FlokiNET describes refusing a takedown demand for Icepick, a site publishing work identities and contact details of federal employees involved in enforcement. The request, which alleged doxxing, came through ZeroFox, a company acting for a government agency in a country where FlokiNET does not operate. FlokiNET argues that identifying officials in their public roles differs from exposing private information, and that the site can support accountability reporting, despite the dataset having originated in a breach. Its refusal did not keep the site accessible: registrar CentralNic placed the original domain on hold, and the site later reappeared under a different domain.
The case raises concerns about automated takedown systems and government use of commercial contractors. DHS signed a $15 million ZeroFox contract in July 2026 covering ICE and Homeland Security Investigations, allowing the company to file notices on the department’s behalf through 2028. FlokiNET says automated detection cannot reliably distinguish harassment from journalism, while the party making a claim may be hidden from the recipient. It also points to ZeroFox’s prior labeling of peaceful Black Lives Matter organizers as potential threats. The proposed safeguards are to require notice filers to identify their client, legal basis, and accountable party, and to disclose automated detection; removals through registrars should face similar scrutiny. Without such checks, the system can suppress inconvenient information while bypassing meaningful review.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A Linux kernel use-after-free vulnerability, CVE-2026-98432, can enable remote code execution, and Go 1.24 enables MPTCP by default on Linux, exposing listeners to the demonstrated exploit. Upgrade to a patched kernel; disabling MPTCP in Go is only a fragile mitigation. (groups.google.com)
Scribd disclosed a security incident in which an unauthorized party may have accessed users’ email addresses, partial payment card details, country, issuer, expiry date, and payment history. The company says it secured the affected system, notified authorities, and advises users to watch for phishing. (news.ycombinator.com)
Flock camera searches in Highland Heights fell 95% after a dispatcher was caught misusing the system. The sharp drop followed the discovery of the misconduct. (wkyc.com)
AT Protocol apps can store user data publicly on personal data servers, where it is easy to search and retrieve. Skyreader subscriptions exposed more than 1,300 RSS feeds, including private and paywalled feeds, while other apps also publish messages openly. (melaniekat.com)
At least nine AI developer platforms disclosed breaches in October, with attackers targeting stored credentials and environment variables that grant access to AI services. The incidents point to coordinated agent-driven attacks fueled by the resale of stolen AI access, though investigations are still ongoing. (wiz.io)
The CVE-2026-112816 page requires JavaScript to display properly. The supplied content gives no details about the vulnerability. (cve.org)
Today's best Hacker News stories, summarized and screenshotted, one email a day.