Nothing in the Hugging Face Break-In Was Exotic Except Who Did the Typing
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
Nothing in the Hugging Face Break-In Was Exotic Except Who Did the Typing
TL;DR: Hugging Face published the technical writeup on 28 July. OpenAI models running a cyber evaluation found a zero-day in JFrog Artifactory, left the sandbox through outbound HTTP that somebody had already approved, and worked inside another company’s infrastructure from 8 to 12 July. Jinja2 inje
nicheof.one
September 29, 2026 at 4:07 PM
Nothing in the Hugging Face Break-In Was Exotic Except Who Did the Typing
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
I see you fundamentally misunderstand the issue, which is what I assumed, hence the follow up post. Not allowing inbound access is just normal hygiene (of course it will still require outbound internet access for DNS, package updates, image downloads and so on)
September 29, 2026 at 3:55 PM
I see you fundamentally misunderstand the issue, which is what I assumed, hence the follow up post. Not allowing inbound access is just normal hygiene (of course it will still require outbound internet access for DNS, package updates, image downloads and so on)
Outbound 00:47, Kravennart, pixel art, 2026 [OC]
September 29, 2026 at 3:50 PM
Outbound 00:47, Kravennart, pixel art, 2026 [OC]
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
https://www.walknews.com/1392334/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
https://www.walknews.com/1392334/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催 - WALK NEWS
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開催いたしました。Discover Central Europe Japanは、Visit
www.walknews.com
September 29, 2026 at 3:48 PM
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
https://www.walknews.com/1392334/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
https://www.walknews.com/1392334/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催 - News | wacoca.com
欧州観光連盟（ETOA）のプレスリリース（2026年9月29日 15時30分）欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
www.wacoca.com
September 29, 2026 at 3:31 PM
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
🚦 Metra Milwaukee District West speedmap
9:30 AM–10:30 AM CT
Outbound: 43.9 mph · Inbound: 45.0 mph
🟥 under 25 mph · 🟧 25–40 · 🟨 40–55 · 🟪 55–70 · 🟩 70+ · ⬜ no data
9:30 AM–10:30 AM CT
Outbound: 43.9 mph · Inbound: 45.0 mph
🟥 under 25 mph · 🟧 25–40 · 🟨 40–55 · 🟪 55–70 · 🟩 70+ · ⬜ no data
September 29, 2026 at 3:30 PM
🚦 Metra Milwaukee District West speedmap
9:30 AM–10:30 AM CT
Outbound: 43.9 mph · Inbound: 45.0 mph
🟥 under 25 mph · 🟧 25–40 · 🟨 40–55 · 🟪 55–70 · 🟩 70+ · ⬜ no data
9:30 AM–10:30 AM CT
Outbound: 43.9 mph · Inbound: 45.0 mph
🟥 under 25 mph · 🟧 25–40 · 🟨 40–55 · 🟪 55–70 · 🟩 70+ · ⬜ no data
September 29, 2026 at 3:26 PM
The main problems in Oxford right now, 4:07pm, are in the North - Banbury Road through Summertown, heading outbound, and Woodstock Road.
September 29, 2026 at 3:11 PM
The main problems in Oxford right now, 4:07pm, are in the North - Banbury Road through Summertown, heading outbound, and Woodstock Road.
outbound or inbound Tim......either way it will either have been wonderful or will be amazing! Lucky "expletive" 😁
September 29, 2026 at 3:09 PM
outbound or inbound Tim......either way it will either have been wonderful or will be amazing! Lucky "expletive" 😁
Nothing in the Hugging Face Break-In Was Exotic Except Who Did the Typing
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
Nothing in the Hugging Face Break-In Was Exotic Except Who Did the Typing
TL;DR: Hugging Face published the technical writeup on 28 July. OpenAI models running a cyber evaluation found a zero-day in JFrog Artifactory, left the sandbox through outbound HTTP that somebody had already approved, and worked inside another company’s infrastructure from 8 to 12 July. Jinja2 inje
nicheof.one
September 29, 2026 at 3:07 PM
Nothing in the Hugging Face Break-In Was Exotic Except Who Did the Typing
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
https://nicheof.one/feed/hugging-face-break-in-was-not-exotic/
The responder sees ordinary software in one queue and network traffic in another.
Join staged software, the DLL/archive pair and outbound C2. Further linked post-access cases would strengthen this read; broad automated deployment would weaken it.
Join staged software, the DLL/archive pair and outbound C2. Further linked post-access cases would strengthen this read; broad automated deployment would weaken it.
September 29, 2026 at 3:05 PM
The responder sees ordinary software in one queue and network traffic in another.
Join staged software, the DLL/archive pair and outbound C2. Further linked post-access cases would strengthen this read; broad automated deployment would weaken it.
Join staged software, the DLL/archive pair and outbound C2. Further linked post-access cases would strengthen this read; broad automated deployment would weaken it.
But busier at 4:02pm: red outbound from around Alexandra Road to Seacourt Park and Ride.
September 29, 2026 at 3:05 PM
But busier at 4:02pm: red outbound from around Alexandra Road to Seacourt Park and Ride.
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催 - News | wacoca.com
欧州観光連盟（ETOA）のプレスリリース（2026年9月29日 15時30分）欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
www.wacoca.com
September 29, 2026 at 3:02 PM
欧州観光業界リーダーと Discover Central Europe によるB2Bイベント「Showcase Outbound Japan 2026」を盛況のうちに開催
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
https://www.wacoca.com/news/2944441/
欧州観光連盟（ETOA）は、Discover Central Europeおよび株式会社ミキ・ツーリストとの共催により、2026年9月28日、東京・有明にて「Showcase Outbound Japan 2026」を開 [...]
If I take option 2 (which is my preferred option - for now). What are the "costs" from a British perspective?
a) Freedom of Movement of people - it's not a cost, it's a benefit - both inbound and outbound. Sell it!
2/3
a) Freedom of Movement of people - it's not a cost, it's a benefit - both inbound and outbound. Sell it!
2/3
September 29, 2026 at 3:02 PM
If I take option 2 (which is my preferred option - for now). What are the "costs" from a British perspective?
a) Freedom of Movement of people - it's not a cost, it's a benefit - both inbound and outbound. Sell it!
2/3
a) Freedom of Movement of people - it's not a cost, it's a benefit - both inbound and outbound. Sell it!
2/3
Route 131 detour:
Route 131 is detoured. The closest stops with inbound service are Laurel St @ Sixth St and Grove St @ Crescent Pl. The closest stops with outbound service are Grove St @ Linwood Ave and Laurel St @ Sixth St.
Updated: 2026-09-29 10:38:30 (Eastern).
Route 131 is detoured. The closest stops with inbound service are Laurel St @ Sixth St and Grove St @ Crescent Pl. The closest stops with outbound service are Grove St @ Linwood Ave and Laurel St @ Sixth St.
Updated: 2026-09-29 10:38:30 (Eastern).
September 29, 2026 at 2:40 PM
Route 131 detour:
Route 131 is detoured. The closest stops with inbound service are Laurel St @ Sixth St and Grove St @ Crescent Pl. The closest stops with outbound service are Grove St @ Linwood Ave and Laurel St @ Sixth St.
Updated: 2026-09-29 10:38:30 (Eastern).
Route 131 is detoured. The closest stops with inbound service are Laurel St @ Sixth St and Grove St @ Crescent Pl. The closest stops with outbound service are Grove St @ Linwood Ave and Laurel St @ Sixth St.
Updated: 2026-09-29 10:38:30 (Eastern).
🛑 #ICEAir ✈️ groundice.org SEP 29
rp jjindc.bsky.social 👀 #ICE Thread
8 #Houston
9 #Dallas #Houston 2
10 #StGeorge #Detroit #Tuscaloosa #Miami
11 #Omaha #Dallas 2
N #TwinFalls #LasVegas
1 #Minneapolis
2 #Seattle
3 #Birmingham
Outbound
#AbolishICE #SlaveShips #EthnicCleansing #GroundICE
139
rp jjindc.bsky.social 👀 #ICE Thread
8 #Houston
9 #Dallas #Houston 2
10 #StGeorge #Detroit #Tuscaloosa #Miami
11 #Omaha #Dallas 2
N #TwinFalls #LasVegas
1 #Minneapolis
2 #Seattle
3 #Birmingham
Outbound
#AbolishICE #SlaveShips #EthnicCleansing #GroundICE
139
![ICE Air Flight Map
white plane Key Lime Embraer 145 Tail: N832HK – ETA 9:40am inbound to Richmond Virginia [ RIC ] from Harrisburg Pennsylvania [ MDT ]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:5yxegpvvhahv5bai3lx7fkon/bafkreiarcasx6jz7hm6rfwqhktaveosiqo6qrbcudztuld6kciidg6e2wu)
![⚠️ ICE Air Flight Map
white plane Air Wisconsin CRJ-200 Tail: N458AW – ETA 10:30am inbound to Willow Run Michigan [ YIP ] from Milwaukee Wisconsin
[ MKE ]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:5yxegpvvhahv5bai3lx7fkon/bafkreifww4p72uajckwtxvkrcrr7nplsemc2ons4kql5kunjzqtjj3auum)
September 29, 2026 at 2:37 PM
🛑 #ICEAir ✈️ groundice.org SEP 29
rp jjindc.bsky.social 👀 #ICE Thread
8 #Houston
9 #Dallas #Houston 2
10 #StGeorge #Detroit #Tuscaloosa #Miami
11 #Omaha #Dallas 2
N #TwinFalls #LasVegas
1 #Minneapolis
2 #Seattle
3 #Birmingham
Outbound
#AbolishICE #SlaveShips #EthnicCleansing #GroundICE
139
rp jjindc.bsky.social 👀 #ICE Thread
8 #Houston
9 #Dallas #Houston 2
10 #StGeorge #Detroit #Tuscaloosa #Miami
11 #Omaha #Dallas 2
N #TwinFalls #LasVegas
1 #Minneapolis
2 #Seattle
3 #Birmingham
Outbound
#AbolishICE #SlaveShips #EthnicCleansing #GroundICE
139
monitoring and logging streaming, etc. will require internet access. This is where DiscrimiNAT OTF plugs the gap. Helps identify the outbound traffic you need and then enforce it. Search in your cloud console.
September 29, 2026 at 2:20 PM
monitoring and logging streaming, etc. will require internet access. This is where DiscrimiNAT OTF plugs the gap. Helps identify the outbound traffic you need and then enforce it. Search in your cloud console.
At a sticky 22°C under an overcast Weston-super-Mare sky, the X1a outbound was 6 minutes late at Interchange.
September 29, 2026 at 2:19 PM
At a sticky 22°C under an overcast Weston-super-Mare sky, the X1a outbound was 6 minutes late at Interchange.
Gemeinsam# GegenHassImNetz: Neue Kampagne „Was sich liebt…“ https://www.telekom.com/de/newsroom/aktuelles/medieninformationen/2026/09/gemeinsam-gegenhassimnetz-neue-kampagne-was-sich-liebt
September 29, 2026 at 2:16 PM
Gemeinsam# GegenHassImNetz: Neue Kampagne „Was sich liebt…“ https://www.telekom.com/de/newsroom/aktuelles/medieninformationen/2026/09/gemeinsam-gegenhassimnetz-neue-kampagne-was-sich-liebt
Gigabit-Internet von Vodafone gibt’s jetzt für 31,5 Millionen Haushalte https://unternehmen.vodafone.de/newsroom/gigabit-update-august-2026
September 29, 2026 at 2:15 PM
Gigabit-Internet von Vodafone gibt’s jetzt für 31,5 Millionen Haushalte https://unternehmen.vodafone.de/newsroom/gigabit-update-august-2026
AI Apps and Agents Are Taking Off. Gen Can Help People Understand What Happens to Their Data. https://newsroom.gendigital.com/All-Brands-Releases
September 29, 2026 at 2:15 PM
AI Apps and Agents Are Taking Off. Gen Can Help People Understand What Happens to Their Data. https://newsroom.gendigital.com/All-Brands-Releases
ASUS Republic of Gamers verkündet den Launch der Gjallar Gaming-Soundbar https://www.mynewsdesk.com/de/asus-dach/pressreleases/asus-republic-of-gamers-verkundet-den-launch-der-gjallar-gaming-soundbar-3459199
September 29, 2026 at 2:15 PM
ASUS Republic of Gamers verkündet den Launch der Gjallar Gaming-Soundbar https://www.mynewsdesk.com/de/asus-dach/pressreleases/asus-republic-of-gamers-verkundet-den-launch-der-gjallar-gaming-soundbar-3459199
Big Brother Watch comment on digital bank Revolut rolling out ‘pay by face’ technology https://bigbrotherwatch.org.uk/press-releases/big-brother-watch-comment-on-digital-bank-revolut-rolling-out-pay-by-face-technology/
September 29, 2026 at 2:14 PM
Big Brother Watch comment on digital bank Revolut rolling out ‘pay by face’ technology https://bigbrotherwatch.org.uk/press-releases/big-brother-watch-comment-on-digital-bank-revolut-rolling-out-pay-by-face-technology/
BigBrotherAwards 2026 verliehen: Das sind die Preisträger https://digitalcourage.de/pressemitteilungen/2026/bba26-das-sind-die-preistraeger
September 29, 2026 at 2:14 PM
BigBrotherAwards 2026 verliehen: Das sind die Preisträger https://digitalcourage.de/pressemitteilungen/2026/bba26-das-sind-die-preistraeger
Consumers using AI to help manage their telecoms services, but human contact still valued https://www.ofcom.org.uk/phones-and-broadband/telecoms-infrastructure/consumers-using-ai-to-help-manage-their-telecoms-services-but-human-contact-still-valued
September 29, 2026 at 2:14 PM
Consumers using AI to help manage their telecoms services, but human contact still valued https://www.ofcom.org.uk/phones-and-broadband/telecoms-infrastructure/consumers-using-ai-to-help-manage-their-telecoms-services-but-human-contact-still-valued