadcasts/1…
English
Chromatic retweetledi
.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..."
I did. It didn't take long to find what looks like a serious #privacy issue.
The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well.
But, the source image used to collect that data is written to disk without encryption and not deleted correctly.
For NFC biometric data:
It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them.
For selfie pictures:
Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them.
This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary.
From a #GDPR standpoint:
Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach.
youtube.com/watch?v=4VRRri…
YouTube
English
Chromatic retweetledi
Agefield High: Rock The School | Story Trailer
Return to 2002 for this coming-of-age adventure game inspired by Bully.
Coming to Steam this Summer; Xbox Series X|S and PS5 later in 2026
Features:
• Complete lessons in Math, Geography, German, Music & English
• 32 Main Missions with two different endings + 15 Side Missions/Activities
• Small Open-World featuring the school campus, neighbourhoods, town centre, and countryside!
English
Chromatic retweetledi
🚨 WhatsApp’s “end-to-end encrypted” privacy is a total lie.
New class-action lawsuit just dropped: Meta secretly let employees, contractors like Accenture, and third parties read, intercept, and store your private messages WITHOUT consent.
All while marketing it as “only you and the recipient can read it.”
Zuck lied to billions. Your chats were never safe.
English
Chromatic retweetledi
Ah, but remember, they live in a “full democracy” and we live in a “dictatorship”.
I’m sure the people who make the freedom and democracy indexes will be updating them immediately.
Globe Eye News@GlobeEyeNews
BREAKING: All young men between the ages of 17 and 45 are now no longer allowed to leave Germany for more than three months without permission.
English