What's going on with Syncthing for Android?
It seems like the project suddenly disappeared and the maintainer has set his profile on github to privat.

However, it seems like another github account has taken over the project. There has been no communication why the project has been handed over. This is worrying, since the new account has access to the signing keys of the app and at least theoretically it could be possible to add malicious code to this widely used app.

I would like to keep thinking that Syncthing is still trustworthy, but to be honest, as long as we don't know what's going on, I'm not sure.

https://www.heise.de/en/news/Key-handover-in-the-dark-Syncthing-fork-community-raises-alarm-11107337.html

#syncthing #takeover #opensource

What's going on with Syncthing for Android?
It seems like the project suddenly disappeared and the maintainer has set his profile on github to privat.

However, it seems like another github account has taken over the project. There has been no communication why the project has been handed over. This is worrying, since the new account has access to the signing keys of the app and at least theoretically it could be possible to add malicious code to this widely used app.

I would like to keep thinking that Syncthing is still trustworthy, but to be honest, as long as we don't know what's going on, I'm not sure.

https://www.heise.de/en/news/Key-handover-in-the-dark-Syncthing-fork-community-raises-alarm-11107337.html

#syncthing #takeover #opensource

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

Cybersecurity researchers have discovered vulnerable code in legacy Python packages that could potentially pave the way for a supply chain compromise on the Python Package Index (PyPI) via a domain takeover attack.

https://thehackernews.com/2025/11/legacy-python-bootstrap-scripts-create.html

#python #bootstrap #pypi #itsecurity #py #domaintakeover #domain #takeover #coding #cybersecurity #supplychain #attack #packaging #itsec #infosec

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

Cybersecurity researchers have discovered vulnerable code in legacy Python packages that could potentially pave the way for a supply chain compromise on the Python Package Index (PyPI) via a domain takeover attack.

https://thehackernews.com/2025/11/legacy-python-bootstrap-scripts-create.html

#python #bootstrap #pypi #itsecurity #py #domaintakeover #domain #takeover #coding #cybersecurity #supplychain #attack #packaging #itsec #infosec

Unlike the recent federal #takeover of policing in #WashingtonDC, the #Chicago operation is not expected to rely on the #NationalGuard or #military & is focused exclusively on immigration instead of being cast as part of a broad campaign against crime, the ofcls said.

#MilitaryState#WhiteSupremacy #law#PosseComitatusAct #tyranny