Reddit

Unsolicited iPhone 15 Pro Max Delivery to Reddit User Sparks Fears of Targeted Cyber Attack

A Reddit user received an unexpected iPhone 15 Pro Max in a sealed box that was never ordered. Apple’s service identified the serial number as belonging to a device purchased or activated in December 2023, with its warranty already expired in 2024, creating a clear mismatch between the new-looking packaging and the device’s documented history. The included FedEx label contained a tracking number that does not exist in the carrier’s system. Discussion on the platform raised the possibility of a targeted attack, potentially a form of whaling, in which the phone could have been pre-modified to steal data or credentials once connected to a network or Apple ID. No concrete evidence confirms the package originated from an attacker, and alternative explanations such as a delivery error or order fraud remain possible. Experts recommend that recipients avoid powering on the device, inserting a SIM card, or entering any account credentials, and instead consider returning it to Apple for inspection or disposing of it as electronic waste.

OSINT for the Lazy Part 17: Versatile Framework Acts as Swiss Army Knife for Investigators

The article continues the series on tools for lazy OSINT practitioners by reviewing a multifunctional online toolkit hosted at htdark.com. This minimalistic yet powerful platform aggregates data across usernames, email addresses, phone numbers, IP addresses, cryptocurrency, social networks, and media files. It wraps Censys search capabilities into a more convenient interface while adding features such as JSON report export and basic relationship graphing. The tool checks 20 social platforms including Reddit and Spotify but omits Chinese and Russian resources, marking absent accounts in red and requiring manual verification for others. An Advanced section functions as a dork builder supporting Baidu and Naver with time-range filters and exclusion operators. While no single toolkit replaces specialized solutions, this framework provides broad initial visibility and helps analysts choose focused follow-up directions based on accumulated data rather than random checks.

Scientists Consider Replacing Leap Seconds with a Century-Scale 'Extra Hour' to Protect Global Digital Infrastructure from Negative Leap Second Risks

International timekeeping authorities are accelerating plans to overhaul the leap second system by allowing a much larger gap between atomic time and Earth's rotation, potentially requiring the next major adjustment only after several centuries. The proposal, which could take effect as early as 2027, aims to eliminate the disruptive practice of adding or removing individual seconds from UTC. Leap seconds, introduced in 1972, have repeatedly caused outages at companies including Meta, Reddit, and Cloudflare, while also affecting aviation and high-frequency trading. Because Earth's rotation has been accelerating since 2016, experts now face the unprecedented risk of a negative leap second that would remove one second from UTC—an event whose impact on modern systems remains unknown. With a roughly 30 percent chance of needing such a negative adjustment before 2035, the General Conference on Weights and Measures is pushing for a larger tolerance between coordinated and astronomical time. The new approach would preserve the long-term link between civil time and Earth's rotation but make it far less rigid, allowing atomic clocks to govern daily operations without sudden one-second jumps.