Okay, you're skeptical of AI, but hear me out, what if we produce an entire generation of students who are *all* the ones who did nothing in the group project?
A group of humanitarian NGOs estimate that that 7’000-30’000 Ukrainian civilians have been abducted by #Russia security forces from the occupied territories and are considered “missing” by #Ukraine authorities. Many of them are held in Russian prisons and concentration camps, some were killed (e.g. Victoria Roshchyna). One group accounted for 70’000 abducted civilians. Unlike soldier, who are subject to Geneva Conventions and periodically exchanged, the fate of Ukrainian civilians detained are largely inaccessible to international humanitarian organisations.
PRISONERS SYSTEM OF TERROR How Ukrainian Civilians Disappear in Russian Captivity 1. When a City Loses Its Voice ✕ In the spring of 2022, as Russian forces occupied cities in Southern and Eastern Ukraine, many still believed it was possible to stop t…
🇺🇸🇺🇦❗️Secretary of State Marco Rubio stated that Russia is destroying some air defense systems supplied to Kyiv just a week after their delivery.
"We are negotiating the delivery of defensive weapons that can protect the power grid. I know we are in ongoing technical discussions about the specific equipment they need. But ultimately, if this equipment is destroyed a week after installation, the problem will remain. And that's how it's been for the past two or three years," Marco Rubio emphasized.
📃🗣"The current contact line should be the starting point for negotiations between Kyiv and Moscow," — a joint statement by the G7 and the EU
At a meeting in Canada, the partner countries emphasized that international borders cannot be changed by force, but a ceasefire is necessary to stabilize the situation.
➡️The issue of frozen Russian assets, readiness to increase economic pressure, and protection of Ukraine's energy infrastructure after another Russian attack were also discussed.
🇺🇦🇪🇺 PM Svyrydenko confirmed that Ukraine received €5.9 billion from the EU.
🔹€4.1 billion euros within the framework of ERA Loans mechanism - the final tranche within the framework of €18 billion program, financed from the proceeds from frozen Russian assets.
🔹€1.8 billion - within the framework of Ukraine Facility. This is confirmation that Ukraine is confidently moving along the path of reforms and European integration.
🇩🇪 Germany’s coalition has agreed: all 18-year-old men must report for military screening, - BILD
🔵 all 18-year-old men are required to undergo a medical examination; 🔵 if there are not enough volunteers, a lottery will be activated for conscription; 🔵 women will also receive a questionnaire to understand their potential willingness to serve.
Germany plans to increase the army to 260,000 military personnel and 200,000 reservists. The service lasts 6 months, half of which is basic training.
🇷🇺 🇺🇦 #Russia has not taken control of Pokrovsk, but the area remains Russia’s primary offensive focus, with the highest number of daily assaults and a significant concentration of Russian forces, #Ukraine’s Commander-in-Chief Oleksandr Syrskyi said on Nov. 13.
Russia has not taken control of Pokrovsk, but the area remains Russia’s primary offensive focus, with the highest number of daily assaults and a significant concentration of Russian forces, Ukraine’s Commander-in-Chief Oleksandr Syrskyi said on Nov.
🛳️🛢️ A buildup of oil on the world's oceans includes a disproportionately large amount of crude from nations subject to some kind of sanctions, such as Russia, Iran, and Venezuela, - Bloomberg
Of the surge in oil on tankers since the end of August, as much as roughly 40% of the increase is barrels from Russia, Iran, Venezuela, or unclear origin, according to vessel-tracking data from Vortexa, Kpler and OilX. Even the lowest estimate, at about 20%.
🇺🇦 President Volodymyr Zelensky signed a decree on Nov. 13 to impose sanctions against his close associate Timur Mindich and businessman Oleksandr Tsukerman.
The two are implicated in the $100 million corruption scandal centered on the state-owned nuclear power company Energoatom, which has rocked the country since Monday.
❗️Local propagandists of Oryol released a story about occupied Donetsk. They did not just show the positions of the occupier, but directly admitted that:
- Russians use civilian cars to transport ammunition and for camouflage;
- Russians occupy civilian houses to accommodate military units and mark the same houses so that no one else takes them;
🇺🇦 Zelensky: Command post of the 65th Separate Mechanized Brigade “Velykyi Luh.” The brigade, now part of the 17th Corps, is defending the Orikhiv direction.
I listened to a report on the operational situation in this sector, enemy activity, and losses among the occupiers.
A separate discussion focused on the development of unmanned systems unit. We are doing everything to strengthen our warriors.
Zelensky visited the command post of the 65th Mechanized Brigade, currently defending the Orikhiv axis as part of the 17th Corps. He thanked the troops, presented awards, and discussed battlefield conditions, Russian losses, and reinforcement needs.
🇪🇺🇺🇦 EU makes first statement on corruption scandal in Ukraine
Kaja Kallas told Reuters that the corruption scandal in Ukraine's energy sector is "extremely regrettable." She said it was "important that Kyiv takes it seriously."
❄️💵 Zelensky: It will be a very big loss for the Russians if we can somehow get this money. Whether it will be a loan under the guarantees of other countries, or another option. But if we can get this 140-160 billion, it will be a big loss for Putin and people from his circle.
🇺🇸 Trump signed legislation ending the longest government shutdown in U.S. history, hours after the House of Representatives voted to restart disrupted food assistance, pay hundreds of thousands of federal workers and revive a hobbled air-traffic control system, - Reuters
The Republican-controlled chamber passed the package by a vote of 222-209, with Trump's support largely keeping his party together in the face of vehement opposition from House Democrats.
The Ukrainian last night's operation against energy targets in Oryol, Russia, yielded into a direct hit into the local thermal power station. One of the main buildings sustained significant damage.
🤬 The Russians again attacked the Odesa region with drones…
"As a result of the hits, a fire broke out at a transport infrastructure facility. According to preliminary information, there are no deaths or injuries," the State Emergency Service reported.
Zelensky says transferring €140-160B in frozen Russian assets to Ukraine would strike a major blow to Putin’s inner circle: “These are their funds, and it would destabilize their system.” He stressed the money wouldn’t just fund weapons, but domestic production of air defense and energy protection tools. “Freezing is one thing. Giving them to Ukraine is real sanctions.” Moscow risks losing €80B in energy revenue plus assets, a key lever for peace.
Overnight, Russia launched 138 attack drones, including around 90 Shaheds, and one Iskander-M ballistic missile from occupied Crimea. Ukrainian air defenses intercepted or jammed 102 drones. Despite these efforts, 36 drones hit 10 locations.
‼️ Russia seeks victory in Pokrovsk to convince Trump that Ukraine must withdraw its troops from the entire territory of eastern Donbas to end the war, — Zelensky.
🇺🇦 🇷🇺 Explosions were reported in the Russian city of Oryol overnight on Nov. 13 as authorities simultaneously declared missile and drone threats in the region, according to local residents and Russian media.
Explosions were reported in the Russian city of Oryol overnight as authorities simultaneously declared missile and drone threats in the region, according to local residents and Russian media.
🇨🇳🇸🇦 China has sharply increased its purchases of Saudi crude as a substitute for Russian supplies.
According to Reuters, citing tanker-tracking data from Kpler, Beijing has significantly reduced its intake of Russian oil, compensating for the drop by boosting imports from Saudi Arabia.
Kpler’s estimates show Chinese refiners will bring in around 930,000 barrels per day of Russian crude this month — roughly one-third less than in the previous month, when volumes were close to 1.45 million bpd.
🇪🇺 Ursula von der Leyen unveiled three distinct options for supporting #Ukraine’s war effort on Thursday, as the European Commission chief reiterated her preference for using immobilised Russian sovereign assets to fund Kyiv despite staunch Belgian resistance.
☠️ Some Russian voenkors are shouting that thanks to the publication of a video of the attempted entry of the occupiers' column into Pokrovsk, this attempt was neutralized and the column was dismantled.
😔 Zelensky: We found about 400 places in Russia where kidnapped children are kept. Ukraine is working on the issue of returning children with Qatar, with the Vatican.
‼️"And there are some other countries that are trying to help. We have returned more than 1,600 children. And according to our estimates, there are thousands of them there. It's true - about 19.5 thousand kidnapped children in Russia. We have to focus on how to find them," he said.
In the thousands of preserved registration photographs of Auschwitz prisoners, we can see faces of the men and women imprisoned in the camp.Dr Wojciech Płosa...
In an act of self-incrimination, pro-Russian media from Oryol aired a report from occupied Donetsk that inadvertently confirmed multiple war crimes. The segment revealed that Russian forces are using civilian vehicles to transport ammunition and disguise troop movements, and are occupying civilian homes, marking them with graffiti such as “Occupied” to reserve them for military use.
One damaged building with a large basement now reportedly houses rear units of the 1st Guards Tank Army.
‼️🇪🇺 Russia wants to start a major war on the European continent in 2029 or 2030, - Zelensky
"We need more pressure on Russia. Given the situation on the battlefield, we don't see that Russia wants to stop. The problem is that when we look at Russia's military industry, we see that they are increasing their production. And, according to our estimates, they want to continue this war," the president said.
🇪🇺🇺🇦💶 EU announces new tranche of €6 billion to Ukraine.
"Today we will disburse almost €6 billion under the ERA and Ukraine Facility. I welcome the European Council's commitment to meet Ukraine's financial needs for the next two years," Ursula von der Leyen said today.
🇺🇦🇺🇸 Ukraine has started producing interceptor drones together with the US, - Zelensky
🗣️"American-Ukrainian production, joint production. I hope that in the future we will have more," - the president said in an interview with Bloomberg Television.
❗️🇺🇦 Zelensky on Pokrovsk: Any decision to withdraw troops is a matter for military commanders on the ground.
"Nobody is forcing them to die for the sake of ruins. I will support our soldiers, especially the commanders who are there, in how they can control the situation. Or it is too expensive for us - the most important thing for us is our soldiers."
🇺🇸🤔 "From our side, there is nothing in particular to impose sanctions on [Russia]. We have imposed restrictions on their largest oil companies - this is exactly what everyone expected. Honestly, I don't know what else can be done. In this regard, we have almost exhausted our options for new sanctions," - said Rubio and added that some potential for further action remains with the US's European partners.
The IDF reported that earlier this morning (Thursday), the IAF struck a weapons storage facility and an underground infrastructure site used by Hezbollah in southern Lebanon.
Ukraine is set to receive a €6 billion tranche from the EU today, according to Budget Committee Chair Roksolana Pidlasa. The package includes €4.1B under ERA loans and €1.9B via the Ukraine Facility.
This support secures current defense and humanitarian spending. Talks on the larger €140B reparations loan continue, pending a political decision by the European Council.
🇺🇸‼️ Newly released congressional emails show Jeffrey Epstein bragged in 2018 that he could give Russian officials insight into understanding Donald Trump, - POLITICO
▪️Epstein: I have met some very bad people. None as bad as Trump. Not one decent cell in his body. I know how dirty Donald is.
▪️Responding to a 2017 message calling Trump “so gross,” Jeffrey Epstein replied that Trump was “even worse in real life and up close.”
‼️ Rubio on Russia: We're running out of things to sanction.
🇨🇳 Rubio: The Chinese are undertaking the most rapid military buildup in human history. So, you know, and part of that is their expansion of their nuclear capabilities.
🇻🇪 Rubio on Venezuela: They don’t have a government. There’s an illegitimate regime that’s basically a narco-trafficking organization.
■ Engagements and casualties above the 7-day average ■ Land-based equipment losses well above average; both armored and unarmored ■ Overnight attack overview has not been released at the time of writing ■ MLRS strikes above average, air strikes below it; single-digit 🇺🇦 strikes
Unmanned aerial systems operators from the Drone Battalion of the 63rd Separate Mechanized Brigade of the Ukrainian Ground Forces continue combat operations, neutralizing Russian soldiers in Serebryansky Forest.
Polish Deputy Prime Minister, Minister of Foreign Affairs Radosław Sikorski:
"Putin has underperformed.
We thought he had the world's second army, and he thought there would be a coup, there would be a cakewalk, a three-day operation. And more than ten years, he's still fighting in Donbas.
"Well, there's not a lot left to sanction from our part. I mean, we hit their [Russian] major oil companies, which is what everybody's been asking for."
Ukraine is heading into its most dangerous winter since the full-scale war began. A funding crisis looms as EU aid stalls, U.S. support fades, and corruption scandals deepen doubts.
On the battlefield, Ukraine is under pressure in Pokrovsk and beyond, while energy infrastructure is being devastated by intensified Russian strikes.
A new photo has surfaced showing the aftermath of a recent Ukrainian Neptune missile strike on the Oryol thermal power plant. The damage appears significant.
Hungarian FM Péter Szijjártó is urging the EU to halt funding to Ukraine, citing ongoing corruption. He claimed Brussels keeps sending money without accountability, referencing recent scandals. He vowed that as long as Fidesz is in power, no Hungarian funds will go to Ukraine.
No worries Peter, by April '26 Fidesz will be gone.
Due 0day, un solo attacco: il colpo perfetto contro Citrix e Cisco. La scoperta di Amazon
Amazon ha segnalato un complesso attacco informatico in cui gli aggressori hanno sfruttato simultaneamente due vulnerabilitàzero-day, presenti nei prodotti Citrix e Cisco. Secondo il responsabile della sicurezza informatica dell’azienda, CJ Moses, un gruppo sconosciuto ha ottenuto l’accesso ai sistemi sfruttando le falle prima che fossero rese pubbliche e
... mostra di più
Due 0day, un solo attacco: il colpo perfetto contro Citrix e Cisco. La scoperta di Amazon
Amazon ha segnalato un complesso attacco informatico in cui gli aggressori hanno sfruttato simultaneamente due vulnerabilitàzero-day, presenti nei prodotti Citrix e Cisco. Secondo il responsabile della sicurezza informatica dell’azienda, CJ Moses, un gruppo sconosciuto ha ottenuto l’accesso ai sistemi sfruttando le falle prima che fossero rese pubbliche e ha distribuito malware personalizzato.
L’incidente è stato rilevato dalla rete honeypot MadPot di Amazon. Sono stati rilevati tentativi di sfruttare la vulnerabilitàCVE-2025-5777 in Citrix NetScaler ADC e NetScaler Gateway, un errore di lettura fuori dai limiti.
Questa vulnerabilità consentiva a un aggressore di leggere da remoto il contenuto della memoria del dispositivo e di ottenere dati sensibili della sessione. La vulnerabilità è stata denominata ufficiosamente CitrixBleed 2, in onore di un bug precedente che consentiva agli hacker di rubare i token di autenticazione degli utenti.
Citrix ha pubblicato una patch il 17 giugno, ma ulteriori osservazioni hanno dimostrato che l’exploit era stato utilizzato attivamente anche prima del rilascio della patch. All’inizio di luglio, la Cybersecurity and Infrastructure Security Agency (CISA) degli Stati Uniti e ricercatori indipendenti hanno confermato lo sfruttamento della vulnerabilità, che ha consentito il dirottamento delle sessioni utente.
Mentre i ricercatori di Amazon analizzavano l’attacco a Citrix, hanno scoperto un altro componente dannoso che prendeva di mira Cisco Identity Services Engine. Si è scoperto che sfruttava un endpoint di rete precedentemente non descritto, vulnerabile a un errore di deserializzazione dei dati. Queste informazioni sono state condivise con Cisco, e le aziende hanno successivamente assegnato al bug l’identificatore CVE-2025-20337.
Questa seconda vulnerabilità ha ricevuto il punteggio massimo di gravità di 10 sulla scala CVSS. Ha consentito ad aggressori remoti e non autorizzati di eseguire codice arbitrario sul server con privilegi di root.Secondo Moses, ciò che è stato particolarmente allarmante è stato il fatto che gli attacchi siano iniziati prima che Cisco documentasse ufficialmente la vulnerabilità e rilasciasse aggiornamenti completi. Questo “sfruttamento della finestra di patch” è considerato una tecnica tipica utilizzata da aggressori ben preparati che monitorano le modifiche al codice e trasformano immediatamente i bug scoperti in strumenti di attacco.
Dopo essere penetrati in Cisco ISE, gli hacker hanno installato una backdoor personalizzata, progettata specificamente per questa piattaforma. Operava esclusivamente nella RAM, senza lasciare praticamente alcuna traccia, e si infiltrava nei processi Java attivi utilizzando un meccanismo di riflessione.
Il malware si registrava nel sistema come listener HTTP, intercettando tutto il traffico proveniente dal server Tomcat. La crittografia DES e la codifica Base64 non standard venivano utilizzate per scopi stealth, e il controllo degli accessi richiedeva la conoscenza di determinate intestazioni HTTP. Sulla base di una combinazione di indicatori, gli esperti hanno concluso che l’attacco non è stato condotto da hacker casuali, ma da un gruppo con una conoscenza approfondita dell’architettura Cisco ISE e delle applicazioni Java aziendali.
Il fatto che possedessero contemporaneamente exploit per CitrixBleed 2 e CVE-2025-20337indica un elevato livello di sofisticazione da parte degli aggressori. Tali capacità potevano essere possedute solo da un team con ricercatori interni sulle vulnerabilità o con accesso a informazioni non pubbliche sulle vulnerabilità. Né Cisco né Citrix hanno ancora rivelato chi si cela dietro gli attacchi o lo scopo dell’operazione.
Il team di Amazon Threat Intelligence ritiene che questo incidente sia un buon esempio di una tendenza sempre più pericolosa: grandi gruppi APT sfruttano simultaneamente più vulnerabilità per penetrare nei servizi critici, ovvero quelli responsabili dell’autenticazione, del controllo degli accessi e delle policy di rete all’interno delle infrastrutture aziendali.
Amazon segnala un attacco informatico che sfrutta vulnerabilità zero-day in Citrix e Cisco, permettendo agli aggressori di accedere ai sistemi e distribuire malware.
Pambianco Summit – Capasa (Camera nazionale Moda Italiana): "Tutti i giovani sono ambientalisti (ma comprano fast fashion). Vogliamo dirglielo che il fast fashion non lo è?"
“The world is now anticipated to heat up by 2.6C above preindustrial times by the end of the century – the same temperature rise forecast last year. … ‘That all means the end of agriculture in the UK and across Europe, drought and monsoon failure in Asia and Africa, lethal heat and humidity’”
Morgan McSweeney searching for someone even less principled than Starmer to take over as prime minister
Shadow prime minister Morgan McSweeney has become so disillusioned with his choice of puppet prime minister, Keir Starmer, that he has finally decided to discard him. Alarm bells started ringing when Starmer’s approval ratings fell into Andrew Windsor territory
Never forget: At breakneck speed we are leaving the stable Holocene climate in which human society developed and thrived. Weather extremes are outside historical experience. Sea-level rise is accelerating. Dangerous tipping points are ahead. Graph: ed-hawkins.github.io/climate-v…
Paleoclimate datasets are integrated with a climate model to reconstruct global surface temperature since the Last Glacial Maximum, showing sustained warming until the mid-Holocene.
WiFi-enabled ‘smart’ light bulbs are everywhere these days, and each one of them has a microcontroller inside that’s capable enough to run all sorts of interesting software. For example, [vimpo] decided to get one running a minimal Minecraft server. The Bl602-equipped board inside the LED lightbulb. (Credit: vimpo, YouTube) Inside the target bulb is a
... mostra di più
Running a Minecraft Server on a WiFi Light Bulb
WiFi-enabled ‘smart’ light bulbs are everywhere these days, and each one of them has a microcontroller inside that’s capable enough to run all sorts of interesting software. For example, [vimpo] decided to get one running a minimal Minecraft server. The Bl602-equipped board inside the LED lightbulb. (Credit: vimpo, YouTube) Inside the target bulb is a BL602 MCU by Bouffalo Lab, that features not only a radio supporting 2.4 GHz WiFi and BLE 5, but also a single-core RISC-V CPU that runs at 192 MHz and is equipped with 276 kB of RAM and 128 kB flash.
This was plenty of space for the minimalist Minecraft server [vimpo] wrote several years ago. The project says it was designed for “machines with limited resources”, but you’ve still got to wonder if they ever thought it would end up running on a literal lightbulb at some point.
It should be noted, of course, that this is not the full Minecraft server, and it should only be used for smaller games like the demonstrated TNT run mini game.
Perhaps the next challenge will be to combine a large set of these light bulbs into a distributed computing cluster and run a full-fat Minecraft server? It seems like a waste to leave the BL602s and Espressif MCUs that are in these IoT devices condemned to a life of merely turning the lights on or off when we could have them do so much more.
Simone Lamsma, violin, and the RAI National Symphony Orchestra conducted by Alpesh Chauhan play:
MENDELSSOHN: The Hebrides 'Fingal's Cave' Overture, Op. 26.
BRITTEN: Violin Concerto in D minor, Op. 15.
BRAHMS: Symphony No. 3 in F major, Op....
Instead of using AI images to illustrate your blogpost or presentation, why not go deep into the forest, lie down in a pile of autumn leaves and allow the earth to consume your body.
This release puts speed and control right at your fingertips. Whether you’re jumping between settings, syncing followers, or handling quotes in real time, version 7.6.0 makes managing your Fediverse presence faster and more intuitive than ever.
Navigate in a Flash
Say hello to the quickest way to move around your ActivityPub settings.
In preparation for WordPress 6.9, which brings the Command Palette (Cmd/Ctrl + K) to the entire wp-admin, the plugin now adds its own commands, giving you instant, keyboard-driven access to your workflows anywhere in WordPress.
Type “ActivityPub” and you’ll see context-aware commands that adapt to your site setup and user role. Whether you’re managing a blog actor or a user actor, you can open followers and following lists, check blocked actors, jump straight to your settings, or even search and edit extra fields — all without ever leaving the Command Palette. Every command includes the ActivityPub icon for easy recognition. Just press Cmd + K or Ctrl + K, start typing, and go — it’s the smoothest way yet to pilot your Fediverse setup.
Stay in Sync Across the Fediverse
Your follower lists now stay accurate wherever you connect. With support for Follower Synchronization (FEP-8fcf), the plugin automatically keeps your followers collection in step with other servers — even when things drift out of sync.
If differences appear, background tasks quietly reconcile them, keeping your lists clean and consistent. The result is a smoother, more reliable experience across the entire Fediverse — no manual fixes required.
Speed When It Counts
Quoted posts and follow confirmations now move at the speed of conversation.
A new immediate Accept dispatch system sends responses as soon as they’re created, instead of waiting for the next scheduled queue.
That means faster follow confirmations and quicker quote acknowledgments, making interactions feel more natural across the Fediverse. Behind the scenes, those Accept messages go straight to the right inboxes — including mentioned and replied-to users — while a scheduled backup ensures full compatibility with slower servers.
It’s a smart balance between speed and reliability, helping your posts and follows appear almost instantly.
Privacy, Your Way
Want to keep your social graph private? You can now hide your followers and following lists from public view while keeping all relationships intact. Your followers still follow — they’re just hidden when you prefer a little more privacy.
Full Changelog
Added
Add bidirectional transforms between reply and embed blocks for improved user experience.
Add Command Palette integration for quick navigation to ActivityPub admin pages
Added a new ap_object post type and taxonomies for storing and managing incoming ActivityPub objects, with updated handlers
Added a privacy option to hide followers and following lists from profiles while keeping follow relationships intact.
Added a scheduled task and setting to automatically purge old inbox items, helping maintain site performance and storage control.
Added fallback to trigger create handling when updates fail for missing posts or comments, ensuring objects are properly created.
Added immediate dispatch for Accept activities to speed up quoted posts while keeping scheduled processing for compatibility with other instances.
Added new configuration options to better manage traffic spikes when federating posts, allowing finer control over retry limits, delays, and batch pauses.
Added support for FEP-8fcf follower synchronization, improving data consistency across servers with new sync headers, digest checks, and reconciliation tasks.
Add LiteSpeed Cache integration to prevent ActivityPub JSON responses from being cached incorrectly. Includes automatic .htaccess rules and Site Health check to ensure proper configuration.
Add quote visibility setting for Classic Editor users.
Add unified attachment processor for handling ActivityPub media imports from both remote URLs and local files, with automatic media block generation and Classic Editor support.
Integrate Federated Reply block with WP.com Reader’s post share functionality, allowing users to reply to ActivityPub posts directly from the Reader.
Changed
Added support for FEP-3b86 Activity Intents, extending WebFinger and REST interactions with new Create and Follow intent links.
Added support for the latest NodeInfo (FEP-0151), with improved federation details, staff info, and software metadata for better ActivityPub compliance.
Extended inbox support for undoing Like, Create, and Announce activities, with refactored undo logic and improved activity persistence.
Improved Classic Editor integration by adding better media handling and full test coverage for attachments, permissions, and metadata.
Improved delivery of public and follower activities by expanding local recipient handling to include all ActivityPub-capable users and follower collections.
Improved inbox performance by batching and deduplicating activities, reducing redundant processing and improving handling during high activity periods.
Improved REST API responses with smarter context handling.
Improved REST collection pagination by using explicit total item counts for more accurate results.
Moved default visibility handling from the server to the editor UI, ensuring consistent and flexible ActivityPub visibility settings across both block and classic editors.
Prevented self-announcing by ignoring announces from the blog actor, while still processing announces from user and external actors.
Refactored activity handling to support multiple recipients per activity, allowing posts and interactions to be linked to several local users at once.
Refactored avatar handling into a new system that stores and manages avatars per remote actor, improving reliability and preparing for future caching support.
Refactored the inbox system to use a shared inbox, storing activities once with multiple recipients for improved efficiency and reduced duplication.
Reorganize integration loader and move Stream integration into dedicated folder structure.
Reply posts: do not display post title before @mentions in posts that are replies to somebody else
Simplified configuration by always enabling the shared inbox and removing its separate setting, UI field, and related logic.
Simplified inbox storage settings, allowing certain activities (like deletes) to be skipped to reduce unnecessary database use.
Simplify follow() API return types to int|WP_Error for better predictability.
Updated inbox handling to support multiple users receiving the same activity and improve overall data consistency.
Updated mailer hooks to send notifications only when activities are successfully handled, preventing emails for failed events.
Update plugin short description to be more user-friendly.
Fixed
Reply block now properly validates ActivityPub URLs before setting inReplyTo field
Added a safeguard to ensure the plugin works correctly even when no post types are selected.
Added a safety check to prevent errors when resolving comment author hostnames without a valid IP address.
Fixed activity processing to handle QuoteRequest and other edge cases more reliably.
Fixed an issue with post content templates to ensure the correct fallback is always applied.
Fixed fatal error when transformer Factory receives WP_Error objects.
Fixed HTML entity encoding in extra field names when displayed on ActivityPub platforms
Fixed typo in example, improve quoting description.
Fix Following table error message to display user input instead of empty string when webfinger lookup fails.
Fix infinite recursion when storing remote actors with mentions in their bios
Fix local inbox delivery to use internal REST API instead of HTTP, enabling local follows and proper boost counting.
Fix logic errors in Move handler: remove redundant assignment and fix variable name collision.
Fix public key retrieval for GoToSocial profiles with path-based key URLs.
Improved actor resolution by prioritizing blog actor detection before remote actor checks and refining home page URL handling.
Improved handling of empty fields for better compatibility with Pixelfed and more consistent fallback behavior across actor names, URLs, and related data.
Improved hashtag encoding for consistent formatting.
Improved Jetpack integration by initializing it during the WordPress startup process.
Refactored Mastodon import handling to use consistent array-based data, improving reliability and compatibility across all import scenarios.
What's Changed
Improve NodeInfo handling and add support for FEP-0151 by @pfefferle in #2255
Fix HTML entity encoding in extra field names by @obenland in #2261
Add FEP-3b86 Activity Intents suppo...
This release puts speed and control right at your fingertips. Whether you’re jumping between settings, syncing followers, or handling quotes in real time, version 7.6.0 makes managing your Fediverse presence faster and more intuitive than ever.
This release puts speed and control right at your fingertips. Whether you’re jumping between settings, syncing followers, or handling quotes in real time, version 7.6.0 makes managing your Fediverse presence faster and more intuitive than ever.
Navigate in a Flash
Say hello to the quickest way to move around your ActivityPub settings.
In preparation for WordPress 6.9, which brings the Command P
... mostra di più
This release puts speed and control right at your fingertips. Whether you’re jumping between settings, syncing followers, or handling quotes in real time, version 7.6.0 makes managing your Fediverse presence faster and more intuitive than ever.
Navigate in a Flash
Say hello to the quickest way to move around your ActivityPub settings.
In preparation for WordPress 6.9, which brings the Command Palette (Cmd/Ctrl + K) to the entire wp-admin, the plugin now adds its own commands, giving you instant, keyboard-driven access to your workflows anywhere in WordPress.
Type “ActivityPub” and you’ll see context-aware commands that adapt to your site setup and user role. Whether you’re managing a blog actor or a user actor, you can open followers and following lists, check blocked actors, jump straight to your settings, or even search and edit extra fields — all without ever leaving the Command Palette. Every command includes the ActivityPub icon for easy recognition. Just press Cmd + K or Ctrl + K, start typing, and go — it’s the smoothest way yet to pilot your Fediverse setup.
Stay in Sync Across the Fediverse
Your follower lists now stay accurate wherever you connect. With support for Follower Synchronization (FEP-8fcf), the plugin automatically keeps your followers collection in step with other servers — even when things drift out of sync.
If differences appear, background tasks quietly reconcile them, keeping your lists clean and consistent. The result is a smoother, more reliable experience across the entire Fediverse — no manual fixes required.
Speed When It Counts
Quoted posts and follow confirmations now move at the speed of conversation.
A new immediate Accept dispatch system sends responses as soon as they’re created, instead of waiting for the next scheduled queue.
That means faster follow confirmations and quicker quote acknowledgments, making interactions feel more natural across the Fediverse. Behind the scenes, those Accept messages go straight to the right inboxes — including mentioned and replied-to users — while a scheduled backup ensures full compatibility with slower servers.
It’s a smart balance between speed and reliability, helping your posts and follows appear almost instantly.
Privacy, Your Way
Want to keep your social graph private? You can now hide your followers and following lists from public view while keeping all relationships intact. Your followers still follow — they’re just hidden when you prefer a little more privacy.
Full Changelog
Added
Add bidirectional transforms between reply and embed blocks for improved user experience.
Add Command Palette integration for quick navigation to ActivityPub admin pages
Added a new ap_object post type and taxonomies for storing and managing incoming ActivityPub objects, with updated handlers
Added a privacy option to hide followers and following lists from profiles while keeping follow relationships intact.
Added a scheduled task and setting to automatically purge old inbox items, helping maintain site performance and storage control.
Added fallback to trigger create handling when updates fail for missing posts or comments, ensuring objects are properly created.
Added immediate dispatch for Accept activities to speed up quoted posts while keeping scheduled processing for compatibility with other instances.
Added new configuration options to better manage traffic spikes when federating posts, allowing finer control over retry limits, delays, and batch pauses.
Added support for FEP-8fcf follower synchronization, improving data consistency across servers with new sync headers, digest checks, and reconciliation tasks.
Add LiteSpeed Cache integration to prevent ActivityPub JSON responses from being cached incorrectly. Includes automatic .htaccess rules and Site Health check to ensure proper configuration.
Add quote visibility setting for Classic Editor users.
Add unified attachment processor for handling ActivityPub media imports from both remote URLs and local files, with automatic media block generation and Classic Editor support.
Integrate Federated Reply block with WP.com Reader’s post share functionality, allowing users to reply to ActivityPub posts directly from the Reader.
Changed
Added support for FEP-3b86 Activity Intents, extending WebFinger and REST interactions with new Create and Follow intent links.
Added support for the latest NodeInfo (FEP-0151), with improved federation details, staff info, and software metadata for better ActivityPub compliance.
Extended inbox support for undoing Like, Create, and Announce activities, with refactored undo logic and improved activity persistence.
Improved Classic Editor integration by adding better media handling and full test coverage for attachments, permissions, and metadata.
Improved delivery of public and follower activities by expanding local recipient handling to include all ActivityPub-capable users and follower collections.
Improved inbox performance by batching and deduplicating activities, reducing redundant processing and improving handling during high activity periods.
Improved REST API responses with smarter context handling.
Improved REST collection pagination by using explicit total item counts for more accurate results.
Moved default visibility handling from the server to the editor UI, ensuring consistent and flexible ActivityPub visibility settings across both block and classic editors.
Prevented self-announcing by ignoring announces from the blog actor, while still processing announces from user and external actors.
Refactored activity handling to support multiple recipients per activity, allowing posts and interactions to be linked to several local users at once.
Refactored avatar handling into a new system that stores and manages avatars per remote actor, improving reliability and preparing for future caching support.
Refactored the inbox system to use a shared inbox, storing activities once with multiple recipients for improved efficiency and reduced duplication.
Reorganize integration loader and move Stream integration into dedicated folder structure.
Reply posts: do not display post title before @mentions in posts that are replies to somebody else
Simplified configuration by always enabling the shared inbox and removing its separate setting, UI field, and related logic.
Simplified inbox storage settings, allowing certain activities (like deletes) to be skipped to reduce unnecessary database use.
Simplify follow() API return types to int|WP_Error for better predictability.
Updated inbox handling to support multiple users receiving the same activity and improve overall data consistency.
Updated mailer hooks to send notifications only when activities are successfully handled, preventing emails for failed events.
Update plugin short description to be more user-friendly.
Fixed
Reply block now properly validates ActivityPub URLs before setting inReplyTo field
Added a safeguard to ensure the plugin works correctly even when no post types are selected.
Added a safety check to prevent errors when resolving comment author hostnames without a valid IP address.
Fixed activity processing to handle QuoteRequest and other edge cases more reliably.
Fixed an issue with post content templates to ensure the correct fallback is always applied.
Fixed fatal error when transformer Factory receives WP_Error objects.
Fixed HTML entity encoding in extra field names when displayed on ActivityPub platforms
Fixed typo in example, improve quoting description.
Fix Following table error message to display user input instead of empty string when webfinger lookup fails.
Fix infinite recursion when storing remote actors with mentions in their bios
Fix local inbox delivery to use internal REST API instead of HTTP, enabling local follows and proper boost counting.
Fix logic errors in Move handler: remove redundant assignment and fix variable name collision.
Fix public key retrieval for GoToSocial profiles with path-based key URLs.
Improved actor resolution by prioritizing blog actor detection before remote actor checks and refining home page URL handling.
Improved handling of empty fields for better compatibility with Pixelfed and more consistent fallback behavior across actor names, URLs, and related data.
Improved hashtag encoding for consistent formatting.
Improved Jetpack integration by initializing it during the WordPress startup process.
Refactored Mastodon import handling to use consistent array-based data, improving reliability and compatibility across all import scenarios.
What's Changed
Improve NodeInfo handling and add support for FEP-0151 by @pfefferle in #2255
Fix HTML entity encoding in extra field names by @obenland in #2261
Add FEP-3b86 Activity Intents suppo...
This PR removes the server-side default_post_meta_data filter and shifts the logic for determining default ActivityPub content visibility to the UI layer. The change ensures consistent behavior bet...
poi tenete gli occhi puntati su questa storia: la guerra dei #droni. ci sono altri sviluppi da raccontare assolutamente: c'è una lunga storia dietro la storia
Dal #GarantePrivacy ormai passano i dossier più esplosivi e strategici della nostra economia/politica nazionale/internazionale E' il 21esimo secolo:comanda chi controlla i #Dati
Qualcuno, in queste ore, sta perdendo l’accesso ai propri server. Non per un banale errore di configurazione o per un attacco di concorrenti sleali, ma
oggi molte cose da leggere: cominciamo dall'intervista a #ArmandoSpataro sulla separazione delle carriere giudici-PM approvata dal governo #Meloni e da sempre targata #LicioGelli:
voglio farvi notare un fatto che ho capito grazie al mio lavoro di 15 anni sui file segreti di #WikiLeaks:l'attacco all'indipendenza della magistratura e il tentativo di controllo politico dei PM non sono un obiettivo puramente italiano, ma anche oltre Altantico. Vi spiego perché
dopo l'11 settembre,l'Italia è stata trasformata nella piattaforma di lancio delle guerre degli Stati Uniti nel Nord Africa,Medio Oriente, Asia. Questa corrispondenza contenuta in un cablo dell'ex ambasciatore USA Spogli e rivelata da #WikiLeaks e in partnership con noi lo spiega
dal 1945 in poi l'Italia è stata sempre la piattaforma degli Stati Uniti nel Mediterraneo,ma con gradi diversi di sottomissione (vedi la politica della moglie americana e l'amante araba o vedi Craxi-Sigonella), ma con l'11/9 cambia tutto
con l'11/9 il governo Berlusconi acconsente alla trasformazione definitiva dell'Italia nella piattaforma di lancio delle guerre USA e la parte centrista della sinistra italiana (il #PD) non solo NON avversa questa progetto,ma lo condivide
la trasformazione definitiva dell'Italia nella piattaforma di lancio delle guerre degli Stati Uniti è stata possibile con la complicità della parte centrista della sinistra italiana (PD) e la marginalizzazione politica della parte della sinistra contraria a questa operazione
rimangono però alcune "variabili" che causano incertezza in questa strategia:una di queste variabili sono i magistrati italiani che,almeno in teoria, NON rispondono a nessuno e si possono alzare domattina e chiedere l'arresto degli agenti #CIA,come fatto da #Spataro e #Pomarici
ora capite se gli USA hanno investito decenni e miliardi di $ per creare il nido dei #droni (#Sigonella),la base della forza di intervento rapido in Europa (#Vicenza), ecc. il rischio che un PM si svegli domattina, e crei problemi,non è una prospettiva rassicurante per loro
ecco perché nei cablo della diplomazia americana rivelati da #WikiLeaks in partnership con noi e che risalgono a un decennio cruciale per questa trasformazione (fine 2001-feb. 2010), la diplomazia USA è MOLTO critica con le toghe e la linea è: MAI collaborare con loro
quello che accade nelle manovre politiche sulla Giustizia in Italia NON è una pura questione di una classe politica largamente corrotta e/o mafiosa e/o criminale che vuole l'impunità. E' quello, certo. Ma c'è ANCHE un livello più alto
@grabbi_it non sono un'esperta di questioni di Giustizia, ma consiglio di leggere giornalisti che hanno competenze specifiche di giudiziaria e di leggere anche il piano di Rinascita Democratica di Licio Gelli che puntava alla separazione delle carriere
Check Point looks at a very niche phishing group named Payroll Pirates that uses malvertising to target the users of payroll systems, credit unions, and trading platforms
la porche fa come gli altri però apple vuole che tu usi un auto che consuma solo la sua benzina ed è tutta sigillata, sali su un'astronave e dici solo apriti sesamo, e paghi per sentirti figo per aprire la stessa porta che altri hanno automatica.
però almeno le gomme puoi sceglierle tu, con apple neanche quelle. Detesto quel sistema all'origine per il connubio software hardware, mettiamo che il loro software sia migliore, perché costringerlo solo al loro hardware? Un tempo si facevano fare pure processori in esclusiva per giustificare prezzi assurdi, solo che di esclusivo c'era il non sviluppo, così sono passati a intel. Insomma lusso, hai soldi da buttare? apple è lì per quello
veramente sono tornati a fare i propri processori da un bel po' e a quanto pare vanno meglio di intel. Sinceramente non mi piace questa chiusura e la politica dei prezzi di apple ma d'altronde hanno trovato il loro spazio nell'eletronica hi-end.
Hola amigos de Mastodon, cómo están???? Espero que se encuentren bien, iniciamos con mucho ánimo este día Jueves. Ojalá cada uno de ustedes puedan tener un lindo día. Saludos.🤗🤗🤗🤗
AWS dug through its honeypot data and confirmed that CVE-2025-5777 (Cisco ISE RCE) and CVE-2025-5777 (memory leak in Citrix NetScaler) were exploited as zero-days before their patches.
Nothing new here except the confirmation that an APT was behind the attacks
The Amazon threat intelligence team has identified an advanced threat actor exploiting previously undisclosed zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix systems.
Un linguaggio informale, lontanissimo dai burocratismi dei rapporti finanziari. Nel suo Progress Report 2025, presentato nelle scorse ore, l'azienda americana Patagonia (vestiti e abbigliamento tecnico outdoor) mostra un quadro finanziario stabile e coerente con la sua missione dichiarata: usare il business “come strumento per salvare il pianeta”.
Il bilancio sociale di Patagonia è, al solito, anni luce da burocratismi illeggibili. E l'azienda segnala - con sincerità - tutti gli obbiettivi non ancora raggiunti...
![Header of email from Jeffery E[pstein] to Peter Thiel with subject "that was fun, see you in 3 weeks"](https://piero.bosio.info/photo/preview/640/1398510 "Header of email from Jeffery E[pstein] to Peter Thiel with subject \"that was fun, see you in 3 weeks\"")
Ulfh3dnar
in reply to Ulfh3dnar • • •Sensitive content
Russia's overnight attack resulted in hits from 36 unmanned aerial vehicles in 10 locations across Ukraine.
Source: kpszsu
#Ukraine️ #UkraineRussiaWar #Russia