2026-03-29T21:49:57Z https://njump.cloud.vinney.xyz Nethemba https://njump.cloud.vinney.xyz/npub13yxp2xmwcsd28gnknpkdw4uhmf9sjvmz4vpts4lp0x929fc5va8qels5ku https://cdn.nostrcheck.me/f4f1f341001ae518bd18bfa7c2a33e2ce618dfb3aa969dd88f284ed0aea40730.webp https://cdn.nostrcheck.me/f4f1f341001ae518bd18bfa7c2a33e2ce618dfb3aa969dd88f284ed0aea40730.webp https://njump.cloud.vinney.xyz/nevent1qqsg69rw54ykkk42addymg8xlnnp52em5evhmdq7qwqu773czwh9l0qzyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5umdwkfc During recent discussions about the security of decentralized inference through Routstr, people raised a valid concern: how can we be sure a provider doesn&#39;t read our prompts, or alter tool calls to backdoor the machine or the code it generates? Or how do we know the provider does not swap the model for a cheaper one and charge you full price? The usual answer is a TEE, a trusted execution environment. TEEs are hard to audit in practice. You trust the hardware vendor and re-verify a whole software stack after every update. We can do better, and now we do.<br/><br/>Routstr has a confidential mode. Your client talks TLS 1.3 directly to the upstream provider (Venice, for my node), and the Routstr node in between only relays encrypted records. Client and node compute the TLS keys together, so the node can add its API key without ever seeing your prompt or the answer, and it can&#39;t change a single byte of the response, tool calls included. Zero-knowledge proofs pin the model and the token cap, and you pay for the usage the provider itself reported. All of this rests on math and on the certificates you already trust, with no enclave or special hardware anywhere.<br/><br/>It works today on routstr.cypherpunk.today, through routstrd (I&#39;m running opencode agents on it) and right in the browser, where the page does every check itself. It&#39;s new and experimental, so please try it and tell me what breaks.<br/><br/>Blog: <a href="https://juraj.bednar.io/en/blog-en/2026/10/10/confidential-inference-on-routstr-without-trusted-hardware/">https://juraj.bednar.io/en/blog-en/2026/10/10/confidential-inference-on-routstr-without-trusted-hardware/</a><br/>Try it in the browser: <a href="https://jooray.github.io/routstr-confidential-pwa/">https://jooray.github.io/routstr-confidential-pwa/</a><br/>Paper: <a href="https://github.com/jooray/routstr-confidential/blob/HEAD/paper/paper.pdf">https://github.com/jooray/routstr-confidential/blob/HEAD/paper/paper.pdf</a><br/>Code: <a href="https://github.com/jooray/routstr-confidential">https://github.com/jooray/routstr-confidential</a> 2026-10-13T01:00:01Z https://njump.cloud.vinney.xyz/nevent1qqs2rv6pkxrnjfsyc5aqxham0xhq0h0kxs589s6mpdaegc80g6yqz5szyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5udjs7ra Poľsko práve ukázalo, ako môže od januára vyzerať slovenská e-faktúra:<br/><br/>Fakturownia je poľský cloudový fakturačný softvér napojený na štátny KSeF a má vyše 600 tisíc firemných klientov. Je to presne ten typ firmy, akým sa od 1. 1. 2027 stáva každý slovenský „digitálny poštár“.<br/><br/>27. septembra o 3:20 ráno sa niekto dostal do ich systémov. Vyhodili ho až 28. Septembra o 17:45, teda po viac ako 38 hodinách. Odniesol si veľkú časť databázy: údaje firiem a používateľov, hashe hesiel, bankové účty, platobné údaje, session a API tokeny aj systémové kľúče. Podľa samotnej firmy sa únik v rôznej miere týka každého účtu.<br/><br/>A teraz Slovensko. V Poľsku bol takýto sprostredkovateľ aspoň voliteľný; firma mohla ísť do KSeF aj priamo. U nás bude súkromný poštár zo zákona stáť v ceste každej B2B faktúre. Týka sa to 530 726 subjektov a zhruba päťdesiatky firiem, ktoré uvidia kompletné obchodné vzťahy celej krajiny.<br/><br/>Poštári nemajú zákonnú povinnosť mlčanlivosti, zákaz používať dáta na vlastné účely ani limit, ako dlho ich môžu držať. NBÚ pre nich v pripomienkovom konaní žiadal bezpečnostné štandardy a ministerstvo to zamietlo. SIS si pre seba vybavila výnimku, lebo systém sama považuje za neprimerané bezpečnostné riziko. Vy výnimku nemáte. A ešte si za to zaplatíte.<br/><br/>Otázka nie je, či niektorého slovenského poštára hacknú. Otázka je, ktorého prvého.<br/><br/>V Nethembe sme pred dvoma mesiacmi napísali, že pre priemyselnú špionáž a ransomware je to najlukratívnejší cieľ, aký kedy na Slovensku vznikol. Poľsko to práve potvrdilo.<br/>🇵🇱 <a href="https://www.money.pl/biznes/wyciek-danych-klientow-duzej-firmy-od-faktur-ma-ponad-600-tys-klientow-7334707825813728a.html">https://www.money.pl/biznes/wyciek-danych-klientow-duzej-firmy-od-faktur-ma-ponad-600-tys-klientow-7334707825813728a.html</a><br/>🇵🇱 <a href="https://www.telepolis.pl/wiadomosci/fakturownia-wyciek-danych">https://www.telepolis.pl/wiadomosci/fakturownia-wyciek-danych</a><br/>Proti e-faktúre: <a href="https://nethemba.com/sk/proti-e-fakture-firemny-stockholmsky-syndrom/">https://nethemba.com/sk/proti-e-fakture-firemny-stockholmsky-syndrom/</a> 2026-10-12T20:10:01Z https://njump.cloud.vinney.xyz/nevent1qqs9ktk9unhw3ccp3d5vh99ahn8etux4m6cynw4p5wgu834l8qsyfcczyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5ugzejll Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance<br/><a href="https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/">https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/</a><br/><br/>ARTEX - AI autonomous pentest system, English UI build (upstream: Autumn-27/ARTEX)<br/><a href="https://github.com/jfreemansh/Art">https://github.com/jfreemansh/Art</a>... 2026-10-08T20:10:01Z https://njump.cloud.vinney.xyz/nevent1qqs8qmjnl0c7nnjfgrgqd4pa0usglc2mqsr90k66t8wtc8f2pptvj2qzyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5u7p0nu7 6 ways Advanced Protection on Android keeps you safe<br/><a href="https://blog.google/security/android-advanced-protection-updates/">https://blog.google/security/android-advanced-protection-updates/</a> 2026-10-05T20:10:01Z https://njump.cloud.vinney.xyz/nevent1qqs8y255jvase043jyuw5rjuf6dt0uzq2upfrzgl4kcslvcy2f2y8nczyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5u33csry Bezpečnost v éře AI: Průlet zajímavými událostmi (Vašek Šraier, Standa Lukeš) <br/><a href="https://www.youtube.com/watch?v=1Sm54_ewMOg">https://www.youtube.com/watch?v=1Sm54_ewMOg</a> 2026-10-05T01:00:02Z https://njump.cloud.vinney.xyz/nevent1qqstsknun9gh8wv5mkrrvl06wlwsjzvg70lssul7rsl59tv4maa08dqzyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5u8xjcdn German Police Are Using Linked Devices to Read Messages from Messaging Apps Without Cracking the Encryption<br/><a href="https://www.privacyguides.org/news/2026/09/30/german-police-are-using-linked-devices-to-read-signal-messages-without-cracking-the-encryption/">https://www.privacyguides.org/news/2026/09/30/german-police-are-using-linked-devices-to-read-signal-messages-without-cracking-the-encryption/</a> 2026-10-02T20:10:00Z https://njump.cloud.vinney.xyz/nevent1qqswvk2vdm2a5pzyzg83phm5n3kmezk3k88rvr2p4h0cz7numjach0qzyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5ux5ca8m Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims<br/><a href="https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/">https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/</a> 2026-10-01T20:10:01Z https://njump.cloud.vinney.xyz/nevent1qqsxcgthm6csvy98r7cyux7u007ttldmxmsx7kgcsvcj02ar96agqrqzyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5umfn9kd What is the most private messenger? I ranked every messaging app!<br/><a href="https://m.youtube.com/watch?v=fkjY1usppkM">https://m.youtube.com/watch?v=fkjY1usppkM</a> 2026-10-01T01:00:00Z https://njump.cloud.vinney.xyz/nevent1qqsydq7aygzzfwvwpwac9tr75z4drsxgy729dqsn0zxkem5z8894c6czyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5u35rktc #88 Knife (HackTheBox) (Easy) Not So Sharp... <br/><br/>A backdoored PHP version allowing RCE gives us a shell on this system, after which it died multiple times. We eventually managed to run elevated ruby code via the knife application.<br/><a href="https://www.youtube.com/watch?v=Z7W4gvmCmdA">https://www.youtube.com/watch?v=Z7W4gvmCmdA</a> 2026-09-30T20:10:01Z https://njump.cloud.vinney.xyz/nevent1qqsrqleuemd2dk4yx398gef203jpja26s92y2n34gsfacnq3gtmw7xszyzysc9gmdmzp4gazw6vxe46hjldykzfnv24s9wzhu9uc4g48z3n5u54fwdr Of course, the issue lies with an inadequately secured government website, not with (Open)AI.<br/><br/>Australia launches urgent review after OpenAI program hacks government health portal<br/><a href="https://www.bbc.com/news/live/cvgl73pxgndwt">https://www.bbc.com/news/live/cvgl73pxgndwt</a> 2026-09-25T01:00:01Z