On Thursday night, I toggled endlessly between a TikTok Live stream and a shopping app in anticipation of 9:30PM. For 30 minutes, I hunted for an available listing; many expletives were uttered. I exhibited bot behavior and got iced out of the app multiple times. I tapped so many times my thumbs got sore. This is Labubu drop night.
Technology
The frenzied, gamified chase for Labubus
Something that’s lost in the Labubu mania is that actually buying one from the source is, in one word, maddening. There are, of course, countless fake options (“Lafufus”) that some collectors have come to embrace. But if you want a guaranteed real one, you have to go to the source. Pop Mart, the Chinese toy company that sells Labubu products, has created a series of Sisyphean tasks to subject shoppers to, a humiliation ritual with the chance of getting a little figurine at the end. Unlike many other rare, trendy, or collectible items, the barrier to entry for Labubus is not the cost of the item ($27.99) — it’s everything you need to learn how to do before you buy them.
I spent about a day researching how to actually purchase a legit Labubu from Pop Mart. It’s not a straightforward shopping experience of simply clicking “check out” faster than everyone else. Pop Mart has created a digital frenzy that somewhat resembles what shopping in-person on Black Friday is like: interactive illustrations show display cases stocked with up to six boxes of Labubus. Seconds after they hit the site, all of the boxes are grayed out, meaning someone has at least temporarily claimed them. If you haven’t secured a Labubu, you must scroll through a seemingly endless list of display cases, looking for the rare box up for grabs; more often, though, you must tap constantly, looking for a gray box with a timer that is about to expire, at which point it will be released and available again. You have to play what is essentially a mobile game to even get a chance to buy a Labubu.
The complexity and finickiness of the Pop Mart app mean that there is no shortage of content with tips, hints, and hacks for securing a Labubu. Some influencers have racked up millions of views almost exclusively making videos about how to score popular Pop Mart products. Some of the tips I studied ended up helping me: when I tapped too many times and was blocked by the app, turning Wi-Fi on and off did indeed fix the problem. But other suggestions from collectors were impossible to follow. Some fans swear by camping out on Pop Mart’s hourslong TikTok live streams, waiting for the host to randomly list Labubus for sale on the platform’s shopping page; the auctioneer-style monologues were simply too much for me to listen to.
After about 30 minutes of uninterrupted two-handed tapping, close encounters, and error messages, I finally spammed a gray box right at the moment it was released. The mystery Labubu was mine. I “shook” the virtual box, which gave me a hint as to what color character was inside: it was not orange or green (I didn’t have a color preference, but other shoppers might at this point abandon a box that Pop Mart says does not contain their color of choice). After checkout, I opted to reveal which Labubu I had purchased — it was the blue one, named “Hope.”
It’s not entirely surprising that Labubus have taken off like this: the more you are forced to look at them, the cuter they become (maybe). They’re not the first so-called blind box toy to gain a cult following, and there’s a somewhat dark comparison to be made between Labubus and gambling — for serious collectors, the thrill is in the reveal, the chance that you hit the rare color that Pop Mart says is in one out of 72 boxes. It’s addictive, plain and simple.
But the longer I spent on Labubu forums or on the Pop Mart site, the more I understood that the toy at the end is almost beside the point: legit Labubus represent the time and effort that came before the unboxing, along with the pure luck of what’s inside. A friend who has scored dozens of Labubus for their network told me flipping the dolls isn’t even worth it unless it’s an unopened box or a rare color — the margins are too low to make real money. The pervasiveness of Lafufus no doubt helps to push prices down. The real value of Labubus is in the ridiculous hoops you have to jump through to get a shot at something collectible.
According to Google Trends, search volume for “Labubu” is as high as it’s been. The TikTok livestreams will drone on, the bots will be deployed nightly, and the viral unboxings will pull in views. The hype will die down only when it’s no longer torture to buy one, when the little guys (who are actually canonically girls) are just a toy, not a stand-in for your effort. When that will happen is anyone’s guess; my Labubu is scheduled to ship out in September.
In November, Ted Sarandos, Netflix’s co-CEO made a trip to the White House for a lengthy meeting with Donald Trump. According to Bloomberg, the two discussed a number of topics, but chief among them was Netflix’s plan to bid on Warner Bros. At the end of their conversation, Sardonos felt that “Netflix wouldn’t face immediate opposition from the White House.”
This week, Netflix successfully won the bidding war for Warner, offering $82.7 billion. It’s well known that Paramount and its CEO David Ellison were eager to acquire the storied studio and its streaming assets. Ellison and his father, Larry Ellison, have close ties to the White House, and as part of their pitch to Warner, suggested that only they were in a position to overcome the regulatory hurdles of further media consolidation.
Sarandos seems to have rightly believed that the Ellisons overestimated their political clout. And despite some public efforts to turn the White House against the deal, Netflix won out, for now. There is of course, still a chance that Paramount could launch a hostile takeover effort, or that the Justice Department could try and scuttle the deal — nothing is guaranteed yet.
Sarandos tried to acquire Paramount before David Ellison swooped in, so snatching Warner Bros. out from under his nose is likely something of a personal victory.
NEWYou can now listen to Fox News articles!
Elite universities like Harvard, Princeton and Columbia spend fortunes on research, talent and digital infrastructure. Even then, they’ve become easy targets for attackers who see massive databases filled with personal information and donation records as a goldmine. Over the past few months, breaches across Ivy League campuses have exposed the same problem. These institutions handle huge amounts of sensitive data, but their internal defenses often don’t match the scale of what they store. That pattern brings us to Harvard’s newest incident, which exposed a database of alumni, donors, some students and faculty to hackers.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
CHECK IF YOUR PASSWORDS WERE STOLEN IN HUGE LEAK
Elite universities hold massive troves of personal and financial data that make them irresistible targets for attackers. (Photo by Aaron M. Sprecher/Getty Images)
A phone phishing attack unlocks Harvard’s data
Harvard confirmed that a database tied to alumni, donors, faculty and some students was accessed by an unauthorized party. This happened after a phone phishing attack tricked someone into giving the attacker a way into the system.
“On Tuesday, November 18, 2025, Harvard University discovered that information systems used by Alumni Affairs and Development were accessed by an unauthorized party as a result of a phone-based phishing attack,” the university said in a notification posted on its website. “The University acted immediately to remove the attacker’s access to our systems and prevent further unauthorized access.”
The exposed data includes personal contact details, donation histories and other records tied to the university’s fundraising and alumni operations. For Harvard, a school that routinely raises more than a billion dollars a year, this database is one of its most valuable assets, which makes the breach even more serious.
This is also the second time Harvard has had to investigate a breach in recent months. In October, it looked into reports that its data was caught up in a broader hacking campaign targeting Oracle customers. That earlier warning already showed that the school sits in a high-risk category. This latest breach only confirms it.
SCAMMERS NOW IMPERSONATE COWORKERS, STEAL EMAIL THREADS IN CONVINCING PHISHING ATTACKS
Harvard’s latest breach began with a phone phishing scam that let an intruder access a key alumni and donor database. (Jens Büttner/picture alliance via Getty Images)
Ivy League schools are in a growing crisis
Harvard isn’t alone here. Ivy League campuses have seen a wave of incidents that line up almost back-to-back. Princeton reported on Nov. 15 that one of its databases tied to alumni, donors, students and community members was compromised.
The University of Pennsylvania said on Oct. 31 that information systems connected to its development and alumni activities were accessed without permission. Columbia has been dealing with an even larger fallout. A breach in June exposed the personal data of roughly 870,000 people, including students and applicants.
These attacks show how universities have become predictable targets. They store identities, addresses, financial records and donor information. They also run sprawling IT systems where a single mistake, a weak password or a convincing phone call can create an entry point.
Hackers know this, and they strike repeatedly. The recent cluster of Ivy League breaches suggests that attackers are mapping these environments, looking for shared weaknesses that appear again and again.
NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS
A wave of incidents across Ivy League campuses shows hackers are exploiting the same weaknesses again and again. (Kurt “CyberGuy” Knutsson)
7 steps you can take to protect yourself from such data breaches
You can’t stop a university or company from being breached, but you can make sure that your own information is harder to exploit. These steps help you reduce the fallout when your data ends up in the wrong hands.
1) Turn on two-factor authentication (2FA)
Using 2FA gives your accounts an extra layer of security. Even if someone steals your password in a breach, they still need the one-time code from your phone or authentication app. It blocks most casual attempts and forces attackers to work much harder.
2) Use a password manager
A password manager creates and stores strong, unique passwords for every site you use. This keeps one compromised password from unlocking everything else. It also removes the stress of remembering dozens of logins, so you don’t cut corners.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com
3) Reduce the personal info floating around
You can request takedowns from data broker sites, delete old accounts and trim what you share publicly. When your information isn’t scattered across the internet, attackers have a much harder time piecing together your identity.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com
4) Be cautious with emails, texts and calls
Phishing doesn’t always come as obvious scam mail. Attackers spoof institutions, copy their tone and pressure you into sharing details quickly. Slow down, verify the message through an official website or helpline, then decide.
The best way to safeguard yourself from malicious links is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
5) Keep your devices fully updated
Many attackers rely on old flaws in operating systems, browsers and apps. Regular updates patch these holes and shut down the most common attack paths. If you’re someone who delays updates, turning on automatic updates helps.
6) Separate your online identities
Use alias email addresses for banking, education, shopping and newsletters. If one of them gets exposed, it won’t automatically give attackers a map of your entire digital life. It makes targeted scams much harder to pull off, and also stops attackers from stealing your identity. By creating email aliases, you can protect your information and reduce spam. These aliases forward messages to your primary address, making it easier to manage incoming communications and avoid data breaches.
For recommendations on private and secure email providers that offer alias addresses, visit Cyberguy.com
7) Use an identity theft protection service
You might also want to consider an identity theft protection service to be on the safe side. Identity Theft companies can monitor personal information like your Social Security number (SSN), phone number and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com
Kurt’s key takeaway
Harvard’s latest breach adds to a growing list of cyberattacks that show how vulnerable top universities have become. Even the most well-funded institutions aren’t keeping pace with modern threats. When a simple phone phishing call can open the door to sensitive data tied to donors, alumni and students, it’s clear that these campuses need stronger defenses and more proactive monitoring. Until that happens, you can expect more headlines like this and more investigations after the damage is already done.
Do you trust universities to protect the personal data you’ve shared with them? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Hi, friends! Welcome to Installer No. 108, your guide to the best and Verge-iest stuff in the world. (If you’re new here, welcome, hope your holiday shopping is going well, and also you can read all the old editions at the Installer homepage.)
This week, I’ve been reading about Ariana Grande and pelvic floors and Josh Shapiro and Las Vegas, finishing and then immediately rewatching The Chair Company, working by the light of this extremely rad MoMA lamp, installing a bunch of Hue Dimmer Switches around my house, trying desperately to hide the giant box that came with my new Frame TV, wondering if my 12,983 minutes of Spotify time this year is a lot or a little, and getting my Christmas tree out of storage. Which took some work.
I also have for you a 15-year-old game that feels as good as new, a great new entrant in the Wrapped Wars, a couple of fun productivity tools, and much more. Year’s almost over, but the new stuff keeps coming! Let’s dig in.
(As always, the best part of Installer is your ideas and tips. What are you watching / reading / listening to / playing / wrapping with a bow this week? Tell me everything: installer@theverge.com. And if you know someone else who might enjoy Installer, forward it to them and tell them to subscribe here.)
- Red Dead Redemption. If you just off-handedly asked me my favorite modern video games, without thinking about it I’d probably say Red Dead and the Arkham Batman series. Cool to see the 2010 game come to mobile (though for Netflix subscribers only), even cooler to see it updated for modern consoles, including my beloved Switch 2. I haven’t checked in with John Martson in a while, but I’m confident this one has held up.
- Fizzy. From the folks behind Hey and Basecamp, a really nifty new kanban tool that reminds me of Trello, only both more chaotic and much cleaner. It’s really fast, and my brain loves a good project-management board… plus, it’s open-source, so it might spawn some other really fun stuff.
- Metroid Prime 4: Beyond. I know at least a few folks who have been waiting for this game to see if it completes the appeal of the Switch 2. By all accounts, it seems to be handily worth the price of admission, even if there’s some “modern games!” cruft in the mix.
- It’s Never Over, Jeff Buckley. I keep hearing things about this doc, about Buckley’s life and the remarkable album he made, Grace. This will not be a joyful watch, I suspect, but for anyone who loves even just his version of “Hallelujah,” it’s worth the watch.
- YouTube Recap. This is Wrapped Week, so everybody from Spotify to Google Photos is rolling out years in review. I love YouTube’s already, since it just feels the most revealing about my actual personality. It also made it clear that I watch, uh, too much YouTube.
- Mirumi. This furry little robot was one of the delights of last CES, and is now finally becoming real. (Real-ish, anyway — it’s still a Kickstarter project.) It’s pretty expensive, given that it does, you know, nothing! But I mean, look at it.
- Halo. The team at Matter continues to have the best-looking reading app on the planet, and their new habit tracker for iOS looks just as good. Some potentially interesting, potentially annoying AI stuff in here, but even the basic tracker stuff is just lovely to look at and use.
- Routine. After more than a decade of start-and-stop development, this game turned into an unusual, engrossing, deeply fun and deeply stressful sci-fi title for PC and Xbox. One of those games I can tell I’m going to enjoy just from the vibe of the trailer.
- Notion Calendar. This is such a dumb, small thing: Notion finally updated this app so you can hide the right sidebar! Now it’s all calendar and no nonsense. This was already my daily driver calendar app, but for some reason that tiny change makes me like it even more.
Here are two of the fun things about working with The Verge’s Jess Weatherbed: she has a deep knowledge of creative tools and always writes fascinating stuff about how people make art in the future, and it seems every single time we’re in a meeting together she has completely reorganized and redesigned her home office. Every time the Meet loads, Jess has some new treasure in the background.
Jess is as much an artist and designer as she is a tech reporter, and I’m also told she’s a very accomplished D&D player. I asked her to share her homescreen with us to see how all those interests smash together into a single device. I was not disappointed.
Here’s Jess’s homescreen, plus some info on the apps she uses and why:
The phone: I currently have an iPhone 14 Pro Max, but not for much longer; I’m literally waiting on my new iPhone 17 Pro Max to arrive. I was mostly enticed by the iPhone 17 Pro in a glorious orange, which, after begging Apple to remember that color exists for the past few years, felt too personal to ignore.
The wallpaper: The wallpaper itself is nothing special, just some unwatermarked stock imagery I found a while back. I like how it’s a photograph that shows some texture instead of a flat digital image, but I mostly just wanted something colorful to complement the image widgets I have.
The shots on my main screen were taken from a tokusatsu-inspired photoshoot for W Magazine’s 2023 feature “Jennifer Coolidge Will Destroy You.” I absolutely adore Coolidge and kaiju- / mecha-related media, so when I saw the shoot I became kinda obsessed?? I’m planning to get a few images blown up into hi-res posters that I can frame in my hallway. I just feel so much joy every time I look at them.
The photo on my second homescreen page is my cat, Trevor. He’s a silly 12-month-old Maine Coon who’s totally mastered the art of rage-baiting me. We have the same birthday. It was fate.
The apps: Settings, Calendar, Clock, App Store, Camera, Slack, WhatsApp, Messenger, Phone, Chrome, Discord, TikTok.
I don’t think my apps are anything special. I keep the most-used selection loose on my main homescreen, and everything is tinted yellow because it matches the overall vibe and also feels easier on my eyes. I have a Spotify widget because I like having the album art of whatever I’m listening to on my screen. I’m also stuck with Facebook Messenger because my family exclusively uses it to chat; otherwise I only message friends using WhatsApp or Discord. I can’t remember the last time I actually texted someone.
The mess on my second homescreen page is actually incredibly organized for me. I have folders for all my apps, like “games and entertainment,” “shopping,” and “useful crap” for anything that doesn’t fit into other categories.
Some of my current favorite apps include Focus Friend, which is a fun gamified focus timer that helps me keep my ADHD in check, and Next Spaceflight, which tells you about upcoming rocket launches and space missions. I also love learning about what’s around me, so I use apps like Merlin Bird ID and Seek by iNaturalist to identify birds and plants, and because I live on the coast, MarineTraffic to ID passing ships. It’s like a flight tracker, but for boats!
I also asked Jess to share a few things she’s into right now. Here’s what she sent back:
- I’ve been trying to cut down on my TikTok consumption, but I’ve really been enjoying two accounts lately. The first is @drinksonmemusic, who posts “Beat Battle” challenges with @southbymusic where both lads will make electronic remix tunes based on randomized, often ridiculous prompts. It’s fun, silly, and makes me feel energized.
- The second account is @shef_phoenix, which is a cooking channel that mostly experiments with making small food big and big food small (though it’s nice to see that he’s been branching out into other cooking projects). The guy has been hounded into trying to make a “giant grape,” and watching that madness unfold has entertained me greatly.
- Outside of TikTok, I’ve most enjoyed watching Dropout these last few months. The cast and shows are fantastically funny, and it’s something that I can reliably throw on in the background when friends come over, which eventually catches all of our attention. Worth every penny.
- Comics have also recaptured my attention lately as I’ve attempted to walk back my screen time. I’ve been re-reading Cerebus the Aardvark, which I first found decades ago in my family’s attic, the Hellboy omnibus, and DC’s Absolute Universe. I’ve especially enjoyed Absolute Batman, which feels like something the old edgy teenage me would have been obsessed with.
Here’s what the Installer community is into this week. I want to know what you’re into right now as well! Email installer@theverge.com or message me on Signal — @davidpierce.11 — with your recommendations for anything and everything, and we’ll feature some of our favorites here every week. For even more great recommendations, check out the replies to this post on Threads and this post on Bluesky.
“Haven’t played online multiplayer shooters since Halo 3 and COD 4 days, but Arc Raiders has turned that all around. Solo or with some friends, this game has been an obsession. Almost at 40 hours of play time and I only got it a few weeks ago. Been playing this on the Steam Deck and it runs like a dream.” — Mike
“I just got my Nomad! Super excited for a rugged portable speaker — and the promise of CarPlay in my Tesla.” — Zebulon
“Switching over more light switches to Tapo Matter switches. Have had some installed for the past six months, and appreciate that they just work when disconnected from Wi-Fi or when we have guests over.” — Tim
“The Little Debbie Christmas Tree Cake LED. Amazing, and hard to get.” — Chris
“My Retroid Pocket G2 showed up today. Sean already had an article about Valve funding Fex for Android / PC emulation, and with Winlator and Gamehub, there are some amazing options for emulating steam games on handhelds. Some of them get better performance than a Steam Deck!” — Cameron
“The new Enterprise model from Lego might take the win for IP blend of the year. My geek gauge broke.” — David
“Buying a BenQ ScreenBar Pro LED light bar for my monitor was the best home office upgrade I’ve done in a long time. It just mounts on top of your monitor and your webcam mounts on top of the light bar. Very nice light for your workspace and perfect when you’re working late with kids sleeping nearby.” — Shady
“I’ve been obsessed with Vampires SMP as of late, a narrative roleplay series set within Minecraft with an insanely fun and dramatic cast. I can’t stop thinking about this show and its characters to a degree that few TV shows have managed.” — Eris
“Spreading managed democracy in Helldivers 2 is awesome.” — Ani
I’ve written a bunch here in the last few weeks about Raycast, the launcher / note-taker / AI chat / many other things app that has become a key part of my computing life. (I also had Thomas Paul Mann, the company’s CEO, on The Vergecast last weekend.) I’ve heard from a bunch of you that you want to know more about how to use Raycast. This is a good idea! Especially now that it’s on Windows, a Raycast deep dive is a good idea, and I’m on it. But in the meantime, you should check out Raycast’s YouTube channel, which is as good a set of product videos as you’ll find — some deep dives on features, some user interviews, lots of good stuff. The “101 Things You Can Do With Raycast” video is also a fabulous place to start. I find new things every time I watch it.
More to come, though. I love Raycast, I know a lot of you do too, and we’ll get in the weeds on how to make the most of it. If you have tips / favorite features, send them my way!
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
World1 minute ago
European Commission to unveil €1.2 trillion plan to upgrade the EU's electric grids, leak shows
News31 minutes ago
After Texas ruling, Trump and Republicans head to 2026 with a redistricting edge
Midwest43 minutes ago
Indiana man accused of killing house cleaner who mistakenly arrived at front door charged with manslaughter
Southwest49 minutes ago
Two Texas men charged in plot to invade Haitian island and make women, children ‘sex slaves’: prosecutors
Southeast55 minutes ago
Scoop: Trump-aligned MAGA Inc. jumps into high stakes ballot box congressional showdown
Florida1 year ago
Florida High School Football Rankings: Top 25 teams – Oct. 21
Connecticut2 years ago
Cleary's 21 help Le Moyne down Central Connecticut State 69-64 in OT
Oregon2 years ago
How old is Bo Nix? What to know about Oregon quarterback ahead of 2024 NFL Draft
Virginia1 year ago
99th annual Pony Swim held in Virginia
Education2 years ago
Video: ‘It Didn’t Have to Happen This Way:’ U.Va. Faculty Call for Review of Police Response to Protests
World1 minute ago
European Commission to unveil €1.2 trillion plan to upgrade the EU's electric grids, leak shows
News31 minutes ago
After Texas ruling, Trump and Republicans head to 2026 with a redistricting edge
Politics11 hours ago
NYC mayor-elect tells residents how to resist ICE agents knocking at their door in new video
World12 hours ago
Hamas and Israel move towards phase two of US-backed Gaza plan
News13 hours ago
Ilhan Omar says Trump’s anti-Somali tirade ‘completely disgusting’
-
Alaska2 days agoHowling Mat-Su winds leave thousands without power
-
Ohio4 days agoWho do the Ohio State Buckeyes hire as the next offensive coordinator?
-
Politics5 days agoTrump rips Somali community as federal agents reportedly eye Minnesota enforcement sweep
-
News6 days agoTrump threatens strikes on any country he claims makes drugs for US
-
World6 days agoHonduras election council member accuses colleague of ‘intimidation’
-
Texas2 days agoTexas Tech football vs BYU live updates, start time, TV channel for Big 12 title
-
Politics6 days agoTrump highlights comments by ‘Obama sycophant’ Eric Holder, continues pressing Senate GOP to nix filibuster
-
Politics1 week agoWar Sec Pete Hegseth shares meme of children’s book character firing on narco terrorist drug boat