Oh FFS seems the website for ANTS (National Agency for Secured Documents) was letting you get data from another user by just changing the ID in the request. 19M accounts leaked (~1/3 of the french population).
Also, if that's how it worked, how the fuck can you not notice it for long enough that the attacker was able to get everything.
This is 🥖excellence francaise🥖 for you all.
https://frenchbreaches.com/blog/fuite-massive-a-lants-jusqua-19-millions-de-donnees-sensibles-exposees (FR)
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
mastodon
4.5.9
I have various notes about the French administration.
I also write code and stuff.
0
Followers
0
Following
Joined April 30, 2023
Yoyodyne IT:
Github:
Lookyloo:
Posts
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
5d ago
10
0
24
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Apr 08, 2026
Ca va, tranquille, on parle de 130G exfiltré sans se faire chopper, ils sont compétents dans cette boite: https://dailydarkweb.net/ymed-soon-care-suffers-massive-healthcare-data-breach-and-extortion/
2
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Apr 08, 2026
Welp, les Francais, si vous avez utilisé SOONCARE de YMED avant le 2026-04-06, tout est dans la nature.
Ce qui est rigolo, c'est que ce messge clairement automatique ne mentionne pas sooncare, donc sans fouiller, aucune idée de ce qui a été poppé...
Ce qui est rigolo, c'est que ce messge clairement automatique ne mentionne pas sooncare, donc sans fouiller, aucune idée de ce qui a été poppé...
0
1
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Apr 03, 2026
Seems we've reached the plot point "hero left behind enemy lines" of Wag the dog?
41
2
25
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Apr 01, 2026
3
0
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 18, 2026
2
0
2
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 16, 2026
Not sure if it is a bug, but surely it is confusing.
If you run tor and require a specific country code for the exit node, with strict node to 1 (--ExitNodes {<CC>} --StrictNodes 1) it will properly raise an error if the CC in invalid (say FOO), but if the CC exists *and* and there are no exits in that country, it will simply fallback to whatever, without any warning.
If you run tor and require a specific country code for the exit node, with strict node to 1 (--ExitNodes {<CC>} --StrictNodes 1) it will properly raise an error if the CC in invalid (say FOO), but if the CC exists *and* and there are no exits in that country, it will simply fallback to whatever, without any warning.
0
1
1
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 10, 2026
@whilelm it is a sad laugh. Bluesky (the company) will die because VCs are there to extract money and bluesky never made any money.
1
0
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 10, 2026
3
1
1
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 10, 2026
So. Hear me out. The existence of a "dignified transfer" implies an "undignified transfer", where they kick the coffin down the staircase. I don't make the rules.
7
1
2
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 09, 2026
the worse thing is when code review feels like prompting an AI with an extra step.
1
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 09, 2026
Not everyone need to learn to code. Especially when "learn to code" means "prompt an AI".
3
1
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 09, 2026
Todays cursed mimetype:
text/plain; charset=gzip+enc
wat
text/plain; charset=gzip+enc
wat
1
0
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 03, 2026
@dymaxion that's amazing.
0
0
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 02, 2026
@dymaxion so turns out, none of the main betting platforms will let you create your own bet. It's like they thought about it.
1
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 02, 2026
How long before you can Gofundme targeted assassination with bets like "3 ICE agents will not be killed by "?
3
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Mar 02, 2026
In case you missed, you can bet on murder*.
*offer only available for countries where the C-Suite doesn't live
https://www.404media.co/with-iran-war-kalshi-and-polymarket-bet-that-the-depravity-economy-has-no-bottom/
*offer only available for countries where the C-Suite doesn't live
https://www.404media.co/with-iran-war-kalshi-and-polymarket-bet-that-the-depravity-economy-has-no-bottom/
0
1
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Feb 12, 2026
they're pushing a lot of updated documents with more redactions of victims names. But to give you an idea of the sloppyness of the work they did, there is litterally a document that contains a table "Jane Doe | Name"
0
0
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Feb 12, 2026
And just saw 2 more changes, this time to redact victims names (these muppets only redacted the email addresses...).
0
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Feb 12, 2026
Just spotted that one today: EFTA00718363.pdf, modified on the 9th of February to unredact "elon" 🤷
1
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Feb 10, 2026
@dymaxion but hey, nobody cares about http headers, and they clearly have a system they don't understand
2
0
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Feb 10, 2026
@dymaxion I got annoyed by the shit interface and broken pagination, so I wrote a scraper, put it in a bash loop, and constantly get 20-ish random files out of the kinda canonical list of 500k unique urls I also rebuild in a loop because it's all broken 🤷
4
2
0
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
Raphaël Vinot
@rafi0t@social.yoyodyne-it.eu
I have various notes about the French administration. I also write code and stuff.
social.yoyodyne-it.eu
@rafi0t@social.yoyodyne-it.eu
·
Feb 10, 2026
This is nothing newsworthy but dataset 9 from the recent dump is still changing. Today, they updated EFTA00173201 and *unredacted* Leslie Groff and Leslie Wexner name & face and Karyna Shuliak name.
And for the nerds, you should know that the `last-modified` HTTP header in the response when you GET a file is accurate.
And for the nerds, you should know that the `last-modified` HTTP header in the response when you GET a file is accurate.
3
2
5