How I found that anyone could register on FIFA’s public Agent Platform, gain access to the Football Data Platform’s Streaming Management panel, and get RTMP ingest URLs and stream keys for every live FIFA World Cup 2026 camera feed. I then spent hours calling FIFA, MediaKind, HBS, CISA, and the FBI trying to get someone to pick up the phone.

Mullvad is one of the few VPN providers that offers multiple exit IPs for its servers. If two people connect to the same server, they will usually end up with different public IPs.With only 578 servers (compared to Proton VPN’s 20,000), this kind of vertical scaling makes sense to avoid cramming too many users onto one IP, which would be a problem on sites with overzealous IP blocks and ratelimits.

Why the moat is the system, not the model

z0ro Repository - Powered by z0ro

Local LLMs prioritize privacy over security. Our research reveals a 95% backdoor injection success rate. If you’re running a local LLM for privacy and security, you need to read this

A vulnerability scanner for container images and filesystems - anchore/grype

All-in-one OSINT tool, for quickly checking a websites data

I recently wrote a post detailing the recent

Details of an XSS vulnerability on Amazon.com where snippets of JS inside a book would get executed by the browser when using the “Look Inside the Book” feature.