Friendica Social Network

The 19th

3 mesi fa • •

The 19th
3 mesi fa • •

Zohran Mamdani, who ran on universal child care, elected New York City mayor
https://19thnews.org/2025/11/zohran-mamdani-new-york-mayor/?utm_source=flipboard&utm_medium=activitypub

Posted into The 19th @the-19th-19thnews

NYC election results: Zohran Mamdani elected New York City mayor

Mamdani defeated Andrew Cuomo, who resigned as governor in 2021 in the face of sexual misconduct allegations.

^{Grace Panetta (19th News)}

@The 19th

The 19th

3 mesi fa • •

The 19th
3 mesi fa • •

Mikie Sherrill will be New Jersey’s next governor
https://19thnews.org/2025/11/mikie-sherrill-new-jersey-governor/?utm_source=flipboard&utm_medium=activitypub

Posted into The 19th @the-19th-19thnews

Mikie Sherrill will be New Jersey’s next governor

Sherrill, a Democratic member of Congress and ex-Navy helicopter pilot, will be the second woman to serve in the office.

^{Grace Panetta (19th News)}

@The 19th

Cybersecurity & cyberwarfare

3 mesi fa • •

Cybersecurity & cyberwarfare
3 mesi fa • •

A Paintball Turret Controlled Via Xbox Controller

Video games, movies, and modern militaries are all full of robotic gun turrets that allow for remotely-controlled carnage. [Paul Junkin] decided to build his own, albeit in a less-destructive paint-hurling fashion.

The turret sits upon a lazy susan bearing mounted atop a aluminium extrusion frame. A large gear is mounted to the bearing allowing the turret to pan when driven by a stepper motor. A pair of pillow block bearings hold a horizontal shaft which mounts the two paint markers, which again is controlled by another stepper motor to move in the tilt axis. An ESP32 microcontroller is responsible for running the show, panning and tilting the platform by commanding the large stepper motors. Firing the paintball markers is achieved with solenoids mounted to the triggers, which cycle fast enoug

... mostra di più

Angle🖇

3 mesi fa • •

Angle🖇
3 mesi fa • •

Education, Discourse

Sensitive content

in reply to Angle🖇

Hypolite Petovan

in reply to Angle🖇 • 3 mesi fa • •

@Angle🖇 I feel like the classic mistake is believing there's only one desired outcome for education, and why don't we just shoot for this? In reality education has had many desired outcomes, mostly depending on who's financing it. For exemple, the first thrust of state sponsored education in France was meant to unify a fledgling nation, including by stamping out regional languages and dialects. Is this your kind of desired outcome for education? I'd venture not, but it definitely was one at some point in France.

In the same way, I read that the stellar graduation results of Ivy League colleges is less a reflection of the inherent quality of the education than of the admission process that gets to choose the best among a large cohort of extremely motivated individuals wanting to get in. Is this a desirable outcome?

In the end, education is a tool, and it's been well understood by people who have wanted to make it a mean to an end, and that also means

... mostra di più

@Angle🖇

Questa voce è stata modificata (3 mesi fa)

Filippo Valsorda

3 mesi fa • •

Filippo Valsorda
3 mesi fa • •

As a final side-product of the new Go ML-DSA implementation, here is a set of messages that when signed cause a statistically representative distribution of rejections, allowing accurate benchmarking.

github.com/C2SP/CCTV/tree/push…

This is the same technique as words.filippo.io/rsa-keygen-be….

ML-DSA signing applies Fiat-Shamir with Aborts, essentially a form of rejection sampling, which means that the number of iterations required to produce a valid signature is a random variable with a geometric distribution. This makes simple benchmarking techniques ineffective, as the variance of the time taken to produce a signature is very high and would take an impractically large number of samples to average out.

This directory provides a set of ASCII messages that, when all signed deterministically with an empty context and a key derived from an all-zero seed, produce signatures that require a statistically representative distribution of rejections. The time taken to sign all of them can be divided by the number of signatures to obtain an accurate average signing time.

The rejection reasons are also represented accurately. The relative distribution of rejections due to only z, only r₀, or both z and r₀ are all representative, so these benchmarks can be used regardless of which rejection condition is checked first (or even to benchmark the difference).

CCTV/ML-DSA/benchmark at push-ymunkrntrprw · C2SP/CCTV

Community Cryptography Test Vectors. Contribute to C2SP/CCTV development by creating an account on GitHub.

^GitHub

The 19th

3 mesi fa • •

The 19th
3 mesi fa • •

Virginia elects Democrat Abigail Spanberger as state’s first woman governor
https://19thnews.org/2025/11/abigail-spanberger-virginia-first-woman-governor/?utm_source=flipboard&utm_medium=activitypub

Posted into The 19th @the-19th-19thnews

Who won the Virginia governor's race? Abigail Spanberger will be first woman governor

Spanberger’s campaign asked voters to weigh in on Trump’s second term and promised to address cost-of-living issues.

^{Mel Leonor Barclay (19th News)}

@The 19th

Anon Opin

3 mesi fa • •

Anon Opin
3 mesi fa • •

Start a conversation about the correct way to make a cup of tea. Listen to the confessions of criminality. Accept the UK does not deserve it's reputation for tea.

in reply to Anon Opin

Eugen Rochko

in reply to Anon Opin • 3 mesi fa • •

This is sadly true.

informapirata ⁂

3 mesi fa • •

informapirata ⁂
3 mesi fa • •

Trasferire i propri progetti dal cloud può far risparmiare 10 volte i costi mensili di AWS ossia migliaia di dollari

Qualcuno sta truffando, probabilmente non con i propri soldi, ma con quelli del proprio datore di lavoro, ed è per questo che non gliene frega niente.
La maggior parte delle persone che si lamenta di questa internalizzazione ha "devops", "cloud engineer", "serverless guy", "certificato AWS" o qualcosa di simile nella propria biografia

rameerez.com/send-this-article…

@informatica

Send this article to your friend who still thinks the cloud is a good idea

You've been lied to. You don't need the cloud – you can just run servers and save 10x your AWS costs. It's not that difficult.

^{rameerez (@rameerez)}

@Informatica (Italy e non Italy)

reshared this

Unknown parent

informapirata ⁂

Unknown parent • 3 mesi fa • •

@speriani ne parla l'autore nel suo articolo

@Stefano

Informatica (Italy e non Italy) reshared this.

Unknown parent

informapirata ⁂

Unknown parent • 3 mesi fa • •

@luca Naturalmente il dipendente non ha praticamente strumenti per opporsi a scelte come queste, che tutto sommato, anche per lui, sono più comode.

@Luca Sironi

Informatica (Italy e non Italy) reshared this.

Dan Gillmor

3 mesi fa • •

Dan Gillmor
3 mesi fa • •

Every citizen should be made aware that Trump's masked thugs are violently kidnapping other citizens and then brazenly lying about what prompted the abductions.

Every potential juror should understand this, too.

bsky.app/profile/newseye.bsky.…

nash

3 mesi fa • •

nash
3 mesi fa • •

armored ice cream with a single-scoop turret on top & popsicle cannon

in reply to nash

Hypolite Petovan

in reply to nash • 3 mesi fa • •

@nash LEGO was way ahead of you!

lego.com/en-us/product/ice-cre…

@nash

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

Print in Place Pump Pushes Limits of Printing

Print in place pump being used next to ladder

3D printing has taken off into the hands of almost anyone with a knack for wanting something quick and easy. No more messing around with machining or complex assembly. However, with the general hands-off nature of most 3D prints, what could be possible with a little more intervention during the printing process? [Ben] from Designed to Make represents this perfectly with an entire centrifugal pump printed as one.

This project may not entirely fit into the most strict sense of “print in place”; however, the entire pump is printed as one print file. The catch is the steps taken during printing, where a bearing is placed and a couple of filament changes are made to allow dissolvable supports to be printed. Once

... mostra di più

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

Droni sull’aeroporto di Bruxelles e sulle basi militari. La sicurezza è a rischio

Martedì sera, a causa della presenza di un drone nello spazio aereo, il controllore del traffico aereo Skeyes ha disposto la sospensione temporanea dei voli in partenza e in arrivo all’aeroporto di Bruxelles, dalle 20:00 alle 21:30.

Successivamente, intorno alle 22:00, sono state ricevute le prime segnalazioni secondo le quali lo spazio aereo è stato nuovamente chiuso.

Diversi aerei stono stati dirottati verso altri aeroporti, come Maastricht e persino l’aeroporto di Schiphol (Amsterdam). È la prima volta che il traffico aereo all’aeroporto di Bruxelles viene interrotto a causa di un drone, ma incidenti simili si sono verificati anche in parti in Europa.

Infatti i droni hanno costretto gli aeroporti di Copenaghen, Oslo e Aalborg a chiudere temporaneamente a settembre, mentre l’aeroporto di Monaco ha dovuto sospendere le operazioni due volte in 24 ore a ottobre.

Gli

... mostra di più

Droni sull’aeroporto di Bruxelles e sulle basi militari. La sicurezza è a rischio

Successivamente, intorno alle 22:00, sono state ricevute le prime segnalazioni secondo le quali lo spazio aereo è stato nuovamente chiuso.

Gli aerei che non sono riusciti ad atterrare all’aeroporto di Bruxelles sono stati inizialmente dirottati verso l’aeroporto di Liegi, ma anche lì sono stati segnalati droni. I voli diretti a entrambi gli aeroporti sono stati successivamente dirottati verso gli aeroporti di Maastricht e Colonia, secondo l’emittente francese RTBF. “Non ci sono ancora prove di un collegamento tra le segnalazioni di Bruxelles e Liegi”, ha affermato Skeyes.

Dopo una breve riapertura intorno alle 21.30, anche lo spazio aereo sopra l’aeroporto di Liegi è stato nuovamente chiuso in seguito ai nuovi avvistamenti di droni, riporta l’agenzia di stampa Belga. Anche l’organizzazione europea per il controllo del traffico aereo Eurocontrol ha segnalato interruzioni del traffico aereo negli aeroporti regionali di Anversa, Ostenda, Liegi e Charleroi.

I cittadini hanno chiamato la polizia locale, che si è immediatamente recata sul posto ed è riuscita a confermare visivamente la presenza di due droni, ha confermato martedì sera il sindaco Steven Matheï (CD&V) all’agenzia di stampa Belga. I tentativi di intercettare o bloccare i droni sarebbero falliti.

“Non è ancora tutto chiaro, perché il Ministero della Difesa non è stato in grado di rilevare alcun drone. L’elicottero della polizia federale è stato chiamato per rintracciare il velivolo, se necessario”, ha detto Matheï. Non sarebbe stato rilevato nulla nella base aerea stessa.

Lo scorso fine settimana, i droni sono stati avvistati tre volte sopra la base aerea di Kleine-Brogel e di recente sono stati effettuati altri avvistamenti anche sopra altri siti militari.

Lunedì, all’esercito belga è stato ordinato di abbattere i droni che sorvolavano il territorio militare, a condizione che ciò potesse essere fatto in sicurezza: senza danni collaterali, ma questo non è scontato. Inoltre, dato che questi droni sono oggetti piccoli, veloci e molto manovrabili, non c’è alcuna certezza che possano essere colpiti.

Chi o cosa si nasconda dietro i numerosi droni avvistati di recente rimane per il momento poco chiaro. Il Ministro della Difesa Theo Francken (N-VA) ha ipotizzato che la Russia potrebbe essere il colpevole, ma finora non sono state trovate prove a conferma di tale affermazione.

L'articolo Droni sull’aeroporto di Bruxelles e sulle basi militari. La sicurezza è a rischio proviene da Red Hot Cyber.

Jerry 🦙💝🦙

3 mesi fa • •

Jerry 🦙💝🦙
3 mesi fa • •

Celebrating my anniversary

in reply to Jerry 🦙💝🦙

Jerry 🦙💝🦙

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

Yes, I am pleasantly hairy.

in reply to Jerry 🦙💝🦙

ineedsleeps

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

@jerry

@Jerry 🦙💝🦙

in reply to Jerry 🦙💝🦙

schuelermine

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

for some reason my instance shows you as scary jerry and without a pfp

in reply to schuelermine

schuelermine

in reply to schuelermine • 3 mesi fa • •

or my client rather

in reply to schuelermine

Jerry 🦙💝🦙

in reply to schuelermine • 3 mesi fa • •

@anselmschueler odd. It must be aggressively caching stuff.

@schuelermine

in reply to Jerry 🦙💝🦙

Three LLMs in a Trenchcoat

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

@anselmschueler shouldiblamecaching.com/

It's not working! Should I blame caching?

^{shouldiblamecaching.com}

@schuelermine

in reply to Jerry 🦙💝🦙

varx/social

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

it's called a halo

in reply to Jerry 🦙💝🦙

standev

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

a fairly hairy married Jerry?

Unknown parent

Jerry 🦙💝🦙

Unknown parent • 3 mesi fa • •

@cybeej yep. We have a few different sizes. That was the small one. They are awesome

@BJ Swope ➖

Andrea Bettini

3 mesi fa • •

Andrea Bettini
3 mesi fa • •

Ricevuto il primo segnale dal satellite europeo Sentinel-1D per l'osservazione della Terra. Lancio riuscito

Jerry 🦙💝🦙

3 mesi fa • •

Jerry 🦙💝🦙
3 mesi fa • •

Many of my former employees and coworkers at IBM got the boot today 😞

in reply to Jerry 🦙💝🦙

Sarcasm is all I have Left

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

🥺

in reply to Jerry 🦙💝🦙

Manky

in reply to Jerry 🦙💝🦙 • 3 mesi fa • •

Time for the US Gov to buy 10% stake in IBM?

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🤩👌 Beautiful video from the 14th Separate Regiment of the BPAK in Kstovo.

NOELREPORTS 🇪🇺 🇺🇦

3 mesi fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 mesi fa • •

Striking footage from Ukraine’s 14th Regiment captures the drone strike on the Kstovo refinery.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🇵🇱 Poland will build its own “anti-drone wall” without waiting for an EU decision, - Bloomberg.

According to the deputy defense minister, the ministry will announce investments in technologies to detect, jam, and neutralize hostile drones this month.

Auschwitz Memorial

3 mesi fa • •

Auschwitz Memorial
3 mesi fa • •

4 November 1939 | A Dutch Jewish girl, Anne Marjorie de Vries, was born in Amsterdam.

In Sept 1944 she was deported to #Theresienstadt ghetto with her mother Berta & sister Marianne Anne. From there they were deported to #Auschwitz on 4 October. All were killed in a gas chamber.
---

A short video showing the ruins of gas chamber and crematorium III: youtube.com/shorts/ipQmBPAlJQ8

Vintage sepia-toned photograph of a young girl with curly hair, smiling and holding a toy.

Vintage photo featuring three people. A woman holding a young child who is playfully interacting with another seated person.

Ruins of gas chamber and crematorium III at Auschwitz II-Birkenau | #Auschwitz #history #Holocaust

The crematorium, located on the ground level, was designed by the Topf und Söhne company from Erfurt and was equipped with five 3-muffle ovens connected to o...

^YouTube

#auschwitz #theresienstadt

NOELREPORTS 🇪🇺 🇺🇦

3 mesi fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 mesi fa • •

Air traffic at Brussels Airport was halted for over an hour due to drone sightings. Flights were diverted to other airports, including Schiphol and Charleroi. Liège Airport also shut down. Belgian Defense Minister Francken left a live TV show to respond, citing risks to civilian aviation.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🇭🇺❌🇺🇦 Orban: "We believe that the EU should conclude a strategic partnership with Ukraine without EU membership. This is our proposal. We will adhere to this position in the future, as we have every right to do so.

🤔 Orban also reproached Zelensky for Hungary's money

NOELREPORTS 🇪🇺 🇺🇦

3 mesi fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 mesi fa • •

Hungarian Prime Minister Viktor Orbán has reiterated his opposition to Ukraine’s accession to the European Union, proposing instead a strategic partnership without full membership. He also criticized President Zelensky, alleging that Hungarian funds are being directed toward Ukraine.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🇺🇦 Zelensky: Today, at the main command post of the 414th Brigade “Magyar's Birds,” I presented the warriors with state awards.

+ Command post of the 7th Rapid Response Corps of the Airborne Assault Forces of the Armed Forces of Ukraine.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

👀❗️Drone threat in Ryazan, Tambov, Penza, Ulyanovsk, Samara, Orenburg, Saratov, Voronezh, Belgorod, Volgograd, Rostov, Kursk regions, the Republic of Mordovia and in the temporarily occupied Crimea.

The Kyiv Independent

3 mesi fa • •

The Kyiv Independent
3 mesi fa • •

⚡️Russia’s Oreshnik missile enters serial production, Putin claims — nearly 1 year after promising to mass produce weapon “We have developed and deployed the Oreshnik medium-range missile system, and have begun serial production.” kyivindependent.com/russias-or…

🐦🔗: nitter.oksocial.net/KyivIndepe…

[2025/11/04 20:21]

Russia's Oreshnik missile enters serial production, Putin claims — nearly 1 year after promising to mass produce weapon

"We have developed and deployed the Oreshnik medium-range missile system, and have begun serial production," Russian President Vladimir Putin claimed on Nov. 4.

^{Abbey Fenbert (The Kyiv Independent)}

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

❗️🇧🇪 Belgium's airspace is partially closed due to several groups of UAVs in the sky over the country, in particular in the area of Brussels and Liege airports.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

LOL 😂 Putin is not going to South Africa to meet with Trump.

Instead of him, Maxim Oreshkin, deputy head of the Kremlin administration…

Eugene McParland 🇺🇦

3 mesi fa • •

Eugene McParland 🇺🇦
3 mesi fa • •

President #Zelenskyy:

Ukraine’s future army relies on unmanned systems. Proud of our soldiers’ braver - today honoured the 414th Brigade. Discussed drone production, SBS strategy, and soldier reintegration. Grateful for their defense

#zelenskyy

Russia-Ukraine Daily News

3 mesi fa • •

Russia-Ukraine Daily News
3 mesi fa • •

🇳🇴🇺🇦 #Norway will allocate $7 billion dollars to #Ukraine for defense needs next year. Additionally, Ukraine and Norway will launch joint defense production on Ukrainian territory, according to Ukraine’s Minister of Defense.

newsukraine.rbc.ua/news/norway…

Norway will allocate $7 billion to Ukraine’s defense in 2026 - MoD

Norway will allocate $7 billion dollars to Ukraine for defense needs next year. Additionally, Ukraine and Norway will launch joint defense production on Ukrainian territory, according to a post by Ukraine’s Minister of Defense, Denys Shmyhal.

There was no doubt for photographer Yelena Yemchuk that upon returning to Ukraine, she would encounter the pain and loss that comes with the day-to-day reality of Russia’s war — but she wasn’t quite ready for how much love there was to go around, too. kyivindependent.com/returning-…

🐦🔗: nitter.oksocial.net/KyivIndepe…

[2025/11/04 20:07]

Returning home, photographer Yelena Yemchuk finds beauty in a country at war

There was no doubt for photographer Yelena Yemchuk that upon returning to Ukraine, she would encounter the pain and loss that comes with the day-to-day reality of Russia's full-scale war — but she wasn't quite ready for how much love there was to go …

^{Kate Tsurkan (The Kyiv Independent)}

The Kyiv Independent

3 mesi fa • •

The Kyiv Independent
3 mesi fa • •

Ukraine’s military intelligence (HUR) on Nov. 4 released footage of what is said was an ongoing special operation in the embattled city of Pokrovsk; Germany will boost financial aid to Ukraine by around 3 billion euros ($3.5 billion) next year; and more. kyivindependent.com/ukraine-wa…

🐦🔗: nitter.oksocial.net/KyivIndepe…

[2025/11/04 19:54]

Ukraine war latest live: HUR releases combat footage from Pokrovsk, 'fierce battles' ongoing

Hello, this is Chris York from a cloudy fall day in Kyiv on day 1,350 of Russia's full-scale invasion of Ukraine. Today's top story so far: Ukraine's military intelligence (HUR) on Nov.

^{Chris York (The Kyiv Independent)}

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🇺🇸🥔 The US Department of Treasury has lifted sanctions on the Belarusian airline Belavia, which had been in effect since 2021.

A private plane used by Lukashenko’s family was removed from the list of restrictions, and operations with 3 aircraft associated with it were also allowed.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🚁🇺🇦 Former Russian MI-8AMTSh, which in 2023 was received by the GUR, recruiting the Russian pilot.

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🇺🇸⚔️🇻🇪 The Trump administration is considering a wide range of military actions against Maduro, including airstrikes on military units protecting him, special operations targeting his capture, and possible seizures of oil fields, - NYT

🔥👌 Minus Russian Grad MLRS, — 59th Brigade.

Ulfh3dnar

3 mesi fa • •

Ulfh3dnar
3 mesi fa • •

Sensitive content

💥 AFU struck Lukoil-Nizhegorodnefteorgsintez oil refinery in Kstov (Nizhny Novgorod region) and the Sterlitamak Petrochemical Plant in Bashkortostan, a manufacturer of aviation fuel components, were hit.

🔥 The destruction of the occupiers' fuel and lubricants warehouse at the Kherson region was also confirmed - about 900 m³ of fuel and two pumping stations.

NOELREPORTS 🇪🇺 🇺🇦

3 mesi fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 mesi fa • •

Operators of the 429th Separate Achilles Drone Regiment struck four Russian self-propelled howitzers, a Chinese Type-63 MLRS, and a Strela-10 air defense system.

The Kyiv Independent

3 mesi fa • •

The Kyiv Independent
3 mesi fa • •

President Volodymyr Zelensky stated that Ukraine will not accept a second-tier status in the European Union and must be treated as a full member of the bloc once it is invited. kyivindependent.com/zelensky-r…

🐦🔗: nitter.oksocial.net/KyivIndepe…

[2025/11/04 18:57]

Zelensky rejects ‘second-tier’ EU status, urges swift accession talks

BRUSSELS, Belgium — President Volodymyr Zelensky stated that Ukraine will not accept a second-tier status in the European Union and must be treated as a full member of the bloc once it is invited.

#usa #Syria #donaldtrump #karolineleavitt #ahmedalsharaa

Eugene McParland 🇺🇦

3 mesi fa • •

Eugene McParland 🇺🇦
3 mesi fa • •

President #Zelenskyy visited the 7th Rapid Response Corps in #Pokrovsk, awarded brave soldiers, and discussed stabilizing defenses amid intense enemy assaults.

He thanked troops for their resilience, crucial for protecting #Ukraine and countering enemy pressure.

reuters.com/business/energy/ir…

#russia

NOELREPORTS 🇪🇺 🇺🇦

3 mesi fa • •

NOELREPORTS 🇪🇺 🇺🇦
3 mesi fa • •

A Russian Grad BM-21 MLRS was destroyed after being spotted by Ukraine’s “Inquisition” unit of the 59th Brigade.

Ulfh3dnar

3 mesi fa • •

Ulfh3dnar
3 mesi fa • •

Sensitive content

#ukraine #russia #UkraineRussiaWar

The Kyiv Independent

3 mesi fa • •

The Kyiv Independent
3 mesi fa • •

⚡️ Germany to increase aid to Ukraine by 3 billion euros in 2026. “We will continue our support for as long as necessary to defend against Russia’s war of aggression,” a spokesperson for the finance ministry said. kyivindependent.com/ukraine-wa…

🐦🔗: nitter.oksocial.net/KyivIndepe…

[2025/11/04 18:27]

Ukraine war latest live: HUR releases combat footage from Pokrovsk, 'fierce battles' ongoing

Hello, this is Chris York from a cloudy fall day in Kyiv on day 1,350 of Russia's full-scale invasion of Ukraine. Today's top story so far: Ukraine's military intelligence (HUR) on Nov.

^{Chris York (The Kyiv Independent)}

Russia-Ukraine Daily News

3 mesi fa • •

Russia-Ukraine Daily News
3 mesi fa • •

🇺🇲🇧🇾 The U.S. Treasury Department on Tuesday eased some sanctions on #Belarus, lifting measures against the national airline and allowing transactions related to Lukashenko's presidential aircraft.

reuters.com/world/us-eases-som…

#usa

#usa #belarus

Ulfh3dnar

3 mesi fa • •

Ulfh3dnar
3 mesi fa • •

Sensitive content

#ukraine #russia #UkraineRussiaWar

Auschwitz Memorial

3 mesi fa • •

Auschwitz Memorial
3 mesi fa • •

4 November 1880 | A Pole, Jan Kiełek, was born in Małyszyn. A worker.

In #Auschwitz from 11 December 1941.
No. 24017
He perished in the camp on 10 February 1942.
---

Online lesson "Poles at KL Auschwitz”: lekcja.auschwitz.org/en_2020_0…

Eduexe Course

^{lekcja.auschwitz.org}

#auschwitz

MAKS 25 👀🇺🇦

3 mesi fa • •

MAKS 25 👀🇺🇦
3 mesi fa • •

🇺🇦🇳🇴 MoD Shmyhal:

Minister confirmed further support for Ukraine and announced a decision to allocate $7 billion next year for defense needs.

Started a working visit to Norway with a meeting with Minister of Defense. A memorandum was signed on uniform quality standards for defense products manufactured or supplied within the framework of agreements.

Another important step is a memorandum between Ukrainian and Norwegian companies on the creation of a joint defense enterprise in Ukraine.

Eugene McParland 🇺🇦

3 mesi fa • •

Eugene McParland 🇺🇦
3 mesi fa • •

#EU could admit new members by 2030, says its foreign policy chief

Kaja Kallas tells reporters more countries could join 27-country bloc, including Montenegro, Albania and #Ukraine

theguardian.com/world/2025/nov…

EU could admit new members by 2030, says its foreign policy chief

Kaja Kallas tells reporters more countries could join 27-country bloc, including Montenegro, Albania and Ukraine

^{Jennifer Rankin (The Guardian)}

#ukraine #eu

Eugene McParland 🇺🇦

3 mesi fa • •

Eugene McParland 🇺🇦
3 mesi fa • •

1/2

I Directed an Increase in Funding for the Corps on Key Directions and Discussed This With the Command – Address by President #Zelenskyy 04.11.2025

Full address president.gov.ua/en/news/doruc…

#zelenskyy

in reply to Eugene McParland 🇺🇦

Eugene McParland 🇺🇦

in reply to Eugene McParland 🇺🇦 • 3 mesi fa • •

2/2

Extract
Today, I was in the Donetsk and Dnipro regions, and – most importantly – in the Pokrovsk sector, with those very corps that are doing the crucial work: destroying the occupier, defending Pokrovsk, defending Myrnohrad, defending Dobropillia.

I want to thank every warrior, every unit engaged here and on other parts of the front.

Журнал «Холод»

3 mesi fa • •

Журнал «Холод»
3 mesi fa • •

Осторожно, новости!

Sensitive content

Redhotcyber

3 mesi fa • •

Redhotcyber
3 mesi fa • •

Droni sull’aeroporto di Bruxelles e sulle basi militari. La sicurezza è a rischio

📌 Link all'articolo : redhotcyber.com/post/droni-sul…

#redhotcyber #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy

Droni sull'aeroporto di Bruxelles e sulle basi militari. La sicurezza è a rischio

L'aeroporto di Bruxelles chiuso per sicurezza dopo avvistamenti di droni. Anche basi militari nel mirino. Il governo accelera su piano anti-drone.

^{Redazione RHC (Red Hot Cyber)}

#ai #privacy #redhotcyber #online #it #hacking #innovation #cybersecurity #technology #cybercrime #cti #cyberthreatintelligence #News

Andrea Bettini

3 mesi fa • •

Andrea Bettini
3 mesi fa • •

Ariane 6 ha portato a termine la sua missione: il satellite Sentinel-1D del programma europeo di osservazione della Terra Copernicus è in orbita. Il primo segnale è atteso alle 23.22 italiane

Andrea Bettini

3 mesi fa • •

Andrea Bettini
3 mesi fa • •

Sentinel-1D lanciato! Il nuovo satellite europeo per l'osservazione della Terra è in viaggio dalla Guyana Francese verso l'orbita da cui osserverà il pianeta

Boomerissimo.it

3 mesi fa • •

Boomerissimo.it
3 mesi fa • •

Lo sguardo di Sandra nasce dalla matita di Giaci: l’enigma padre-figlia che ha cambiato la nostra TV

boomerissimo.it/2025/11/04/san…

@spettacoli @spettacoli@diggita.com

#SandraMondaini #RaimondoVianello #CasaVianello #satira #arte

Sandra Mondaini e suo padre Giaci: un enigma artistico - Boomerissimo

Sandra Mondaini e il padre Giaci: tra modella bambina e maestro della satira, il ritratto di due talenti e di un enigma artistico che ha segnato la TV italiana

^{Antonietta Terraglia (Boomerissimo)}

#arte #satira #raimondovianello #SandraMondaini #casavianello @Spettacoli, Cinema, Musica, Televisione, Teatro, Anime e Serie TV @Spettacoli

Questa voce è stata modificata (3 mesi fa)

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

2025 Component Abuse Challenge: Weigh With A TL074

The late and lamented [Bob Pease] was one of a select band of engineers, each of whose authority in the field of analogue integrated circuit design was at the peak of the art. So when he remarks on something in his books, it’s worth taking notice. It was just such an observation that caught the eye of [Trashtronic]; that the pressure on a precision op-amp from curing resin could be enough to change the device’s offset voltage. Could this property be used for something? The op-amp as a load cell was born!

The result is something of an op-amp torture device, resembling a small weighing machine with a couple of DIP-8 packages bearing the load. Surprisingly modest weights will change the offset voltage, though it was found that the value will drift over time.

This is

... mostra di più

Cybersecurity & cyberwarfare

3 mesi fa • •

Cybersecurity & cyberwarfare
3 mesi fa • •

Jenny’s Daily Drivers: ReactOS 0.4.15

When picking operating systems for a closer look here in the Daily Drivers series, the aim has not been to merely pick the next well-known Linux distro off the pile, but to try out the interesting, esoteric or minority OS. The need remains to use it as a daily driver though, so each one we try has to have at least some chance of being a useful everyday environment in which a Hackaday piece could be written. With some of them such as the then-current BSD or Slackware versions we tried for interest’s sake a while back that’s not a surprising achievement, but for the minority operating systems it’s quite a thing. Today’s choice, ReactOS 0.4.15, is among the closest we’ve come so far to that ideal.

For The N’th Time In The Last 20 Years, I download A ReactOS ISO

... mostra di più

Jenny’s Daily Drivers: ReactOS 0.4.15

For The N’th Time In The Last 20 Years, I download A ReactOS ISO

It’s fair to say there are still a few quirks, but it works.
ReactOS is an open-source clone of a Windows operating system from the early 2000s, having a lot on common with Windows XP. It started in the late 1990s and has slowly progressed ever since, making periodic releases that, bit-by-bit, have grown into a usable whole. I last looked at it for Hackaday with version 0.4.13 in 2020, so have five years made any difference? Time to download that ISO and give it a go.

Installing ReactOS has that bright blue and yellow screen feeling of a Windows install from around the millennium, but I found it to be surprisingly quick and pain free despite a few messages about unidentified hardware. The display driver it chose was a VESA one but since it supported all my monitor’s resolutions and colour depths that’s not the hardship it might once have been.

Once installed, the feeling is completely of a Windows desktop from that era except for the little ReactOS logo on the Start menu. I chose the classic Windows 95 style theme as I never liked the blue of Windows XP. Everything sits where you remember it and has the familiar names, and if you used a Microsoft computer in those days you’re immediately at home. There’s even a web browser, but since it’s the WINE version of Internet Explorer and dates from the Ark, we’re guessing you’ll want to replace it.

Most Of The Old Software You Might Need…

Hello GIMP 2.6, my old friend!
There’s a package manager to download and run open-source software, something which naturally Windows never had. Back in 2020 I found this to be the Achilies’ heel of the OS, with very little able to install and run without crashing, so i was very pleased to note that this situation has changed. Much of the software is out of date due to needing Windows XP compatibility, but I found it to be much more usable and stable. There’s a choice of web browsers but the Firefox and Chromium versions are too old to be useful, but I found its K-Meleon version to be the most recent of the bunch. Adding GIMP to my installed list, I was ready to try this OS as my daily driver.

I am very pleased to report that using K-Meleon and GIMP on ReactOS 0.4.15, I could do my work as a Hackaday writer and editor. This piece was in part written using it, and Hackaday’s WordPress backend is just the same as in Firefox on my everyday Manjaro Linux machine. There however the good news ends, because I’m sorry to report that the experience was at times a little slow and painful. Perhaps that’s the non-up-to-date hardware I’d installed it on, but it’s evident that 2025 tasks are a little taxing for an OS with its roots in 2003. That said it remained a usable experience, and I could just about do my job were I marooned on a desert island with my creaking old laptop and ReactOS.

… And It Works, Too!

So ReactOS 0.4.15 is a palpable hit, an OS that can indeed be a Daily Driver. It’s been a long time, but at last ReactOS seems mature enough to use. I have to admit that I won’t be making the switch though, but who should be thinking about it? I think perhaps back in 2020 I got it right, in suggesting that as a pretty good facsimile of Windows XP it is best thought of as an OS for people who need XP bur for whom the venerable OS is now less convenient. It’s more than just a retrocomputing platform, instead it’s a supported alternative to the abandonware original for anyone with hardware or software from that era which still needs to run. Just like FreeDOS is now the go-to place for people who need DOS, so if they continue on this trajectory, should ReactOS become for those needing a classic Windows. Given the still-installed rump of software and computer controlled machinery which runs XP, that could I think become a really useful niche to occupy.

hackaday.com/2025/11/04/jennys…

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

Furto del Louvre: Windows 2000 e Windows XP nelle reti oltre che a password banali

I ladri sono entrati attraverso una finestra del secondo piano del Musée du Louvre, ma il museo aveva avuto anche altri problemi oltre alle finestre non protette, secondo un rapporto di audit sulla sicurezza informatica risalente a un decennio fa e ora venuto alla luce.

Sebbene la Ministra della Cultura Rachida Dati abbia affermato che «i sistemi di sicurezza del museo non hanno fallito», tutto suggerisce che si siano comunque verificate alcune violazioni della

... mostra di più

Furto del Louvre: Windows 2000 e Windows XP nelle reti oltre che a password banali

Secondo documenti riservati consultati dal quotidiano Libération, nel 2014 bastava digitare “LOUVRE” per accedere al server responsabile della videosorveglianza del museo più famoso della Francia. Oppure digitare “THALES” per avere accesso al software pubblicato dall’omonima azienda.

Queste password, che in gergo tecnico si chiamano “di default” o “predicibili banali”, erano già definite dall’ANSSI (Agenzia nazionale per la sicurezza informatica francese) come un grave rischio. Le stesse segnalavano che «la rete degli uffici del Museo del Louvre include anche sistemi obsoleti» come Windows 2000 — che non garantiva più né il blocco delle sessioni né aggiornamenti antivirus.

L’ANSSI aveva verificato tutto ciò con un audit interno del 2014. Microsoft aveva smesso di fornire aggiornamenti di sicurezza per Windows 2000 già nel luglio 2010. Nell’audit erano contenute raccomandazioni ben precise: usare password più complesse, migrare il software su versioni supportate, correggere le vulnerabilità. Ma il museo non ha risposto se abbia effettivamente seguito queste indicazioni.

Un secondo audit fu condotto nel 2017 dall’INHESJ (Istituto Nazionale di Studi Avanzati sulla Sicurezza e la Giustizia) e rilevò che «alcune postazioni di lavoro hanno sistemi operativi obsoleti (Windows 2000 e Windows XP) che non garantiscono più una sicurezza efficace (nessun aggiornamento antivirus, nessuna password o blocco di sessione…)». Microsoft interruppe il supporto esteso per Windows XP nel 2014.

Vent’anni di debito tecnico hanno gravato pesantemente sulla sicurezza del Louvre, con il continuo accumulo di sistemi di videosorveglianza analogica, videosorveglianza digitale, antintrusione e controllo accessi, alcuni dei quali con server dedicati o applicazioni proprietarie. Alcuni di questi sono diventati obsoleti nel tempo e avrebbero richiesto aggiornamenti o sostituzioni.

L'articolo Furto del Louvre: Windows 2000 e Windows XP nelle reti oltre che a password banali proviene da Red Hot Cyber.

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

SesameOp: il malware che usa OpenAI Assistants per il Comando e Controllo

Microsoft ha scoperto un nuovo malware, denominato SesameOp, e ha pubblicato i dettagli del suo funzionamento. Questa backdoor era insolita: i suoi creatori utilizzavano l’API OpenAI Assistants come canale di controllo nascosto, consentendo loro di mascherare l’attività all’interno del sistema infetto ed eludere i tradizionali strumenti di rilevamento.

L’attacco è stato scoperto nel luglio 2025 durante le indagini su un attacco complesso, durante il quale un gruppo sconosciuto è rimasto presente nell’infrastruttura della vittima per diversi mesi.

L’identità dell

... mostra di più

SesameOp: il malware che usa OpenAI Assistants per il Comando e Controllo

L’identità dell’organizzazione presa di mira non è stata rivelata, ma l’indagine ha rivelato la presenza di un’ampia rete di web shell interne e processi dannosi mascherati da legittime utility di Visual Studio. Il codice dannoso è stato iniettato tramite AppDomainManager: un file di configurazione modificato ha istruito l’eseguibile a caricare la libreria dinamica Netapi64.dll contenente logica dannosa.

La libreria è stata pesantemente offuscata utilizzando Eazfuscator.NET, garantendo una maggiore invisibilità. Ha svolto la funzione di loader per il modulo .NET OpenAIAgent.Netapi64, che richiedeva istruzioni tramite l’API OpenAI Assistants. I comandi ricevuti venivano prima decriptati, quindi eseguiti in un thread separato e i risultati dell’esecuzione venivano restituiti tramite la stessa API . Pertanto, l’ infrastruttura OpenAI è stata efficacemente utilizzata come nodo di controllo intermedio, non rilevabile durante l’analisi del traffico di rete.

La comunicazione tra il malware e il server di comando e controllo avviene tramite messaggi contenenti parametri chiave nel campo descrizione. Questi possono includere il comando SLEEP (per sospendere temporaneamente l’attività), il comando Payload (per eseguire istruzioni nidificate) e il comando Result (per restituire i risultati dell’esecuzione all’operatore dell’attacco).

Sebbene l’identità degli aggressori rimanga sconosciuta, lo schema in sé dimostra una tendenza a sfruttare servizi cloud legittimi per un controllo occulto. Ciò complica il rilevamento degli attacchi, poiché il traffico non supera il normale utilizzo delle API aziendali. Dopo aver ricevuto la notifica da Microsoft, il team di OpenAI ha condotto una revisione interna, identificato la chiave sospetta e bloccato l’account associato.

Secondo Microsoft, l’utilizzo di SesameOp indica un tentativo deliberato di ottenere l’accesso a lungo termine all’infrastruttura e di controllare i computer infetti all’insaputa dei proprietari. La piattaforma API OpenAI Assistants, attraverso la quale veniva esercitato il controllo, verrà disattivata nell’agosto 2026 e sostituita dalla nuova API Responses.

L'articolo SesameOp: il malware che usa OpenAI Assistants per il Comando e Controllo proviene da Red Hot Cyber.

Cybersecurity & cyberwarfare

3 mesi fa • •

Cybersecurity & cyberwarfare
3 mesi fa • •

Rocket Roll Control, The Old Fashioned Way

The vast majority of model rockets go vaguely up and float vaguely downwards without a lot of control. However, [newaysfactory] built a few rockets that were altogether more precise in their flight, thanks to his efforts to master active roll control.

[newaysfactory] started this work a long time ago, well before Arduinos, ESP32s, and other highly capable microcontroller platforms were on the market. In an era when you had to very much roll your own gear from the ground up, he whipped up a rocket control system based around a Microchip PIC18F2553. He paired it with a L3G4200D gyro, an MPXH6115A barometer, and an MMA2202KEG accelerometer, chosen for its ability to provide useful readings under high G acceleration. He then explains how these sensor outputs were knitted together to keep a rocket flying

... mostra di più

Catalin Cimpanu

3 mesi fa • •

Catalin Cimpanu
3 mesi fa • •

iOS security updates: support.apple.com/en-us/100100

Android security updates: source.android.com/docs/securi…

Start patching!

Apple security releases - Apple Support

This document lists security updates and Rapid Security Responses for Apple software.

^{Apple Support}

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

Lithium-Ion Batteries: WHY They Demand Respect

This summer, we saw the WHY (What Hackers Yearn) event happen in Netherlands, of course, with a badge to match. Many badges these days embrace the QWERTY computer aesthetic, which I’m personally genuinely happy about. This one used 18650 batteries for power, in a dual parallel cell configuration… Oh snap, that’s my favourite LiIon cell in my favourite configuration, too! Surely, nothing bad could happen?

... mostra di più

Lithium-Ion Batteries: WHY They Demand Respect

Whoops. That one almost caught me by surprise, I have to shamefully admit. I just genuinely love 18650 cells, in all glory they bring to hardware hacking, and my excitement must’ve blindsided me. They’re the closest possible entity to a “LiIon battery module”, surprisingly easy to find in most corners of this planet, cheap to acquire in large quantities, easy to interface to your projects, and packing a huge amount of power. It’s a perfect cell for many applications I and many other hackers hold dear.

Sadly, the 18650 cells were a bad choice for the WHY badge, for multiple reasons at once. If you’re considering building a 18650-based project, or even a product, let me show you what exactly made these cells a bad fit, and how you might be able to work around those limitations on your own journey. There’s plenty of technical factors, but I will tell you about the social factors, because these create the real dealbreaker here.

Three Thousand Participants

The main social factor can be boiled down to this – a 18650-powered WHY badge can start a fire through being touched by a 5 cent coin, a keychain, or a metal zipper of someone’s jacket. This is not a dealbreaker for an individual hacker who’s conscious of the risk, though it’s certainly an unwise choice. For three thousand participants? You have no chance.

A 18650 cell is like a bigger sister to an AA battery – power at your fingertips, just, you’re playing with heaps more power. You can take a 18650 cell and have it power a small yet nimble robot on wheels, or an ultra powerful flashlight, or a handheld radio packing quite a transmit power punch. You can release its power on accident, too, and that gets nasty quick.

Short-circuiting a 18650 cell is a surprisingly straightforward way to melt metal, and by extent, start a small fire. It’s also not that hard to short-circuit a 18650 cell, especially and specifically unprotected ones. This is a big part of why consumer oriented gadgets use AAs instead of 18650s – it’s perhaps less powerful, sure, but it’s also a significantly less dangerous cell.

The Instructions, They Do Nothing!

WHY sold a little over 3700 tickets. I would not expect 100% attendance, but I’m comfortable saying it must’ve been around three thousand people. Sadly, “three thousand people” is far beyond the point when you can hope to give people handling instructions for something as easy to mishandle as LiIon cells, even for a nominally hacker audience.

Of course, you can try and give people instructions. You can talk to each badge recipient individually, release booklets demonstrating what to do and not to do with a 18650 cell, add silkscreen instructions for a just-in-place reminder, or maybe have them sign a release form, though it’s unlikely that kind of trick would be legal in the EU. Sadly, WHY organizers never came close to doing any of these things. It also wouldn’t really matter if they did. These instructions will always, inevitably be outright ignored by a sizeable percentage of users.

Handling unprotected batteries requires cautiousness and some helper equipment. You can’t hope to transplant the cautiousness, at most you can try and issue the equipment. Which equipment? A small storage cases for the cells (must have when transporting them!), as well as a case for the badge, at the very least; to my knowledge, the WHY didn’t issue either of these stock. An ESD bag doesn’t qualify if it doesn’t permanently cover the badge’s back, because any temporary protection is nullified by a budding hacker getting tired of carrying two 18650 cells on their neck, and throwing the badge into the tent without looking. Where does it land? Hopefully not onto something metal.

You can build a badge or any sort of other device using unprotected 18650s, which expects the end user to handle them, like the WHY badge does, and it will be more or less safe as long as the end user is yourself, with 18650 handling experience that I’m sure is to match. Giving it to a friend, caseless? You can talk to your friend and explain 18650 handling basics to them, sure, but you’re still running some degree of risk. My hunch is, your friend could very well refuse such a gift outright. Giving it to a hundred people? You’re essentially playing with fire at someone else’s house.

Just Why Did That Happen?

Hackaday has traditionally used AA cells for our badges, which has definitely help us mostly avoid any Lithium-related issues. Most other conferences have been using pouch cells, which traditionally come with short-circuit protection and don’t threaten to ignite stuff from contact with a piece of metal. 18650 cells are not even cheaper at scale – they’re nice, sure, I wrote as much, but those nice things are quickly negated by the whole “firestarter” thing.

On the other hand, 18650 cells do work for a hacker or a small team of hackers skilled enough to stay cautious, and it also works well at scale when the cell is permanently encased within the shell, like in most powerbanks and laptops. It fails as soon as you expect people to plug batteries in and out, or carry them separately. Respecting Lithium-Ion batteries means being aware of their shortcomings, and for 18650 cells, that means you should avoid having people manually handle them at scale.

Here’s the kicker about the WHY badge situation. I was confused by the WHY badge switching to 18650 cells this year, away from overcurrent-protected pouch cells, which were used by previous iterations of WHY (MCH, SHA) without an issue in sight. So, I’ve asked around, and what I got from multiple sources is – the 18650 usage decision was pushed top-down, with little regard for physical safety. Sadly, this makes sense – it’s how we saw it implemented, too.

hackaday.com/2025/11/04/lithiu…

Cybersecurity & cyberwarfare

3 mesi fa • •

Cybersecurity & cyberwarfare
3 mesi fa • •

Making Audible Sense Of A Radiation Hunt

The clicking of a Geiger counter is well enough known as a signifier of radioactive materials, due to it providing the menacing sound effect any time a film or TV show deals with radiation. What we’re hearing is the electronic detection of an ionization event in a Geiger-Muller tube due to alpha or beta radiation, which is great, but we’re not detecting gamma radiation.

For that a scintillation detector is required, but these are so sensitive to background radiation as to make the clicking effect relatively useless as an indicator to human ears. Could a microcontroller analyse the click rate and produce an audible indication? This is the basis of [maurycyz]’s project, adding a small processor board to a Ludlum radiation meter.

When everything sounds like a lot of clicks, an easy fix

... mostra di più

DOXA 🏳️‍🌈🏳️‍⚧️

3 mesi fa • •

DOXA 🏳️‍🌈🏳️‍⚧️
3 mesi fa • •

Осторожно, новости!

Sensitive content

Il gruppo di hacker UNC6384 (noto anche come Mustang Panda), legato alla Cina, sta conducendo una campagna di cyberspionaggio su larga scala che prende di mira agenzie diplomatiche e governative europee.

Secondo Arctic Wolf e StrikeReady, gli hacker stanno sfruttando una vulnerabilità di Windows non corretta relativa alle scorciatoie LNK. Gli attacchi sono stati registrati in Ungheria, Belgio, Italia, Paesi Bassi e Serbia tra settembre e ottobre 2025.

Secondo i ricercatori, gli attacchi iniziano con email di phishing mirate contenenti URL a file LNK dannosi. L’oggetto di queste email si riferisce in genere a workshop NATO sugli appalti per la difesa, riunioni della Commissione Europea sulla facilitazione delle frontiere e altri eventi diplomatici multilaterali.

I file dannosi sfruttano la vulnerabilità CVE-2025-9491 (punteggio CVSS 7.0), che si verifica nella gestione dei collegamenti di Windows. Questo bug consente di nascondere argomenti dannosi della riga di comando all’interno dei file .LNK utilizzando l’indentazione di spazi vuoti nella struttura COMMAND_LINE_ARGUMENTS. Ciò consente l’esecuzione di codice arbitrario su dispositivi vulnerabili all’insaputa dell’utente.

Quando una vittima apre un file di questo tipo, viene eseguito un comando PowerShell che decodifica ed estrae il contenuto dell’archivio TAR, visualizzando contemporaneamente all’utente un PDF escamotage. L’archivio contiene un’utility legittima Canon Printer Assistant, una DLL dannosa chiamata CanonStager e un payload malware PlugX crittografato (cnmplog.dat), distribuito tramite sideload DLL.

PlugX (noto anche come Destroy RAT, Kaba, Korplug, SOGU e TIGERPLUG) è un trojan di accesso remoto che offre agli hacker il controllo completo su un sistema infetto. Il malware può eseguire comandi, intercettare le sequenze di tasti, caricare e scaricare file, persistere nel sistema modificando il registro di Windows ed effettuare ricognizioni approfondite.

L’architettura modulare di PlugX consente ai suoi operatori di espandere le funzionalità del trojan tramite plugin progettati per attività specifiche. Il malware utilizza anche tecniche di anti-analisi e anti-debug per complicare l’analisi e passare inosservato.

Secondo i ricercatori di Arctic Wolf, è stata documentata un’evoluzione nel toolkit degli aggressori: le dimensioni degli artefatti CanonStager si sono ridotte da 700 KB a 4 KB, a indicare uno sviluppo attivo e la riduzione al minimo della loro impronta digitale. Inoltre, si segnala che all’inizio di settembre il gruppo ha iniziato a utilizzare file HTML Application (HTA) per caricare codice JavaScript che recupera i payload dal sottodominio cloudfront[.]net.

Vale la pena notare che il problema CVE-2025-9491 esiste almeno dal 2017 ed è stato attivamente sfruttato da numerosi gruppi di hacker. Lo sfruttamento di questo bug è stato segnalato pubblicamente per la prima volta nel marzo 2025. All’epoca, gli analisti di Trend Micro scoprirono che la vulnerabilità era ampiamente sfruttata da undici gruppi di hacker “governativi” e altri criminali informatici, tra cui Evil Corp, APT43 (Kimsuky), Bitter, APT37, Mustang Panda, SideWinder, RedHotel e Konni.

Осторожно, новости!

Sensitive content

securityaffairs

3 mesi fa • •

securityaffairs
3 mesi fa • •

Google fixed a critical remote code execution in #Android
securityaffairs.com/184208/sec…
#securityaffairs #hacking

Google fixed a critical remote code execution in Android

Google’s November 2025 Android update fixes two flaws in the System component, including a critical remote code execution issue.

^{Pierluigi Paganini (Security Affairs)}

#hacking #android #securityaffairs

Журнал «Холод»

3 mesi fa • •

Журнал «Холод»
3 mesi fa • •

Осторожно, новости!

Sensitive content

Холод
Законопроект о круглогодичном призыве внесли в Думу Глава Комитета Госдумы по обороне Андрей Картаполов и его заместитель Андрей Красов внесли в Думу законопроект о круглогодичном призыве в армию. Текст законопроекта размещен на сайте Госдумы. Депутаты предложили…
t.me/holodmedia/30411

Путин подписал закон о круглогодичном призыве

Владимир Путин подписал закон о призыве на военную службу в течение всего года. Об этом сообщили «Коммерсантъ» и РБК. Новые сроки начнут действовать с 1 января будущего года. С этого момента призыв будет осуществляться на основании указа Путина.

При этом отправлять призывников к месту службы будут дважды в год, но для некоторых граждан могут быть установлены другие правила. Закон также обязывает россиян явиться по повестке в течение 30 дней.

Законопроект о круглогодичном призыве внесли в Госдуму летом этого года. Его разработали глава Комитета по обороне Андрей Картаполов и его заместитель Андрей Красов.

Помимо этого, Путин также подписал закон о специальных сборах для тех, кто заключил контракт о пребывании в резерве. Их по указу Путина могут привлекать к защите «критически важных объектов и иных объектов жизнеобеспечения».

src: t.me/holodmedia/34173

Холод

Законопроект о круглогодичном призыве внесли в Думу Глава Комитета Госдумы по обороне Андрей Картаполов и его заместитель Андрей Красов внесли в Думу законопроект о круглогодичном призыве в армию. Текст законопроекта размещен на сайте Госдумы.

^Telegram

DOXA 🏳️‍🌈🏳️‍⚧️

3 mesi fa • •

DOXA 🏳️‍🌈🏳️‍⚧️
3 mesi fa • •

Осторожно, новости!

Sensitive content

Please open Telegram to view this post

VIEW IN TELEGRAM

На Западном берегу поселенцы напали на двух активисток и сожгли бедуинский поселок

1 ноября активистки занималисьзащитным присутствием в деревне Мухмас на Западном берегу — сопровождали палестин:ок, на которых регулярно нападают поселен:ки.

«На меня и еще одну девушку в бедуинском поселке напали поселенцы, сломали мне руку и разбили голову. Били камнями и палками. Вторая девушка до сих пор в больнице», — пишет одна из пострадавших девушек.

Другая пострадавшая девушка госпитализирована с пятью швами на голове и кровотечением в печени. Когда на место происшествия приехали израильские силовики, они начали издеваться над пострадавшими активистками, не задержав агрессоро:к, сообщил партнер госпитализированной девушки.

«Сам поселок сожгли. Есть пострадавшие палестинцы. Этот поселок мы стерегли полгода, а достаточно было 5 минут, и его нет», — добавила пострадавшая.

Что такое защитное присутствие и зачем оно нужно?

▪️ Активист:ки защитного присутствия с 2000-х годов помогают палестин:кам защищаться от оккупации на Западном берегу: сопровождают палестинских пастухов, когда те пасут овец, провожают детей в школу и обратно, фиксируют случаи насилия вблизи контрольно-пропускных пунктов, а также ночуют в общинах, где есть опасения погромов.

▪️ В течение последних лет на Западном Берегу происходит эскалация насилия по отношению к палестинскому населению. Нападениям поселен:ок подвергается и палестинское имущество.

▪️ Группы вооруженных израильтян:ок практикуют вандализм частной собственности и мечетей, вырубку оливковых деревьев, поджоги, захват земель.

▪️ Обращение к местным израильским властям остается безуспешным: около 90% дел закрываются после расследования без предъявления обвинений.

▪️ В 2025 году первые две недели сбора урожая число нападений поселен:ок выросло на 13% по сравнению с аналогичным периодом прошлого года, сообщил Аджит Сунгай, глава Управления ООН по правам человека на оккупированной палестинской территории.

Читайте полную новость на сайте без VPN

Подписаться | Поддержать нашу работу | Написать нам

На Западном берегу поселенцы напали на двух активисток и сожгли бедуинский поселок - DOXA
На Западном берегу поселен:ки напали на палестинскую деревню, избили палестин:ок и двух русскоязычных активисток, а также сожгли бедуинский поселок...

src: t.me/doxajournal/44562

На Западном берегу поселенцы напали на двух активисток и сожгли бедуинский поселок

^DOXA

⚛️Revertron

3 mesi fa • •

⚛️Revertron
3 mesi fa • •

Just a reminder that #Islam is a cult of death, not a religion, and that it is always about jihad.

thereligionofpeace.com/pages/q…

#Europe #EU

The Quran's Verses of Violence

A sampling of violence in the Quran.

^{www.thereligionofpeace.com}

#europe #eu #islam

Questa voce è stata modificata (3 mesi fa)

Журнал «Холод»

3 mesi fa • •

Журнал «Холод»
3 mesi fa • •

Осторожно, новости!

Sensitive content

Cybersecurity & cyberwarfare

3 mesi fa da Open app • •

Cybersecurity & cyberwarfare
3 mesi fa da Open app • •

Trump non vuole esportare i chip Nvidia. La Cina risponde: “Tranquilli, facciamo da soli”

Reuters ha riferito che Trump ha detto ai giornalisti durante un’intervista preregistrata nel programma “60 Minutes” della CBS e sull’Air Force One durante il viaggio di ritorno: “I chip più avanzati non li lasceremo avere a nessun altro Paese tranne gli Stati Uniti”. Trump ha aggiunto: “Non venderemo i chip Blackwell a nessun altro”.

Queste osservazioni suggeriscono che l’amministrazione Trump potrebbe avere in programma di imporre restrizioni più severe all’esportazione di chip di intelligenza artificiale statunitensi all’avanguardia rispetto al passato, escludendo potenzialmente la Cina e altri Paesi dall’accesso a questi semiconduttori ad alte prestazioni.

Inoltre, il Wall S

... mostra di più

Trump non vuole esportare i chip Nvidia. La Cina risponde: “Tranquilli, facciamo da soli”

Inoltre, il Wall Street Journal, citando funzionari statunitensi, ha riferito che durante il suo incontro con il presidente cinese Xi Jinping a Gyeongju, in Corea del Sud, il 30 ottobre, Trump ha deciso di non menzionare la questione dei chip di fascia alta di Nvidia. In precedenza, ci si aspettava che avrebbe discusso la questione dei chip con Xi durante il vertice.

A luglio di quest’anno, Trump ha presentato un nuovo progetto per lo sviluppo dell’intelligenza artificiale, con l’obiettivo di allentare alcune normative ambientali ed espandere le esportazioni di tecnologia di intelligenza artificiale verso gli alleati, al fine di consolidare la posizione di leadership degli Stati Uniti in settori tecnologici chiave rispetto alla Cina.

Tuttavia, le sue recenti dichiarazioni hanno mostrato segnali di un inasprimento delle politiche. Proprio venerdì scorso (31 ottobre), Nvidia ha annunciato che avrebbe fornito oltre 260.000 chip Blackwell AI alla Corea del Sud, tra i cui clienti figurano importanti aziende sudcoreane come Samsung Electronics. Questa mossa ha suscitato speculazioni sulla possibilità che Trump consenta alla Cina di ottenere una versione “annacquata” del chip Blackwell.

In risposta a 60 Minutes, Trump ha affermato che non avrebbe consentito la vendita dei chip Blackwell più avanzati alle aziende cinesi, ma non ha escluso del tutto la possibilità che la Cina ottenga versioni con prestazioni inferiori: “Li lasceremo lavorare con Nvidia, ma non con quelli più avanzati”.

L’establishment politico statunitense ha reagito con forza alle notizie secondo cui la Cina potrebbe ricevere una versione a prestazioni inferiori dei chip Nvidia. Il deputato John Moolenaar, presidente della Commissione speciale per la Cina della Camera, ha avvertito che consentire l’ingresso in Cina di qualsiasi versione dei chip Blackwell equivarrebbe a “fornire all’Iran materiali che potrebbero essere utilizzati per costruire armi nucleari”.

Nel frattempo, il CEO di Nvidia, Jensen Huang, ha dichiarato durante un evento la scorsa settimana che l’azienda non ha ancora richiesto licenze di esportazione per il mercato cinese perché “la parte cinese ha chiarito che per il momento non desidera che Nvidia operi nella regione”. Ha tuttavia sottolineato anche che i ricavi derivanti dal mercato cinese sono “essenziali” per sostenere gli investimenti di Nvidia in ricerca e sviluppo negli Stati Uniti.

L'articolo Trump non vuole esportare i chip Nvidia. La Cina risponde: “Tranquilli, facciamo da soli” proviene da Red Hot Cyber.

Fabricio

3 mesi fa • •

Fabricio
3 mesi fa • •

Prague | 2025

#streetphotography #travel #mobileclick #shotoniphone #mobilephotography #photography #photo #mobile #travelphotography #amateurphotography #nature

#photography #nature #photo #travel #streetphotography #amateurphotography #shotoniphone #travelphotography #mobile #mobilephotography #mobileclick

Giuseppe Lipari

3 mesi fa • •

Giuseppe Lipari
3 mesi fa • •

I dati della XII indagine dell'ADI sono drammatici. Chi fa ricerca dopo il #dottorato è sfruttato, sottopagato, addirittura costretto a lavorare gratis nei periodi di disoccupazione. Nel frattempo abbiamo finanziato posizioni essenziali per il futuro delle #università con fondi che stanno finendo, e a breve in molti cambieranno #lavoro o Paese...

Dobbiamo cambiare passo immediatamente, più tutele e finanziamenti, per salvare la #ricerca e l'università pubblica.

#politica #research #postdoc

#universita #lavoro #politica #research #ricerca #postdoc #dottorato

Dio

3 mesi fa • •

Dio
3 mesi fa • •

La schermata che vedrete mentre il nuovo sistema di verifica dell'età si assicurerà che siete maggiorenni e che potete accedere a contenuti per adulti.

simonetta

3 mesi fa • •

simonetta
3 mesi fa • •

•
presto, la sera
del novembre che cede ai primi freddi

#photography #foto

#photography #foto

Boerps ☑️

3 mesi fa • •

Boerps ☑️
3 mesi fa • •

@classicalmusic
Johannes Brahms (1833 - 1897)
Cello Sonata No. 1 in E minor, Op. 38

Cello: Pierre Fournier
Piano: Wilhelm Backhaus

Recorded: May 1-3, 1955

youtube.com/watch?v=CAJiYKqfL9…

@Pierrette ?

#music #classic #chambermusic #history

Brahms: Cello Sonata No. 1 - Fournier, Backhaus / 브람스: 첼로 소나타 1번 - 푸르니에, 박하우스

Johannes Brahms (1833 - 1897)Cello Sonata No. 1 in E minor, Op. 38요하네스 브람스첼로 소나타 1번 E단조, 작품 38I. Allegro non troppo (Start 00:00)II. Allegretto quasi minu...

^YouTube

#history #music #classic #chambermusic @Pierrette @About classical music

Unknown parent

Boerps ☑️

Unknown parent • 3 mesi fa • •

There you are the expert. But Barenboim? No, too sloppy.

Questa voce è stata modificata (3 mesi fa)

Unknown parent

Brahms: String Sextet No. 1 in B flat major, Op. 18브람스: 현악 6중주 1번 B플랫장조, 작품 18I. Allegro ma non troppo (Start 00:00)II. Andante, ma moderato (Start 12:10)...

^YouTube

#history #music #classic #chambermusic @Pierrette @About classical music

Unknown parent

Boerps ☑️

Unknown parent • 3 mesi fa • •

Some work for you. 😆😆👋

Redhotcyber

3 mesi fa • •

Redhotcyber
3 mesi fa • •

SesameOp: il malware che usa OpenAI Assistants per il Comando e Controllo

📌 Link all'articolo : redhotcyber.com/post/sesameop-…

#redhotcyber #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy

SesameOp: il malware che usa OpenAI Assistants per il Comando e Controllo

Microsoft scopre SesameOp, un malware che utilizza l'API OpenAI Assistants per comunicare con i server di comando e controllo e eludere i tradizionali strumenti di rilevamento.

^{Redazione RHC (Red Hot Cyber)}

#ai #privacy #redhotcyber #online #it #hacking #innovation #cybersecurity #technology #cybercrime #cti #cyberthreatintelligence #News

Questo sito web utilizza cookie tecnici e di sessione. Proseguendo la navigazione su questo sito, accetti l'utilizzo dei cookie.

⇧