ELPH
·
Here paths converge, shadows cross and names multiply. A space for those who seek traces, and for those ready to lift the veil a little.
Entry is free, though not for all—some doors are locked with a key that demands memory and belonging.
News
A chronicle of the present moment, broken into syllables and meanings. Testimony of what has not yet become history.
Paths
A step-by-step ascent through the labyrinth of a subject. From draft to completion—a labour that demands patience.
Lines
A reconstruction of what has been. People whose names have been erased by time acquire an outline here. Access—by right of blood and by invitation.
-
Applebee's app shipped with a database password that exposed customer data
A researcher found hardcoded credentials in Applebee's Android app that allowed anyone to read and modify registered customers' personal data. The flaw has since been fixed.
-
EFF: VPN Apps Are Vanishing From Russia's App Store Again, and They Are Worth Defending
VPN developers report that Apple is once again pulling their apps from the Russian App Store. The Electronic Frontier Foundation calls this an unacceptable blow to a tool that protects privacy and free speech.
-
Linode investigates security incident tied to CVE-2026-98432
Linode's status page has posted a customer advisory about a recently disclosed remote code execution vulnerability. Akamai says it is taking mitigation steps and monitoring the platform.
-
PostgreSQL 19 Delayed as AI-Generated Bug Reports Overwhelm Developers
PostgreSQL's annual feature release normally lands in September or October, but version 19 will not arrive before November. Developer Robert Haas blames the workload created by a wave of bug reports and patches from AI agents.
-
OpenAI, Google, Microsoft and Anthropic back a shared signal for opting out of AI scraping
The biggest AI companies have agreed to honor a common "policy token" in robots.txt that lets publishers block the use of their content for model training in one step.
-
China's Vapor Panda Hits Over 200 Organizations Using AI Framework ARTEX
CrowdStrike reports that China-based Vapor Panda is using ARTEX, an agentic framework built on large language models, to run dozens of intrusions at once with a small team.
-
Key “4”: Cloudflare measures how much of the Internet still trusts eMudhra’s weak keys
Certificate authority eMudhra issued intermediate keys that can be recovered from public certificates almost instantly. Cloudflare explains how it patched its own systems, what it knows about exploitation attempts, and how many clients remain exposed.
-
WordPress Core Flaw Hit by Tens of Thousands of Attacks a Day Right After Patch Release
Attackers began going after a remote code execution flaw in WordPress Core soon after it was patched. Wordfence says it blocked nearly 63,000 attempts in 24 hours.
-
Ubuntu 27.04 "Tenacious T-Rex" Opens for Development
Following the release of Ubuntu 26.10, Canonical has formally opened the development cycle for the next release, Ubuntu 27.04, codenamed "Tenacious T-Rex." It is due on 22 April.
-
Another AI-built OS arrives, and NULLos keeps its source closed "for security"
Operating systems "coded from scratch" mostly by AI agents now turn up almost weekly. The NULLos developer stands out by keeping the source code closed and calling that a security measure.