Tootfinder

Officials: the scope of cyberattacks on US water systems now includes at least seven states and may be far wider; MN was just the first to publicly report them (New York Times)
https://www.nytimes.com/2026/08/01/us/poli

Sources: the DOJ issued a subpoena to NYT freelancer Matthew Cole, seeking to force him to reveal his sources about a failed top secret mission in North Korea (Devlin Barrett/New York Times)
https://www.n…

etrade 2fa wants to send a code to my phone number, sure. but.. if I click "try another way", it asks me to enter a phone number that it will send a code to? checkbox compliance, "yes we have 2fa"

«Critical Copilot vulnerability allowed hackers to steal 2FA code from users:
SearchLeak exploit shows why the industry’s approach to LLM security fails over and over.»
WTF: What is intelligent now and how to tackle what? Certainly not the usual popular AI for IT security.
☠️

The U.S. Deported Him to Jail in Russia. Then He Escaped. (New York Times)
https://www.nytimes.com/2026/08/01/world/europe/russia-war-deserter.html?unlocked_article_code=1.2FA.eJTY.ZtuqxbLN2SRX&smid=nytcore-ios-share
http://www.memeorandum.com/260801/p41#a260801p41

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
https://www.nytimes.com/2026/08/01/us/politics/scope-of-hacks-on-us-water-supply-widens-as-evidence-points-to-iran.html?unlocked_article_code=1.2FA.k92q.frV8abocJAzk&smid=url-share

TIL that I've actually created a few "high impact" packages on NPM (with 1 million downloads per week)... Just got this email from them (see screenshot)
If each one of these would just pay me $0.001, I could actually comfortably dedicate myself full time to these projects (which has been my long, long dream job). But the system and social contract around open source is completely broken and so I've to balance my time and try to sustain myself and my family via other ways for periods o…

In case you missed it, scientists have confirmed that cats sometimes lick each other just to be annoying. #cat #cats #caturday #licking #jerks [gift link] https://www.nytimes.com/2026/07/10/science/cat-grooming-licking-research.html?unlocked_article_code=1.2FA.0VpR.SCUmRDnPUgYv&smid=url-share

As Cease-Fire Teetered, Iran Plotted a Wider War With Aid of Its Proxies (New York Times)
https://www.nytimes.com/2026/08/01/world/middleeast/iran-proxies-war-oil.html?unlocked_article_code=1.2FA.W2My.4yFC1sz3jI5J&smid=url-share
http://www.memeorandum.com/260801/p44#a260801p44

@… Problemem jest ogólnie 2FA do odblokowania PESEL przez numer telefonu.

Bo odzyskanie numeru wymaga odblokowania PESEL, a odblokowanie PESEL wymaga aktywnego numeru do odebrania SMS. Odblokowanie PESEL wymaga stawienia się w urzędzie - co dla kogoś spędzającego 9-10msc w roku poza krajem może być słabe.

Rozwiązaniem jest pos…

Vincent Pastore, Whose 'Sopranos' Character Ratted Out Tony, Dies at 80 (Clay Risen/New York Times)
https://www.nytimes.com/2026/08/01/arts/television/vincent-pastore-dead.html?unlocked_article_code=1.2FA.wff7.h8LGHeBMYNMG&smid=url-share
http://www.memeorandum.com/260801/p53#a260801p53

Is there a realistic way for an American to get 2FA website login codes via WhatsApp or something, anything more reliable than SMS when I'm in Europe? Some sites I use have TOTP or an email option but some insist on an actual SMS. Not even sure they can do RCS and they don't seem to.

@… Tak, o tym serwisie pisałem - logowanie przez ePUAP - 2FA SMS, albo aplikacja mobilna/bank.

Masz telefon zbrikowany telefon z eSIMem - nie możesz się zalogować, żeby odblokować PESEL, żeby dodać nowy eSIM (bo to jak nowa karta) do nowego urządzenia lub wyrobić duplikat fizyczny SIM.

Received email spam from newly registered socialdb [dot] xyz. Some kind of escrow racket for wannabe influencers.
Looks like if they find an email associated with your Mastodon account you'lll get subscribed to their mailing list.
Platform allows you to create an account using an email without verification and set 2fa via Tor. Just saying.

I had 2FA setup but couldn't generate the code, or some other recovery code I was supposed to have. But I prefer your explanation.

1Password launches a new Claude integration for Mac that lets Anthropic's AI agent sign in to websites without seeing the user's password or 2FA code (Zac Hall/9to5Mac)
https://9to5mac.com/2026/07/16/1password-now-lets-claud…

lost my usb key; found it in the trash. must have swept it up with other debris when I cleaned my desk. oops
now where did I put my backup key and did I add it to enough things. well, I've been pretty diligent about putting 2fa recovery codes into bitwarden (yes that puts the 2nd factor next to the 1st factor but I don't have a better answer yet)
oh, bitwarden now requires 2fa, lemme make sure I have a backup key for that
... this is such a hassle. too bad it's …

@… Tak - tylko parowanie aplikacji bankowej na "nowym" urządzeniu wymaga autoryzacji przez 2FA - najczęściej albo inna apka (nie możliwe - zbrikowany telefon), albo... SMS - sprawa z eSIMem i odblokowaniem PESEL.