<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>HARD Journal</title><description>How people are getting hacked, as it happens.</description><link>https://hard.fyi/</link><language>en-au</language><item><title>Rules off, $20 a month</title><link>https://hard.fyi/journal/rules-off-20-a-month/</link><guid isPermaLink="true">https://hard.fyi/journal/rules-off-20-a-month/</guid><description>A startup now rents out AI models with their safety rules removed. Signing up is free, there are no identity checks, and nothing you type is kept.</description><pubDate>Thu, 22 Oct 2026 04:00:00 GMT</pubDate></item><item><title>Someone is collecting AI keys</title><link>https://hard.fyi/journal/ai-keys/</link><guid isPermaLink="true">https://hard.fyi/journal/ai-keys/</guid><description>Fireworks AI, OpenCode and now Railway. Three platforms in fifteen days, each breached for the same kind of thing: the keys their customers trusted them to hold.</description><pubDate>Wed, 21 Oct 2026 23:00:00 GMT</pubDate></item><item><title>Seven in ten websites are waiting on a patch</title><link>https://hard.fyi/journal/php2shell/</link><guid isPermaLink="true">https://hard.fyi/journal/php2shell/</guid><description>Two critical flaws in PHP, the language behind most of the web, leaked before they could be fixed. Most families won&apos;t have to patch anything. The people they trust with their data will.</description><pubDate>Wed, 21 Oct 2026 10:00:00 GMT</pubDate></item><item><title>The guardrails came off in 35 hours</title><link>https://hard.fyi/journal/guardrails-off-in-35-hours/</link><guid isPermaLink="true">https://hard.fyi/journal/guardrails-off-in-35-hours/</guid><description>DeepSeek released a new open AI model on a Saturday afternoon. By the early hours of Monday, Sydney time, a version with its safety rules removed was online for anyone to download.</description><pubDate>Tue, 20 Oct 2026 22:00:00 GMT</pubDate></item></channel></rss>