So a new, quite effective method I've found during pentests recently:

People are starting to connect their work email and calendars to personal AI agents, and are, inevitably, storing the code in publicly accessible repos.

There are two things I look for:

- Email creds, prevalent where people have given the AI dealy IMAP access to their messages.

- If I can't find email creds, the link to the private Google Calendar (either outlook or Google) ICS file.

If you grab that ICS file, you download effectively an entire copy of the calendar, which includes the body of the meeting invite - so, various links, attachments, keys/secrets/passwords etc.

I have done the email thing maybe once or twice.

The calendar thing, at least a dozen times in the last few months.

#infosec

Dopo 19 anni sono tornato in Norvegia. Bergen per la precisione. Qui ho fatto l'Erasmus. Come da manuale una delle esperienze più belle della mia vita. Forse perché ero giovane.
19 anni fa pensavo solo al domani. Oggi vengo qua e il "ieri" è così assillante mi fa venire le palpitazioni.
Hulen è un locale rock gestito da universitari. Qui ho fatto il volontario. Ora qua mi sto facendo 3 birre da 11 euro l'una. Da solo, come un cretino. Ricordando il tempo passato e immaginando linee temporali diverse. La mia linea temporale alternativa sarebbe stata qui. Mi sarei trasferito, trovato un lavoro, messo su famiglia e depresso qui. Solo perché i norvegesi mi piacevano.
La piú grande differenza? 19 anni fa quando non si aveva niente da fare dietro al bancone si leggeva un libro, oggi si guarda il cellulare.

@reiver You see this pattern all over Chinese services as well, I think that's where it's copied from. When you sign into e.g. Alipay, on the first action you do, they lock your account and then send you a DM saying "We've detected unauthorized traffic, please do security verification" after which they then redirect you to the Chinese equivalent of Persona

@zackwhittaker

If it is unprotected, then it is not hacking.

Each Kagi member represents a conscious choice to reject the ad-tech and surveillance business model.

@catsalad Downin’.

Quand le levain est en forme ça régale. Farine pour pain de campagne cette fois. J’avais oublié que je l’avais ^^

Demain on retourne au moulin faire le stock (T110, miuticereales,…). J’ose pas encore trop monter en « complétude » (à savoir bourrer le seigle et la T150).

Anyone is looking for Senior Elixir Developer based in the EU? My CV available at hauleth.dev/cv #elixirlang #job

Quand le levain est en forme ça régale. Farine pour pain de campagne cette fois. J’avais oublié que je l’avais ^^

Demain on retourne au moulin faire le stock (T110, miuticereales,…). J’ose pas encore trop monter en « complétude » (à savoir bourrer le seigle et la T150).

@bagder Seems to be a general trend these days: My wife just got _ordered_ to talk about "Anliegen", that is "wishes", "inquiries" instead of "task", "tickets", "issues" or "bugs" when talking to employees and the board, but also in the ticket system. Just told her: "Fine for you, wishes are easy to prioritize (and ignore)". Which is just sad.

@reiver You see this pattern all over Chinese services as well, I think that's where it's copied from. When you sign into e.g. Alipay, on the first action you do, they lock your account and then send you a DM saying "We've detected unauthorized traffic, please do security verification" after which they then redirect you to the Chinese equivalent of Persona

Berkshire Sold $8 Billion of Chevron Shares as Prices Soared
https://www.bloomberg.com/news/articles/2026-05-15/berkshire-sold-8-billion-of-chevron-shares-as-prices-soared?utm_source=flipboard&utm_medium=activitypub

Posted into Markets @markets-bloomberg

@mattblaze They are refactoring it.

@dysfun *stares in Python*

Trump Says He Didn't Ask Xi For Any Favors on Iran
https://www.bloomberg.com/news/videos/2026-05-15/trump-says-he-didn-t-ask-xi-for-any-favors-on-iran-video?utm_source=flipboard&utm_medium=activitypub

Posted into Business @business-bloomberg

@SunnJax instant follow. 📷🤗

Trump, 'da Xi Jinping nessuna minaccia agli Usa su Taiwan' - Ultima ora - Ansa.it
https://www.ansa.it/sito/notizie/topnews/2026/05/16/trump-da-xi-jinping-nessuna-minaccia-agli-usa-su-taiwan_96ed8c96-c82a-4d38-bd26-29536f91beab.html?utm_source=flipboard&utm_medium=activitypub

Pubblicato su ANSA Ultima ora @ansa-ultima-ora-AgenziaAnsa

The next episode of #AnimationArray is *so close* ... searching for more animators that want to contribute. If you know someone who does short form narrative animation that wants a showcase, please tell them to submit to us! Submit! SUBMIT!

https://robertafidora.com/animation-array

Oh, and watch animation array daily at 3:30, 9:30, 21:30 UTC (check schedule for local times https://tv.theindiebeat.fm/ beneath the video)