RSS Parrot

BETA

🦜 Paul Moore - Security Consultant  / @Paul_Reviews

@nitter.poast.org.paul.reviews@rss-parrot.net

I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.

---

Twitter feed for: @Paul_Reviews. Generated by https://nitter.poast.org

Your feed and you don't want it here? Just e-mail the birb.

Site URL: nitter.poast.org/Paul_Reviews

Feed URL: nitter.poast.org/paul_reviews/rss

Posts: 11

Followers: 1

RT by @Paul_Reviews: I am internet friends with @Paul_Reviews. It is deeply funny that every time the EU tries to launch a state-developed age verification app, he white-hat breaks it and demonstrates how it poses security risks to European users in mere hours. https://www.techradar.com/vpn/vpn-privacy-security/first-your-age-next-your-identity-inside-the-hack-that-broke-the-eu-age-verification-apps-privacy-promises

Published: August 6, 2026 17:39

I am internet friends with @Paul_Reviews. It is deeply funny that every time the EU tries to launch a state-developed age verification app, he white-hat breaks it and demonstrates how it poses security risks to European users in mere hours. …

Absolutely disgusted by the response from #HMD Not only have they failed to notify the public of the plethora of #critical #security issues I raised a month ago (and 7 months ago!) but when directly asked why the entire platform has been offline for 3 weeks+... "It has not been hacked. Everything is safe and nothing to worry about. Rest be assured" @prestonjbyrne - Can I borrow your hamster for a cheeky reply? #fuse #childSafety @ICOnews #hmdfuse #harmblock #AI #breachBehindClosedDoors

Published: August 3, 2026 19:08

Absolutely disgusted by the response from #HMD Not only have they failed to notify the public of the plethora of #critical #security issues I raised a month ago (and 7 months ago!) but when directly asked why the entire platform has been offline for 3…

Account deleted @Hacker0x01 There's no reality in which I'll hand over my #passport or #drivingLicense to have critical disclosures closed as information only.

Published: July 31, 2026 19:05

Account deleted @Hacker0x01 There's no reality in which I'll hand over my #passport or #drivingLicense to have critical disclosures closed as information only. Paul Moore - Security Consultant  (@Paul_Reviews) From August 14th 2026, you need to…

From August 14th 2026, you need to present your #passport, #IDcard or #drivingLicense in order to submit bounty reports to @Hacker0x01 No. Very, very no.

Published: July 31, 2026 18:51

From August 14th 2026, you need to present your #passport, #IDcard or #drivingLicense in order to submit bounty reports to @Hacker0x01 No. Very, very no.

RT by @Paul_Reviews: First your age, next your identity: Inside the 'hack' that broke the EU age verification app's privacy promises https://www.techradar.com/vpn/vpn-privacy-security/first-your-age-next-your-identity-inside-the-hack-that-broke-the-eu-age-verification-apps-privacy-promises

Published: July 31, 2026 15:09

First your age, next your identity: Inside the 'hack' that broke the EU age verification app's privacy promises techradar.com/vpn/vpn-privac…

#EU #AgeVerification unfixable bypass: ✅ Automate the device ✅ Detect and relay the QR code ⏱️ Push to GitHub Once an age verification QR code appears, it will detect & automatically relay to a legitimate device that completes the verification remotely. If a "technically ready", "no more excuses" solution can be bypassed this easily, it creates a false sense of security. Why would companies invest in meaningful, real-world child protection if they believe the EU age verification app has already solved the problem? Security isn't just about cryptography. It's resisting abuse in the real world.

Published: July 31, 2026 08:26

#EU #AgeVerification unfixable bypass: ✅ Automate the device ✅ Detect and relay the QR code ⏱️ Push to GitHub Once an age verification QR code appears, it will detect & automatically relay to a legitimate device that completes the verification remotely. …

RT by @Paul_Reviews: Relay attacks don't care how cryptographically sound your credentials are. At some point, someone will create a paid service which accepts QR codes and verifies them with a fully autonomous Android phone. 1000 verifications: $1 #EU #AgeVerification #DigitalIdentity #Security

Published: July 27, 2026 16:31

Relay attacks don't care how cryptographically sound your credentials are. At some point, someone will create a paid service which accepts QR codes and verifies them with a fully autonomous Android phone. 1000 verifications: $1 #EU #AgeVerification…

It beggars belief that over 2 weeks later, there's still no public announcement on this critical issue. A phone sold explicitly to children has been quietly leaking the GPS coordinates, names & phone numbers of every child in the system since launch.... by design. Had two interviews with reporters at the end of last week, so expect this to hit mainstream media shortly. #childSafety #privacy #security

Published: July 26, 2026 19:12

It beggars belief that over 2 weeks later, there's still no public announcement on this critical issue. A phone sold explicitly to children has been quietly leaking the GPS coordinates, names & phone numbers of every child in the system since launch....…

RT by @Paul_Reviews: 🔞La Commission européenne répond aux critiques sur les failles de son système de vérification de l’âge https://www.tomsguide.fr/la-commission-europeenne-defend-son-app-de-verification-de-lage-face-aux-critiques/ @Paul_Reviews

Published: July 22, 2026 07:41

🔞La Commission européenne répond aux critiques sur les failles de son système de vérification de l’âge tomsguide.fr/la-commission-e… @Paul_Reviews

#Harmblock+ still offline for "essential #security upgrades" That's a very coy way of informing the public the entire platform was wide open. But hey, it only reports the live GPS coordinates of 1.5M children. #responsibleDisclosure #PSA

Published: July 22, 2026 07:24

#Harmblock+ still offline for "essential #security upgrades" That's a very coy way of informing the public the entire platform was wide open. But hey, it only reports the live GPS coordinates of 1.5M children. #responsibleDisclosure #PSA Paul Moore…