Tootfinder

We are now in the weeds on Hacker Summer Camp, so cut through the clutter and check out today's Metacurity for the most critical infosec developments you should know, including
--Microsoft, CISA warn of critical on-prem exchange flaw,
--Poisoned Google invite can exploit Gemini,
--OpenAI Connectors' weakness can extract info from Google Drive accounts,
--Sweeping intrusion breached US legal filing system,
--Deibert warns of tech fascism,
--NIST with…

Microsoft, CISA warn of critical on-prem exchange flaw
Poisoned Google invite can exploit Gemini, OpenAI Connectors' weakness can extract info from Google Drive accounts, Sweeping intrusion breached US legal filing system, Deibert warns of tech fascism, NIST withheld AI report due to Trump fears, Air France and KLM hit by cyberattacks, much more

Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction.
https://www.wired.com/story/poisoned-document-could-leak-secret-dat…

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction.

Researchers show how a weakness in OpenAI's Connectors let sensitive data be extracted from a Google Drive account using an indirect prompt injection attack (Matt Burgess/Wired)
https://www.wired.com/story/poisoned-document-could-leak-secret-data-chatgpt/

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction.

My nephew asked for a computer that has an optical drive. I brought the only one that I owned to him. (It is not new.) He said that he thought that I would set it up for him. I told him to Google it, and he replied that he can't Google things that he doesn't already know. 🤨

Every now and then I check my #Google account quota (https://drive.google.com/drive/u/0/quota) to make sure its not pulling any sneaky shit like automatically uploading my

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

Apparently I missed that as of last year, Proton now has Docs (https://proton.me/drive/docs) as an alternative to real-time editing via Google Docs (or Word docs). As of now, it appears Proton only has Docs for word processing and not one like Google Sheets for spreadsheets (yet? I'll need that functionality …

Create and collaborate on docs with total privacy | Proton
Proton Docs is end-to-end encrypted so your work stays safe from data breaches, online surveillance, and can never be fed into privacy-invading AI models.

🎉 2026 Canberra Comedy Festival 🎉
It is that time of year already!
Expressions of interest for local artists for the 2026 Canberra Comedy Festival are now open.
If you are thinking of applying, please first read out FAQ https://drive.google.com/file/d/1VerO1

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

Google launches a new AI ransomware detection feature for Drive on desktop, trained on millions of real victim files encrypted by various ransomware strains (Lily Hay Newman/Wired)
https://www.wired.com/story/googles-latest-ai-ransomware-defense-only-goes-s…

Google’s Latest AI Ransomware Defense Only Goes So Far
Google has launched a new AI-based protection in Drive for desktop that can shut down an attack before it spreads—but its benefits have their limits.

6.5 hour drive ❌
3.5 hours for traffic ✅
Google Maps presented a secondary road shortcut. Looked like a good idea b/c it wasn’t colored deep red like the traffic jam in front of us.
However, I think they don’t calculate traffic delays on secondary roads. Everyone had the same idea.
I looked down & it said 35 minutes to go. Had to pee, but fine I can hold it.
15 min later, looked down… 35 min to go. 😱
For the next two hours, as we inched along… 35 min…

On Google's New Backup-and-Sync, and G-Drive: Reviews (2017) - An efficient and simple backup scheme that works for me, that does not carry a big price tag nor carbon footprint. - https://www.earth.org.uk/note-on-backup-energy-efficiency.html

On Googles New Backup-and-Sync, and G-Drive: Reviews (2017)
An efficient and simple backup scheme that works for me, that does not carry a big price tag nor carbon footprint.

Reliance launches a subsidiary called Reliance Intelligence, aiming to create national-scale AI infrastructure in India, in partnership with Google and Meta (Jagmeet Singh/TechCrunch)
https://techcrunch.com/2025/08/29/billionaire-ambani-taps…

Billionaire Ambani taps Google, Meta to build India's AI backbone | TechCrunch
Reliance is launching a new subsidiary to drive India's AI ambitions, including a pending partnership with OpenAI.

"We simply don’t know to defend against these attacks. We have zero agentic AI systems that are secure against these attacks.[…] It’s an existential problem that, near as I can tell, most people developing these technologies are just pretending isn’t there."
https://www.

You would think Google Drive app would have basic search that finds all document titles containing search words. You would be wrong. Actually Apple Files/iCloud search is much better. The more I work with Google apps, the more mediocre they seem. The main thing that stops me from getting folks to use iCloud web apps is the unnecessary 2 modal dialogs to open every doc.

I usually quite like Google Drive, but for some reason my work account is not accepting a change in interface language.
This seems to be a known problem.
#Google #GoogleDrive

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

It’s *wild* to me that Google Drive has no option to see how large a folder is on disk 😭

pretty good comic anthology
cw for a lil bit of everything really
https://drive.google.com/file/d/19-XGkq7oA1r833EQh8NV05EevBVcAnBe/view?usp=sharing

Alternatives to Big Tech/Big Data:
Windows, Apple, Google -> Linux (Debian, Fedora, Mint, Arch...)
Microsoft Office -> LibreOffice (Only Office would also work, but the founders are Russian, who knows...)
Google Android, Apple iOS -> Pixel with GrapheneOS, Fairphone 6 with /e/OS, Brax 3 with iode OS/Ubuntu Touch
OneDrive, Google Drive, iCloud, Dropbox, etc. -> Nextcloud, MEGA, pCloud, Proton Drive
Outlook, Gmail, etc. -> Proton Mail, Tutanota

I'm paranoid about the cloud, OneDrive etc
I have a policy that most stuff I put on the cloud is encrypted (esp backups). Not always practical tho.
I was happy to discover rclone https://rclone.org/ a while ago, & to find out it can set up encrypted containers on OneDrive etc. Readable on both ends, e…

Google is testing a Windows desktop app that brings Mac's Spotlight-like search bar to PC users, allowing them to search local files, Google Drive, and the web (Emma Roth/The Verge)
https://www.theverge.com/news/778940/google-app-windows-launch

Google’s new Windows desktop app brings a Spotlight-like search bar to PC
Google is testing a new app on Windows that you can use to search your files, Drive, and the web.

On Google's New Backup-and-Sync, and G-Drive: Reviews (2017) - An efficient and simple backup scheme that works for me, that does not carry a big price tag nor carbon footprint. - https://www.earth.org.uk/note-on-backup-energy-efficiency.html

On Googles New Backup-and-Sync, and G-Drive: Reviews (2017)
An efficient and simple backup scheme that works for me, that does not carry a big price tag nor carbon footprint.

I've been using Pika Backup with a google drive destination for at least a year and it's always been relatively smooth.
For the last three days, though, it's been complaining the destination is unresponsive (although I can browse it happily from commandline etc).
Some new package released three days ago that might interfere?
Update: looks like there was a flatpak-runtime org.gnome.Platform on the 17th.
Ideas anybody?

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

From personal experience this weekend, I now know that it's possible to drive over 500km on a single charge in a Chevrolet Bolt EV.

ChatGPT Connectors 0click Attack https://labs.zenity.io/p/agentflayer-chatgpt-connectors-0click-attack-5b41 that's why I don't like the idea of connecting any of my services to any of my other services. Convenience has costs.

Odio tener que usar WhatsApp (por favor, usar @… ) pero tengo que hacerlo... ¿Alguien sabe cušl es el mejor software para hacer copia de seguridad de los chats sin usar Google Drive? #WhatsApp

In the ISE2025 lecture today, our students learned about unsupervised learning on the example of k-Means clustering. One nice hands-on example is image colour reduction based on k-means clustering, as demonstrated in a colab notebook (based on the Python DataScience Handbook by Vanderplus)
colab notebook: https://…

Ethereum's "low-risk DeFi" applications like payments and savings could drive the chain's revenue in a similar way that search and ads sustain Google's business (Vitalik Buterin/Vitalik Buterin's website)
https://vitalik.eth.limo/general/2025/09/21/lo…