Friendica Social Network

NOELREPORTS 🇪🇺 🇺🇦

3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

Yulia Tymoshenko appeared in court and told the press that the audio recording being used as evidence against her is fabricated.

reshared this

In the night attack from Jan 15-16, Russia launched 76 strike drones (about 50 Shaheds). As of 08:30, 53 drones were shot down or suppressed. 19 drones hit 9 locations, with debris falling at one site.

reshared this

NOELREPORTS 🇪🇺 🇺🇦

3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

Russian losses per 16/01/26 reported by the Ukrainian General Staff

+1370 men
+6 tanks
+4 ACVs
+48 artillery
+3 MLRS
+527 UAVs

reshared this

NOELREPORTS 🇪🇺 🇺🇦

3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

The 15/01/26 SitRep on Ukraine is out: threadreaderapp.com/thread/201…

For 3+ years, we’ve delivered real-time, verified updates—cutting through noise and misinformation. Help us expand our team and keep independent reporting alive.

💙 Support us: patreon.com/NOELREPORTS

☕️ Boost: buymeacoffee.com/noelreports

Thread by @NOELreports on Thread Reader App

@NOELreports: SitRep - 15/01/26 - Ukraine's new RUTA BLOCK 2 cruise missile An overview of the daily events in Russia's invasion of Ukraine. While Ukrainian attacks on energy infrastructure in occupied and Russian t...…

^{threadreaderapp.com}

reshared this

ActivityPub - Collegamento all'originale

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

В Рязани из-за атаки дронов пострадали два человека; в оккупированном Бердянске горит подстанция, город остался без света

#россия #украина #новости #Выбор редакции

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

В Южной Корее экс-президента Юн Сок Ёля приговорили к пяти годам лишения свободы по делу о воспрепятствовании правосудию

#новости #Выбор редакции

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

Лидер венесуэльской оппозиции Мария Корина Мачадо передала Трампу свою медаль Нобелевской премии мира

#новости #Выбор редакции #Америка

giga 🔻

3 settimane fa • •

giga 🔻
3 settimane fa • •

Buste di #minestrone ritirate dal mercato per contaminazione da #alcaloidi. Ecco perché la nonna ieri sera non la smetteva di ridere.

#minestrone #alcaloidi

in reply to giga 🔻

Ivan Bk

in reply to giga 🔻 • 3 settimane fa • •

quali, quali, quali? Azz, si poteva farne scorta! 😂

in reply to giga 🔻

eleonora.sca.gufina

in reply to giga 🔻 • 3 settimane fa • •

è meglio farlo in casa che comprare buste di minestrone già confezionate e pure messe in congelatore.

Nutomic via Lemmy

3 settimane fa • •

Nutomic
3 settimane fa • •

[Help Design Lemmy] How to describe Lemmy in a single Sentence?

On join-lemmy.org, the project is described as "A forum and link aggregator for the Fediverse". In the previous post, multiple people mentioned that this is not a good description. However I have a hard time coming up with anything better.

So please post your suggestions below, and upvote the ones which are both accurate and easy to understand for new users. Later I pick one of the most upvoted options for the website.

By the way the second title "Follow communities Anywhere in the world" will likely go away (see the pull request for frontpage redesign). After this is decided I may also make another post to get suggestions for the longer description text below ("Lemmy is a selfhosted social link aggregation and discussion platform. ...").

Edit: Please only post concrete suggestions in top-level comments, and use replies to discuss. And here you can see how a few other Fed

... mostra di più

So please post your suggestions below, and upvote the ones which are both accurate and easy to understand for new users. Later I pick one of the most upvoted options for the website.

Edit: Please only post concrete suggestions in top-level comments, and use replies to discuss. And here you can see how a few other Fediverse projects do it:
- joinmastodon.org/
- joinpeertube.org/
- pixelfed.org/

Mastodon - Decentralized social media

Learn more about Mastodon, the radically different, free and open-source decentralized social media platform.

^{joinmastodon.org}

Nutomic

2026-01-15 10:14:04

[Help Design Lemmy] Joinlemmy website and New User Onboarding

When people are told about Lemmy and look for it in a search engine, join-lemmy.org is one of the first pages that comes up. Here they should be able to find out what Lemmy is, and be able to register an account to start posting.
At the moment this still seems too complicated, so I'm looking for your suggestions to improve it:
- On the main page, is the text relevant and up to date or should anything be changed?
- How about the instance selection wizard (click "join a server" on the homepage), which lets you select topics and languages to select instances. Do the current options make sense?
- The instance list itself, is there any information missing, or potential design improvements?
- And the list of apps, what can be done here? For one thing the data is rarely updated, so we would appreciate pull requests.
- Any other suggestions you may have.
Since yesterday I already made a couple of improvements:
- Use biased random for instance list, so large instances are always near the top
- Rename Join to Sign Up in instance list
- Fix icon overflows by using inline-flex (by @dessalines)
- Add button to visit random instance (not merged yet)
Edit: Here is a draft for some changes to the frontpage:

github.com/LemmyNet/joinlemmy-…

Use biased random for instance list by Nutomic · Pull Request #508 · LemmyNet/joinlemmy-site
Having the instance list completely random is not great because it often shows very small and niche instances at the top. In the past we used biased random sort for this, dont know why or when this...
^GitHub

#Lemmy

Questa voce è stata modificata (3 settimane fa)

Dessalines likes this.

in reply to Nutomic

Björn

in reply to Nutomic • 3 settimane fa • •

I would honestly drop the "link aggregator" part completely and just call it "discussion forum" or "discussion platform". "Link aggregator" sounds pretty technical and like it just collects links which seems almost pointless. And the links aren't even mandatory when creating a post.

in reply to Björn

Nutomic

in reply to Björn • 3 settimane fa • •

Yes I agree, others have mentioned the same thing. The purpose of this post is to gather concrete suggestions, so please edit your comment with a sentence that you would use instead.

in reply to Nutomic

anothermember

in reply to Nutomic • 3 settimane fa • •

I think the main problem is "link aggregator" which doesn't make a lot of sense as the main function is discussion. For a minimal change you could go for "a discussion platform for the fediverse".

If "fediverse" is too obscure; you could try just "a decentralised discussion platform". Decentralised isn't technical, you can't fully describe the fediverse in a sentence but "decentralised" gives a clue.

in reply to anothermember

Nutomic

in reply to anothermember • 3 settimane fa • •

"Decentralized" may not be technical, but still its a long and complex word. "Fediverse" seems friendlier to me.

in reply to Nutomic

ambitiousslab

in reply to Nutomic • 3 settimane fa • •

It's really hard. Here's my best shot:

A discussion platform for communities.

Questa voce è stata modificata (3 settimane fa)

in reply to ambitiousslab

Nutomic

in reply to ambitiousslab • 3 settimane fa • •

Sounds good, but I would keep the Fediverse in somehow, eg "A federated discussion platform for communities".

in reply to Nutomic

harmbugler

in reply to Nutomic • 3 settimane fa • •

I think leave the federation out, it just confuses new people. People who don't know what the Fediverse is won't understand what federated means, and those who do likely don't need to be told Lemmy is federated.

in reply to harmbugler

Nutomic

in reply to harmbugler • 3 settimane fa • •

Still its the main feature. Plus the sentence is a bit short like this. Or mention that it is open source instead.

in reply to Nutomic

FrostyTrichs

in reply to Nutomic • 3 settimane fa • •

Lemmy is an open-source social network that functions as a global web of independent forums, allowing you to interact with a federation of sites where no single entity holds total control.

Edit: I think it flows a little better without "next-generation" so I removed it.

Questa voce è stata modificata (3 settimane fa)

in reply to FrostyTrichs

Nutomic

in reply to FrostyTrichs • 3 settimane fa • •

This one is too long, I would only use the first part:

Lemmy is an open-source social network that functions as a global web of independent forums

in reply to Nutomic

snek_boi

in reply to Nutomic • 3 settimane fa • •

The best sentence will depend on the target audience. Is there a way to know who would be that audience?

Also, responding more directly to your question, I've got a frame challenge: What about two or three short sentences, like what Mastodon does?

A platform that is truly democratic. You choose your feed. You choose where to host your account.
A platform where you're truly free. You choose your feed. You choose where to host your account.
A platform that can't enshittify. You choose your feed. You choose where to host your account.

That third one I like, because it's a differentiator that Lemmy has in comparison with ButterflyX or whatever Jack the Twitter Guy is working on right now; Lemmy is not at risk of enshitifying, unlike ButterflyX.

Also, if it's important to differentiate Lemmy from Mastodon or other Fediverse platforms, the sentences could start with "A discussion platform".

Also, here's a take where I tried to make no reference to electronics:

A bustling room filled with tables, each

... mostra di più

Questa voce è stata modificata (3 settimane fa)

in reply to snek_boi

Nutomic

in reply to snek_boi • 3 settimane fa • •

The target audience is basically anyone who comes across Lemmy somewhere, looks for it via search engine and ends up on join-lemmy.org. So in other words, anyone really. Including people without any prior knowledge, nor technical knowledge.

On joinmastodon.org I only see a single sentence at the top: "Social networking that's not for sale."

Btw I didnt get any extra notifications from this comment, so no worries. And thank you!

in reply to Nutomic

snek_boi

in reply to Nutomic • 3 settimane fa • •

Ah. Thanks for the target audience explanation.

What I mean with Mastodon is that, immediately after "Social networking that's not for sale", you see more sentences: "Your home feed should be filled with what matters to you most, not what a corporation thinks you should see. Radically different social media, back in the hands of the people."

I think the technical details, such as open source and federation are not going to click with people who don't know those ideas. However, open source and federation can create something that, for those people, is valuable.

So the question is: what does Lemmy offer that clicks with people who don't know technical details?

This is up for discussion, of course. But I'd argue there's "freedom", "choice", "human (and not corporate) communities", "made for people, not for profits"…

That leads me to my suggestion:

A discussion platform that is truly free. You choose your feed, not a corporation. You choose where to set up your account, not a corporation. You cho

... mostra di più

Questa voce è stata modificata (3 settimane fa)

in reply to snek_boi

Nutomic

in reply to snek_boi • 3 settimane fa • •

Ah yes there is the short description at the top. At the moment it talks a lot about "it", good idea to make it more focused on "you". How about this?

Lemmy is a discussion platform that is truly free. You choose which communities to be a part of and which posts to see. You can use extensive blocking and filtering tools to sort and curate your feed. You are in control and not a corporation, so there is no tracking, advertising nor secret algorithms. And you can follow the development in the open, or get your own ideas included.

in reply to Nutomic

ex_06

in reply to Nutomic • 3 settimane fa • •

I would rework the other stuff, like the whole branding because all that hacker green doesn't help in feeling the communities. And the images for the same reason... Also there are some features that are worthless listing like "you can have an avatar"

Also the censorship thing...

Let's say that the homepage kinda reflects the state of lemmy people as a group right now and it's not so nice imo

Focussing on being a clean forum with nested answers and human curated algorithm and idk, just pointing some low hanging fruits

On a side note I wonder if having the page as onboarding for users instead of explaining the software is the right target. Ideally it should be communities trying to outreach to have people on their servers, not the software asking to join people who use the software (?)

But I digress.

On a marketing level point of view, while we are clearly the small fish, it's not bad to leverage being enemies of Reddit. Like in the past we've seen much more Apple vs Microsoft while now they ignore each other.

"Reddit if was not owned by ven

... mostra di più

Questa voce è stata modificata (3 settimane fa)

in reply to ex_06

Nutomic

in reply to ex_06 • 3 settimane fa • •

Youre right, the whole website could use an update and redesign. As none of us Lemmy maintainers are designers, its very hard to do this well.

There is no tracking/statistics on join-lemmy.org, but some new users mentioned it, and mentioned that the site could use improvements (which I'm doing now).

in reply to Nutomic

Kierunkowy74

in reply to Nutomic • 3 settimane fa • •

Your own discussion network

in reply to Kierunkowy74

Kierunkowy74

in reply to Kierunkowy74 • 3 settimane fa • •

... but actually one cannot describe Lemmy's pitch in one simple sentence, because its main difference is:
Reddit but no Spez, fora but connected to each other (and we call this "federation"), and Mastodon but with better topic and content discovery. Any attempt to shorten this will be more or less inaccurate.

So, main Lemmy features, listed under the "Join an instance", "Apps", "Explore random instance", etc., IMHO should look like this:

No ads. No tracking. No meddling.

Posts and comments on your feed are determined only by your settings and users' votes. All moderation actions are public and viewable using a modlog. We do not block third-party apps. Lemmy is a free software and you can check it for yourself.

(we are practically saying Reddit without Spez)

No single overlord. No isolation

There are dozens of Lemmy websites and you can choose your experience with different vibes, topics, regions and moderation approaches. Yet every instance connects to other on

... mostra di più

in reply to Kierunkowy74

Nutomic

in reply to Kierunkowy74 • 3 settimane fa • •

Good suggestion, thanks!

in reply to Nutomic

Nutomic

in reply to Nutomic • 3 settimane fa • •

Thanks everyone for the suggestions. I collected the ones which subjectively seem best, here is the list for a quick overview:

An open source discussion platform for communities.
Lemmy, a decentralised discussion platform for communities
Lemmy is an open-source social network that functions as a global web of independent forums
A decentralized network of forums
Discuss interesting topics and join communities on the Fediverse.
A discussion platform that can’t enshittify. You choose your feed. You choose where to host your account.

Based on these suggestions and the discussion, the best option seems to be: A decentralised discussion platform for communities.

I will keep making more updates to join-lemmy.org based on this post and the previous one. Once that's done I will likely make another post to show the results and gather additional feedback.

hoergen

3 settimane fa da fediverseration • •

(-8.0584933 -34.8848193)

hoergen
3 settimane fa da fediverseration — (-8.0584933 -34.8848193) • •

Auch ohne Stromnetz: Afrika bietet gute Voraussetzungen für Elektroautos

#eMobility
golem.de/news/auch-ohne-stromn…

Auch wenn die Stromversorgung je nach Region wenig zuverlässig ist, wird das E-Auto den Verbrenner in 10 Jahren preislich unterbieten.

Golem.de: IT-News für Profis

^www.golem.de

#emobility

in reply to hoergen

Michael 🇺🇦

in reply to hoergen • 3 settimane fa • •

Vor allem bietet es Unabhängigkeit, mit lokal erzeugtem Strom zu hantieren.

Oloap

3 settimane fa • •

Oloap
3 settimane fa • •

Secondo me

Molti restano su X, consci dell'ambiente tossico e degradato che è diventato, lo fanno per non perdere contatti utili, per poter battagliare con certi personaggi che se la suonano e se la cantano, tuttavia quanto raccontato in questo post di @ildisinformatico dovrebbe spingere i pochi sani presenti su X ad andarsene sbattendo la porta evitando di restare in quella fogna.

attivissimo.me/2026/01/13/podc…

@informapirata @filippodb

Podcast RSI – Utenti dell’IA di Musk generano ogni ora oltre 6000 immagini di donne e bambini denudati. Musk le monetizza

Ultimo aggiornamento: 2026/01/16. Questo è il testo della puntata del 12 gennaio 2026 del podcast Il Disinformatico della Radiotelevisione Svizzera, scritto, montato e condotto dal sottoscritto. Il…

^{Attivissimo.me}

@informapirata ⁂ @filippodb ⁂ @Il Disinformatico

reshared this

Gabriele Marcosanti

3 settimane fa • •

Gabriele Marcosanti
3 settimane fa • •

That's a lot of paws. (Toby, Tilo, Sorse, Gattosio & Micia™)
#catsofmastodon #dogsofmastodon

A paved patio area adjacent to a light-colored building with a small window on the left. A weathered wooden bench on the left side holds three cats: one with a mix of dark and light fur, one brown, and one tabby. In the background, two dogs sit on the patio—one is a black-and-white dog, and the other has light fur with dark patches. Near the building wall, a clear plastic bottle, a coiled hose, and a stone planter with a potted plant are visible. The patio surface features stone tiles in the foreground and brick tiles in the background.

Provided by @altbot, generated privately and locally using Qwen3-Vl:30b

🌱 Energy used: 0.110 Wh

#CatsOfMastodon #dogsofmastodon

Questa voce è stata modificata (3 settimane fa)

in reply to Gabriele Marcosanti

Altbot

in reply to Gabriele Marcosanti • 3 settimane fa • •

A paved patio area adjacent to a light-colored building with a small window on the left. A weathered wooden bench on the left side holds three cats: one with a mix of dark and light fur, one brown, and one tabby. In the background, two dogs sit on the patio—one is a black-and-white dog, and the other has light fur with dark patches. Near the building wall, a clear plastic bottle, a coiled hose, and a stone planter with a potted plant are visible. The patio surface features stone tiles in the foreground and brick tiles in the background.

Provided by @altbot, generated privately and locally using Qwen3-Vl:30b

🌱 Energy used: 0.110 Wh

@Altbot

Cybersecurity & cyberwarfare

3 settimane fa da Open app • •

Cybersecurity & cyberwarfare
3 settimane fa da Open app • •

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

@Informatica (Italy e non Italy 😁)
I ricercatori hanno scoperto una vulnerabilità critica nel plugin Modular DS per WordPress che ha permesso a hacker di compromettere oltre 40.000 siti con un metodo sorprendentemente semplice. La vulnerabilità CVE-2026-23550 Il plugin Modular DS, installato su

... mostra di più

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

(in)sicurezza digitale

2026-01-16 10:07:49

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

Si parla di:
Toggle
La vulnerabilità CVE-2026-23550
Il trucco con l’header Origin
Impatto e risposta

I ricercatori hanno scoperto una vulnerabilità critica nel plugin Modular DS per WordPress che ha permesso a hacker di compromettere oltre 40.000 siti con un metodo sorprendentemente semplice.
La vulnerabilità CVE-2026-23550

Il plugin Modular DS, installato su decine di migliaia di siti WordPress, presentava una falla di privilege escalation classificata con un punteggio CVSS di 10.0, il massimo livello di severità. Questa debolezza, identificata come CVE-2026-23550 e catalogata nel database di Positive Technologies, riguardava le versioni 2.5.1 e 2.5.2 e derivava da una mancanza di autenticazione adeguata nell’endpoint API /apimodular-connector/login. Gli attaccanti potevano inviare una richiesta GET a questo endpoint senza credenziali, sfruttando parametri come login, server-information e manager per elevare i privilegi e ottenere accesso amministrativo completo, inclusi moduli per il login, la gestione del server e i backup.
Patchstack ha rilevato le prime exploitation il 13 gennaio 2026 alle 02:00 UTC, con richieste anomale provenienti da IP come 45.11.89.19 e 185.196.0.11, che puntavano proprio a quell’endpoint vulnerabile. La tecnica non richiedeva payload complessi né exploit zero-day elaborati: bastava una semplice chiamata HTTP per bypassare i controlli e iniettare un account amministratore, permettendo l’esecuzione di comandi arbitrari sul server sottostante.
Il trucco con l’header Origin

Gli hacker hanno affinato l’attacco aggiungendo un header HTTP "Origin: mo.", una stringa apparentemente innocua che il plugin Modular DS interpretava come indicatore di una richiesta legittima proveniente dal dominio “originmo”. Questo header, combinato con la mancanza di validazione sull’API apimodular-connector, convinceva il sistema a trattare la chiamata come interna, eludendo ulteriori verifiche di sicurezza. In pratica, l’attaccante simulava una richiesta dal pannello di controllo del plugin stesso, ottenendo accesso istantaneo a funzionalità sensibili come la gestione dei backup e le informazioni sul server.
Tale approccio, definito il “metodo più pigro” dagli analisti, ha colpito siti vulnerabili in modo massivo perché non necessitava di scansioni personalizzate o tool avanzati: una semplice modifica all’header in una richiesta GET standard era sufficiente per compromettere l’intero ambiente WordPress. Positive Technologies ha dettagliato come questo meccanismo permettesse non solo l’elevazione di privilegi ma anche l’inserimento di backdoor persistenti, con potenziali ramificazioni su database e file system.
Impatto e risposta

L’exploit ha interessato circa 40.000 installazioni attive del plugin, esponendo siti a rischi di defacement, furto dati e ulteriore propagazione di malware tramite i manager di backup integrati. Patchstack ha rilasciato una patch urgente nella versione 2.5.2, che introduce validazioni rigorose sugli header Origin e sull’autenticazione API, bloccando richieste non autorizzate attraverso controlli nonce e verifica IP whitelisting.
Gli amministratori di WordPress devono verificare immediatamente la presenza del plugin Modular DS, aggiornarlo alla versione corretta e monitorare i log di accesso per endpoint sospetti come /apimodular-connector/.
Questa discussione è aperta anche su Feddit in @informatica

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker - (in)sicurezza digitale
^{Dario Fadda (inSicurezzaDigitale.com)}

@Informatica (Italy e non Italy)

securityaffairs

3 settimane fa • •

securityaffairs
3 settimane fa • •

#China-linked #APT UAT-9686 abused now patched maximum severity #AsyncOS bug
securityaffairs.com/186985/apt…
#securityaffairs #hacking

China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bug

Cisco fixed a maximum severity AsyncOS flaw in Secure Email products, previously exploited as a zero-day by China-linked APT group UAT-9686.

^{Pierluigi Paganini (Security Affairs)}

#hacking #china #securityaffairs #apt #asyncos

Gabriele Marcosanti

3 settimane fa • •

Gabriele Marcosanti
3 settimane fa • •

Oggi è il mio non-compleanno, e molti di voi vorrebbero sentire il mio non-discorso.

Bene, c'è stato un tempo in cui ero timido e riservato, un tempo in cui non ero tanto bravo con le parole.
Poi gli anni passano, le persone cambiano, ma questa cosa mi è rimasta.
Quindi, oggi è #beverdì e voi ritenetevi tutti mandati affanculo.
Salute 🥂

#beverdi

in reply to Gabriele Marcosanti

mar01

in reply to Gabriele Marcosanti • 3 settimane fa • •

Ma dai...sei rimasto anche timido e riservato😆 😆 😅

Buon non-compleanno!

N_{Dario Fadda}

3 settimane fa • •

N_{Dario Fadda}
3 settimane fa • •

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker
#CyberSecurity
insicurezzadigitale.com/origin…

(in)sicurezza digitale

2026-01-16 10:07:49

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

Si parla di:
Toggle
La vulnerabilità CVE-2026-23550
Il trucco con l’header Origin
Impatto e risposta

I ricercatori hanno scoperto una vulnerabilità critica nel plugin Modular DS per WordPress che ha permesso a hacker di compromettere oltre 40.000 siti con un metodo sorprendentemente semplice.
La vulnerabilità CVE-2026-23550

Il plugin Modular DS, installato su decine di migliaia di siti WordPress, presentava una falla di privilege escalation classificata con un punteggio CVSS di 10.0, il massimo livello di severità. Questa debolezza, identificata come CVE-2026-23550 e catalogata nel database di Positive Technologies, riguardava le versioni 2.5.1 e 2.5.2 e derivava da una mancanza di autenticazione adeguata nell’endpoint API /apimodular-connector/login. Gli attaccanti potevano inviare una richiesta GET a questo endpoint senza credenziali, sfruttando parametri come login, server-information e manager per elevare i privilegi e ottenere accesso amministrativo completo, inclusi moduli per il login, la gestione del server e i backup.
Patchstack ha rilevato le prime exploitation il 13 gennaio 2026 alle 02:00 UTC, con richieste anomale provenienti da IP come 45.11.89.19 e 185.196.0.11, che puntavano proprio a quell’endpoint vulnerabile. La tecnica non richiedeva payload complessi né exploit zero-day elaborati: bastava una semplice chiamata HTTP per bypassare i controlli e iniettare un account amministratore, permettendo l’esecuzione di comandi arbitrari sul server sottostante.
Il trucco con l’header Origin

Gli hacker hanno affinato l’attacco aggiungendo un header HTTP "Origin: mo.", una stringa apparentemente innocua che il plugin Modular DS interpretava come indicatore di una richiesta legittima proveniente dal dominio “originmo”. Questo header, combinato con la mancanza di validazione sull’API apimodular-connector, convinceva il sistema a trattare la chiamata come interna, eludendo ulteriori verifiche di sicurezza. In pratica, l’attaccante simulava una richiesta dal pannello di controllo del plugin stesso, ottenendo accesso istantaneo a funzionalità sensibili come la gestione dei backup e le informazioni sul server.
Tale approccio, definito il “metodo più pigro” dagli analisti, ha colpito siti vulnerabili in modo massivo perché non necessitava di scansioni personalizzate o tool avanzati: una semplice modifica all’header in una richiesta GET standard era sufficiente per compromettere l’intero ambiente WordPress. Positive Technologies ha dettagliato come questo meccanismo permettesse non solo l’elevazione di privilegi ma anche l’inserimento di backdoor persistenti, con potenziali ramificazioni su database e file system.
Impatto e risposta

L’exploit ha interessato circa 40.000 installazioni attive del plugin, esponendo siti a rischi di defacement, furto dati e ulteriore propagazione di malware tramite i manager di backup integrati. Patchstack ha rilasciato una patch urgente nella versione 2.5.2, che introduce validazioni rigorose sugli header Origin e sull’autenticazione API, bloccando richieste non autorizzate attraverso controlli nonce e verifica IP whitelisting.
Gli amministratori di WordPress devono verificare immediatamente la presenza del plugin Modular DS, aggiornarlo alla versione corretta e monitorare i log di accesso per endpoint sospetti come /apimodular-connector/.
Questa discussione è aperta anche su Feddit in @informatica

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker - (in)sicurezza digitale
^{Dario Fadda (inSicurezzaDigitale.com)}

#cybersecurity

N_{Dario Fadda}

3 settimane fa • •

N_{Dario Fadda}
3 settimane fa • •

Diamo il benvenuto nel #fediverso anche al mio blog InsicurezzaDigitale. Ora è un blog federato quindi potete seguirlo anche da qui: @blog

PS: piano piano sto portando tutti i progetti 😂

#fediverso @(in)sicurezza digitale

(in)sicurezza digitale

3 settimane fa • •

(in)sicurezza digitale
3 settimane fa • •

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

I ricercatori hanno scoperto una vulnerabilità critica nel plugin Modular DS per WordPress che ha permesso a hacker di compromettere oltre 40.000 siti con un metodo sorprendentemente semplice. La vulnerabilità CVE-2026-23550 Il plugin Modular DS, installa

Si parla di:
Toggle

I ricercatori hanno scoperto una vulnerabilità critica nel plugin Modular DS per WordPress che ha permesso a hacker di compromettere oltre 40.000 siti con un metodo sorprendentemente semplice.

La vulnerabilità CVE-2026-23550

Il plugin Modular DS, installato su decine di migliaia di siti WordPress, presentava una falla di privilege escalation classificata con un punteggio CVSS di 10.0, il massimo livello di severità. Questa debolezza, identificata come CVE-2026-23550 e catalogata nel database di Positive Technologies, riguardava le versioni 2.5.1 e 2.5.2 e derivava da una mancanza di autenticazione adeguata nell’endpoint API /apimodular-connector/login. Gli attaccanti potevano inviare una richiesta GET a questo endpoint senza credenziali, sfruttando parametri come login, server-information e manager per elevare i privilegi e ottenere accesso amministrativo completo, inclusi moduli per il login, la gestione del server e i backup.

Patchstack ha rilevato le prime exploitation il 13 gennaio 2026 alle 02:00 UTC, con richieste anomale provenienti da IP come 45.11.89.19 e 185.196.0.11, che puntavano proprio a quell’endpoint vulnerabile. La tecnica non richiedeva payload complessi né exploit zero-day elaborati: bastava una semplice chiamata HTTP per bypassare i controlli e iniettare un account amministratore, permettendo l’esecuzione di comandi arbitrari sul server sottostante.

Il trucco con l’header Origin

Gli hacker hanno affinato l’attacco aggiungendo un header HTTP "Origin: mo.", una stringa apparentemente innocua che il plugin Modular DS interpretava come indicatore di una richiesta legittima proveniente dal dominio “originmo”. Questo header, combinato con la mancanza di validazione sull’API apimodular-connector, convinceva il sistema a trattare la chiamata come interna, eludendo ulteriori verifiche di sicurezza. In pratica, l’attaccante simulava una richiesta dal pannello di controllo del plugin stesso, ottenendo accesso istantaneo a funzionalità sensibili come la gestione dei backup e le informazioni sul server.

Tale approccio, definito il “metodo più pigro” dagli analisti, ha colpito siti vulnerabili in modo massivo perché non necessitava di scansioni personalizzate o tool avanzati: una semplice modifica all’header in una richiesta GET standard era sufficiente per compromettere l’intero ambiente WordPress. Positive Technologies ha dettagliato come questo meccanismo permettesse non solo l’elevazione di privilegi ma anche l’inserimento di backdoor persistenti, con potenziali ramificazioni su database e file system.

Impatto e risposta

L’exploit ha interessato circa 40.000 installazioni attive del plugin, esponendo siti a rischi di defacement, furto dati e ulteriore propagazione di malware tramite i manager di backup integrati. Patchstack ha rilasciato una patch urgente nella versione 2.5.2, che introduce validazioni rigorose sugli header Origin e sull’autenticazione API, bloccando richieste non autorizzate attraverso controlli nonce e verifica IP whitelisting.

Gli amministratori di WordPress devono verificare immediatamente la presenza del plugin Modular DS, aggiornarlo alla versione corretta e monitorare i log di accesso per endpoint sospetti come /apimodular-connector/.

Questa discussione è aperta anche su Feddit in @informatica

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker - (in)sicurezza digitale

^{Dario Fadda (inSicurezzaDigitale.com)}

#WordPress #zeroday #cve @Informatica (Italy e non Italy)

Questa voce è stata modificata (3 settimane fa)

reshared this

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

CORSO NIS2 SENZA SEGRETI: LA FORMAZIONE PER AZIENDE E PROFESSIONISTI FIRMATA RED HOT CYBER!

📌 𝗔𝗰𝗰𝗲𝘀𝘀𝗼 𝗳𝗹𝗲𝘀𝘀𝗶𝗯𝗶𝗹𝗲: corso in e-learning con contenuti sempre disponibili
📌 𝗟𝗶𝘃𝗲𝗹𝗹𝗼: Base
📌 𝗣𝗿𝗲𝗿𝗲𝗾𝘂𝗶𝘀𝗶𝘁𝗶 𝗽𝗲𝗿 𝗶𝗹 𝗰𝗼𝗿𝘀𝗼: conoscenza base della valutazione del rischio
📌 𝗦𝘂𝗽𝗽𝗼𝗿𝘁𝗼 𝗮𝗹 𝗰𝗼𝗿𝘀𝗼: docente disponibile via mail

👉Iscriviti all'Academy per vedere l'anteprima gratuita del corso academy.redhotcyber.com/course…
👉Scrivici ad academy@red

... mostra di più

NIS2 : Network and Information system 2

Il corso NIS2 offre una panoramica sulla Direttiva europea che rafforza la sicurezza delle reti e dei sistemi informativi. Si esploreranno i requisiti normativi, le misure di protezione e le best practice da applicare.

^{Red Hot Cyber}

stefania maurizi

3 settimane fa • •

stefania maurizi
3 settimane fa • •

in reply to stefania maurizi

stefania maurizi

in reply to stefania maurizi • 3 settimane fa • •

in reply to stefania maurizi

stefania maurizi

in reply to stefania maurizi • 3 settimane fa • •

in reply to stefania maurizi

HTPC NZ

in reply to stefania maurizi • 3 settimane fa • •

funny how "the west" always seems to back the wrong horse - from the locals perspective... Unless if you look at it from the ultra wealthy's perspective, specially their own & local bootlickers, then always seems to be the right horse.

Eric A. Meyer

3 settimane fa • •

Eric A. Meyer
3 settimane fa • •

When I was a lad, back in the days of Ford and Reagan, Republicans constantly told us that having to carry proof of citizenship was the kind of thing the Nazis and Soviets and other totalitarian regimes did.

Welp.

newsweek.com/kristi-noem-ice-u…

Kristi Noem says people should be prepared to prove US citizenship

Tensions in Minnesota have continued to sharply escalate following the fatal shooting of Renee Nicole Good.

^{Peter Aitken (Newsweek)}

in reply to Eric A. Meyer

giga 🔻

in reply to Eric A. Meyer • 3 settimane fa • •

why not sewing a visible and recognizable symbol on each immigrant's clothes?

monumental-movement-records

3 settimane fa • •

monumental-movement-records
3 settimane fa • •

Underground Resistance is more than a techno collective—it is a political stance expressed through sound.

In this episode, we explore UR as a fusion of music, ideology, and autonomy. Drawing from the attached recording, the focus is on relentless rhythm.....

youtu.be/uqC45xaJNSE?si=M9GmrJ…

Underground Resistance: The Detroit History of Afro-Futurism and Myth

Underground Resistance is more than a techno collective—it is a political stance expressed through sound.In this episode, we explore UR as a fusion of music,...

^YouTube

Bon Pote

3 settimane fa • •

Bon Pote
3 settimane fa • •

Une très jolie carte de BFM TV...

in reply to Bon Pote

giga 🔻

in reply to Bon Pote • 3 settimane fa • •

je laisse tout et je vais ouvrir un bar de plage en Islande.

monumental-movement-records

3 settimane fa • •

monumental-movement-records
3 settimane fa • •

An exploration of Underground Resistance as techno with purpose.
Focusing on raw rhythm, repetition, and intensity, this episode examines how UR transformed techno into a language of resistance—music built for movement, autonomy, and collective force.

open.spotify.com/episode/535cZ…

Underground Resistance: The Detroit History of Afro-Futurism and Myth

Monumental Movement Records Podcast · Episode

^{Underground Resistance: The Detroit History of Afro-Futurism and Myth (Spotify)}

Cybersecurity & cyberwarfare

1 mese fa (Ricevuto 3 settimane fa) da Open app • •

Cybersecurity & cyberwarfare
1 mese fa (Ricevuto 3 settimane fa) da Open app • •

How Advanced Autopilots Make Airplanes Safer When Humans go AWOL

It’s a cliché in movies that whenever an airplane’s pilots are incapacitated, some distraught crew member queries the self-loading freight if any of them know how to fly a plane. For small airplanes we picture a hapless passenger taking over the controls so that a heroic traffic controller can talk them through the landing procedure and save the day.

Back in reality, there have been zero cases of large airliners being controlled by passengers in this fashion, while it has happened a few times in small craft, but with variable results. And in each of these cases, another person in the two- to six-seater aircraft was present to take over from the pilot, which may not always be the case.

To provide a more reliable backup, a range of automated systems have been proposed and implemented. Recently, the Garmin Emergency Autoland system got

... mostra di più

How Advanced Autopilots Make Airplanes Safer When Humans go AWOL

To provide a more reliable backup, a range of automated systems have been proposed and implemented. Recently, the Garmin Emergency Autoland system got its first real use: the Beechcraft B200 Super King Air landed safely with two conscious pilots on board, but they let the Autoland do it’s thing due to the “complexity” of the situation.

Human In The Loop

Throughout the history of aviation, a human pilot has been a crucial component for the longest time for fairly obvious reasons, such as not flying past the destination airport or casually into terrain or rough weather. This changed a few decades ago with the advent of more advanced sensors, fast computing systems and landing assistance systems such as the ILS radio navigation system. It’s now become easier than ever to automate things like take-off and landing, which are generally considered to be the hardest part of any flight.

Meanwhile, the use of an autopilot of some description has become indispensable since the first long-distance flights became a thing by around the 1930s. This was followed by a surge in long-distance aviation and precise bombing runs during World War II, which in turn resulted in a massive boost in R&D on airplane automation.
A USAF C-54 Skymaster. (Credit: US Air Force)
While the the early gyroscopic autopilots provided basic controls that kept the airplane level and roughly on course, the push remained to increase the level of automation. This resulted in the first fully automatic take-off, flight and landing being performed on September 22, 1947 involving a USAF C-54 Skymaster. As the military version of the venerable DC-4 commercial airplane its main adaptations included extended fuel capacity, which allowed it to safely perform this autonomous flight from Newfoundland to the UK.

In the absence of GNSS satellites, two ships were located along the flight path to relay bearings to the airplane’s board computer via radio communication. As the C-54 approached the airfield at Brise Norton, a radio beacon provided the glide slope and other information necessary for a safe landing. The fact that this feat was performed just over twenty-eight years after the non-stop Atlantic crossing of Alcock and Brown in their Vickers Vimy airplane shows just how fast technology progressed at the time.

Nearly eighty years later, it bears asking the question why we still need human pilots, especially in this age of GNSS navigation, machine vision, and ILS beacons at any decently sized airfield. The other question that comes to mind is why we accept that airplanes effectively fall out of the sky the moment that they run out of functioning human pilots to push buttons, twist dials, and fiddle with sticks.

State of the Art

In the world of aviation, increased automation has become the norm, with Airbus in particular taking the lead. This means that Airbus has also taken the lead in spectacular automation-related mishaps: Flight 296Q in 1988 and Air France Flight 447 in 2009. While some have blamed the 296Q accident on the automation interfering with the pilot’s attempt to increase thrust for a go-around, the official explanation is that the pilots simply failed to notice that they were flying too low and thus tried to blame the automation.
The Helios Airways 737-300, three days before it would become a ghost flight. (Credit: Mila Daniel)
For the AF447 crash the cause was less ambiguous, even if took a few years to recover the flight recorders from the seafloor. Based on the available evidence it was clear by then that the automation had functioned as designed, with the autopilot disengaging at some point due to the unheated pitot tubes freezing up, resulting in inconsistent airspeed readings. Suddenly handed the reins, the pilots took over and reacted incorrectly to the airspeed information, stalled the plane, and crashed into the ocean.

One could perhaps say that AF447 shows that there ought to be either more automation, or better pilot training so that the human element can fly an airplane unassisted by an autopilot. When we then consider the tragic case of Helios Airways Flight 522, the ‘ghost flight’ that flew on autopilot with no conscious souls on board due to hypoxia, we can imagine a dead-man switch that auto-lands the airplane instead of leaving onlookers powerless to do anything but watch the airplane run out of fuel and crash.

Be Reasonable

Although there are still a significant number of people who would not dare to step a foot on an airliner that doesn’t have at least two full-blooded, breathing human pilots on board, there is definitely a solid case to be made for emergency landing systems to become a feature on airplanes, starting small. Much like the Cirrus Airframe Parachute System (CAPS) – a whole-airplane parachute system that has saved many lives as well as airframes – the Garmin Autoland feature targets smaller airplanes.
The Garmin Autoland system communicates with ATC and nearby traffic and lands unassisted. (Credit: Garmin)
After a recent successful test with a HondaJet, this recent unscheduled event with the Beechcraft B200 Super King Air twin-prop airplane turned out to be effectively another test. As the two pilots in this airplane were flying between airports for a repositioning flight, the cabin suddenly lost pressurization. Although both pilots were able to don their oxygen masks, the Autoland system engaged due to the dangerous cabin conditions. They then did not disengage the system as they didn’t know the full extent of the situation.

This effectively kept both pilots ready to take full control of the airplane should the need have arisen to interfere, but with the automated system making a textbook descent, approach and landing, it’s clear that even if their airplane had turned into another ghost flight, they would have woken up groggy but whole on the airstrip, surrounded by emergency personnel.

Considering how many small airplanes fly each year in the US alone, systems like CAPS and Autoland stand to save many lives both in the air and on the ground the coming years. Combine this with increased ATC automation at towers and elsewhere such as the FAA’s STARS and Saab’s I-ATS, and a picture begins to form of increased automation that takes the human element out of the loop as much as possible.

Although we’re still a long way off from the world imagined in 1947 where ‘electronic brains’ would unerringly fly all airplanes and more for us, it’s clear that we are moving in that direction, with such technology even within the reach of the average owner of an airplane of some description.

hackaday.com/2026/01/06/how-ad…

Lioh

3 settimane fa • •

Lioh
3 settimane fa • •

@tobias lieber Tobias. Ich habe deinen Talk zu nicht-text-basierten Diensten im Fedi gesehen. Danke dafür. Mir ist nicht bekannt das loops schon ActivityPub spricht. Bei Flohmarkt war es bis zuletzt so, dass du dich dort nicht mit einem bereits existierenden Fediverse Account anmelden konntest. Ich finde ergänzend auch NeoDB noch spannend: neodb.net/

🧩 NeoDB

Mark the things you love.

^neodb.net

@Tobias

in reply to Lioh

grindhold

in reply to Lioh • 3 settimane fa • •

@DigiGes
kann mir jemand den talk linken um den es im OP geht? :)

@Digitale Gesellschaft DE

Unknown parent

grindhold

Unknown parent • 3 settimane fa • •

@DigiGes

das feature existiert, ist aber opt-in für die admins. siehe:

flensmarkt.de/register

Flensmarkt

Eine flohmarkt-Instanz. Verkaufe und kaufe Dinge aus zweiter Hand von anderen Nutzern.

^{flensmarkt.de}

@Digitale Gesellschaft DE

quinta - Stefano Quintarelli

3 settimane fa • •

quinta - Stefano Quintarelli
3 settimane fa • •

Oracle Sued by Bondholders Over $18 Billion Debt Offering Disclosures – Bloomberg blog.quintarelli.it/2026/01/or…

Oracle Sued by Bondholders Over $18 Billion Debt Offering Disclosures – Bloomberg – Quinta’s weblog

^{blog.quintarelli.it}

in reply to quinta - Stefano Quintarelli

bupig

in reply to quinta - Stefano Quintarelli • 3 settimane fa • •

Sarebbe divertente se altre cause simili venissero intentate...

Laura Manach

3 settimane fa • •

Laura Manach
3 settimane fa • •

I run for 20 minutes every day and, if I miss a day, I add an extra 20 minutes to the following day. This has truly been a game changer! Tomorrow, I'm supposed to run for four months.

securityaffairs

3 settimane fa • •

securityaffairs
3 settimane fa • •

Google Gemini to power entire Apple ecosystem - My Interview with TRT youtube.com/watch?v=fyJE6542d9… - Apple has announced a multi-year partnership with Google to use the company's AI models. It's all aimed at revamping Siri and projects like Apple Intelligence. Pierluigi Paganini, CEO Cybhorus and Cybersecurity has more

Google Gemini to power entire Apple ecosystem

Apple has announced a multi-year partnership with Google to use the company's AI models. It's all aimed at revamping Siri and projects like Apple Intelligenc...

^YouTube

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

🔴 Benvenuta in Red Hot Cyber Cyber Angels 🔴

🔗 Seguite Daniela:
📌Sul suo profilo LinkedIn : linkedin.com/in/talktodani/
📌Leggendo gli ultimi articoli : redhotcyber.com/rhc/redazione/…

#redhotcyber #rhccyberangels #hacking #benesseredigitale #cti #ai #online #it #cybercrime #cybersecurity

Redazione - Red Hot Cyber

RedHotCyber è una community con lo scopo di divulgare contenuti di cybersecurity, attraverso la pubblicazione di news e ricerche.

^{Red Hot Cyber}

#ai #redhotcyber #online #it #hacking #cybersecurity #cybercrime #cti #benesseredigitale #rhccyberangels

Eva De Marco • open to create

3 settimane fa • •

Eva De Marco • open to create
3 settimane fa • •

A quanto pare il referendum ci sarà il 22-23 marzo prossimi.
Stamattina ho già visto un mega cartellone del Sì con un messaggio volutamente fuorviante.

I dibattiti che ho ascoltato finora sono stati deludenti. Non ho trovato una mappa visiva che spieghi lo stato di fatto e cosa cambierà. Perché a noi interessano le conseguenze di questa legge.

C’è già qualcosa o proviamo a farla?

in reply to Eva De Marco • open to create

Flavio Borgna

in reply to Eva De Marco • open to create • 3 settimane fa • •

Hai ragione.
Da quello che ho letto con la modifica in proposta la magistratura sarà più influenzata dalle azioni di governo.
E la costituzione prevede che i tre poteri dello stato debbano rimanere indipendenti, e già la funzione parlamentare è stata indebolita.

in reply to Flavio Borgna

Eva De Marco • open to create

in reply to Flavio Borgna • 3 settimane fa • •

@FlavioB ho letto l'articolo da modificare. Praticamente un terzo dei componenti del CSM fa parte di un elenco di professori universitari (competenti in materie giuridiche) e di avvocati scelti dal Parlamento. Il restante due terzi da magistrati giudicanti e requirenti.

Cosa può combinare quel terzo? Penso di non avere le competenze per dirlo.
Sta di fatto che, appunto, così viene meno l'indipendenza dei poteri.

Io di base sono contraria alla separazione delle carriere.

@Flavio Borgna

Informa Pirata

3 settimane fa da SHitter • •

Informa Pirata
3 settimane fa da SHitter • •

Sovranità del cloud in Europa, cosa significano le mosse di Aws

Per vedere altri post come questo, segui la comunità @Informatica (Italy e non Italy 😁)

L’endorsement del BSI tedesco all’European Sovereign Cloud di Aws arriva insieme al sostegno di governi e autorità di sicurezza di 14 Paesi. Un segnale politico che alza l’asticella per tutti gli hyperscaler e prova a sciogliere il nodo Ue-Usa sul controllo dei dati?

@Informatica (Italy e non Italy)

reshared this

in reply to Informa Pirata

Scimmia di Mare

in reply to Informa Pirata • 3 settimane fa • •

Ma la fiducia ad un attore americano, legato mani e piedi con QUESTA amministrazione, dove si appoggia?

like this

reshared this

in reply to Scimmia di Mare

Informa Pirata

in reply to Scimmia di Mare • 3 settimane fa da Bleah • •

@Scimmia di Mare al piacere che si prova nel guardare quanto è cresciuto il proprio conto corrente da quando hai venduto l'anima a Bezos 🤣

@Scimmia di Mare

Herr Irrtum! 🔊

3 settimane fa • •

Herr Irrtum! 🔊
3 settimane fa • •

Irrational RANT at the Chinese for not building 51/4 Floppy USB drives

Sensitive content

securityaffairs

3 settimane fa • •

securityaffairs
3 settimane fa • •

Actively exploited critical flaw in Modular DS #WordPress plugin enables admin takeover
securityaffairs.com/186976/sec…
#securityaffairs #hacking

Actively exploited critical flaw in Modular DS WordPress plugin enables admin takeover

A critical Modular DS WordPress flaw (CVE-2026-23550) is actively exploited, enabling unauthenticated privilege escalation.

^{Pierluigi Paganini (Security Affairs)}

#hacking #WordPress #securityaffairs

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

Allarme Windows: due gravi zero-day nel file system NTFS mettono a rischio milioni di PC

📌 Link all'articolo : redhotcyber.com/post/allarme-w…

#redhotcyber #news #microsoft #windows #sicurezza #cybersecurity #aggiornamentodisicurezza #vulnerabilita

Allarme Windows: due gravi zero-day nel file system NTFS mettono a rischio milioni di PC

Microsoft rilascia patch per due vulnerabilità zero-day in NTFS che potevano dare agli aggressori il controllo completo del sistema. Scopri di più.

^{Redazione RHC (Red Hot Cyber)}

#microsoft #vulnerabilità #redhotcyber #cybersecurity #News #sicurezza #windows #aggiornamentodisicurezza

Cybersecurity & cyberwarfare

3 settimane fa • •

Cybersecurity & cyberwarfare
3 settimane fa • •

What Happens When a Bug Rears its Head at Mach Two?

While some may see amateur rocketry as little more than attaching fins to a motor and letting it fly, it is, in fact, rocket science. This fact became very clear to [BPS.space] when a parachute deployed on a rocket traveling at approximately Mach 1.8.

The rocket design is rather simple — essentially just 3D printed fins glued onto a motor with a nose-cone for avionics. A single servo and trim tab provide a modicum of roll control, and a parachute is mounted in the nose along with a homing beacon for faster recovery. Seemingly, the only thing different about this flight is properly validated telemetry and GPS antennae.

After a final ground check of the telemetry and GPS signal quality, everything is ready for what seems like a routine launch. However, somewhere around Mach 1.8, t

... mostra di più

What Happens When a Bug Rears its Head at Mach Two?

After a final ground check of the telemetry and GPS signal quality, everything is ready for what seems like a routine launch. However, somewhere around Mach 1.8, the parachute prematurely deploys, ripping apart the Kevlar rope holding together the three rocket sections. Fortunately, the booster and avionics sections could be recovered from the desert.

But this begs the question, what could possibly have caused a parachute deployment at nearly twice the speed of sound?[BPS.space] had made a quick untested change to the flight control software, in an attempt to get more accurate speed data. By feeding into the flight controller barometric altitude changes during the decent stage, it should be able to more accurately estimate its position. However, direct static pressure readings at supersonic speeds are not an accurate way of measuring altitude. So, during the boost phase, the speed estimation function should only rely on accelerometer data.
The line in question.
However, a simple mistake in boolean logic resulted in the accelerometer velocity being passed into the velocity estimate function during the boost phase. This gave an erroneous velocity value below zero triggering the parachute deployment. Nevertheless, the test was successful in proving antenna choice resulted in poor telemetry and GPS readings on earlier launches.

If you want to see a far more successful [BPS.space] rocket launch, make sure to check out this self landing rocket next!

youtube.com/embed/JXr4-GoCWsw?…

hackaday.com/2026/01/15/what-h…

Cybersecurity & cyberwarfare

3 settimane fa • •

Cybersecurity & cyberwarfare
3 settimane fa • •

LA GUERRA: ALCUNE SUE DEFINIZIONI E CARATTERISTICHE (SECONDA PARTE)

@Informatica (Italy e non Italy 😁)

Scopo primario della guerra è “l’abbattimento dell’avversario, e quindi, l’annientamento delle sue forze armate” che “deve costituire lo scopo principale di tutta l’azione bellica”.
L'articolo LA GUERRA: ALCUNE SUE DEFINIZIONI E CARATTERISTICHE (SECONDA PARTE) proviene da

@Informatica (Italy e non Italy)

Informatica (Italy e non Italy) reshared this.

Futuro Prossimo

3 settimane fa • •

Futuro Prossimo
3 settimane fa • •

Pensavamo di conoscerla a memoria, è una delle "star" del cielo profondo. Invece la Nebulosa Anello nascondeva un segreto pesante: una barra di ferro spaziale lunga 500 volte l'orbita di Plutone. Non è solo gas, c'è materia ionizzata che attraversa il cuore di una stella morente, quasi come una lama metallica.

È il fossile di un pianeta distrutto o un nuovo capitolo sulla morte delle stelle simili al Sole? La scienza ha appena trovato qualcosa dove non dovrebbe esserci.
futuroprossimo.it/2026/01/wow-…

Wow, c’è un’enorme barra di ferro spaziale nella Nebulosa Anello

Pensavamo fosse solo gas, invece la Nebulosa Anello nasconde una barra di ferro spaziale pesante quanto Marte. Com'è finita proprio lì?

^{Gianluca Riccio (FuturoProssimo)}

Stefan Münz

3 settimane fa • •

Stefan Münz
3 settimane fa • •

Digitale Unabhängigkeit hat viele Aspekte. Auch eine Entschlackungskur für Web-Browser gehört dazu.
#DID #DUT #DigitalDetox
heise.de/news/Einfach-nur-eine…
Wer es mal ausprobieren möchte:
justthebrowser.com

Einfach nur einen Webbrowser, bitte

„Just the Browser” ebnet den Weg zu schlanken Webbrowsern am Desktop. Nervender Ballast wird binnen Sekunden in Chrome, Edge oder Firefox deaktiviert.

^{Daniel AJ Sokolov (heise online)}

#digitaldetox #did #dut

Denis Evsyukov

3 settimane fa • •

Denis Evsyukov
3 settimane fa • •

Caddy Docker: автоматический reverse proxy для домашнего сервера juev.org/2026/01/15/caddy-dock…

Caddy Docker: автоматический reverse proxy для домашнего сервера

Больше года использую Synology NAS DSM720+ в качестве домашнего сервера. Добавил памяти до 10GB, установил SSD кеш для ускорения работы.

^{Denis Evsyukov}

The Moscow Times by NB

3 settimane fa • •

The Moscow Times by NB
3 settimane fa • •

SOCAR начала поставки азербайджанского газа в Германию и Австрию -- ИФ
ru.themoscowtimes.com/2026/01/…
{2026-01-16 - 10:23:10}

МОСКВА, 16 янв (Рейтер) - Госнефтекомпания Азербайджана (SOCAR) ⁠начала поставки азербайджанского газа в Германию и Австрию ⁠по Трансадриатическому газопроводу (TAP), ⁠сообщил Интерфакс.
«SOCAR начала ⁠новый важный этап в ‌экспорте газа ‍из Азербайджана, осуществляя продажу ‌значительных объемов газа на рынки Южной и Центральной Европы через ⁠TAP, являющийся европейским ‍сегментом »Южного газового ‌коридора«. Так, с января 2026 года азербайджанский газ, помимо других стран, поставляется покупателям из ‍Австрии и ‍Германии», - цитирует агентство сообщение компании.
Компания ‍не уточняет объемы поставок газа страны ⁠и другие подробности. (Московское бюро)
Reuters Reuters

SOCAR начала поставки азербайджанского газа в Германию и Австрию -- ИФ

^{Reuters (Русская служба The Moscow Times)}

The Moscow Times by NB

3 settimane fa • •

The Moscow Times by NB
3 settimane fa • •

Китай прекратил покупать в России электричество, которое стало дороже китайского
ru.themoscowtimes.com/2026/01/…
{2026-01-16 - 10:35:00}

Китай полностью остановил импорт электроэнергии из России с начала 2026 года и не закупает даже предусмотренный контрактом минимальный объем — около 12 МВт, сообщили «Коммерсанту» знакомые с ситуацией источники. По их словам, в текущем году экспорт электроэнергии в страну вряд ли возобновится, поскольку экспортная цена поставки с января превысила внутренние цены на электроэнергию в Китае. Это сделало дальнейшую закупку невыгодной для Пекина.
«Интер РАО» экспортировало в Китай излишки электроэнергии с Дальнего Востока. Контракт на поставку был заключен с китайской Государственной электросетевой корпорацией в 2012 году. Он действует до 2037 года. Предполагалось, что за весь период в Китай будет поставлено около 100 млрд кВт/ч, или около 4 млрд кВт/ч в год. Формула цены на электроэнергию, установленная контрактом, неизвестна. Она может быть привязана к одноставочной цене (мощность плюс электроэнергия), складывающейся на Дальнем Востоке, а также должна учитывать тариф магистральных сетей на транспорт электроэнергии до трансграничной ЛЭП Амурская—Хэйхэ и маржу «Интер РАО». Далее китайские импортеры продают электроэнергию своим потребителям уже по розничной цене.
Цена на электроэнергию в Китае остается практически неизменной и составляет на данный момент около 350 юаней за 1 МВт/ч (около 3,9 тыс. руб. за 1 МВт/ч). При этом на Дальнем Востоке одноставочная цена на электроэнергию может составить по итогам января около 4,3 тыс. руб. за 1 МВт/ч, что на 42% больше, чем в нача ...

Китай прекратил покупать в России электричество, которое стало дороже китайского

^{Русская служба The Moscow Times}

PTN PNH ☮️ 🇺🇦 🇮🇱

3 settimane fa • •

PTN PNH ☮️ 🇺🇦 🇮🇱
3 settimane fa • •

Россия помогла Ирану создать инфраструктуру для самого масштабного отключения интернета в истории (Особенно интересно в свете последних событий с жж - явно это будущее рф).
t.me/agentstvonews/13488?singl…
Одно из самых масштабных и сложных отключений интернета в истории, которое иранские власти осуществили на прошлой неделе, стало возможным благодаря помощи России и построенной при поддержке Москвы системы контроля за интернетом.
Картина в целом. Работу интернета иранские власти резко ограничили в прошлый четверг, когда в первые полчаса после блокировки трафик в стране сократился на 90% и с тех пор не восстановился. Полностью была заблокирована мобильная связь. Уровень ограничений оказался беспрецедентным, превзойдя цифровую блокаду Ирана в 2019 году.
▪️При этом блокировки оказались пугающе точными, написала The Guardian. Пока иранцы по всей стране были отрезаны от интернета, аятолла Али Хаменеи публиковал сообщения в X. Быстро возобновили работу сайты местных органов власти, продолжало работать приложение для совместных поездок Snapp!, банковские приложения, а автозаправочные станции продолжали обрабатывать платежи. Именно такая избирательность отличает нынешние блокировки от предыдущих, говорит эксперт по интернет-инфраструктуре Дуг Мадори.
Как отключали интернет. Задачу отключения Ирана от интернета упростило то, что в стране существуют только две точки доступа к глобальной сети, пишет FT. В 1990-х годах единственной цифровой связью Ирана с внешним миром была небольшая лаборатория физики элементарных частиц, позднее власти разрешили создание еще одного дополнительного канала — компании по развитию телекоммуникационной инфраструктуры.
▪️На протяжении почти десяти лет Иран пытался создать изолированную версию интернета, называемую Национальной информационной сетью (NIN), которая позволяет блокировать доступ простых граждан в сеть, но при этом обеспечивает работу правительственных сервисов и предприятий, пишет FT.
▪️В начале блокировки 8 января ненадолго оказалась отключена и NIN, однако власти смогли быстро восстановить ее работу.
Роль России. В основе иранской технологии лежит архитектура сетевого контроля, разработанная при содействии России и основанная на технологии DPI (глубокого анализа интернет-трафика), пишет Foreign Policy.
▪️DPI позволяет иранским властям выйти за рамки блокировки сайтов и блокировать трафик также для приложений, виртуальных частных сетей, мессенджеров и выборочно ограничивать доступ к платформам, используемым для координации протестов.
▪️Российские компании (например, «Протей») помогали иранским мобильным операторам интегрировать DPI в иранскую систему перехвата сообщений, пишет FP. Это позволило иранским силовикам выявлять координационные центры протестующих, отслеживать схемы коммуникации и реагировать по мере развития протестов. На практике это означает, что иранские спецслужбы могут проводить точечные задержания до, а не после акций. Именно так поступали российские власти, подавляя инакомыслие без применения массовых репрессий, говорится в публикации.
▪️Россия также помогла Ирану построить многоуровневую систему, позволяющую бороться с попытками обхода блокировок через спутниковый интернет, следует из публикации. Работа интернета Starlink может быть нарушена с помощью систем РЭБ, которые Россия широко применяла в Украине.
Другая помощь. В 2023 году после протестов из-за смерти в полицейском участке Махсы Амини, задержанной за противодействие обязательному ношению хиджаба, иранская делегация из 17 человек провела в России восемь дней, посещая предприятия концерна «Ростех». Особое внимание она уделяла электрошокерам, светошумовым гранатам, взрывчатке и другим системам для подавления протестов.
▪️В конце 2025 года Россия поставила Ирану около 40 бронированных машин Spartak MRAP, разработанных для Росгвардии и оптимизированных для длительных городских операций против внутренних угроз.
Что дальше? На завершающей стадии находится разработка новой национальной сети на платформе Huawei, сообщило издание Iran International. Проект рассчитан на расширение возможностей по полному и длительному отключению страны от глобального интернета.

Агентство. Новости

Россия помогла Ирану создать инфраструктуру для самого масштабного отключения интернета в истории Одно из самых масштабных и сложных отключений интернета в истории, которое иранские власти осуществили на прошлой неделе, стало возможным благодаря пом…

^Telegram

reshared this

in reply to PTN PNH ☮️ 🇺🇦 🇮🇱

Iron Bug

in reply to PTN PNH ☮️ 🇺🇦 🇮🇱 • 3 settimane fa • •

Questa voce è stata modificata (3 settimane fa)

in reply to Iron Bug

hardworm

in reply to Iron Bug • 3 settimane fa • •

Sensitive content

in reply to hardworm

Iron Bug

in reply to hardworm • 3 settimane fa • •

Questa voce è stata modificata (3 settimane fa)

in reply to Iron Bug

hardworm

in reply to Iron Bug • 3 settimane fa • •

Sensitive content

in reply to hardworm

Iron Bug

in reply to hardworm • 3 settimane fa • •

Questa voce è stata modificata (3 settimane fa)

Unknown parent

Iron Bug

Unknown parent • 3 settimane fa • •

Unknown parent

Iron Bug

Unknown parent • 3 settimane fa • •

Questa voce è stata modificata (3 settimane fa)

The Moscow Times by NB

3 settimane fa • •

The Moscow Times by NB
3 settimane fa • •

Иена растет после намека ЦБ Японии на возможные совместные интервенции с США
ru.themoscowtimes.com/2026/01/…
{2026-01-16 - 10:19:12}

ТОКИО, 16 янв (Рейтер) - Иена укрепляется в паре с долларом в пятницу после того, как министр финансов Японии допустил возможность совместных действий с Вашингтоном в поддержку ослабевшей японской ⁠валюты.
Индекс доллара к корзине из шести основных валют к 09:16 МСК был малоподвижен на уровне 99,328, тогда как иена подорожала на 0,16% до ⁠158,39.
Министр финансов Японии Сацуки Катаяма сказала, что Токио будет противостоять ⁠слабости иены любыми возможными способами. Японская валюта коснулась на этой неделе минимума полутора лет. Доллар при ⁠этом может показать третью подряд неделю роста благодаря сильной статистике США, которая во ‌много развеяла ожидания о быстром снижении ставки ФРС.
«Когда дело подходит ‍вплотную к валютной интервенции, Минфин Японии или другие чиновники обычно запрашивают или уточняют ‌котировки иены у контрагентов, - отметил Феликс Райан из ANZ. - Значимость таких запросов определяется уровнем пары доллар-иена и скоростью ее движения в течение суток». Доллар вырос накануне после сообщения Минтруда США о снижении числа ⁠обращений за пособием по безработице. Аналитики, основываясь ‍на предварительных данных, прогнозировали их рост.
«Доллар демонстрирует силу в начале ‌года, - отметил аналитик Capital.com Кайл Родда. - Еженедельные данные о безработице, а также ряд производственных показателей оказались лучше прогнозов, что умерило ожидания скорого снижения ставок ФРС».
Новозеландский доллар поднялся на 0,19% до $0,5753, тогда как его ав ...

FOREX-Иена растет после намека ЦБ Японии на возможные совместные интервенции с США

^{Reuters (Русская служба The Moscow Times)}

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

@ChrisO_wiki

Latest on the Finnish deployment to Greenland

bsky.app/profile/chriso-wiki.b…

@ChrisO_wiki

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

@chuckpfarrer.bsky.social

HULIAIPOLE CITY: The military situation in the urban area of Huliaipole (Zaporizhzhia region) oremains highly intense and contested.

UKR Defense Forces repelled 20 Russian attacks in the Huliaipole direction, including in the town itself

x.com/chuckpfarrer/status/2011…

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

Time to dump #Trump? Europeans whisper last-resort options to save Greenland

✍️ Tim Ross and Victor Jack

The alliance is already broken, officials say, so why not threaten to cut ties with America on military collaboration?

politico.eu/article/donald-tru…

Time to dump Trump? Europeans whisper last-resort options to save Greenland

The alliance is already broken, officials say, so why not threaten to cut ties with America on military collaboration?

^{Tim Ross (POLITICO)}

#trump

reshared this

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

@josephcox

New: meet ELITE, the Palantir app ICE is using to find neighborhoods to raid. Map interface; officers search for immigrants; click person to bring up individual dossier. This is clearest link between what Palantir is building and ICE's activities on the ground yet 404media.co/elite-the-palantir…

‘ELITE’: The Palantir App ICE Uses to Find Neighborhoods to Raid

Internal ICE material and testimony from an official obtained by 404 Media provides the clearest link yet between the technological infrastructure Palantir is building for ICE and the agency’s activities on the ground.

^{Joseph Cox (404 Media)}

@Joseph Cox

Matthias

3 settimane fa da [ˈloma] | Friendica • •

(50.6429639 7.2160411)

Matthias
3 settimane fa da [ˈloma] | Friendica — (50.6429639 7.2160411) • •

Beitrag von @Tobias zum Fediverse. Aufgezeichnet am 11.07.2025 auf der sfscon 👍

Fediverse: Beyond text in the stream

Fediverse: Beyond text in the stream - SFSCON

SFSCON Talk

^SFSCON

@Tobias

Russia-Ukraine Daily News

3 settimane fa • •

Russia-Ukraine Daily News
3 settimane fa • •

🇷🇺 🇺🇦 Morning Briefing:

- Macron says France now providing two thirds of intelligence to Ukraine
- Nato Arctic defence needed against Russia, says UK’s Cooper
- Germany blocks Russian 'shadow fleet' tanker from entering its waters
- Poland approves transfer of 9 fighter jets to Ukraine
- Ukraine condemns ICRC over 'moral equivalence' on energy strikes

1/2🧵

#ukraine #europe #russia #usa #russiaukraineWar

#ukraine #europe #russia #usa #russiaukrainewar

in reply to Russia-Ukraine Daily News

Russia-Ukraine Daily News

in reply to Russia-Ukraine Daily News • 3 settimane fa • •

2/2

- Russia destroys large energy facility in Kharkiv, mayor says
- Russia's oil and gas budget revenue falls 24% to lowest since 2020
- Russia expels British diplomat for alleged spying, London mulling response

📨 Daily newsletter: russia-ukraine-newsletter.beeh…

💬 Telegram: t.me/russiaukrainedaily

#ukraine #europe #russia #usa #russiaukraineWar #russianwarCrimes

Russia-Ukraine Daily News

The latest news about Russia and Ukraine, hand-picked for you every weekday morning (09:30-10:00 GMT+3).

^{Russia-Ukraine Daily News}

#ukraine #europe #russia #usa #RussianWarCrimes #russiaukrainewar

The Moscow Times by NB

3 settimane fa • •

The Moscow Times by NB
3 settimane fa • •

Дорожающий утром пятницы рубль готов показать рост по итогам недели
ru.themoscowtimes.com/2026/01/…
{2026-01-16 - 09:44:57}

МОСКВА, 19 дек (Рейтер) - Рубль в пятницу утром показывает на форексе положительные изменения, также он готов показать рост по итогам первой полноценной рабочей недели 2026 года на фоне реализации экспортерами накопленной за длинные каникулы валютной выручки, роста продаж юаней Минфином, недавнего скачка нефтяных цен.
Против же сегодня будет играть возможное усиление спроса импортеров ⁠на инвалюту с учетом привлекательности ее текущего рублевого курса, фиксация прибыли в спекулятивных позициях, минимизация риска на выходные дни.
Пара доллар/рубль к 9.30 МСК была на уровне 77,90, и рубль набирает 0,4% от закрытия четверга, по итогам которого он подорожал на 0,3%.
С начала ⁠недели рубль против доллара дорожает на форексе на 1,4%.
Пара евро/рубль котируется по 93,70, что совсем рядом ⁠с закрытием четверга, по итогам которого рубль набрал 0,6%. Здесь рубль с начала недели укрепляется на 1,2%.
Пара юань/рубль к 9.30 МСК находилась ⁠на форексе у отметки 10,90 рубля за юань, и российская валюта набирает 0,4% от последних вчерашних значений.
По итогам четверга на Мосбирже рубль ‌подорожал к юаню на треть процента, завершив сессию расчетами «завтра» котировкой 11,15 при объеме сделок в 129 миллиардов рублей. Накануне вечером ‍рубль достиг январского максимума, 11,1250, с начала недели он набирает 0,7%.
Российская валюта накануне укрепилась на фоне вечернего релиза Минфина РФ ‌о росте продаж ведомством юаней и золота по бюджетному правилу в 2,3 раза по сравнению с ...

Дорожающий утром пятницы рубль готов показать рост по итогам недели

МОСКВА, 19 дек (Рейтер) - Рубль в пятницу утром показывает на форексе положительные изменения, также он готов показать рост по итогам первой полноценной рабочей недели 2026 года на фоне реализации экспортерами накопленной за длинные каникулы валютной…

^{Reuters (Русская служба The Moscow Times)}

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

@MilitaryNewsUA

❗️The first 🇫🇷French military units are already on their way to 🇬🇱Greenland, — French President Macron

bsky.app/profile/militarynewsu…

@MilitaryNewsUA🇺🇦

The Moscow Times by NB

3 settimane fa • •

The Moscow Times by NB
3 settimane fa • •

РЖД планирует продать 49% Федеральной грузовой компании (ФГК), чтобы частично улучшить финансовое положение и найти средства на инвестпрограмму, рассказал «Коммерсанту» знакомый с финпланом компании источник. По его словам, в госмонополии оценили стоимость пакета предприятия в 44 млрд руб. и не планируют получить от его продажи прибыль.
Согласно данным Infoline, ФГК управляет 134,3 тыс. единиц подвижного состава и является вторым по величине железнодорожным оператором в России. При этом за январь—сентябрь 2025 года ФГК сократила погрузку на 30,3% год к году — до 54,3 млн тонн. В то же время этот показатель у топ-30 операторов снизился на 6,9%. Выручка ФГК в 2024-м выросла на 10% — до 126,98 млрд руб., а чистая прибыль снизилась на 2,8% — до 46,97 млрд. Для РЖД компания — один из основных источников дивидендных поступлений. По итогам 2022 года ФГК начислила 20,6 млрд руб. дивидендов, или 50% от прибыли, в 2023-м — 31,1 млрд (64%), а в 2024-м — 22 млрд (47%).
Собеседник «Коммерсанта» уточнил, что долю в ФГК планируется продать с открытого аукциона. Ожидается, что вопрос реализации пакета во втором квартале 2026 года будет вынесен на совет директоров монополии, после чего начнется согласование с Росимуществом и Росжелдором для получения директив и распоряжения правительства.
Пакет ФГК оценен в 2–2,5 раза дешевле стоимости вагонного парка, но в текущих условиях, с учетом ситуации на рынке перевозок и доходности операторского бизнеса, цена выглядит адекватной, говорит ...

РЖД продаст долю в одном из крупнейших железнодорожных операторов России из-за убытков и долгов

^{Русская служба The Moscow Times}

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

EMRGENCY APPEAL FOR UKRAINE w/Phil Ittner and Malcolm Nance
A recording from Lev Parnas and Black Man Spy - Malcolm Nance's live video
LEV PARNAS, BLACK MAN SPY - MALCOLM NANCE, AND PHILIP ITTNER
JAN 15, 2026

levremembers.substack.com/p/em…

EMRGENCY APPEAL FOR UKRAINE w/Phil Ittner and Malcolm Nance

^{Lev Parnas (Lev Remembers)}

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

Every morning at 9 AM, #Ukraine pauses.

Will you join us in a minute of silence to honour the fallen heroes who gave everything for freedom?

Their sacrifice will never be forgotten. Stand with Ukraine.🕯️

#StandWithUkraine

Graphic by the General Staff of the Armed Forces of Ukraine: A nationwide minute of silence is held daily at 09:00 to honour those who have perished since the russian invasion of Ukraine. Features a broken candle symbol."

(Source: General Staff of the Armed Forces of Ukraine

#ukraine #StandWithUkraine

reshared this

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

🔐 LA CYBERSECURITY NON È UNA LISTA DI TOOL. È UN MINDSET.

“Cyber Offensive Fundamentals” nasce per chi vuole capire prima di fare.

📌 40 ore di formazione LIVE
📌 Percorso strutturato da zero
📌 Laboratori pratici su ambienti reali

Guidati dal Prof. Alessio Lauro, entrerai nella logica offensiva:

perché difendere senza comprendere l’attacco è un’illusione.

🔗 Programma completo: redhotcyber.com/linksSk2L/cybe…
🎥 Introduzione al corso: youtube.com/watch?v=0y4GYsJMoX…

Per info e iscrizioni: 📞 379 163 8765 ✉️ formazione@redhotcyber.com

#redhotcyber #formazione #pentesting #pentest #formazionelive #ethicalhacking #hacking #cybersecurity #penetrationtesting #cti #cybercrime #infosec #corsi #liveclass #hackerhood #pentesting

Cyber Offensive Fundamentals - Corso ethical hacking, penetration test

Corso in Live Class di Cyber Offensive Fundamentals: scopri penetration testing, vulnerabilità e strumenti pratici per la sicurezza informatica offensiva.

^{Red Hot Cyber}

#redhotcyber #hacking #cybersecurity #cybercrime #ethicalhacking #formazione #cti #infosec #pentesting #penetrationtesting #corsi #pentest #liveclass #formazionelive #hackerhood

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

Trimestre nero per JLR dopo l’incidente informatico: crollo del 43% delle vendite

📌 Link all'articolo : redhotcyber.com/post/trimestre…

#redhotcyber #news #jlr #incidenteinformatico #cybersecurity #hacking #malware #ransomware

Trimestre nero per JLR dopo l'incidente informatico: crollo del 43% delle vendite

L'attacco hacker a Jaguar Land Rover causa un crollo del 43,3% delle vendite. Scopri di più sull'incidente e le sue conseguenze.

^{Redazione RHC (Red Hot Cyber)}

#redhotcyber #hacking #cybersecurity #malware #ransomware #News #jlr #incidenteinformatico

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

❗️Polish Prime Minister Donald Tusk:
"It is Russia who rejected the peace plan prepared by the US, not Zelenskyy. The only Russian response were further missile attacks on Ukrainian cities. This is why the only solution is to strengthen pressure on Russia. And you all know it."

bsky.app/profile/militarynewsu…

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

Day 1,423: 180 clashes, 97 air/2 missile strikes, 234 guided bombs, 6,968 drones (3,338 MLRS).

russia lost 1,370 troops, 6 tanks, 48 artillery, 527 UAVs.

#Ukraine struck 7 enemy sites, 2 UAV control points. 46 attacks repelled in Pokrovsk, 30 in Huliaipole.

Source: Ukrainian General Staff, 16 Jan 2026

#ukraine

reshared this

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

Monstrous sentences demanded against nine men abducted from Kherson and savagely tortured for insane russian show trial

The charges against the men bear no scrutiny, but their absurdity, as well as the clear indications of torture, are clearly of no concern to the ‘judges’

khpg.org/en/1608815438

Monstrous sentences demanded against nine men abducted from Kherson and savagely tortured for insane Russian show trial

^{Human Rights in Ukraine}

reshared this

Marco Camisani Calzolari

3 settimane fa • •

Marco Camisani Calzolari
3 settimane fa • •

199 – Cerchiamo l’anima camisanicalzolari.it/199-cerch…

199 - Cerchiamo l’anima - Marco Camisani Calzolari

Cerchiamo l’anima. Perché è sempre più difficile fidarsi di quello che vediamo online. Per questo tutti stanno cercando altro, stanno cercando l’anima umana. Seguitemi fino alla fine perché vi spiego cosa sta succedendo alla nostra percezione.

^{Web Staff MCC (Marco Camisani Calzolari)}

PTN PNH ☮️ 🇺🇦 🇮🇱

3 settimane fa • •

PTN PNH ☮️ 🇺🇦 🇮🇱
3 settimane fa • •

UA: Динаміка втрат рашистів у війні проти України з 24 лютого 2022 року
https://index.minfin.com.ua/ua/russian-invading/casualties/

EN: The dynamics of #ruscist losses in the war against Ukraine since February 24, 2022
https://index.minfin.com.ua/en/russian-invading/casualties/

Втрати Росії в Україні - офіційні дані

Втрати збройних сил Російської Федерації під час війни в Україні. Russian casualties in Ukraine.

^{index.minfin.com.ua}

#ruscist

reshared this

PKs Powerfromspace1

3 settimane fa • •

PKs Powerfromspace1
3 settimane fa • •

@MilitaryNewsUA

❗️🇫🇷France currently provides 2/3 of the intelligence data for 🇺🇦Ukraine, — French President Macron

In addition to the direct transfer of intelligence data, French services also coordinate the actions of other partners.

bsky.app/profile/militarynewsu…

@MilitaryNewsUA🇺🇦

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

15–16 Jan 2026: #Ukraine repelled a 76-drone attack (50+ Shaheds)

Downing / suppressing 53 UAVs (69.7% defense success).

19 UAVs hit 9 sites; debris fell at 1 location.

Attack ongoing as of 08:30.

Infographic from Повітряні Сили (Ukrainian Air Force) dated 16.01.2026, reporting 53 enemy UAVs (БпЛА) shot down out of 76 air attack threats. Source: t.me/kpszsu, facebook.com/kpszsu

#ukraine

reshared this

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

Estimated russian losses from February 24, 2022 to January 16, 2026 of the russian all-out war against Ukraine, according to the General Staff of #Ukraine

🔷 Yesterday 1,370 enemy, killed or wounded - including 💥 6 Tanks

#ukraine

reshared this

Filippo Bianchini

3 settimane fa • •

Filippo Bianchini
3 settimane fa • •

X ha introdotto nuove restrizioni che, in alcune località, impediscono di generare, con il chatbot di intelligenza artificiale Grok, immagini sessualizzate di persone reali a loro insaputa.
wired.com/story/elon-musks-gro…

L'app autonoma di Grok continua, tuttavia, a permettere la rimozione digitale degli indumenti.
washingtonpost.com/technology/…

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

Gestiva un servizio per “bucare” gli antivirus: arrestato l’Admin di AVCheck

📌 Link all'articolo : redhotcyber.com/post/gestiva-u…

#redhotcyber #news #cybersecurity #hacking #malware #arrestohacker #servizitest #antimalware #fugacriminal

Gestiva un servizio per “bucare” gli antivirus: arrestato l'Admin di AVCheck

Un cittadino olandese di 33 anni è stato arrestato per aver gestito AVCheck, una piattaforma online di test anti-malware utilizzata da criminali informatici.

^{Redazione RHC (Red Hot Cyber)}

#redhotcyber #hacking #cybersecurity #malware #News #antimalware #arrestohacker #servizitest #fugacriminal

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

Scoperto VoidLink: il “super malware” per Linux che prende di mira cloud e container

📌 Link all'articolo : redhotcyber.com/post/scoperto-…

#redhotcyber #news #cybersecurity #hacking #malware #linux #sicurezzainformatica #voidlink

Scoperto VoidLink: il “super malware” per Linux che prende di mira cloud e container

È stato scoperto un nuovo framework di infezione Linux chiamato VoidLink, che si distingue per la sua architettura modulare avanzata e l'ampia gamma di funzionalità.

^{Redazione RHC (Red Hot Cyber)}

#linux #redhotcyber #hacking #cybersecurity #malware #News #sicurezzainformatica #voidlink

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

"Пришел ко мне домой с целью, как он пишет, убить". Уехавшая из РФ активистка Саша Казанцева обратилась в полицию Литвы из-за угроз и травли

#Литва #Выбор редакции #В деталях #Видео и статьи

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

"С точки зрения военной тактики – это провал". Зачем Россия использовала "Орешник" для атаки на Украину

#россия #украина #Актуальное #Выбор редакции #В деталях #Интервью #Мнения

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

Анатолий Храпчинский – об использовании Россией "Орешника" для ударов по Украине

#Интервью #Мнения

Redhotcyber

3 settimane fa • •

Redhotcyber
3 settimane fa • •

Addio a Windows Server 2008! Microsoft termina definitivamente il supporto

📌 Link all'articolo : redhotcyber.com/post/addio-a-w…

#redhotcyber #news #windowsserver2008 #supportoterminato #microsoft #windowsvista

Addio a Windows Server 2008! Microsoft termina definitivamente il supporto

Microsoft conclude il supporto per Windows Server 2008 e Windows Vista. Scopri cosa significa per gli utenti e le implicazioni per la sicurezza.

^{Redazione RHC (Red Hot Cyber)}

#microsoft #redhotcyber #News #windowsvista #windowsserver2008 #supportoterminato

Настоящее Время

3 settimane fa • •

Настоящее Время
3 settimane fa • •

"Решалась на беременность в надежде родить здорового — похоронила пятерых". Чем опасны родственные браки

#Актуальное #В деталях #Азия #Таджикистан

⚛️Revertron

3 settimane fa • •

⚛️Revertron
3 settimane fa • •

Журнал «Холод»

3 settimane fa • •

Журнал «Холод»
3 settimane fa • •

Осторожно, новости!

Sensitive content

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

Venezuelan Nobel Peace Prize winner says she's given her medal to US president

news.sky.com/liveblog-webview/…

Trump latest: Venezuelan Nobel Peace Prize winner says she's given her medal to US president

Venezuela's opposition leader says she's given her Nobel Peace Prize medal to Donald Trump at the White House.

^{Sky News}

reshared this

Tendar

3 settimane fa • •

Tendar
3 settimane fa • •

For the first time a Russian shadow fleet tanker was barred entry to the Baltic Sea.

The crude oil tanker "Tavian" (1095337) was denied entry to German territorial waters and was forced to turn around. The tanker is now near the coast of Norway and heading for the White Sea.

reshared this

Auschwitz Memorial

3 settimane fa • •

Auschwitz Memorial
3 settimane fa • •

15 January 1916 | Polish Jew Szmul Lewi Wajnsztejn was born in Sokołów. A tailor. During the war he lived in France.

In #Auschwitz from 30 June 1942
No 43667
He perished in the camp on 18 August 1942.
---

🎧 Our podcast talks about the situation of Polish & Jewish prisoners in the camp: youtu.be/_ZaWqIsmY4U

Portrait of a man, featuring a close-up view of his face with a thoughtful expression. The man is wearing a suit.

"On Auschwitz" (12): Polish and Jewish prisoners in the camp

During its entire existence, slightly over 400 thousand people were registered at Auschwitz as prisoners - including 131 thousand women. The two largest grou...

^YouTube

#auschwitz

Auschwitz Memorial

3 settimane fa • •

Auschwitz Memorial
3 settimane fa • •

14 January 1942 | German Sinti girl Hildegard Widic was born in Elberfeld.

In #Zigeunerlager (Gypsy camp) in #Auschwitz II-Birkenau from 9 March 1943.
No. Z-1925
She perished in the camp on April 12, 1943.
---

The fate of the Roma and Sinti in Auschwitz:
🎧 Podcast: youtu.be/eb31osDbyk0
📖 Lesson: lekcja.auschwitz.org/en_roma_a…

"On Auschwitz" (7): the fate of Roma and Sinti in Auschwitz

At least 23,000 Roma and Sinti people - including 11 thousand children were deported by the Nazi German regime to Auschwitz. After the Jews and Poles they ar...

^YouTube

#auschwitz #zigeunerlager

Cybersecurity & cyberwarfare

3 settimane fa da Open app • •

Cybersecurity & cyberwarfare
3 settimane fa da Open app • •

Is the Theory of Special Relativity Wrong?

A red-and-blue image of a nebula is shown, shaped somewhat like an eye, with a plume of gas emitting from the center.

There’s an adage coined by [Ian Betteridge] that any headline ending in a question mark can be answered by the word “No”. However, Lorentz invariance – the theory that the same rules of physics apply in the same way in all frames of reference, and an essential component of special relativity – has been questioned for some time by researchers trying to unify general relativity and quantum field theory into a theory of quantum gravity. Many theories of quantum gravity break Lorentz invariance by giving photons with different energy levels very slightly different speeds of light – a prediction which now looks less likely since

... mostra di più

Is the Theory of Special Relativity Wrong?

A red-and-blue image of a nebula is shown, shaped somewhat like an eye, with a plume of gas emitting from the center.

The researchers specifically looked for the invariance violations predicted by the Standard-Model Extension (SME), an effective field theory that unifies special relativity with the Standard Model. The variations in light speed which it predicts are too small to measure directly, so instead, the researchers analyzed gamma ray flare data collected from pulsars, active galactic nuclei, and gamma-ray bursts (only sources that emitted gamma rays in simultaneous pulses could be used). Over such great distances as these photons had traveled, even slight differences in speed between photons with different energy levels should have added up to a detectable delay between photons, but none was found.

This work doesn’t disprove the SME, but it does place stricter bounds on the Lorentz invariance violations it allows, about one and a half orders of magnitude stricter than those previously found. This study also provides a method for new experimental data to be more easily integrated into the SME. Fair warning to anyone reading the paper: the authors call their work “straightforward,” from which we can only conclude that the word takes on a new meaning after a few years studying mathematics.

If you want to catch up on relativity and Lorentz invariance, check out this quick refresher, or this somewhat mind-bending explanation. For an amateur, it’s easier to prove general relativity than special relativity.

Top image: Crab Pulsar, one of the gamma ray sources analysed. (Credit: J. Hester et al., NASA/HST/ASU/J)

hackaday.com/2026/01/15/is-the…

Jerry 🦙💝🦙

3 settimane fa • •

Jerry 🦙💝🦙
3 settimane fa • •

Just about to hit 5 hours on this condo HOA conference call meeting 😵

in reply to Jerry 🦙💝🦙

T2R

in reply to Jerry 🦙💝🦙 • 3 settimane fa • •

HOA's are evil and should be outlawed.

in reply to Jerry 🦙💝🦙

hal8999

in reply to Jerry 🦙💝🦙 • 3 settimane fa • •

Even when you think they're dead, HOAs are zombies. Our HOA died back in the 80s, but properties still have to follow the rules in place at the time of the HOA shutting down. Found that out through the title insurance company, who dug up reference to covenants.

silverwizard

3 settimane fa da ZoobopDeDoDop! • •

silverwizard
3 settimane fa da ZoobopDeDoDop! • •

Canada doesn't have a minister of Air Duct Cleaning or Car Warranty Expired, much less "I'm a Nigerian Prince" or Send Me Bitcoin To Not Release Nudes Of You, but we have a minster for AI. This is wild, we need to get a minister for all the scams! Come on! Unfair.

in reply to Hypolite Petovan

silverwizard

in reply to Hypolite Petovan • 3 settimane fa da ZoobopDeDoDop! • •

@Hypolite Petovan you mean the Emergency Backup France

*ducks*

@Hypolite Petovan

in reply to silverwizard

Hypolite Petovan

in reply to silverwizard • 3 settimane fa • •

@silverwizard Wasn't it smart?

@silverwizard

Cybersecurity & cyberwarfare

3 settimane fa da Open app • •

Cybersecurity & cyberwarfare
3 settimane fa da Open app • •

Project Fail: Cracking a Laptop BIOS Password Using AI

Whenever you buy used computers there is a risk that they come with unpleasant surprises that are not of the insect variant. From Apple hardware that is iCloud-locked with the original owner MIA to PCs that have BIOS passwords, some of these are more severe than others. In the case of BIOS passwords, these tend to be more of an annoyance that’s easily fixed by clearing the CMOS memory, but this isn’t always the case as [Casey Bralla] found with a former student-issued HP ProBook laptop purchased off Facebook Marketplace.

Maybe it’s because HP figured that locking down access to the BIOS is essential on systems that find their way into the hands of bored and enterprising students, but these laptops write the encrypted password and associated s

... mostra di più

informapirata ⁂

3 settimane fa • •

informapirata ⁂
3 settimane fa • •

Qualche idea per sopravvivere al divorzio transatlantico. Conversazione con Giuliano Da Empoli

“quelli che chiamo predatori digitali e predatori politici, i proprietari delle grandi aziende digitali, sostengono esplicitamente i movimenti nazionalisti, perché si sono resi conto di poterli sfruttare per smantellare le democrazie liberali: su quello che viene dopo, sul futuro, non c’è convergenza, ma intanto si distrugge insieme, e con più efficacia”

foglioeuropeo.ilfoglio.it/qual…

@politica

Qualche idea per sopravvivere al divorzio transatlantico – Il Foglio Europeo

^{foglioeuropeo.ilfoglio.it}

@Politica interna, europea e internazionale

reshared this

nico beastie boyce

3 settimane fa • •

nico beastie boyce
3 settimane fa • •

most interesting pics go on @beastie but there's a new photo dump on nicoboyce.com/snaps/ if a blog format suits your reading eyes

Snaps and splats gallery · Nico Boyce

Snaps and splats gallery — Nico Boyce — Person doing human things

^{nicoboyce.com}

@nico beastie boyce

in reply to nico beastie boyce

Hypolite Petovan

in reply to nico beastie boyce • 3 settimane fa • •

@nico beastie boyce @nico beastie boyce I love the earnestness of your shots.

@nico beastie boyce @nico beastie boyce

Steve Herman

3 settimane fa • •

Steve Herman
3 settimane fa • •

I’m hoping one of my former colleagues in the briefing room will ask the press secretary why the White House is again propagating phrasing of a white supremacist author who praises Hitler and traffics in antisemitic conspiracy theories.

in reply to Steve Herman

Eugen Rochko

in reply to Steve Herman • 3 settimane fa • •

Isn't "why" clear as day? What's the point?

in reply to Eugen Rochko

caoimhín o'cuilleain

in reply to Eugen Rochko • 3 settimane fa • •

@Gargron I mean, we all know it but it would be really great for someone to outright say it in that setting, publicly, to their faces.

@Eugen Rochko

Kingu

3 settimane fa • •

Kingu
3 settimane fa • •

I'm wishing everyone a very merry unbirthday (unless it's your birthday)

in reply to Kingu

Hypolite Petovan

in reply to Kingu • 3 settimane fa • •

@Kingu There's this "unbirthing" kink where grown up people get sucked into a woman's vagina. Not sure what happens to them after that, I didn't look to hard into it.

@Kingu

Evan Prodromou

3 settimane fa • •

Evan Prodromou
3 settimane fa • •

There's a new W3C Working Group that will be iterating the ActivityPub specification. Great news for the Fediverse!

socialwebfoundation.org/2026/0…
#Fediverse Threads

New Social Web Working Group at W3C

Today the W3C standards organization announced a new working group to advance the ActivityPub and Activity Streams standards. The Social Web Foundation, as a W3C member organization, will be partic…

^{Social Web Foundation}

#fediverse

Kingu

3 settimane fa • •

Kingu
3 settimane fa • •

You are forced to use one of these two. no other option.

What's your pick

Emacs in vim-emulation mode (61%, 8 votes)
Vim in Emacs-emulation mode (38%, 5 votes)

13 voters. Poll end: 3 settimane fa

in reply to Kingu

Hypolite Petovan

in reply to Kingu • 3 settimane fa • •

@Kingu Which one allows me to type [Esc] [:] [q] [Enter] effectively?

@Kingu

trashHeap

3 settimane fa • •

trashHeap
3 settimane fa • •

uspol trump machado

Sensitive content

#trump #uspol

in reply to trashHeap

Hypolite Petovan

in reply to trashHeap • 3 settimane fa • •

uspol trump machado

@trashHeap We gave the entire power of the US military to the star of The Apprentice.

@trashHeap

Andrew Gallagher

3 settimane fa • •

Andrew Gallagher
3 settimane fa • •

#Apple will no longer backport critical security fixes to iOS 18. Perhaps they thought it would force their users to upgrade to the hated iOS 26. Instead, people are simply not upgrading at all, putting themselves and their devices at risk.

1/2
forbes.com/sites/zakdoffman/20…

#apple

in reply to Andrew Gallagher

Hypolite Petovan

in reply to Andrew Gallagher • 3 settimane fa • •

@Andrew Gallagher I'm in this boat, and forcing Liquid Glass on my device out of fear for a cyberattack only makes me more angry at Apple than I already was at them for going above and beyond to lick Trump's boots. At this point, I'm not sure I care anymore.

@Andrew Gallagher

maxwell via Scienza e tecnologia

3 settimane fa • •

maxwell
3 settimane fa • •

Un nuovo obiettivo potrebbe consentire farmaci a base di psilocibina più sicuri e non allucinogeni

Gli scienziati hanno individuato un recettore cerebrale che trasmette gli effetti benefici della psilocibina sull'umore senza scatenare allucinazioni.

La psilocibina, il composto psichedelico presente naturalmente in alcune specie di funghi "magici", ha dimostrato, in studi clinici, di essere efficace nel trattamento a lungo termine della depressione e dell'ansia. Tuttavia, gli effetti allucinogeni della sostanza possono rendere lo sviluppo di trattamenti costosi e comportare rischi significativi per le persone affette da altre patologie psichiatriche.

Ora, uno studio del Dartmouth College identifica un recettore neurale che promuove i benefici terapeutici della psilocibina, ma non è allucinogeno. I risultati, pubblicati su Molecular Psychiatry, potrebbero fornire un nuovo potenziale bersaglio per farmaci simili alla psilocibina, più sicuri ed economici.

technologynetworks.com/tn/news…

New Target Could Enable Safer, Non-Hallucinogenic Psilocybin Drugs

Researchers at Dartmouth found that psilocybin’s antidepressant and anti-anxiety effects were driven by the serotonin 1B receptor, separate from hallucinogenic pathways, pointing to safer, non-psychedelic drugs for treating depression and anxiety.

^{Technology Networks}

#scienza

in reply to maxwell

informapirata ⁂

in reply to maxwell • 3 settimane fa • •

e perché mai anche "non allucinogeni"? 😂😂😂

Cybersecurity & cyberwarfare

3 settimane fa • •

Cybersecurity & cyberwarfare
3 settimane fa • •

Building an Escape Room Lockbox with the ESP32 Cheap Yellow Display (CYD)

A hand operating a numeric touch pad

Here’s something fun from [Chad Kapper] over on HackMakeMod: Escape Room Lockbox with the Cheap Yellow Display.

You may have heard of the “cheap yellow display” (CYD), so-called due to the board’s typical color. It’s a dodgy cheapo board with, among other things, TFT display, touchscreen, and ESP32 built-in. You can learn more about the CYD over here: Getting Started with ESP32 Cheap Yellow Display Board – CYD (ESP32-2432S028R).

In this build eight AA batteries are used to deliver 12 volts t

... mostra di più

securityaffairs

3 settimane fa • •

securityaffairs
3 settimane fa • •

A #ransomware attack disrupted operations at South Korean conglomerate #Kyowon
securityaffairs.com/186964/dat…
#securityaffairs #hacking

A ransomware attack disrupted operations at South Korean conglomerate Kyowon

South Korean conglomerate Kyowon confirmed a ransomware attack that disrupted operations and may have exposed customer data.

^{Pierluigi Paganini (Security Affairs)}

#hacking #ransomware #securityaffairs #kyowon

Cybersecurity & cyberwarfare

3 settimane fa da Open app • •

Cybersecurity & cyberwarfare
3 settimane fa da Open app • •

Building a Carousel Autosampler

A common task in a laboratory setting is that of sampling, where a bit of e.g. liquid has to be sampled from a series of containers. Doing this by hand is possible, but tedious, ergo an autosampler can save a lot of time and tedium. Being not incredibly complex devices that have a lot in common with e.g. FDM 3D printers and CNC machines, it makes perfect sense to build one yourself, as [Markus Bindhammer] of Marb’s Lab on YouTube has done.

The specific design that [Markus] went for uses a sample carousel that can hold up to 30 bottles of 20 mL each. An ATmega-based board forms the brain of the machine, which can operate either independently or be controlled via I2C or serial. The axes and carousel are controlled by three stepper motors, each of which is driven by a TB6600 microstep driver.

... mostra di più

Cybersecurity & cyberwarfare

3 settimane fa da Open app • •

Cybersecurity & cyberwarfare
3 settimane fa da Open app • •

The Random Laser

When we first heard the term “random laser,” we did a double-take. After all, most ordinary sources of light are random. One defining characteristic of a traditional laser is that it emits coherent light. By coherent, in this context, that usually includes temporal coherence and spatial coherence. It is anything but random. It turns out, though, that random laser is a bit of a misnomer. The random part of the name refers to how the device generates the laser emission. It is true that random lasers may produce output that is not coherent over long time scales or between different emission points, but individually, the outputs are coherent. In other words, locally coherent, but not always globally so.

That is to say that a random laser might emit light from four different areas for a few brief moments. A particular e

... mostra di più

The Random Laser

That is to say that a random laser might emit light from four different areas for a few brief moments. A particular emission will be coherent. But not all the areas may be coherent with respect to each other. The same thing happens over time. The output now may not be coherent with the output in a few seconds.

Baseline

A conventional laser works by forming a mirrored cavity, including a mirror that is only partially reflective. Pumping energy into the gain medium — the gas, semiconductor, or whatever — produces more photons that further stimulate emission. Only cavity modes that satisfy the design resonance conditions and experience gain persist, allowing them to escape through the partially reflecting mirror.

The laser generates many photons, but the cavity and gain medium favor only a narrow set of modes. This results in a beam that is of a very narrow band of frequencies, and the photons are highly collimated. Sure, they can spread over a long distance, but they don’t spread out in all directions like an ordinary light source.

So, How does a Random Laser Work?

Random lasers also depend on gain, but they have no mirrors. Instead, the gain medium is within or contains some material that highly scatters photons. For example, rough crystals or nanoparticles may act as scattering media to form random lasers.

The scattering has photons bounce around at random. Some of the photons will follow long paths, and if the gain exceeds the losses along those paths, laser emission occurs. Incoherent random lasers that use powder (to scatter) or a dye (as gain medium) tend to have broadband output. However, coherent random lasers produce sharp spectral lines much like a conventional laser. They are, though, more difficult to design and control.

Random lasers are relatively new, but they are very simple to construct. Since the whole thing depends on randomness, defects are rarely fatal. The downside is that it is difficult to predict exactly what they will emit.

There are some practical use cases, including speckle-free illumination or creating light sources with specific fingerprints for identification.

It’s Alive!

Biological tissue often can provide scattering for random lasers. Researchers have used peacock feathers, for example. Attempts to make cells emit laser light are often motivated by their use as cellular tags or to monitor changes in the laser light to infer changes in the cell itself.

The video below isn’t clearly using a random laser, but it gives a good overview of why researchers want your cells to emit laser light.

youtube.com/embed/SHbXDlnLIYA?…

You may be thinking: “Isn’t this just amplified spontaneous emission?” While random lasers can resemble amplified spontaneous emission (ASE), true random lasing exhibits a distinct turn-on threshold and, in some cases, well-defined spectral modes. ASE will exhibit a smooth increase in output as the pump energy increases. A random laser will look like ASE until you reach a threshold pump energy. Then a sharp rise will occur as the laser modes suddenly dominate.

We glossed over a lot about conventional lasers, population inversion, and related topics. If you want to know more, we can help.

hackaday.com/2026/01/15/the-ra…

Cybersecurity & cyberwarfare

3 settimane fa • •

Cybersecurity & cyberwarfare
3 settimane fa • •

AC Motor Converted into DC eBike Powerplant

AC induction motors are everywhere, from ceiling fans to vehicles. They’re reliable, simple, and rugged — but there are some disadvantages. It’s difficult to control the speed without complex electronics, and precisely placing the shaft at a given angle is next to impossible. But the core of these common induction machines can be modified and rewired into brushless DC (BLDC) motors, provided you have a few tools on hand as [Austin] demonstrates.

To convert an AC induction motor to a brushless DC electric motor (BLDC), the stator needs to be completely rewired. It also needs a number of poles proportional to the number of phases of the BLDC controller, and in this case the 24-pole motor could accommodate the three phases. [Austin] removed the original stator windings and hand-wound

... mostra di più

Jerry 🦙💝🦙

3 settimane fa • •

Jerry 🦙💝🦙
3 settimane fa • •

Defensive Security Podcast Episode 336 youtube.com/watch?v=vqcCcKCAQl… defensivesecurity.org/defensiv…

Defensive Security Podcast Episode 336

03:09 https://www.darkreading.com/cyber-risk/cybersecurity-tech-recommended-by-cyber-insurer-claims-data 30:51 https://www.bleepingcomputer.com/news/security...

^YouTube

in reply to Jerry 🦙💝🦙

AJCxZ0

in reply to Jerry 🦙💝🦙 • 3 settimane fa • •

Easily the best episode of 2026. Great job, @jerry and @lerg.

You echoed one of my two main soap box issues: the enormous difference between

1. obtaining, provisioning, and/or installing the product, and
2. also configuring, integrating, operating, maintaining, updating, reconfiguring, adapting, documenting, training, funding (the cost in time and money) ... and retiring (and replacing) it in a timely fashion.

#RideTheLifecycle

#ridethelifecycle @Jerry 🦙💝🦙 @Andrew Kalat

Eugene McParland 🇺🇦

3 settimane fa • •

Eugene McParland 🇺🇦
3 settimane fa • •

President #Zelenskyy:

💬 " #Ukraine has never been and will never be a stumbling block to peace. It is russian missiles, russian 'Shaheds,' and russia's attempts to destroy Ukraine that are clear evidence that it is not agreements at all that russia is seeking.

When Ukrainians are left without power for 20–30 hours because of russia, and when russian strikes are aimed at breaking our energy system and our people, it is russia that must be put under pressure."

Source: Ukraine.ua

#ukraine #zelenskyy

reshared this

Questo sito web utilizza cookie tecnici e di sessione. Proseguendo la navigazione su questo sito, accetti l'utilizzo dei cookie.

⇧

NOELREPORTS 🇪🇺 🇺🇦 3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦 3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦 3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦 3 settimane fa • •

Настоящее Время 3 settimane fa • •

Настоящее Время 3 settimane fa • •

Настоящее Время 3 settimane fa • •

giga 🔻 3 settimane fa • •

Nutomic via Lemmy

Nutomic 3 settimane fa • •

[Help Design Lemmy] Joinlemmy website and New User Onboarding

hoergen 3 settimane fa da fediverseration — (-8.0584933 -34.8848193) • •

Oloap 3 settimane fa • •

Gabriele Marcosanti 3 settimane fa • •

Cybersecurity & cyberwarfare 3 settimane fa da Open app • •

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

La vulnerabilità CVE-2026-23550

Il trucco con l’header Origin

Impatto e risposta

securityaffairs 3 settimane fa • •

Gabriele Marcosanti 3 settimane fa • •

N_{Dario Fadda} 3 settimane fa • •

Origin-mo: il trucco pigro che ha aperto 40.000 siti WordPress agli hacker

La vulnerabilità CVE-2026-23550

Il trucco con l’header Origin

Impatto e risposta

N_{Dario Fadda} 3 settimane fa • •

(in)sicurezza digitale 3 settimane fa • •

La vulnerabilità CVE-2026-23550

Il trucco con l’header Origin

Impatto e risposta

Redhotcyber 3 settimane fa • •

stefania maurizi 3 settimane fa • •

Eric A. Meyer 3 settimane fa • •

monumental-movement-records 3 settimane fa • •

Bon Pote 3 settimane fa • •

monumental-movement-records 3 settimane fa • •

Cybersecurity & cyberwarfare 1 mese fa (Ricevuto 3 settimane fa) da Open app • •

Human In The Loop

State of the Art

Be Reasonable

Lioh 3 settimane fa • •

quinta - Stefano Quintarelli 3 settimane fa • •

Laura Manach 3 settimane fa • •

securityaffairs 3 settimane fa • •

Redhotcyber 3 settimane fa • •

Eva De Marco • open to create 3 settimane fa • •

Informa Pirata 3 settimane fa da SHitter • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 settimane fa • •

Настоящее Время
3 settimane fa • •

Настоящее Время
3 settimane fa • •

Настоящее Время
3 settimane fa • •

giga 🔻
3 settimane fa • •

Nutomic
3 settimane fa • •

hoergen
3 settimane fa da fediverseration — (-8.0584933 -34.8848193) • •

Oloap
3 settimane fa • •

Gabriele Marcosanti
3 settimane fa • •

Cybersecurity & cyberwarfare
3 settimane fa da Open app • •

securityaffairs
3 settimane fa • •

Gabriele Marcosanti
3 settimane fa • •

N_{Dario Fadda}
3 settimane fa • •

N_{Dario Fadda}
3 settimane fa • •

(in)sicurezza digitale
3 settimane fa • •

Redhotcyber
3 settimane fa • •

stefania maurizi
3 settimane fa • •

Eric A. Meyer
3 settimane fa • •

monumental-movement-records
3 settimane fa • •

Bon Pote
3 settimane fa • •

monumental-movement-records
3 settimane fa • •

Cybersecurity & cyberwarfare
1 mese fa (Ricevuto 3 settimane fa) da Open app • •

Lioh
3 settimane fa • •

quinta - Stefano Quintarelli
3 settimane fa • •

Laura Manach
3 settimane fa • •

securityaffairs
3 settimane fa • •

Redhotcyber
3 settimane fa • •

Eva De Marco • open to create
3 settimane fa • •

Informa Pirata
3 settimane fa da SHitter • •