c0n5pir4cy

I used to work for an IoT connectivity provider (think SIM cards, eUICC etc); I know that some of the manufacturers of various devices have been investigating adding cellular and soldered eUICC (ostensibly for diagnostics, warranty etc).

So it's not even that it won't be long; I'm sure they already have designs and are just waiting for eUICC support to catch up.

It's sad - I have an old Nokia branded scale and it's honestly still working great. The app itself got bloated and has performance issues - and became less useful.

I built my own server for home last year, all consumer hardware (AMD Ryzen, 96GiB RAM, NVME SSD, HDDs etc). Total cost was ~£3,000 at the time - £6000 up front cost for a business seems reasonable; and you could get away with less.

However, the main cost would be colocation - it's risen quite a bit.

I got Claude to set up 5.1 Surround Streaming from my Linux Desktop to my Steam Deck using Moonlight. It needed some help (or really human ears) to make sure things were coming from the right speakers - but it was pretty much a one-shot.

I think a lot of people are missing some of the advantages of skills - they're to give an agent/harness the knowledge of how to do something or more context without it always being part of the prompt.

This could be to try and expand the capabilities of the model but in it can be used to store personal preference/workflow/organisational knowledge/improved efficiency etc. The harness could work through and build some of this on its own - but it's much more efficient if it has a document it can just look up. I use them for the database structure and it's quirks, how to use branded document templates, external document tone, system workflows, compliance requirements etc.

I wouldn't want these to load every time but being able to call them is really useful.

If its not automatic it's incredibly shaky ground in the EU. I'm sure Apple, Amazon and Google got more than a slap on the wrist just for storing a few seconds after the wake word before.

Not a lawyer but it wouldn't be under the DMA - these rights predate the DMA by a while.

The EU actually has a very good, privacy protecting way of doing this based on zero knowledge proofs.

Unfortunately they completely botched it by having the proof-of-concept app rely on Apple & Googles integrity APIs - which a bunch of countries copied.

It's pretty awful, generally best avoided unless you have a specific reason for doing so (e.g. encrypting the full SQLite DB per customer). It also introduces you to some pretty bad risks (what if there is a bug in a migration which only affects certain tenants?).

That being said it can be done and it's pretty normal for mobile apps, desktop apps etc. You just have to make sure the migrations are run when the tenant connects/unlocks/runs the app - and make sure that you minimise the risk of it going wrong!

So done a much deeper analysis - there is an loader injected at the Wordpress side which triggers a read of a payload from a smart contract on the Ethereum chain. It stores this in localStorage, registers a ServiceWorker etc so it is persistent.

It then spins up the ClickFix attack - limited to one time per day. I haven't dug into the payload given by the ClickFix attack yet.

For people that have visited while it exists:

1. On Chrome go to chrome://serviceworker-internals search for crookedtimber and unregister the ServiceWorker

2. On Firefox go to about:debugging#/runtime/this-firefox, search for crookedtimber and unregister the ServiceWorker.

If you want to be even safer - just clear all local data for CrookedTimber.

Doing a bit of digging too - it also filters only to users running MacOS or Windows and skips everything else which is why it will be invisible to the devices I tried it on.

I'm not getting it at all! I'm guessing something about my environment has caused it to cloak itself.

Do you have any browser extensions enabled?

I've seen similar before where it wasn't the page itself that injected it - rather it was injected by a compromised/sold extension that has permissions on all pages.

More unhinged - but a lot of people preferred it that way. To be really clear it's still pretty unhinged and even a decade ago it was much more unhinged.

I was so confused by the title - I thought jets were fairly efficient at ~40%-50% of theoretical maximum and turbofans can't be that far behind. It would maybe make sense for a single prop aircraft.

30% improvement makes much more sense.