Eliot Bendinelli

Hacking Moltbook: AI Social Network Reveals 1.5M API Keys | Wiz Blog Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.

Oh well, turns out I'm 2 days late 🙃

https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys

Humans Welcome to Observe The OpenClaw/Clawdbot explainer: personal AI agents, security nightmares, and robot religion.

Good write-up by Charlie Guo: https://www.ignorance.ai/p/openclaw-moltbook-and-the-ai-agents

Reading about MoltBook and the only thing I can think of is that this is an AI-coded site that 150,000 AI agents with unrestricted access to their users data connect to.

Sounds like a fantastic target to hack

just listen to real music made by real people

Adam Neely exposing how AI companies feed into techno-authoritarianism was not on my 2026 bingo card.

I know it's a 1h30 music. I know the angle is Suno/music production and that might not be relevant to you. But the section from 59:00 is spot on and absolutely worth your time.

GenAI is the […]

I love mastodon, where else can I read a cool blog post someone shared, check the rest of the author's site, find out they make music and listen to their last album for an hour?

@tg is who I'm talking about and I really enjoyed this album! https://goader.bandcamp.com/track/lead-smoke-silence

Now's The Time To Start That Blog | Matthias Endler I was listening to a podcast recently where som…

Love this simple and straightforward post by @mre

I also started writing a blog last year and it's been super fun to write, even if only for myself.

https://endler.dev/2026/personal-blog/

The news are looking pretty gloom these days. So how about some music instead?

I just released my last EP, and even if the lyrics might be dark at time, hopefully it can bring you joy.

https://distrokid.com/hyperfollow/bendy2/shape-3-ablaze-2

#music #musicproduction #newmusic #musicrelease

Did I release my latest EP on my faircamp before every other platforms?

Yes I did.

https://music.bndy.org/shape-3-ablaze/

My co-workers @llas @dario and the @fsfe volunteer Jithendra wrote an article for Tech Policy Press

"Making the Digital Markets Act Developer-Friendly"
https://www.techpolicy.press/making-the-digital-markets-act-developer-friendly/

"We must listen to small developers and community projects […]

Apple user nightmare come true: getting locked out of your Apple ID account and all your devices because your tried to redeem an Apple card bought in a store.

I'll be honest, even as a non-Apple user this is terrifying. Also why I think it's not worth putting all your eggs the same (Big Tech) […]

Some of the bangers I read in return:
- Doppelganger: A Trip into the Mirror World , Naomi Klein. A must read on tech, society and the political divide
- One Day, Everyone Will Have Always Been Against This, Omar El Akkad: The most human and clear analysis of the Palestinian genocide
- Down and […]

Looking for book recommendations for my upcoming 2 weeks break, what's the best thing you've read these last few years?

Je cherche des recommendations de livres pour les vacances. C'est quoi le meilleur bouquin que vous avez lu ces dernières années?

#reading #books #livres #reco

Also I wrote this little thing on AI a while ago and why I'd rather fight it.

That's where the difference with the emergence of the internet and AI differs, the people building those things had widely different intentions and I probably would not have opposed the adoption of the internet […]

I guess that's more a reflection about aging than technology

I was reading this piece about AI making its way into education in China and the one I kept thinking is how a new generation is already growing with LLMs the same way I grew with the internet when my parents didn't.

I'm mostly on the side of caution with "AI", mostly because of who is building […]

This is probably the most requested feature from Bridgy Fed users - so happy to finally roll this out!

https://mastodon.social/@anewsocial/115181802471981556

Medasin's "Always in hurry" is one of my favourite album of all time and you should absolutely listen to it: https://tidal.com/browse/album/278403634?u

And now he just released the goofiest and craziest thing I've hear in a while and I'm absolutely addicted. So you know what to do […]

You should absolutely start your day by drawing a fish: https://drawafish.com/

(thanks @whitep4nth3r for the discovery)

If you're ever read an #RFC and seen a reference to RFC 2119 (which defines language for requirement levels like MUST, MUST NOT, SHOULD etc.) you have to listen to this: https://ericwbailey.website/published/you-must-listen-to-rfc-2119/

This is what I'll hear in my head every time I read an RFC […]

Schrödinger's linux: installing a package that is known to break your system but no rebooting yet

(Not so) fun fact, I did a research at @privacyint in 2019 focusing on mental health website and we found something oddly similar (although on a much smaller scale)

76% of mental health websites scanned were dropping a cookie or sharing data with a third party tracker before consent […]

I'm sure you can blame publishers for poor implementation but at this point Meta is clearly in a position where they can verify implementation.

They just don't have any reason to do it

Outside the fact that Meta literally developed a malware to re-identify web users in this story, it also shows they really don't care about consent

A table with the numbers of websites with Meta's pixel that share data before collecting consent

I was reading a bit more about the Meta/Yandex localhost story (see: https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/) and I'm amazed nobody flagged this crazy finding:

75% of the 15k websites with […]

[Original post on mamot.fr]

I want some hot takes. What's your favourite font for every day usage and why?

Serif, sans and mono, let's hear it all.

I'm looking for to try new things from the terminal to the Browser

#fonts #typeface #gui #design

"The moment a user asks, 'Wait, why can't I go there? You said these were open,' we've failed on our promises. That's where we are right now."

I wrote about adversarial interoperability and the importance of making the most powerful parts of the open social web more accessible to users […]

@ueeu How am I only hearing about this now? That's pretty cool! Shame I just migrated my Nextcloud instance from OVH to a Hetzner VPS 😅

Hopefully they have some good tools for migration

"French Digital Minister Clara #Chappaz’s office told POLITICO it is considering designating websites such as @bsky.app @Mastodon and #Reddit as #porn platforms, obliging them to implement stringent #ageverification requirements under new French rules that came into effect Saturday."

Question […]

Meta and Yandex exploiting an Android feature to snoop in on users' activities outside of their app.

In my language that's called a malware.

https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/