White hat, red team. Mercenary Polymath. Data, cybersecurity, forensics, finance & economy, public affairs.

Zagreb, Croatia
Joined April 2007
Nedjeljni newsletter: klaunovi, cyber incidenti, hakirani Jerad Kushner, ruski satelitski flyby, John Goodman, Bill Ackman, zašto je diesel bitan, pre-mortem AI terorističkog događaja, marksizam za darkere, AFDovi mailovi, MARSx, velika čokoladna zavjera. mailchi.mp/mrak/nedjeljni-ne…
1
1
1
376
‼️ Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin and Boeing use the GoAhead web server, which has been accepting revoked certificates, FoxIO says. Its maker says it runs in hundreds of millions of devices. The critical flaw, CVE-2026-115881, lets a stolen device keep its access where client certificates are checked against a revocation list. FoxIO does not say which products are affected. A second bug, a 2018 typo in GoAhead's Mbed TLS builds, shrinks a 2048-bit encryption number to one byte, leaving 8 possible secrets. Anyone who recorded a TLS 1.2 session could decrypt it, if the connecting app accepts the broken number. Earlier this month, browsers cut off Indian certificate authority eMudhra after one of its private keys turned out to be the number 4. A third bug lets oversized certificate chains through on older LibreSSL builds. GoAhead fixed the first two in version 6.1.1 in August. Proof-of-concept code is public. Any fix for their devices has to come from the 13 firms.
11
78
9
396
28,071
Marko Rakar retweeted
I can confirm that @FlavioBolsonaro is no longer in Brazil and is on his way to the United States. A US protective operation is underway to ensure his safety.
4,081
5,538
1,187
52,307
2,948,957
Marko Rakar retweeted
Hod za život🥰
6
19
2
115
2,070
Marko Rakar retweeted
7
11
131
1,312
Marko Rakar retweeted
Srbski parlament postaja najbolj izobražen parlament na svetu. Baje bo v tem sklicu v njem sedelo več kot 150 doktorjev znanosti. Zakaj imam občutek, da bo ta mandat tragikomičen. “Achtundachtzig Professoren, Vaterland, du bist verloren.” Bismarck. Srbi jih bodo prekosili.
62
43
10
410
26,445
Pjesmica za poslušati na repeat dok čitate jučerašnji newsletter je No More "I Love You's", live izvedba gdje pjeva Annie Lennox za BBC One sessions: youtube.com/watch?v=32jXtAid…
1
135
No sabia que cantaban...
195
22
962
54,366
I have just spoken by phone with the leaders of the Students' List @studentblokade, who won the elections in Serbia, to congratulate them on their victory. I assured them of Hungary’s support. I was delighted to hear how much strength our victory in April had given them during this difficult struggle.
196
2,026
113
16,197
402,526
Marko Rakar retweeted
Vucic priznao poraz na izborima: pilicajci postadose profesionalni, batinasi obicni navijaci i dzeparosi, botovi kancelarijski radnici, RTS javini servis, tuzioci profesionalci, a sudije nepotkupljivi. Bajka!!!
6
7
1
121
2,924
- Šta pratite u izbornoj noći? - Flightradar.
22
201
9
2,926
37,820
Marko Rakar retweeted
When Roman empire fell, it was the western part they went for. Bypassing eastern part that went to live another ~1000 years until well... xitter.cf/visegrad24/status/2113…
There will be no riots and looting today in Vilnius, Warsaw, Prague, Budapest, Bucharest and Zagreb. Ask yourselves why it won’t happen in those cities
7
156
41,938
THE WAR BETWEEN CROATIA AND MOSSAD! CROATIAN SECRET SERVICE CAUGHT SERBIAN MOSSAD AGENT IN ZAGREB The Croatian secret service caught a Serbian Mossad agent in Zagreb who was trying to influence the Slovenian elections and made everything public to Slovenian public.
24
64
9
351
30,972
UNBELIEVABLE! Pope Leo personally called Putin and Zelenskyy, pushing for a ceasefire in Ukraine. Now the Trump White House is trying to give MELANIA TRUMP the credit, completely ignoring the Pope’s efforts! These people will do absolutely ANYTHING to steal the spotlight and rewrite the narrative. The shamelessness is OFF THE CHARTS!
218
2,843
196
7,936
198,825
Marko Rakar retweeted
"You know those scenes in financial movies like Margin Call where someone realizes that they're all fucked, and no one else sees it yet? And that person feels like they're crazy, and then suddenly everyone is pulling an all-nighter in a boardroom and freaking out? Yeah, that's kind of how this is feeling right now in the SF/Bay Area/AI circles." #take9 #CyberCivilDefense
# Black October For anyone who knows me even somewhat well, it's clear that I am a 99th percentile tech optimist. However, the vibes have shifted for me quite a bit in the last 18 hours, and I feel a moral imperative to share what I'm thinking and feeling with my circles so that everyone can understand, and hopefully take seriously, what's happening right now. I think October 2026 will have many chapters written about it in the history books. You know those scenes in financial movies like Margin Call where someone realizes that they're all fucked, and no one else sees it yet? And that person feels like they're crazy, and then suddenly everyone is pulling an all-nighter in a boardroom and freaking out? Yeah, that's kind of how this is feeling right now in the SF/Bay Area/AI circles. We're 48 hours into what is being called Black October. In the last 2 days there have been several dozen cyber attacks which, in isolation, would each have been the worst to happen in an entire calendar year. Every sector from government to education to big tech and banks is being massively affected, and people are starting to freak out. In a nutshell, what's happened is that frontier AI models have gotten to a point where they are as advanced as the most sophisticated programmers, with one critical difference: they can work 24/7, and you can spin up 10,000 of them with a single command and they'll work together tirelessly until they accomplish their task. The most advanced models today are from companies like Anthropic and OpenAI, whose current best technology is so good that they haven't been able to roll it out to everyone yet because of the national security risks it poses. Meanwhile, the best open source models (where anyone can just download the model weights and do whatever they want with them, uncensored) are slightly behind the frontier but still 90-95% as capable. These models, developed primarily in China, are being used by black hat hackers to wreak havoc on the Western capitalist structure. Presumably, this has been part of China's plan the entire time, and we're seeing its implications fall out in real time. In red-pilled AI circles, we've been sharing and reading papers called things like "Situational Awareness" and "AI 2027" for the last year or so, which at the time felt a bit like near-term speculative fiction. They laid out the case for why Artificial General Intelligence (AI smarter than any human at any knowledge task) and Recursive Self-Improvement (models that are able to use themselves to get better) weren't half-baked future ideas anymore, but instead an inevitable outcome of the linear progress that's happening. These papers would then talk about things like "takeoff scenarios," trying to envision how that moment would come to be and what it would be like when it happened. It would either be a "slow takeoff" that would play out over the course of months and quarters, happening subtly and only obvious to a few. Or, it would be a "fast takeoff" where it would pretty much happen instantly, like a bit flipping from 0 to 1. From everything that I can see and am feeling, we are currently experiencing the fast takeoff scenario. Beyond the crazy security vulnerabilities that have come out recently, there have also been massive breakthroughs in life sciences, fundamental computer science, materials science, and pure mathematics that have all landed in the same time frame. While I still firmly believe that AI will be a net positive for humanity, it's more clear to me than ever that the societal and individual risk is very real, and is playing out NOW. For as much conviction as I have that this is happening, the thing that's caused me to lose sleep is that I don't really know what to do about it, or more importantly, what to tell you, reader, to do about it. So, the best I can do is make a few suggestions that have always been a good idea but are more timely now than ever: Set up 2-factor authentication for everything. I use Duo. Use a password manager across your devices. I use 1Password. Get an identity protection app set up. I use Alta. Move your IoT devices to their own network. Claude helped me do this. And last, but certainly not least, if you've been avoiding leaning into AI, see this as a catalyst to wake up and start using it. Don't just use the chat mode version of ChatGPT/Claude; click that Code/Work button and see how easily you can have AI write code to help you with your job. One of the biggest vulnerabilities was in a massively popular programming language called PHP, and the prompt that set it off was literally, "Find vulnerabilities in php." This is an unprecedented time for humanity, but as we've done with many things before, we will prevail so long as we are kind, loving, and open-minded to the world. Much love.
23
79
5
1,165
266,825
Marko Rakar retweeted
43
2,365
75
30,678
283,901
Marko Rakar retweeted
4
55
4
265
15,926
Marko Rakar retweeted
You gotta be kidding me.
No wonder people think PHP is dead. Turns out... nope.
245
681
177
12,781
460,425
Marko Rakar retweeted
Odgovaram na neka pitanja o OSINT-u i otkrijem da je Vlada osnovala Centar izvrsnosti za OSINT. :-) Pretpostavljam da će njihovo djelovanje ići u smjeru da postave što više prepreki i pravila kako bi spriječili djelovanje onih koji prikupljaju informacije iz javnih izvora.
2
1
2
229
Marko Rakar retweeted
Today is one of those days where people will get to see if the Managed WordPress host they use actually manages it.
20
50
2
793
22,453