On the Pokrovsk front, Ukraineโs 3rd SOF Regiment carried out a clearing operation at an industrial site where Russian forces attempted infiltration. After drone reconnaissance spotted Russian forces, the team waited for optimal weather before moving in.
Bingo: Turkish firm Besiktas Shipping is halting all operations with Russia after one of its tankers was damaged off Senegalโs coast. The company said it had complied with international sanctions and the G7/EU price cap, but growing security risks have made continued shipping โunacceptableโ for vessels and crews.
Ukraine will not receive Czech T-72M4 CZ tanks due to unresolved technical issues with their fire-control systems. The modernization project was canceled after testing revealed accuracy problems linked to faulty electronic components. Instead, Czechia will focus on supplying modern Leopard tanks and continue other forms of military support.
Zelensky says the U.S. delegation wants to report directly to Ukraine following recent talks. โTheir signals will shape our next steps.โ He stressed Ukraine supports ending the bloodshed, but warns that unless the war ends on firm terms, Russia may return with a third invasion. โWe need protection and long-term certainty, thatโs what Ukrainians deserve.โ
Italyโs government is delaying a decree to extend military aid to Ukraine into 2026 due to internal disputes within PM Meloniโs coalition. While Meloni vows to support Kyiv โto the end,โ her deputy Matteo Salvini has questioned the need to continue such assistance, Reuters reports.
NBC reports that Russia finds three parts of Trumpโs peace proposal unacceptable: Ukraineโs control over Donbas, limits on its armed forces, and Western countries not recognizing territories occupied by Russia. Moscow is prepared to be flexible on certain secondary issues.
Russia has launched nearly 1,800 missiles at Ukraine over the past year, with 215 launches recorded in November 2025 alone. Ukrainian air defenses intercepted around 55% of them.
Trump claimed he ended eight wars and now aims to end the Russia-Ukraine war too, adding that Witkoff and Kushner are in Moscow trying to assess the situation. He repeated his criticism of U.S. allies for "robbing" America, namedropped countries while pretending not to, and called Bidenโs $350B aid to Ukraine โlike handing out candy.โ
President #Zelenskyy met Irish businesses, highlighting strong interest in cooperation. He hopes for deeper partnerships, investments for resilience, and Ukraineโs reconstruction. Grateful for support, he sees this first forum as a step toward stronger future ties.
While European leaders are in trance with secondary issues, officials from the US, Russia and China sit together regarding issues concerning Europe.
Power politics is a trait virtually all European leaders have lost. I have laid out that if Europe and especially the largest nations like Germany, France or UK are not military intervening, they all will be eventually sidelined and still be a military target.
"What matters is that everything is fair and transparent. That there are no games played behind Ukraine's back. That nothing is decided without Ukraine โ about us, about our future."
๐ท๐บ๐ #Russia has seen a sharp rise in aviation incidents in the fourth year of Western sanctions that cut off access to spare parts for foreign-made aircraft, an investigation by the exiled news outlet Novaya Gazeta Europe has found.
Russia has seen a sharp rise in aviation incidents in the fourth year of Western sanctions that cut off access to spare parts for foreign-made aircraft, an investigation by the exiled news outlet Novaya Gazeta Europe has found.
European Parliament warns that Hungaryโs ruleโofโlaw crisis is deepening, branding the country a โhybrid electoral autocracy.โ It cites judicial interference, systemic corruption, misuse of EU funds, AIโgenerated political deepfakes, and calls for direct Articleโฏ7 action.
๐ท๐ด Romania's coalition govt approved a decree on Tuesday enabling it to take control of the local assets of companies under int'l sanctions, such as #Russia's Lukoil.
Lukoil has 320 petrol stations in #Romania, operates the country's third-largest refinery and holds offshore exploration rights in a section of the Black Sea.
๐ฌ Just before the meeting, #Putin warned #Europe that it would face swift defeat if it went to war with #Russia, and he dismissed European counter-proposals on #Ukraine as being absolutely unacceptable to Russia.
๐ฌ #Putin threatened on Tuesday to sever #Ukraine's access to the sea in response to drone attacks on tankers of #Russia's "shadow fleet" in the Black Sea.
"The most radical solution is to cut Ukraine off from the sea, then piracy will be impossible in principle," Putin said.
๐ท๐บ๐ง๐พ Russian and Belarusian athletes should be allowed to participate in International Ski and Snowboard Federation qualification events if they meet the IOC's criteria for individual neutral athletes, the Court of Arbitration for Sport said on Tuesday.
๐น๐ฏ๐ท๐บ Tajikistan is in talks with #Russia and a Moscow-led regional security grouping about the possibility of Russia deploying troops to jointly patrol the volatile border with Afghanistan, Reuters reported on Tuesday.
๐ต๐ฑ Polish prosecutors are charging a Russian in absentia with directing a group of saboteurs and spies as part of a suspected destabilisation campaign due to Warsaw's strong support for #Ukraine
Another IRIS-T SLM/SLS air defense system has been delivered by Germany to Ukraineโs Western Air Command. The unit operating it has already proven its effectiveness, taking down 5 Kh-101 cruise missiles, 2 Iskander-Ks, and 2 Shahed drones.
Putin says Russia is ready if Europe โstarts a war,โ claiming Moscow doesnโt want conflict but is prepared. He also rejected current European peace proposals on Ukraine as โunacceptableโ and threatened broader strikes on Ukrainian ports and vessels in response to recent tanker attacks.
Putin is now meeting in the Kremlin with Trump envoy Witkoff and Jared Kushner. Details of the talks remain undisclosed, but the meeting follows recent U.S.-Ukraine negotiations. Putin's aide Ushakov and head of negotations Dmitriev are also present.
I have added another #PeerTube channel on video.echelon.pl - a mirror of the popular #Telegram channel War Translated, which publishes popular #Russia #Ukraine war videos in English and with English description:
Previously, many of these I have hand picked to post on the @ua_war_videos channel but now these will be mirrored automatically which will save me tons of time.
All War Translated support/sponsoring information is replicated on the channel verbatim, so if you want to support the original author you will see same details as he publishes on Telegram. I wasnโt able to contact him directly but hope this works for him even though Telegram isnโt particularly a community that cares about attribution and copyright.
Secondo un'analisi della Camera dei Rappresentanti olandese, la maggior parte degli adolescenti coinvolti nella criminalitร digitale abbandona entro i 20 anni, con solo il 4% che continua.
Huh. Just chatted in person with someone who's been on #mastodon for a while, now, who honestly thought that all the Mastodon domains were run by Mastodon. And having a different domain was, like, just a vanity thing to look cool. It only came up because they were complaining about an issue they were having, and they were on a smaller server (not naming it for anonymity), so I suggested contacting their server admin about the problem. I was surprised when they answered "Dude nobody at big companies reads those reports. It just all goes to AI or whatever." It took some actual convincing to get them to believe that the server they're on does, in fact, have a living breathing human admin who can be talked to.
Anyway, folks, support your #fediverse server admins and moderators. With money, where you can. They're almost certainly getting messages from users who think that reporting things to an admin here is exactly like reporting stuff to Facebook or Google. IE: screaming at a giant faceless entity who's never going to care or do anything about whatever your problem is.
How did the person react when you told them, that the servers are run by several thousand people mostly with their own money? Have you also told that there is more than only Mastodon, but some dozen other systems as well?
Starter Pack di Mastodon รจ una pagina che raccoglie gli account preferiti su Mastodon, e comprende gli argomenti piรน diversi, ci si puรฒ registrare al sito e inserire il proprio "starter pack": fedidevs.com/starter-packs/
Ho scelto due starter pack come esempi.
โก๏ธ Il primo con il tag #Unplugtrump raccoglie (al momento) 74 account di organizzazioni e progetti opensource che si oppongono a Trump e alle oligarchie big tech che lo sostengono per promuovere la societร civile e la democrazia: fedidevs.com/s/NDU5/
โก๏ธ Il secondo รจ una mappa che raccoglie 40 account di "Illustratorษ e fumettistษ italianษ ": fedidevs.com/s/Njc3/
โก๏ธ mappa italiana di 24 account ambientalisti con movimenti ecologisti, gruppi di attivisti climatici e di mobilitร sostenibile: fedidevs.com/s/NzUx/
โก๏ธ Mappa italiana FediLUG con 49 account dedicati a Linux fra divulgatori, associazioni, professionisti e appassionati: fedidevs.com/s/NzQ4/
I started a game of Pathfinder Kingmaker, and I have a question for people familiar with the Pathfinder table-top role-playing game: is a party of 4 level 2 characters equipped with 6 Alchemist's Fire supposed to run at the sight of a couple spider swarms also in the pen and paper game?
In the video game, alchemist's fires are more miss than hit, and they will tear my party apart if I don't roll high on the fire damage in the first place. Feels OP?
As far as I know, the crpg is built on an engine that self-consciously follows the trrpg mechanics. That being said, I used the settings to dial down the threat level a couple of times when it seemed too punishing.
@matsuzine Thank you for the reply! I'm playing on Normal difficulty, which means enemies are slightly easier (the game's words, not sure what it means). There are times where a bad outcome is logical. 4 wolves aggro 1 character, they all hit, he died. That makes sense to me. But a single swarm of spiders doing consistent AoE damage while being immune to almost anything my characters have, it feels slightly lopsided.
I this case, using spells like burning hands should work well, or just not fighting the swarms
The Pathfinder1e rule system can be opaque, and there is a massive difference between just using the characters and optimizing them, neoseeker.com has very good guides about that. Applying heightened stinking cloud kind of auto-wins all later encounters.
All statistics in this report come from Kaspersky Security Network (KSN), a global cloud service that receives information from components in our security solutions voluntarily provided by Kaspersky users. Millions of Kaspersky users around the globe assist us in collecting information about malicious activity. The statistics in this report cover the period from November 2024 through October 2025. The report doesn’t cover mobile statistics, which we will share in our annual mobile malware report.
During the reporting period:
48% of Windows users and 29% of macOS users encountered cyberthreats
27% of all Kaspersky users encountered web threats, and 33% users were affected by on-device threats
The highest share of users affected by web threats was in CIS (34%), and local threats were most often detected in Africa (41%)
Kaspersky solutions prevented
... mostra di piรน
Kaspersky Security Bulletin 2025. Statistics
All statistics in this report come from Kaspersky Security Network (KSN), a global cloud service that receives information from components in our security solutions voluntarily provided by Kaspersky users. Millions of Kaspersky users around the globe assist us in collecting information about malicious activity. The statistics in this report cover the period from November 2024 through October 2025. The report doesnโt cover mobile statistics, which we will share in our annual mobile malware report.
During the reporting period:
48% of Windows users and 29% of macOS users encountered cyberthreats
27% of all Kaspersky users encountered web threats, and 33% users were affected by on-device threats
The highest share of users affected by web threats was in CIS (34%), and local threats were most often detected in Africa (41%)
Kaspersky solutions prevented nearly 1,6 times more password stealer attacks than in the previous year
In APAC password stealer detections saw a 132% surge compared to the previous year
Kaspersky solutions detected 1,5 times more spyware attacks than in the previous year
To find more yearly statistics on cyberthreats view the full report.
I proprietari di Porsche in Russia riscontrano problemi con gli allarmi di fabbrica, che bloccano le loro auto. La causa non รจ ancora nota, ma potrebbe essere intenzionale.
I proprietari di Porsche in Russia riscontrano problemi con gli allarmi di fabbrica, che bloccano le loro auto. La causa non รจ ancora nota, ma potrebbe essere intenzionale.
Little Lie Detector is Probably No Worse Than The Big Ones
Want to know if somebody is lying? It’s always so hard to tell. [dbmaking] has whipped up a fun little polygraph, otherwise known as a lie detector. It’s nowhere near as complex as the ones you’ve seen on TV, but it might be just as good when it comes to finding the truth.
The project keeps things simple by focusing on two major biometric readouts — heart rate and skin conductivity. When it comes to the beating heart, [dbmaking] went hardcore and chose an AD8232 ECG device, rather than relying on the crutch that is pulse oximetry. It picks up heart signals via three leads that are just like those they stick on you in the emergency room. Skin conductivity is measured with a pair of electrodes that attach to the fingers with
... mostra di piรน
Little Lie Detector is Probably No Worse Than The Big Ones
Want to know if somebody is lying? Itโs always so hard to tell. [dbmaking] has whipped up a fun little polygraph, otherwise known as a lie detector. Itโs nowhere near as complex as the ones youโve seen on TV, but it might be just as good when it comes to finding the truth.
The project keeps things simple by focusing on two major biometric readouts โ heart rate and skin conductivity. When it comes to the beating heart, [dbmaking] went hardcore and chose an AD8232 ECG device, rather than relying on the crutch that is pulse oximetry. It picks up heart signals via three leads that are just like those they stick on you in the emergency room. Skin conductivity is measured with a pair of electrodes that attach to the fingers with Velcro straps. The readings from these inputs are measured and then used to determine truth or a lie if their values cross a certain threshold. Presumably, if youโre sweating a lot and your heart is beating like crazy, youโre telling a lie. After all, we know Olympic sprinters never tell the truth immediately after a run.
Does this work as an actual, viable lie detector? No, not really. But thatโs not just because this device isnโt sophisticated enough; commercial polygraph systems have been widely discredited anyway. There simply isnโt an easy way to correlate sweating to lying, as much as TV has told us the opposite. Consider it a fun toy or prop to play with, and a great way to learn about working with microcontrollers and biometric sensors.
I sat for a long while with my complicated feelings about "vibe coding". It is _genuinely_ empowering for many โ opening a door to creating with code that otherwise would never exist. Also? It enables a dangerous dependency that could be a path to serfdom for coders. anildash.com/2025/12/02/vibe-cโฆ
Software engineering is often compared to actual engineering. Would it be good if everyone could design buildings, bridges, and elevators without any kind of education? Most software applications involve user data in some way, and some go as far as touching upon actual human safety. The argument about empowerment does not hold, especially considering how easy it is to be autodidact in software engineering in the first place.
@Gargron I think that's a fair argument for the segment of coding that is software engineering. I would argue a *lot* of coding isn't really... software engineering? Like, the front-end code on my blog certainly doesn't count as that for me. If I get an LLM to help me, and it has an error, there's no security or privacy implications, nor any real danger except maybe a rendering error. So it seems like a fair domain to just muddle through. There are a lot of things in that space these days.
@Gargron there is a lot of discussion in the US about a Professional Engineering license for Software. It goes in and out of favor, but I think that it should be required for at least life-critical software.
There is some gatekeeping there, but I think when human lives are at risk it is justified.
@Gargron on a related note, I think comparing software engineering to physical engineering is flawed because software engineering as practiced today is neither rigorous nor as disciplined as physical engineering. Here are some more thoughts rvprasad.medium.com/software-sโฆ
@nico beastie boyce I truly couldn't tell, there aren't any easily available pictures of EsDeeKid's actual face, they're always wearing some kind of face covering.
Se dovessi indicare la vera icona di quest'epoca, a malincuore direi Trump. Ha le caratteristiche che rendono questi tempi cosรฌ feroci: l'arroganza, la volgaritร , il cinismo, la megalomania e soprattutto una concezione messianica di se stesso che lo rende capace di qualsiasi follia. Se esistesse il pulsante dell'Apocalisse, Trump sarebbe capace di schiacciarlo mentre pubblica un selfie autocelebrativo su Instagram.
A pochi mesi dalla partenza, il cosmonauta russo Oleg Artemyev รจ stato rimosso dall'equipaggio della Crew-12 e sostituito. Secondo alcuni avrebbe fotografato documenti di SpaceX per portarli all'esterno. L'agenzia spaziale russa Roscosmos parla solo di un cambio di incarico theins.ru/news/287330
"Researchers using Google Trends search data in a 2020 study found a link between male insecurity and support for Trump. They identified areas with high levels of web searches for erectile dysfunction, penis size, penis enlargement, hair loss, hair plugs, testosterone, and Viagra."
Anatomia di una Violazione Wi-Fi: Dalla Pre-connessione alla Difesa Attiva
Nel contesto odierno, proteggere una rete richiede molto più che impostare una password complessa. Un attacco informatico contro una rete wireless segue un percorso strutturato che evolve dal monitoraggio passivo fino alla manipolazione attiva del traffico.
Analizzeremo questo processo in tre fasi distinte: l’ottenimento dell’accesso, le manovre post-connessione e le contromisure difensive necessarie.
1. Fase di Pre-connessione: Sorveglianza e Accesso
Il penetration test di una rete wireless inizia analizzando la sua superficie di attacco: si osservano le identificazioni visibili e si valutano configurazioni deboli o non sicure.
Monitoraggio e Identificazione del Target
Il primo passo consiste nell’utilizzare strumenti in modalità
... mostra di piรน
Anatomia di una Violazione Wi-Fi: Dalla Pre-connessione alla Difesa Attiva
Nel contesto odierno, proteggere una rete richiede molto piรน che impostare una password complessa. Un attacco informatico contro una rete wireless segue un percorso strutturato che evolve dal monitoraggio passivo fino alla manipolazione attiva del traffico.
Analizzeremo questo processo in tre fasi distinte: lโottenimento dellโaccesso, le manovre post-connessione e le contromisure difensive necessarie.
1. Fase di Pre-connessione: Sorveglianza e Accesso
Il penetration test di una rete wireless inizia analizzando la sua superficie di attacco: si osservano le identificazioni visibili e si valutano configurazioni deboli o non sicure.
Monitoraggio e Identificazione del Target
Il primo passo consiste nellโutilizzare strumenti in modalitร โmonitorโ per raccogliere informazioni dettagliate sui punti di accesso (AP) e sui client attivi. Abilitando lโinterfaccia wireless in questa modalitร e lanciando il comando seguente, lโanalista scandaglia ciascun canale della rete:
[strong]airodump-ng wlan0mon[/strong] Output di airodump-ng in modalitร monitor: identificazione delle reti WPA2 e dei client connessi. Questi dati sono fondamentali per selezionare il bersaglio. Segnali di debolezza includono un SSID facilmente riconoscibile, un basso numero di client o lโassenza del protocollo WPA3. Una volta individuato il target, si esegue una scansione mirata per aumentare la precisione con il comando: airodump-ng -c <canale> --bssid <BSSID> -w <file_output> wlan0mon
Intercettazione dellโHandshake
Per ottenere lโaccesso completo su reti WPA/WPA2, รจ necessario catturare lโhandshake, ovvero lo scambio di pacchetti che avviene quando un client si associa al router. Se non si verificano connessioni spontanee, si interviene con un attacco di deautenticazione.
Utilizzando Aireplay-ng, si inviano pacchetti che disconnettono temporaneamente il client vittima: aireplay-ng โdeauth 5 -a <BSSID> -c <Client_MAC> wlan0mon Al momento della riconnessione automatica del dispositivo, lโhandshake viene registrato da Airodump e salvato su disco in un file .cap. Altro esempio di output di airodump-ng: evidenza di canali e durata pacchetti.
Cracking della Crittografia
Acquisito il file, si passa allโattacco offline. Strumenti come Aircrack-ng esaminano ogni password contenuta in una wordlist (come la comune rockyou.txt), combinandola con il nome dellโAP per generare una Pairwise Master Key (PMK). Questo processo spesso utilizza algoritmi come PBKDF2 per lโhashing.
Il comando tipico รจ: aircrack-ng -w rockyou.txt -b <BSSID> handshake.cap La PMK generata viene confrontata con i dati crittografati dellโhandshake: se coincidono, la password รจ rivelata. Per password complesse, si ricorre a strumenti come Hashcat o John the Ripper, ottimizzati per lโaccelerazione GPU.
2. Fase Post-connessione: Mimetismo e MITM
Una volta superata la barriera iniziale, lโattaccante ha la possibilitร di interagire direttamente con i dispositivi nella rete locale. Lโobiettivo ora cambia: bisogna mimetizzarsi tra gli altri dispositivi e raccogliere dati senza essere rilevati.
Mappatura della Rete
Il primo passo post-connessione รจ costruire una mappa della rete. Strumenti come Netdiscover eseguono una scansione ARP attiva sullโintera sottorete per raccogliere IP e MAC address: netdiscover -r 192.168.1.0/24 Screenshot reale da laboratorio: handshake WPA2 catturato allโesecuzione del comando aireplay-ng
Successivamente, Nmap permette unโanalisi profonda. Con il comando nmap -A <IP_Target>, si esegue una scansione aggressiva per identificare porte aperte, versioni dei servizi e il sistema operativo del target, rivelando potenziali vulnerabilitร come software obsoleti.
Man in the Middle (MITM) e ARP Spoofing
La strategia offensiva piรน potente in questa fase รจ lโattacco Man in the Middle, spesso realizzato tramite ARP Spoofing. Lโattaccante inganna sia il client che il gateway alterando le loro cache ARP, posizionandosi logicamente tra i due.
I comandi manuali per realizzare ciรฒ sono:
arpspoof -i wlan0 -t <IP_Client> <IP_Gateway> (Convince il client che lโattaccante รจ il gateway).
arpspoof -i wlan0 -t <IP_Gateway> <IP_Client> (Convince il gateway che lโattaccante รจ il client).
Per automatizzare il processo, si utilizzano framework come MITMF, che integrano funzionalitร di DNS spoofing, keylogging e iniezione di codice. Un esempio di comando รจ:
Il successo di un attacco dipende dalla capacitร difensiva del bersaglio. Esistono strumenti specifici per individuare comportamenti anomali e bloccare le minacce tempestivamente.
Monitoraggio del Traffico con Wireshark
Wireshark รจ essenziale per lโanalisi profonda. La sua interfaccia permette di identificare pattern sospetti come le โtempeste ARPโ. Per configurarlo al rilevamento dello spoofing:
Accedere a Preferenze > Protocolli > ARP.
Abilitare la funzione โRileva schema richiesta ARPโ.
Questa opzione segnala irregolaritร , come la variazione frequente del MAC associato a uno stesso IP. Inoltre, il pannello โInformazioni Espertoโ evidenzia risposte ARP duplicate e conflitti IP, indici chiari di un attacco in corso. Output di netdiscover in laboratorio: IP e MAC dei dispositivi attivi
Difesa Attiva con XArp
Per una protezione automatizzata, XArp offre due modalitร : passiva (osservazione) e attiva (interrogazione). Se XArp rileva che il MAC del gateway cambia improvvisamente, invia un probe diretto per validare lโassociazione IP-MAC e generare un alert.
Scenario Pratico di Attacco e Risposta
Per comprendere meglio la dinamica, consideriamo un esempio in una rete LAN aziendale:
LโAttacco: Un attaccante connesso via Wi-Fi lancia arpspoof, impersonando simultaneamente il router (192.168.1.1) e il client vittima (192.168.1.100).
Il Rilevamento: Su una macchina della rete รจ attivo XArp, che rileva una variazione improvvisa dellโindirizzo MAC del gateway. Il software attiva un probe, confronta la risposta e conferma la discrepanza, generando un alert immediato per lโamministratore.
La Reazione: A questo punto le difese si attivano. Un firewall locale puรฒ bloccare il traffico verso il MAC falsificato, oppure lโamministratore puรฒ ripristinare la corretta voce ARP forzando lโassociazione corretta con i seguenti comandi:
Su Linux:sudo arp -s 192.168.1.1 00:11:22:33:44:55
Su Windows:arp -s 192.168.1.1 00-11-22-33-44-55
Questa operazione impedisce nuove sovrascritture finchรฉ la voce statica rimane in memoria.
4. Contromisure Tecniche per la Sicurezza delle Reti
Nel contesto odierno, le contromisure tecniche non devono limitarsi al rilevamento, ma puntare a impedire lโesecuzione dellโattacco a monte. Di seguito analizziamo le strategie principali per proteggere reti LAN e WLAN.
Tabelle ARP Statiche
Una delle tecniche piรน semplici ma efficaci รจ la configurazione manuale di voci statiche. Di default, i sistemi operativi usano tabelle ARP dinamiche che possono essere manipolate. Inserendo manualmente le voci (come visto nello scenario precedente), si impedisce ogni modifica non autorizzata. ร importante ricordare che queste configurazioni vanno reinserite ad ogni riavvio o automatizzate tramite script.
Modifica dellโSSID e Gestione del Broadcast
I router utilizzano spesso SSID predefiniti (es. โTP-LINK_ABC123โ) che rivelano il modello del dispositivo e le relative vulnerabilitร note. Cambiare lโSSID in un nome generico (es. โnet-home42โ) riduce lโesposizione. Inoltre, disabilitare il broadcast dellโSSID rende la rete invisibile ai dispositivi che non la conoscono. Sebbene non sia una misura assoluta (il nome รจ recuperabile dai beacon frame), aumenta la difficoltร per attaccanti non esperti.
Filtraggio degli Indirizzi MAC
Il MAC filtering consente lโaccesso solo ai dispositivi esplicitamente autorizzati nel pannello di amministrazione del router. Qualsiasi altro dispositivo viene rifiutato. Anche questa misura puรฒ essere aggirata tramite MAC spoofing, ma resta unโottima prima barriera in reti con un numero limitato di dispositivi.
Disabilitazione dellโAmministrazione Wireless
Molti router permettono la configurazione remota via Wi-Fi. Questo espone la rete al rischio che un attaccante, una volta connesso, possa accedere al pannello di controllo. ร fortemente consigliato disabilitare la gestione wireless, limitando lโaccesso amministrativo alle sole porte Ethernet cablate.
Uso di Tunnel Crittografati
Le comunicazioni sensibili devono sempre avvenire su canali cifrati per rendere inutile lโintercettazione dei dati (sniffing). Esempi fondamentali includono:
Inoltre, lโadozione del protocollo WPA3 introduce il sistema SAE (Simultaneous Authentication of Equals), rendendo la rete molto piรน resistente agli attacchi a dizionario rispetto al WPA2.
Aggiornamento del Firmware
Le vulnerabilitร del firmware sono un vettore di attacco spesso trascurato. ร essenziale controllare periodicamente il sito del produttore e installare le patch di sicurezza. Lโaggiornamento puรฒ chiudere backdoor, correggere falle nel protocollo WPS e migliorare la stabilitร generale.
Conclusione: Verso una Sicurezza Proattiva
La sicurezza delle reti locali rappresenta oggi una delle sfide piรน importanti della cybersecurity. Come abbiamo osservato, un attacco puรฒ iniziare silenziosamente con una scansione (airodump-ng) per poi evolvere in manipolazioni attive (MITM).
La facilitร con cui รจ possibile violare una rete poco protetta evidenzia quanto siano ancora sottovalutate le tecniche di base. Allo stesso tempo, strumenti potenti e gratuiti come Aircrack-ng, Wireshark e XArp sono disponibili sia per gli attaccanti che per i difensori: la differenza la fa la competenza.
In sintesi, abbiamo visto che:
Lโaccesso puรฒ essere forzato catturando lโhandshake e usando wordlist (aircrack-ng -w rockyou.txt).
Una volta dentro, lโattaccante puรฒ mappare lโinfrastruttura (netdiscover, nmap).
Il traffico puรฒ essere manipolato tramite ARP Spoofing (arpspoof, MITMF).
La difesa richiede un approccio multilivello: monitoraggio, alert automatici e hardening della configurazione.
La sicurezza informatica non รจ una configurazione โuna tantumโ, ma un processo adattativo. Essere proattivi รจ lโunico modo per garantire integritร e privacy in un panorama tecnologico in costante mutamento.
look im not in charge of the notre dame de paris restoration fundraising campaign right. BUT IF I WAS. i would let people sponsor the individual gargoyles and send them a welcome pack, regular photo updates, handwritten thankyou notes from the gargoyle in question etc, as if it was a donkey sanctuary
Amazon incassa miliardi spingendo a comprare cose che non vogliamo o la versione piรน costosa di prodotti disponibili a condizioni piรน vantaggiose. Leggi
Un paese che vive perennemente al di sopra delle proprie possibilitร ed in sfregio alle proprie responsabilitร . Un paese che non รจ moderno. Un paese che ha fondamenta fatte di pressapochismo, malaffare e mancanza di serietร . E' anche il mio paese. Forse non ho fatto abbastanza per lui.
Ciao Mondo. ๐ Oramai Natale รจ alle porte e il formichiere vorrebbe essere adottato da qualcuno di gentile, carinล e affettuosล come te o come l'amicรฆ tuล Che aspetti ad adottarlo?
< A Susques, la promessa di sviluppo si รจ trasformata in dipendenza. Lโacqua che prima sgorgava dagli occhi della terra (ojos de la tierra ) ora arriva in bottiglie di plastica: privatizzazione, proprietร privata e individualismo sono alcune delle conseguenze che lโestrazione mineraria ha portato a Susques. >
A confronto con le comunitร del Bacino di Salinas Grandes in Argentina che si scontrano con lโestrazione del litio dalle saline: ยซLa Pachamama ci sta dicendo che siamo ancora in tempo, ma che non ne rimane moltoยป
๐ฅ Album available // Schumann: The 4 Symphonies by George Szell๐ฅ Choose my streaming platform: https://lnk.to/schumansymphoniesszell๐ง Qobuz (Hi-Res/flac) ...
I don't know if we've already discussed this, but he is certainly an outstanding performer. - And a cruel โtamerโ. You wouldn't want to have a boss like that. I still have the 3rd and 4th with the cast. The 2nd is still missing.
Un giovane me assieme ad alcuni colleghi nella stanza del computer, affettuosamente chiamato "il barlone". Era verso la metร degli anni '90. Il computer era un mainframe IBM 4381 (che aveva da poco preso il posto di un 4341) ed occupava un'intera stanza, ovviamente climatizzata. L'armadio sullo sfondo conteneva il processore (se non ricordo male). Quella a destra รจ la stampante ad aghi. Fuori campo altri "armadi": le unitร nastro e le unitร dischi.
@stefano_zan@mastodon.uno.uno Ho dato unโocchiata su Wikipedia, era una macchina prodotta negli anni โ80, ma giร negli anni โ90 esistevano personal computer decenti. A quellโepoca AutoCAD era sul mercato da un bel poโ (mio babbo lo usava giร , anche se a casa cโera ancora il tecnigrafo). La mia domanda รจ: che CAD girava su un sistema del genere? Unigraphics?
@thatgiga Da quello che ho visto, ho il sospetto che fosse programmato in Assembler. In quegli anni lโassembler era ancora il re, il C era nato da pochissimo e probabilmente non era cosรฌ diffuso come oggi, stava ancora nei laboratori Bell.
Gerade gelernt: Die Geschichte mit den Frรถschen, die nicht aus dem langsam erhitzten Wasser springen gilt nur fรผr Frรถsche ohne Hirn und Rรผckgrat.
Die mit Hirn und und Rรผckgrat erkennen die Gefahr rechtzeitig - was viel รผber die Menschen aussagt, die die Gefahr durch den Klimawandel nicht erkennen.
Naja, ich kenne leider genรผgend Leute, die alle paar Monate Kreuzfahrten machen. Ich kenne andere Leute, die teilweise mehrfach im Monat innerdeutsch fliegen - mit der Begrรผndung, dass sie erst mit der Bahn fahren wรผrden, wenn ihnen das Fliegen verboten werden wรผrde. Oder andere, bei denen auch das nรคchste Auto ein Verbrenner werden wird, weil E-Autos ja wegen der "kurzen Reichweite" nur etwas fรผr die Stadt seien (ich rede hier von Leuten, die sich locker auch ein grรถรeres E-Auto leisten kรถnnten).
Das ist alles natรผrlich noch zu wenig, aber es wรคren zumindest kleine Schritte - die sie aber auch nicht zu gehen bereit sind.
Ich habe viele Bekannte, die machen keine Kruezfahrten und liegen nicht und einige von denen haben E-Autos. Und trotzdem sind das keine Grรผnen oder Klimaturbos. Man mรผsste doch einfach einmal mit Schwarz-Weiss-Ideologie aufhรถren: Hier die wenig Guten, dort die vielen Bรถsen. Es ist "ein bisschen" differenzierter - wie immer im realen Leben.
Nun, ich lebe in einem Umfeld, wo ich viele Leute kennen, die ganz offen sagen, dass ihnen der Klimawandel egal ist, sie sich darรผber keine Gedanken machen oder die meinen dass die Leute die davor warnen, damit รผbertreiben wรผrden, etc.
Das ist keine "Schwarz-Weiร-Ideologie", das ist einfach nur eine Feststellung. Und wenn das teilweise von Leuten kommt, die unter 30 sind, finde ich das beรคngstigend fรผr die Zukunft.
Ich lebe offenbar in einem andern Umfeld. Und doch, diese Schubladen und das ewige mit dem Finger auf anzere zeigen bringt einfach nichts - hรถchstens verhรคrtete Fronten und das dient der Sache ganz sicher nicht.
Inwiefern ist es "Schublade", wenn dies Aussagen sind, die mir gegenรผber direkt geรคuรert wurden? Und Du solltest mich insoweit kennen, dass Du weiรt, dass ich kein Mensch bin, der rumapostelnd durch die Gegend lรคuft oder der meint, dass nur jemand, der alles zu 100% macht, auch ein guter Mensch sei, etc.
Nun, der zweite Satz soll aussagen, dass Menschen, die die Gefahr des Klimawandels nicht erkennen, augenscheinlich nicht in der Lage sind, logisch zu denken.
Es macht ja keinerlei Aussage darรผber, was die Menschen dafรผr (oder dagegen) tun.
Ich denke, dass es einen Unterschied gibt zwischen der Fรคhigkeit, logische Schlรผsse zu ziehen und dem, was man gemeinhin als "Intelligenz" bezeichnet.
Ich bin mit Sicherheit eher neurodivers, zumindest bin ich ein Mensch, der sehr logisch denkt und sich auch sehr stark von Logik lenken lรคsst. Demzufolge verstehe ich hรคufig nicht, wenn Menschen unlogisch handeln und diese Unlogik nicht einmal erkennen.
Seguire questa lista serve a migliorare la qualitร dellโesperienza Mastodon: scoprirai chi muove il @fediverso italiano, incontrerai le persone piรน attive e simpatiche e potrai restare aggiornato sulle novitร di M1.
Un servizio per chi รจ agli inizi o chi vuole scoprire nuove persone! ๐ฅ
Reposting Episode 331 due to the wrong mp3 attached to the original. Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this weekโs stories: / Repo Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this weekโs stories: /
Reposting Episode 331 due to the wrong mp3 attached to the original. Want to be the first to hear our episodes each week?ย Become a Patreon donorย here. Links to this weekโs stories: / Repo Want to โฆ
putin warned that while russia doesnโt seek war with Europe, it is "ready now" if Europe initiates conflict. He accused Europe of obstructing peace talks and supporting war
putin also vowed to escalate strikes on Ukrainian ports after calling attacks on russian tankers "piracy."
On another big day of diplomacy, Volodymyr Zelenskyy is in Ireland as Donald Trump's negotiators Steve Witkoff and Jared Kushner discuss the US plan for peace with Vladimir Putin in Moscow.
During its entire existence, slightly over 400 thousand people were registered at Auschwitz as prisoners - including 131 thousand women. The two largest grou...
โ Switched the positions of the report date and activity date โ Created space for an update schedule โ The summary graph now shows the last four weeks instead of two โ Switched to a 30-day strike ratio to provide a more meaningful indicator of the trend
โ Engagements slightly below the 7-day average, but casualties above it โ Unusually few drone attacks (and losses); land-based equipment losses remain well below average โ Double-digit overnight attacks, all drones; interception rate could be better, 8 locations hit โ Russian strikes above average, one ๐บ๐ฆ strike reported; 30-day strike ratio at 27.0ร
Ukrainian President Volodymyr Zelenskyy will address a joint sitting of the Houses of the Oireachtas on Tuesday 2 December as part of his visit to Ireland. T...
#Zelenskyy: US and Ukraine have worked out 20-point peace plan #Ukraine and the US have worked the original American-proposed peace roadmap into a 20-point plan, Volodymyr Zelenskyy has told a news conference in Dublin just now.
He said the original proposal was narrowed down from 28 to 20 points in Geneva and "finalised" during talks last weekend in Florida.
On another big day of diplomacy, Volodymyr Zelenskyy is in Ireland as Donald Trump's negotiators Steve Witkoff and Jared Kushner discuss the US plan for peace with Vladimir Putin in Moscow.
I also wonder whether cat domestication was associated with onset of patriarchy (not the cats' fault, just a correlation, things were getting worse and the cats would have been a big help). zmescience.com/science/news-scโฆ
President #Zelenskyy met Irish President Connolly in #Dublin, discussing Ukrainian children abducted by russia, EU accession, food security, soldier rehabilitation, and school shelters.
Populรกrna YouTube alternatรญva pre Android TV ลกรญrila nebezpeฤnรฉ verzie aplikรกcie
Vรฝvojรกrsky tรญm potvrdil, ลพe poฤรญtaฤ, na ktorom oficiรกlne balรญฤky SmartTube vznikali, bol infikovanรฝ ลกkodlivรฝm softvรฉrom.
https://www.mojandroid.
Visit our website at: https://defensivesecurity.orgLinks to the stories we cover this week:https://cloud.google.com/blog/topics/threat-intelligence/unc6040-p...
I'll have to take your word for it for now. Not sure what feed my app looks at, but its not updated yet...I'm sure there's some caching to deal with somewhere.
@jjbaumgartner I'm a 100x podcaster. I don't sleep. I don't eat. I don't think of new Your Mom jokes. I ONLY PUT OUT PODCASTS PERFECTLY. I tolerate no slackers!
Analisi CTI sul leak di Ryanair: dettagli sulla violazione e il profilo del data-leaker 888. Scopri di piรน sulla sicurezza informatica e il cybercrime.
Huh. I didn't notice it before but my WordPress did apparently loose all ActivityPub subscribers before the 1st of Dec ๐ฑ
I had to resubscribe from my Mastodon account too to show up on the follower list again. No previous notes were pushed as well.
Little bit puzzled how that may have happened @pfefferle ๐ค
Edith says: They are still in the database with the meta_key `activitypub_followers` so there is that. Was this moved elsewhere? Serialized tends to blow up eventually.
Something similar happened to me. I noticed the a large drop in subscribers after the last update (from 14 to 3), including my own subscription while I didnโt unsubscribe from my own blog.
𝗖𝗵𝗿𝗶𝘀𝘁𝗺𝗮𝘀 𝗦𝗮𝗹𝗲! Sconto del 𝟰𝟬% 𝘀𝘂𝗹 𝗽𝗿𝗲𝘇𝘇𝗼 𝗱𝗶 𝗰𝗼𝗽𝗲𝗿𝘁𝗶𝗻𝗮 del Corso "Dark Web & Cyber Threat Intelligence" in modalità E-Learning sulla nostra Academy!🚀
Fino al 𝟯𝟭 𝗱𝗶 𝗗𝗶𝗰𝗲𝗺𝗯𝗿𝗲, prezzi pazzi alla Red Hot Cyber Academy. 𝗧𝘂𝘁𝘁𝗶 𝗶 𝗰𝗼𝗿𝘀𝗶 𝘀𝗰𝗼𝗻𝘁𝗮𝘁𝗶 𝗱𝗲𝗹 𝟰𝟬% 𝘀𝘂𝗹 𝗽𝗿𝗲𝘇𝘇𝗼 𝗱𝗶 𝗰𝗼𝗽𝗲𝗿𝘁𝗶𝗻𝗮. Per beneficiare della promo sconto Christmas Sale, scrivici ad academy@re
... mostra di piรน
๐๐ต๐ฟ๐ถ๐๐๐บ๐ฎ๐ ๐ฆ๐ฎ๐น๐ฒ! Sconto del ๐ฐ๐ฌ% ๐๐๐น ๐ฝ๐ฟ๐ฒ๐๐๐ผ ๐ฑ๐ถ ๐ฐ๐ผ๐ฝ๐ฒ๐ฟ๐๐ถ๐ป๐ฎ del Corso "Dark Web & Cyber Threat Intelligence" in modalitร E-Learning sulla nostra Academy!๐
Fino al ๐ฏ๐ญ ๐ฑ๐ถ ๐๐ถ๐ฐ๐ฒ๐บ๐ฏ๐ฟ๐ฒ, prezzi pazzi alla Red Hot Cyber Academy. ๐ง๐๐๐๐ถ ๐ถ ๐ฐ๐ผ๐ฟ๐๐ถ ๐๐ฐ๐ผ๐ป๐๐ฎ๐๐ถ ๐ฑ๐ฒ๐น ๐ฐ๐ฌ% ๐๐๐น ๐ฝ๐ฟ๐ฒ๐๐๐ผ ๐ฑ๐ถ ๐ฐ๐ผ๐ฝ๐ฒ๐ฟ๐๐ถ๐ป๐ฎ. Per beneficiare della promo sconto Christmas Sale, scrivici ad academy@redhotcyber.com o contattaci su Whatsapp al numero di telefono: 379 163 8765.
Esplora il lato oscuro di Internet e acquisisci competenze nella navigazione del Dark Web con il corso Cyber Threat Intelligence condotto dal prof. Pietro Melillo. Scopri come accedere al Dark Web ed identificare le minacce nascoste.
I can do - Product Management - Full Stack Web - Javascript all the things
I've done a lot of freelance so I'm great at talking to clients and have done all sorts of collaboration. I can be left alone to come up with solutions as well as I can in a team.
Available full-time, tax-friendly, in UK and Ireland. Remote essential. Freelance wherever.
If you have any leads or tips, it would be greatly appreciated.
Richieste improprie e che subito bloccate se poste in linguaggio naturale, vengono invece accettate dai large language model se messe in forma di versi e rime: comโรจ possibile?
A sophisticated threat group, dubbed ShadyPanda, has quietly exploited millions of users across the world by weaponizing popular Chrome and Edge extensions.
@Informatica (Italy e non Italy ๐) Nel mondo della criptovaluta, il confine tra privacy e crimine รจ spesso labile quanto una transazione non tracciabile. Per anni, strumenti come i mixers hanno offerto a utenti e organizzazioni una via dโuscita dallโocchio
Scopri le fasi di un attacco Wi-Fi: dalla cattura dell'handshake con Aircrack-ng al MITM post-connessione. Guida tecnica su rilevamento e difesa attiva delle reti.
The latest security bulletin from Google has brought forth a grim reality for Android users: multiple zero-day vulnerabilities are actively exploited by threat actors, demanding immediate attention.
Proponiamo ai lettori una breve storia dellโintelligence italiana suddivisa in scansioni temporali. L'articolo I SERVIZI DI INFORMAZIONE DALLโUNITร DโITALIA ALLA PRIMA GUERRA MONDIALE proviene da GIANO NEWS. #DIFESA
@madeindex no babies for sure. Itโs not the time of year for that. Even so, a camera is put into the hole beforehand to see how many there are. In my case, just one.
The Auschwitz camp was established in June 1940 for male prisoners. The first groups of women were incarcerated by the Germans more than a year and a half la...
Output di airodump-ng in modalitร monitor: identificazione delle reti WPA2 e dei client connessi.
Altro esempio di output di airodump-ng: evidenza di canali e durata pacchetti.
Screenshot reale da laboratorio: handshake WPA2 catturato allโesecuzione del comando aireplay-ng
Output di netdiscover in laboratorio: IP e MAC dei dispositivi attivi
Tendar
in reply to Tendar • • •