A Revolut smishing campaign, from SMS to live account takeover 2026-09-30 · Evidence-backed anatomy of a Swedish Revolut scam: same-day .app domains behind DDoS-Guard, a copied face model, and a relay kit aimed at account takeover.
An EasyPark smishing campaign, from SMS to live card relay 2026-09-20 · Evidence-backed anatomy of a Swedish parking-fee scam: same-day domains, two-gate cloaking, and a kit that relays card data to a live operator.
One declaration, two languages: making a silent no-op a build error 2026-08-13 · Fifteen rules on one phone, written as typed Python and compiled into an APK: the vocabulary, the runtime, and why a silent no-op fails the build.
Bygg en bilduppladdare för Wayland-urklipp med Python och Nix 2026-08-12 · Ett CLI som laddar upp bilder från argv, pipe eller Wayland-urklipp. Magic bytes lokalt, JSONL-historik i fzf och en Nix-wrapper som fixar PATH.
Reading Tasker's APK: 13 broadcasts in the manifest, 60 more in a service 2026-08-12 · Decompiling Tasker 6.6.20 with apktool and jadx to find how a phone automation app delivers triggers on modern Android, and what its manifest admits.
Five condition operators against Tasker's fourteen: designing an automation artifact 2026-08-12 · What decompiling Tasker 6.6.20 changed about a phone automation compiler: named arguments, a condition tree instead of infix connectors, and a bug.