Martedì 11, dalle 11:50, in diretta sulla Rete Uno della Radiotelevisione Svizzera parlerò concretamente di IA. Come usarla nell'impresa e nel privato. Le tecniche come la distillazione e l'orchestrazione. I limiti e i costi. Chi ci guadagna e chi ci perde. La generazione di contenuti differenti dal puro testo. E ci saranno anche lo streaming e il podcast!
In the spring of 2004, an album released by a small label in Los Angeles, Stones Throw Records, quietly overturned the conventional wisdom of hip-hop. Madvillain "”Madvillainy”’ —It”s a rap album, a poetry collection, and a sound collage through radio waves. **
Lancio verso Marte alle 20.45 italiane. Le due sonde della missione statunitense ESCAPADE partiranno dalla Florida con un razzo New Glenn di Blue Origin blueorigin.com/missions/by/ng-…
Un giornalista di Cybernews ha testato l'intelligenza artificiale per gestire la rete domestica, ma ha ottenuto consigli pericolosi che avrebbero potuto esporre i servizi locali a Internet.
Таблетки для долголетияразработалив Китае Китайские ученые из лаборатории Lonvi Biosciences разработали таблетки на основе виноградных косточек, которые, по их словам, могут продлить человеческую жизнь до 100 и более лет. Об этом пишет The New York Times.
Lonvi Biosciences — это стартап по производству лекарств для продления человеческой жизни. Сама лаборатория, как отмечается, расположена в городе Шэньчжэнь на юге Китая.
«Дожить до 150 лет абсолютно реально. Через несколько лет это станет реальностью», — утверждает главный технический директор Lonvi Biosciences Лю Цинхуа.
There is an increasing number of accounts spreading #russianPropaganda. Often similar news spread across different accounts. All of them date from the last few months and often have only a few posts. They mostly refer to relevant russian propaganda channels: TASS, RT, Sputnik or crap on Telegram.
В НАТОбоялисьтретьей мировой войны из-за помощи Украине Бывший генсекретарь НАТО Йенс Столтенберг отказал президенту Украины Владимиру Зеленскому в просьбе закрыть воздушное пространство после начала полномасштабного вторжения России из-за страха начала третьей мировой войны. Об этом Столтенберг рассказал в интервью The Times.
Он вспоминал «болезненный момент» февраля 2022 года, когда, по его словам, Зеленский позвонил ему из бункера в Киеве и попросил о помощи.
«Я понимаю, почему вы об этом просите. Но этого не произойдет, потому что, если НАТО закроет воздушное пространство Украины, первым делом нам придется вывести из строя российские системы ПВО в Беларуси и России, поскольку мы не можем летать над Украиной, когда российские ракеты ПВО нацелены на самолеты НАТО», — ответил он украинскому президенту.
Россиянограничатв числе банковских карт до конца года Государственная дума до конца 2025 года примет закон об ограничении количества банковских карт, допустимых для одного человека. Об этом РИА «Новости» сообщил глава комитета Госдумы по финансовому рынку Анатолий Аксаков.
Zohran Mamdani isn’t the core problem, he’s a symptom of something far worse. The real problem is the growing number of people who believe in his message and will vote for the next Mamdani, and the next after that. This is how radical movements grow. America is heading toward a dark chapter filled with more Fuenteses, more Mamdanis, and more division. As an Iranian, I’m telling you from experience: this is exactly how we lost our country. The Islamists and the leftists united, and everything collapsed. Don’t repeat our mistake.
В случае РФ сейчас лучший вариант - создавать локальные сети. Повесить объявление в подъезде: в связи с перебоями в работе интернета, хотим раскидать провода и создать локальную сеть,
... mostra di più
В случае РФ сейчас лучший вариант - создавать локальные сети. Повесить объявление в подъезде: в связи с перебоями в работе интернета, хотим раскидать провода и создать локальную сеть, которая позволит совместно играть в сетевые игры и обмениваться файлами. Кто хочет попробовать такое создать, пишите на {ваш контакт}.
А уже потом, в процессе использования или сразу после постройки показать там людям Игг.
I firmly believe the value of Bitcoin and ETH are based 90% off the other scam currency rugpulls and crime-related activities being converted to it. They only exist because of the rest of the shit.
È impressionante davvero. A un certo punto dice tipo sapevano che sarebbe successo, aveva promesso deportazioni di massa e quasi 80 milioni di persone l'hanno votato lo stesso.
🔥 Day 1 was incredible! Thank you to everyone who backed the campaign. We’re just €10K from our maintenance goal: the foundation that keeps everything running. Once we achieve it, we’ll shift into stretch goals co-designed with communities and teams: moderation tools, encryption, mutual aid networks, cooperative hosting, native apps, and more… Help us get there: indiegogo.com/en/projects/bonf…
Was reminded of the French version of "algorithms were invented in the 9th century by Muhammad Algorithm".
The French word for "trash can" is "poubelle", named after Eugène Poubelle, who decreed in the late 1800s that Paris landlords must provide waste containers (with lids!) for their tenants, for the purpose of sorting household waste. This decision was apparently unpopular at first, so the residents of Paris named these mandatory trash cans after Poubelle, and that name stuck.
Some interesting findings: - "Each property-based test finds about 50x as many mutations as the average unit test" - "76% of mutations were found within the first 20 inputs"
I really liked it too! There were some interesting (if partly negative) discussions about it in the responses when I posted about it a while back: mastodon.social/@cfbolz/115405…
Another really cool talk from OOPSLA: "An Empirical Evaluation of Property-Based Testing in Python" youtube.com/live/zoE2w2hueYQ?s…
They collect a corpus of Python projects that use Hypothesis for Property-Based Testing. Then they check how good those tests (compared to the project's regular unit tests) are at finding random artificial bugs in the source code of the project.
#Friendica #Statistics 2025-11-09 07:00 CEST Number of active instances: 221 Number of users: 20 770 Number of statuses: 2 826 293 Number of new users last 1D: 3 Number of new statuses last 1D: 700 #Fediverse
was having dinner with a friend and he remarked that every time he says I should try a restaurant or a book or a movie or something, I tell him it's already on one of my lists. which is true, but... I think it means my stupid lists are kind of useless.
BIOS Detectives Find Ghost Of Previously Unknown PC
Old parts such as EPROMs will often find themselves for sale on sites such as eBay, where they are sometimes snapped up by retrocomputing enthusiasts in search of interesting code. Vintage Computer Federation forum member [GearTechWolf] picked up a clutch of IBM-labelled chips, and as int10h reports, stumbled upon a previously unknown PC-AT BIOS version which even hints at a rare PC model as yet unseen.
The IBM AT and its various versions are extremely well known in the retro PC world, so while this was quickly identified as an IBM BIOS from 1985 and narrowed down to a member of the AT family, it didn’t fit any of the known versions which shipped with the ubiquitous 1980s computer. Could it have been from an industrial or rack mount variant? It’s a possibilit
... mostra di più
BIOS Detectives Find Ghost Of Previously Unknown PC
Old parts such as EPROMs will often find themselves for sale on sites such as eBay, where they are sometimes snapped up by retrocomputing enthusiasts in search of interesting code. Vintage Computer Federation forum member [GearTechWolf] picked up a clutch of IBM-labelled chips, and as int10h reports, stumbled upon a previously unknown PC-AT BIOS version which even hints at a rare PC model as yet unseen.
The IBM AT and its various versions are extremely well known in the retro PC world, so while this was quickly identified as an IBM BIOS from 1985 and narrowed down to a member of the AT family, it didn’t fit any of the known versions which shipped with the ubiquitous 1980s computer. Could it have been from an industrial or rack mount variant? It’s a possibility, but the conclusion is that it might contain a patched BIOS version of some kind.
Lacking real hardware, it happily boots on an emulator. It’s another piece of the PC historical jigsaw for people interested in computer history, and with luck in time someone will unearth an example of whatever it came from. If you find it, try a modern OS on it!
Some time back [bornach] was gifted a Qi wireless charging base station but didn’t own any compatible devices. He had a dig around in his junk box for inductors to attempt coupling to the wireless charger and lucked out with an inductor salvaged from his old inkjet printer.
There ar
... mostra di più
2025 Component Abuse Challenge: Using Inductors to Steal Power from Qi Wireless Charging Base Station
Some time back [bornach] was gifted a Qi wireless charging base station but didn’t own any compatible devices. He had a dig around in his junk box for inductors to attempt coupling to the wireless charger and lucked out with an inductor salvaged from his old inkjet printer.
There are actually open standards, known as the Qi standards, for how to negotiate power from a Qi device. But [bornach] ignored all of that. Instead he leveraged the fact that the Qi base station will periodically send out a “ping” containing a small measure of power to let compatible devices know that it’s available for negotiation. It is the energy in this “ping” that power’s [bornach]’s circuit!
In [bornach]’s circuit a TL431 provides a regulated five volt supply which can be used to drive a microcontroller and a charliplexed array of ten LEDs. Pretty nifty stuff. If you’re new to wireless charging you might like to know How Wireless Charging Works And Why It’s Terrible.
Rust 1.91: il supporto completo per Windows su ARM è arrivato!
Rust ha ricevuto un importante aggiornamento : la versione 1.91 porta ufficialmente il supporto di Windows sui sistemi ARM a 64 bit allo stesso livello di Linux e macOS.
Le build per l’architettura aarch64-pc-windows-msvc sono ora nella classe di compatibilità più elevata, garantendo il superamento di tutti i test e la disponibilità dei binari. Per gli utenti di computer ARM con Windows, questo rende Rust uno strumento completo per lo sviluppo industriale, senza la necessità di compilazione manuale.
Inoltre, le build aarch64-pc-windows-gnullvm e x86_64-pc-windows-gnullvm hanno ottenuto lo stato di Tier 2, avvicinandosi al supporto completo. Il team prevede di aggiungere in futuro i componenti mancanti, inclusi i pacchetti di installazione e gli strumenti LLVM.
Oltre ad ampliare la compatibilità
... mostra di più
Rust 1.91: il supporto completo per Windows su ARM è arrivato!
Rust ha ricevuto un importante aggiornamento : la versione 1.91 porta ufficialmente il supporto di Windows sui sistemi ARM a 64 bit allo stesso livello di Linux e macOS.
Le build per l’architettura aarch64-pc-windows-msvc sono ora nella classe di compatibilità più elevata, garantendo il superamento di tutti i test e la disponibilità dei binari. Per gli utenti di computer ARM con Windows, questo rende Rust uno strumento completo per lo sviluppo industriale, senza la necessità di compilazione manuale.
Inoltre, le build aarch64-pc-windows-gnullvm e x86_64-pc-windows-gnullvm hanno ottenuto lo stato di Tier 2, avvicinandosi al supporto completo. Il team prevede di aggiungere in futuro i componenti mancanti, inclusi i pacchetti di installazione e gli strumenti LLVM.
Oltre ad ampliare la compatibilità con la piattaforma, l’aggiornamento ha rafforzato il sistema di analisi del codice. Rust 1.91 ora avvisa automaticamente della potenziale creazione di puntatori pendenti se una funzione restituisce riferimenti grezzi a variabili locali.
Questo meccanismo funziona in base agli avvisi, prevenendo potenziali errori che potrebbero portare all’accesso alla memoria liberata. Gli sviluppatori sottolineano che questo non rende il codice non sicuro, ma aiuta a identificare tempestivamente i costrutti pericolosi.
La versione include anche un ampio set di interfacce e funzioni stabilizzate. Tra queste, nuovi metodi per puntatori atomici, operazioni su interi, gestione di percorsi e file system e manipolazione di stringhe e indirizzi IP. Il supporto per alcune API in contesti costanti è stato ampliato, aumentando la flessibilità del linguaggio nella scrittura di codice di basso livello.
Il team di progetto sottolinea che l’aggiornamento non si limita ai miglioramenti tecnici. Continua il lavoro per unificare strumenti e infrastrutture tra i sistemi operativi, per garantire che il supporto di Windows su ARM rimanga alla pari con le piattaforme tradizionali. Gli utenti possono installare la nuova versione tramite Rustup o passare al canale beta per testare le modifiche future.
Rust 1.91 segna una pietra miliare significativa nello sviluppo del linguaggio, consolidando la sua posizione come uno degli strumenti più robusti e affidabili per la programmazione di sistemi, ora con supporto completo per tutte le architetture attuali.
Linux supera il 3% su Steam: un piccolo passo per i gamer, un salto per il pinguino
Windows 10 ha perso il 3,94% degli utenti, Windows 11 ne ha guadagnati solo il 3,18%, e una parte del pubblico ha scelto di abbandonare l’ecosistema Microsoft, orientandosi verso altre piattaforme. Linux ha guidato questa migrazione con una crescita dello 0,41%, raggiungendo una quota complessiva del 3,05%. Anche macOS ha beneficiato della situazione, aumentando dello 0,34% fino al 2,11%.
Nonostante questi numeri, Windows rimane il dominatore assoluto, rappresentando il 94,84% dei giocatori su Steam, con il 63,57% su Windows 11, il 31,14% su Windows 10 e un residuo 0,09% su Windows 7. Tuttavia, la tendenza suggerisce che le alternative stanno lentamente erodendo terreno, segno di una maggiore apertura degli utenti verso altri ecosistemi.
All’interno del mondo Linux, la distribuzione più diffusa tra i gamer è SteamOS, che rappresenta il 27,18% degli uten
... mostra di più
Linux supera il 3% su Steam: un piccolo passo per i gamer, un salto per il pinguino
Windows 10 ha perso il 3,94% degli utenti, Windows 11 ne ha guadagnati solo il 3,18%, e una parte del pubblico ha scelto di abbandonare l’ecosistema Microsoft, orientandosi verso altre piattaforme. Linux ha guidato questa migrazione con una crescita dello 0,41%, raggiungendo una quota complessiva del 3,05%. Anche macOS ha beneficiato della situazione, aumentando dello 0,34% fino al 2,11%.
Nonostante questi numeri, Windows rimane il dominatore assoluto, rappresentando il 94,84% dei giocatori su Steam, con il 63,57% su Windows 11, il 31,14% su Windows 10 e un residuo 0,09% su Windows 7. Tuttavia, la tendenza suggerisce che le alternative stanno lentamente erodendo terreno, segno di una maggiore apertura degli utenti verso altri ecosistemi.
All’interno del mondo Linux, la distribuzione più diffusa tra i gamer è SteamOS, che rappresenta il 27,18% degli utenti Linux su Steam. Seguono Arch Linux con il 10,32%, Linux Mint 22.2 con un significativo aumento del 6,65% e Bazzite, una distribuzione ottimizzata per il gaming che sta rapidamente guadagnando consensi. Un altro elemento chiave di questa crescita è la compatibilità: quasi il 90% dei giochi progettati per Windows funziona oggi anche su Linux, grazie a tecnologie come Proton e all’impegno costante di Valve. Questo ha eliminato una delle barriere storiche che frenavano la diffusione del sistema operativo nel mondo del gaming.
Valve, forte del successo di Steam Deck, continua a puntare su Linux come base per i suoi progetti futuri. L’azienda starebbe già lavorando a una console domestica basata sullo stesso sistema operativo, con l’obiettivo di portare l’esperienza di gioco Linux anche nel salotto di casa.
Dopo anni di lenta crescita, Linux sta finalmente raccogliendo i frutti del suo percorso. Non è più solo l’alternativa per smanettoni, ma una piattaforma sempre più solida e accessibile anche per i videogiocatori.
Boom di malware Android nel 2025: +67% di attacchi rispetto all’anno scorso
Gli analisti della società di sicurezza informatica Zscaler hanno calcolato che tra giugno 2024 e maggio 2025 sono state scoperte 239 app dannose su Google Play, che in totale sono state scaricate più di 42 milioni di volte.
Secondo il rapporto dei ricercatori, il numero di attacchi ai dispositivi mobili è aumentato del 67% nel corso dell’anno. Le minacce principali sono state trojan bancari, spyware e adware.
Il motore principale di questa crescita significativa sono gli attacchi ai pagamenti tramite dispositivi mobili. Gli hacker criminali stanno abbandonando i tradizionali metodi di contraffazione del
... mostra di più
Boom di malware Android nel 2025: +67% di attacchi rispetto all’anno scorso
Gli analisti della società di sicurezza informatica Zscaler hanno calcolato che tra giugno 2024 e maggio 2025 sono state scoperte 239 app dannose su Google Play, che in totale sono state scaricate più di 42 milioni di volte.
Secondo il rapporto dei ricercatori, il numero di attacchi ai dispositivi mobili è aumentato del 67% nel corso dell’anno. Le minacce principali sono state trojan bancari, spyware e adware.
Il motore principale di questa crescita significativa sono gli attacchi ai pagamenti tramite dispositivi mobili. Gli hacker criminali stanno abbandonando i tradizionali metodi di contraffazione delle carte di credito e puntando sull’ingegneria sociale: phishing, smishing, scambio di SIM e altre forme di frode nei pagamenti.
Mentre lo scorso anno Zscaler aveva contato circa 200 programmi dannosi nell’app store ufficiale di Android, quest’anno ne ha rilevati 239. La minaccia più comune è stata l’adware, che ha rappresentato il 69% di tutti i casi. L’infostealer Joker si è classificato al secondo posto (23%).
Un’altra tendenza è il crescente utilizzo di spyware, in crescita del 220% su base annua. I più comuni tra questi rimangono SpyNote, SpyLoan e BadBazaar, utilizzati a fini di sorveglianza, ricatto e furto di identità.
I malware Android colpiscono più spesso gli utenti in India, Stati Uniti e Canada, rappresentando il 55% degli attacchi. In Italia e Israele, i tassi di infezione sono aumentati dell’800-4000% su base annua.
Nel loro rapporto annuale, i ricercatori individuano tre famiglie di malware particolarmente pericolose e diffuse.
Anatsa è un trojan bancario che appare periodicamente su Google Play sotto forma di utile utilità e ruba dati dalle app di oltre 830 banche e piattaforme di criptovalute.
Android Void (Vo1d) è una backdoor per TV box che eseguono versioni precedenti di Android Open Source Project (AOSP) e che ha infettato almeno 1,6 milioni di dispositivi.
Xnotice è un Trojan RAT che prende di mira chi cerca lavoro nel settore petrolifero e del gas, in particolare in Iran e nelle regioni di lingua araba, rubando credenziali bancarie, codici di autenticazione a due fattori e messaggi SMS.
Gli esperti ricordano agli utenti di installare tempestivamente gli aggiornamenti, di evitare le app che richiedono l’accesso ai servizi di accessibilità, di eseguire la scansione dei dispositivi con Play Protect e di non scaricare app non necessarie.
Inoltre, i ricercatori stanno registrando un aumento degli attacchi ai dispositivi IoT (principalmente router), che vengono infettati tramite varie vulnerabilità e poi diventano parte di botnet e server proxy per la distribuzione di malware.
La password più usata nel 2025? E’ ancora “123456”! L’umanità non impara mai
Nel 2025, gli utenti fanno ancora molto affidamento sulle password di base per proteggere i propri account. Uno studio di Comparitech, basato sull’analisi di oltre 2 miliardi di password reali trapelate su forum dedicati alle violazioni dei dati nel corso di un anno, ha rilevato che le password più comuni sono rimaste invariate per molti anni: “123456“, “admin” e “password” rimangono le scelte principali.
Gli analisti dell’azienda hanno stilato una classifica delle 100 password più comuni. La top ten è dominata da sequenze numeriche familiari: “123456“, “12345678“, “123456789” e poi “admin”, “1234”, “Aa123456”, “12345”, “password”, “123” e
... mostra di più
La password più usata nel 2025? E’ ancora “123456”! L’umanità non impara mai
Nel 2025, gli utenti fanno ancora molto affidamento sulle password di base per proteggere i propri account. Uno studio di Comparitech, basato sull’analisi di oltre 2 miliardi di password reali trapelate su forum dedicati alle violazioni dei dati nel corso di un anno, ha rilevato che le password più comuni sono rimaste invariate per molti anni: “123456“, “admin” e “password” rimangono le scelte principali.
Gli analisti dell’azienda hanno stilato una classifica delle 100 password più comuni. La top ten è dominata da sequenze numeriche familiari: “123456“, “12345678“, “123456789” e poi “admin”, “1234”, “Aa123456”, “12345”, “password”, “123” e “1234567890”.
La variante più popolare, “123456“, è apparsa nel database oltre 7,6 milioni di volte, mentre “minecraft”, al 100° posto, è apparsa circa 70.000 volte, senza contare le 20.000 “Password” con iniziale maiuscola.
Circa un quarto delle 1.000 password più comuni è composto esclusivamente da numeri. Quasi il 39% include la sequenza “123” e un altro 2% utilizza la combinazione inversa “321”. La stringa “abc” compare nel 3,1% dei casi. Tra le password minimaliste, spiccano “111111” (18° posto) e persino “********” (35°).
Quasi il 4% di tutte le combinazioni popolari contiene le parole “pass” o “password“, il 2,7% contiene “admin”, l’1,6% contiene “qwerty” e l’1% contiene “welcome“.
Il rapporto ha rilevato che, tra gli esempi a sfondo nazionale, la password “India@123” si è distinta, classificandosi al 53° posto per frequenza. Secondo i ricercatori, tali combinazioni, sebbene meno stereotipate, sono comunque facili da indovinare.
Esaminando la lunghezza delle password, gli esperti hanno notato una tendenza preoccupante: il 65,8% delle combinazioni contiene meno di 12 caratteri, il 6,9% è più corto di otto e solo il 3,2% supera i 16 caratteri. Nel frattempo, la nona password più popolare, “123“, è composta da sole tre cifre, e la quinta più popolare, “1234“, ne contiene quattro. Grafico: le password più comuni in base alla lunghezza (Comparitech)
Gli autori dello studio sottolineano che i moderni strumenti di hacking possono decifrare password deboli in pochi secondi. Le password corte sono facilmente violabili tramite attacchi brute force e riutilizzare la stessa password su diversi siti web rende gli account vulnerabili ad attacchi brute force con credenziali rubate.
Una password sicura è considerata lunga almeno dodici caratteri, con una combinazione di lettere minuscole e maiuscole, numeri e caratteri speciali. Dovrebbe inoltre essere il più casuale possibile e non contenere schemi riconoscibili. L’autenticazione a due fattori offre una protezione aggiuntiva, impedendo l’hacking anche se la password è compromessa.
La metodologia di ricerca si basa sulla raccolta di set di dati trapelati da forum e canali Telegram. Per garantire l’aggiornamento del materiale, i ricercatori hanno confrontato i dati con i report di fuga di notizie disponibili al pubblico o hanno verificato la data dell’attacco informatico con gli autori delle pubblicazioni.
Sono stati inclusi nell’analisi solo i post confermati risalenti al 2025, con tutte le informazioni personali rese anonime. La classifica si è basata sul numero di occorrenze di ciascuna combinazione univoca nel database ripulito.
‘No restrictions’ and a secret ‘wink’: Inside Israel’s deal with Google, Amazon
In 2021, Google and Amazon signed a $1.2 billion contract to provide Israel’s government advanced cloud computing and AI services — tools that have facilitated Israel’s two-year onslaught on the Gaza Strip.
Details of the lucrative contract, known as Project Nimbus, were kept secret. A new investigation, in partnership with Local Call and The Guardian, can reveal that both Google and Amazon submitted to highly unorthodox “controls” that Israel inserted into the deal to allay concerns over the secrecy of its data.
Project Nimbus was designed to enable Israel to transfer vast quantities of data onto the cloud servers of the tech giants. But even two years before October 7, Israeli officials drafting the contract had already anticipated the potential for legal challenges against Google and Amazon regarding the use of their technology in the occupied West Bank and Gaza.
... mostra di più
‘No restrictions’ and a secret ‘wink’: Inside Israel’s deal with Google, Amazon
In 2021, Google and Amazon signed a $1.2 billion contract to provide Israel’s government advanced cloud computing and AI services — tools that have facilitated Israel’s two-year onslaught on the Gaza Strip.
Details of the lucrative contract, known as Project Nimbus, were kept secret. A new investigation, in partnership with Local Call and The Guardian, can reveal that both Google and Amazon submitted to highly unorthodox “controls” that Israel inserted into the deal to allay concerns over the secrecy of its data.
Project Nimbus was designed to enable Israel to transfer vast quantities of data onto the cloud servers of the tech giants. But even two years before October 7, Israeli officials drafting the contract had already anticipated the potential for legal challenges against Google and Amazon regarding the use of their technology in the occupied West Bank and Gaza.
According to leaked Israeli Finance Ministry documents obtained by The Guardian — including a finalized version of the contract — and sources familiar with the negotiations, the deal prohibits Google and Amazon from restricting Israel’s use of their products, even if it breaches their terms of service. The contract also obliges the two tech giants to secretly notify Israel if foreign courts order them to hand over data stored on their cloud platforms, in the event of claims that Israel has used the technology to violate the human rights of Palestinians — effectively sidestepping their legal obligations.
This arrangement stands in contrast to the case of Microsoft, which recently revoked the Israeli military’s access to parts of its Azure platform after +972, Local Call, and The Guardian revealed that it had stored a trove of intercepted Palestinian phone calls, in violation of its terms of service. Under Project Nimbus, however, Google and Amazon are forbidden from taking such action.
This investigation builds on a series of joint exposés revealing how major U.S.-based tech companies have become deeply entangled in Israel’s wars and mass surveillance apparatus.
L’Agenzia per la Cybersicurezza Nazionale ha aggiornato il Report sul rischio nel settore sanitario a cavallo del periodo che va da gennaio 2023 a settembre 2025, con nuovi dati, analisi e raccomandazioni.
Il motivo è che il settore sanitario, a livello globale, continua a essere tra quelli maggiormente impattati in caso di attacchi cyber. In media, infatti, da gennaio 2023 si sono verificati 4,3 attacchi informatici al mese ai danni di strutture sanitarie. Di questi, circa la metà ha dato luogo a incidenti con un impatto effettivo sui servizi erogati (in termini di disponibilità e riservatezza), causandone talvolta il blocco con gravi ripercussioni a danno dell’utenza e mettendo a rischio la privacy dei pazienti.
Nel periodo da gennaio
... mostra di più
La minaccia al settore sanitario italiano
L’Agenzia per la Cybersicurezza Nazionale ha aggiornato il Report sul rischio nel settore sanitario a cavallo del periodo che va da gennaio 2023 a settembre 2025, con nuovi dati, analisi e raccomandazioni.
Il motivo è che il settore sanitario, a livello globale, continua a essere tra quelli maggiormente impattati in caso di attacchi cyber. In media, infatti, da gennaio 2023 si sono verificati 4,3 attacchi informatici al mese ai danni di strutture sanitarie. Di questi, circa la metà ha dato luogo a incidenti con un impatto effettivo sui servizi erogati (in termini di disponibilità e riservatezza), causandone talvolta il blocco con gravi ripercussioni a danno dell’utenza e mettendo a rischio la privacy dei pazienti.
Nel periodo da gennaio 2025 a settembre 2025 il numero complessivo degli eventi cyber è aumentato di circa il 40% rispetto allo stesso intervallo del 2024. Il CSIRT Italia ha infatti censito 60 eventi a fronte dei 42 rilevati nell’anno recedente. Il numero di incidenti è però diminuito: 23 rispetto ai 47 del 2024, anno in cui un unico attacco di tipo supply chain causò 31 incidenti in altrettanti soggetti.
Tra le principali tipologie di minacce rilevate nei primi nove mesi del 2025 ci sono: scansione attiva su credenziali, phishing, compromissione delle caselle e-mail e esposizione dati. Ciò a conferma della centralità del vettore e-mail e dell’utilizzo di tecniche basate sull’ingegneria sociale per la diffusione di campagne malevole. Gli attacchi di tipo ransomware, nel 2025, sono diminuiti, ma continuano a rappresentare la tipologia di minaccia con l’impatto più elevato.
Il Report evidenzia che molti attacchi informatici hanno successo perché spesso vengono trascurate, o mal implementate, le più basilari misure di cybersicurezza con una carente formazione specifica del personale impiegato in ospedali, centri medici, cliniche e altre strutture sanitarie. Per contrastare queste vulnerabilità, l’ACN suggerisce raccomandazioni mirate, tra cui la necessità di implementare pratiche di sicurezza robuste e una governance centralizzata della cybersecurity. Un approccio programmatico, basato sulla gestione del rischio e sulla separazione dei ruoli, è essenziale per rafforzare la sicurezza dei sistemi sanitari e prevenire gli incidenti informatici.
OldVersion.com Archive Facing Shutdown Due to Financing Issues
Finding older versions of particular software can be a real chore, all too often only made possible by the sheer grace and benevolence of their creators. At the same time older versions of software can be the only way to dodge undesirable ‘upgrades’, track down regressions, do historical research, set up a retro computer system, and so on. This is where an archive like OldVersion.com (HTTP only so your browser may shout at you) is incredibly useful, offering thousands of installers for software covering a number of platforms.
Unfortunately, as noted on the website, they recently lost their main source of incoming in the form of Google advertising. This means that after launching in 2001
... mostra di più
OldVersion.com Archive Facing Shutdown Due to Financing Issues
Finding older versions of particular software can be a real chore, all too often only made possible by the sheer grace and benevolence of their creators. At the same time older versions of software can be the only way to dodge undesirable ‘upgrades’, track down regressions, do historical research, set up a retro computer system, and so on. This is where an archive like OldVersion.com (HTTP only so your browser may shout at you) is incredibly useful, offering thousands of installers for software covering a number of platforms.
Unfortunately, as noted on the website, they recently lost their main source of incoming in the form of Google advertising. This means that after launching in 2001, this archive may have to be shut down before long. Confusingly, trying to visit the blog throws a HTTP 503 error, and visiting the forum currently forces a redirect to a random news site unless you can mash that Esc button really fast, perhaps as alternative advertising partners are being trialed, or due to a hack.
Although these days we have sites like Archive.org to do more large scale archiving, OldVersion.com is special for being focused and well-organized, along with a long and rich history that would be a shame to lose. We have referenced the site in the past for old versions as far back as 2008. Hopefully we’ll soon find out more about what is going on with the archive and what its future will be.
Spiritbox live at Rock am Ring Festival - June 8th 2025 - Nürburgring, GermanySETLIST:Fata MorganaBlack RainbowPerfect SoulJadedThe VoidSecret GardenCircle ...
The lightsaber was one of the coolest and most iconic visual effects from the original Star Wars, and people have been trying to get that particular piece of movie magic off the silver screen for about 40 years now. [HeroTech] seems to have cracked the code with their “Impossible Lightsaber”— it’s fully retractable, fully lit, and able to hit things (lightly), all while fitting into a replica prop handle.
The secret is… well, there’s more than one secret, here. The blade itself is made out of a “magician’s cane”, which is a coil of plastic that can spring outwards on demand for magic tricks. Hidden inside of it is a strip of LED lights. Of course one strip of LEDs would not be omnidirectional, and the magician’s cane is pretty floppy,
... mostra di più
Screen-Accurate Lightsaber As a Practical Effect
The lightsaber was one of the coolest and most iconic visual effects from the original Star Wars, and people have been trying to get that particular piece of movie magic off the silver screen for about 40 years now. [HeroTech] seems to have cracked the code with their “Impossible Lightsaber”— it’s fully retractable, fully lit, and able to hit things (lightly), all while fitting into a replica prop handle.
The secret is… well, there’s more than one secret, here. The blade itself is made out of a “magician’s cane”, which is a coil of plastic that can spring outwards on demand for magic tricks. Hidden inside of it is a strip of LED lights. Of course one strip of LEDs would not be omnidirectional, and the magician’s cane is pretty floppy, but both of those problems are solved by the same idea: “I’ll try spinning. That’s a good trick.”
The spin-stabilized blade holds up to being waved around much better, and apparently the gyroscopic forces it induces are actually lore-accurate. (Who knew?) Of course fitting a motor to spin the “blade”, and another to winch it back in, along with the circuitry and batteries to drive them was no mean feat. It’s impressive they fit it all inside the replica handle; even more impressive that they fit a speaker so this prop even makes the iconic sound effects. We always wanted to see a stage production of William Shakespeare’s Star Wars, and this gives us verily, a new hope.
[HeroTech] isn’t done yet– while seemingly impossible, this lightsaber isn’t perfect, as it’s not rugged enough for full dueling. It’s also not easy to put together, and apparently can’t handle the delicate attentions of airline baggage handlers. So ruggedization and a bit of design-for-assembly are on the table for the next version. Sadly the project is not open source; they are releasing the build files to subscribers only. Given how much work must have gone into iterating to get to this point, that is disappointing, but understandable. Everybody needs to make a living, after all.
Medium Format, 3 GigaPixel Camera Puts It All On the Line (Sensor)
It’s a bit of a truism that bigger sensors lead to better pictures when it comes to photography. Of course everyone who isn’t a photographer knows that moar megapixles is moar better. So, when [Gigawipf], aka [Yannick Richter] wanted to make a camera, he knew he had to go big or go home. So big he went: a medium format camera with a whopping 3.2 gigapixel resolution.
Now, getting a hold of a sensor like that is not easy, and [Yannick] didn’t even try. The hack starts by tearing down a couple of recent-model Kodak scanners from eBay to get at those sweet CCD line sensors. Yes, this is that classic hack: the scanner camera. Then it’s
... mostra di più
Medium Format, 3 GigaPixel Camera Puts It All On the Line (Sensor)
It’s a bit of a truism that bigger sensors lead to better pictures when it comes to photography. Of course everyone who isn’t a photographer knows that moar megapixles is moar better. So, when [Gigawipf], aka [Yannick Richter] wanted to make a camera, he knew he had to go big or go home. So big he went: a medium format camera with a whopping 3.2 gigapixel resolution.
Now, getting a hold of a sensor like that is not easy, and [Yannick] didn’t even try. The hack starts by tearing down a couple of recent-model Kodak scanners from eBay to get at those sweet CCD line sensors. Yes, this is that classic hack: the scanner camera. Then it’s off to the oscilloscope and the datasheet for some serious reverse-engineering to figure out how to talk to these things. Protocol analysis starts about 4 minutes in of the embedded video, and is worth watching even if you have no interest in photography.
As for what the line sensor will be talking to, why, it’s nothing other than a Rasberry Pi 5, interfacing through a custom PCB that also holds the stepper driver. Remember this is a line sensor camera: the sensor needs to be scanned across the image plane inside the camera, line by line, just as it is in the scanner. He’s using off-the-shelf linear rails to do that job. Technically we suppose you could use a mirror to optically scan the image across a fixed sensor, but scanner cameras have traditionally done it this way and [Yannick] is keeping with tradition. Why not? It works.
Since these images are going to be huge an SD card in the Pi doesn’t cut it, so this is perhaps the only camera out there with an NVMe SSD. The raw data would be 19 GB per image, and though he’s post-processing on the fly to PNG they’re still big pictures. There probably aren’t too many cameras sporting 8″ touchscreens out there, either, but since the back of the thing is so large, why not? There’s still a CSI camera inside, too, but in this case it’s being used as a digital viewfinder. (Most of us would have made that the camera.) The scanner cam is, of course, far too slow to generate its own previews. The preview camera actually goes onto the same 3D-printed mount as the line sensor, putting it onto the same focal plane as the sensor. Yes, the real-time previews are used to focus the camera.
In many ways, this is the nicest scanner camera we’ve ever featured, but that’s perhaps to be expected: there have been a lot of innovations to facilitate this build since scanner cams were common. Even the 3D printed and aluminum case is professional looking. Of course a big sensor needs a big lens, and after deciding projector lenses weren’t going to cut it, [Yannick] sprung for Pantax 6×7 system lenses, which are made for medium format cameras like this one. Well, not exactly like this one– these lenses were first made for film cameras in the 60s. Still, they offer a huge image, high-quality optics, and manual focus and aperture controls in a format that was easy to 3D-print a mount for.
Is it the most practical camera? Maybe not. Is it an impressive hack? Yes. We’ve always had a soft-spot for scanner cameras, and a in a recent double-ccd camera hack, we were lamenting in the comments that nobody was doing it anymore. So we’re very grateful to [Manawyrm] for sending in the tip.
2025 Component Abuse Challenge: Pushing a 555 to the Limit
The humble 555 timer has its origins back in the early 1970s as the NE555, a bipolar integrated circuit. Over the years it has spawned a range of derivatives, including dual versions, and ones using CMOS technology. Have these enhancements improved the performance of the chip significantly? [MagicWolfi] has been pushing the envelope in an effort to see just how fast an astable 555 can be.
The Microchip MIC1555 may be the newest of the bunch, a 5-pin CMOS SOT-23 which has lost the frequency control and discharge pins of the original. It’s scarcely less versatile though, and it’s a fine candidate for an oscillator to push. We see it at a range of values for the capaci
... mostra di più
2025 Component Abuse Challenge: Pushing a 555 to the Limit
The humble 555 timer has its origins back in the early 1970s as the NE555, a bipolar integrated circuit. Over the years it has spawned a range of derivatives, including dual versions, and ones using CMOS technology. Have these enhancements improved the performance of the chip significantly? [MagicWolfi] has been pushing the envelope in an effort to see just how fast an astable 555 can be.
The Microchip MIC1555 may be the newest of the bunch, a 5-pin CMOS SOT-23 which has lost the frequency control and discharge pins of the original. It’s scarcely less versatile though, and it’s a fine candidate for an oscillator to push. We see it at a range of values for the capacitor and resistor in an astable configuration, each of which is tested across the supply voltage range. It’s rated as having a maximum frequency of 5 MHz, but with a zero Ohm resistor and only the parasitic capacitance of an open circuit, it reaches the giddy heights of 9.75 MHz. If we’re honest we find this surprising, but on reflection the chip would never be a first choice for super-fast operation.
We like it that someone’s managed to tie in the 555 to the contest, and given that it still has a few days to run at the time of writing, we’re hoping some of you might be inspired to enter one of your own.
Hackaday Podcast Episode 344: Board with Lasers, Op-Amp Torture, and Farewell Supercon 9
Hackaday Editors Tom Nardi and Al Williams spent the weekend at Supercon and had to catch up on all the great hacks. Listen in as they talk about their favorites. Plus, stick around to the end to hear about some of the highlights from their time in Pasadena.
If you’re still thinking about entering the Component Abuse Contest, you’re just about out of time. Need some inspiration? Tom and Al talk about a few choice entries, and discuss how pushing parts out of their comfort zone can come in handy. Do you make your own PCBs? With vias? If you have a good enough laser, you could. Or maybe you’d rather have a $10 Linux server? Just manage your expectations. The guys both admit they aren’t mechanical geniuses and, unlike [4St4r], aren’t very good at guessing sounds either. They round up with some 3D printing projects and a collec
... mostra di più
Hackaday Podcast Episode 344: Board with Lasers, Op-Amp Torture, and Farewell Supercon 9
Hackaday Editors Tom Nardi and Al Williams spent the weekend at Supercon and had to catch up on all the great hacks. Listen in as they talk about their favorites. Plus, stick around to the end to hear about some of the highlights from their time in Pasadena.
If you’re still thinking about entering the Component Abuse Contest, you’re just about out of time. Need some inspiration? Tom and Al talk about a few choice entries, and discuss how pushing parts out of their comfort zone can come in handy. Do you make your own PCBs? With vias? If you have a good enough laser, you could. Or maybe you’d rather have a $10 Linux server? Just manage your expectations. The guys both admit they aren’t mechanical geniuses and, unlike [4St4r], aren’t very good at guessing sounds either. They round up with some 3D printing projects and a collection of quick hacks.
Check out the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!
Russian strikes on energy facilities left Kyiv and Kharkiv without power. Planned outages in Kyiv will last up to nine hours, according to DTEK, while mass blackouts were also reported in Kharkiv after the overnight attacks.
В результате российских ударов Киев и Харьков остались без света
В результате российского удара по объектам энергетики в ночь на 8 ноября, в Киеве и области действуют плановые отключения света, пишут украинские СМИ.
Russian forces targeted energy substations that power the Khmelnytskyi and Rivne nuclear power plants overnight on Nov. 7-8, amid its large-scale attack on Ukraine's energy infrastructure, Foreign Minister Andrii Sybiha said.
The EU plans to establish a Centre for Democratic Resilience to combat disinformation from Russia and other authoritarian regimes, uniting experts across member and candidate countries as part of Ursula von der Leyen’s proposed “democracy shield.”
Norway is discussing a proposal to unlock a European war loan of more than €100 billion for Ukraine by securing the debt against its €1.7 trillion national sovereign wealth fund.
Hungarian Prime Minister Viktor Orban said that US President Donald Trump agreed to support his country’s economy if it came under a speculative attack, although he didn’t offer any specifics about a deal.
Germany’s parliament is set to approve defense equipment purchases worth more than €3 billion ($3.47 billion) as part of a massive military ramp-up, including 20 light combat helicopters from Airbus SE, according to a government document.
Hungary said on Saturday it had obtained an indefinite waiver from U.S. sanctions to use Russian oil and gas, but a White House official reaffirmed that the exemption was for one year only.
Russian forces targeted energy substations that power the Khmelnytskyi and Rivne nuclear power plants overnight on Nov. 7-8, amid its large-scale attack on Ukraine's energy infrastructure, Foreign Minister Andrii Sybiha said.
Russia deliberately targeted power substations linked to the Khmelnytskyi and Rivne nuclear plants last night. These are not random strikes, they are calculated attacks on Europe’s nuclear safety. Ukraine demands an emergency IAEA Board meeting to address this escalating threat.
8 November 1934 | A Dutch Jewish boy, Benjamin Raphaël Pais, was born in Harlingen.
In November 1942, he was deported to #Auschwitz with his sister Jansje. After the selection, they were murdered in a gas chamber together with their mother Roosje. ---
A short video about the first two gas chambers created near Auschwitz II-Birkenau: youtu.be/Rr6lF75fDmU
In the spring of 1942, Nazi Germany began deportations of mass transports of Jews to Auschwitz doomed to immediate extermination. By a decision of the camp a...
🇷🇸🇺🇸 Serbian President Vučić announced that next week he plans to jointly petition the United States, along with the Russian side, to suspend sanctions against the Serbian-Russian company NIS.
🇺🇦🇮🇹 Ukrainian paratroopers have strengthened the protection of the Centauro B1 "wheeled tanks" transferred as part of military aid from Italy, so that they correspond to the realities of the Ukrainian battlefield.
“These are people who did everything by the book, paid taxes, had no criminal records, opened businesses and contributed to their communities...now they have become collateral damage in this cruel, unjust and inhumane political game.”
If you had an array of high power addressable LEDs, how would you project them onto a wall? Perhaps you’d use a Fresnel lens, or maybe an individual lens on the top of each. [Joo] faced this problem when making a lighting effect using just such an array, and the solution they came up with used both.
The problem facing a would-be LED array projector is that should the lens be too good, it will project the individual points of light from the LEDs themselves, when a more diffuse point is required. Thus the Fresnel required the aid of a separate array of lenses, resin printed in one in clear plastic. From this we get some useful tips on how to do this for best lens quality, and while the result is not quite optically perfect, it’s certainly good enough for the job in hand.
... mostra di più
An LED Projector as a Lighting Effect
If you had an array of high power addressable LEDs, how would you project them onto a wall? Perhaps you’d use a Fresnel lens, or maybe an individual lens on the top of each. [Joo] faced this problem when making a lighting effect using just such an array, and the solution they came up with used both.
The problem facing a would-be LED array projector is that should the lens be too good, it will project the individual points of light from the LEDs themselves, when a more diffuse point is required. Thus the Fresnel required the aid of a separate array of lenses, resin printed in one in clear plastic. From this we get some useful tips on how to do this for best lens quality, and while the result is not quite optically perfect, it’s certainly good enough for the job in hand.
The linked Printables page comes with all you need to make the parts, and you too can have your own projected LED effect. Now we want one, too! Perhaps we really need our own Wrencher signal instead.
⚡️Russian Ka-226 helicopter crashes in Dagestan, killing weapons plant employees. The Kizlyar Electromechanical Plant produces equipment for Russian Sukhoi and MiG aircraft and has been sanctioned for its role in the war against Ukraine. kyivindependent.com/russian-ka…
⚡️Ukrainian attacks in Russia’s Belgorod Oblast leave over 20,000 without power, governor claims. A local power plant was reportedly damaged, causing widespread blackouts in the city of Belgorod and the surrounding region. kyivindependent.com/ukrainian-…
🇷🇸🇺🇸 The Serbian Parliament approved a new law Friday to tear down an architectural landmark that NATO bombed in 1999, stripping it of cultural protections and clearing the way for President Trump’s family to replace it with a luxury hotel, - NYT
Italian supplied Centauro B1, now outfitted with enhanced armour and grid protection, has been confirmed in service with Ukraine’s 78th Separate Airborne Assault Regiment.
🇦🇹🇺🇦 Peace for Ukraine must be fair and with security guarantees, - Austrian Foreign Ministry
"The time has come to stop the killings. And that is why Russia must truly sit down at the negotiating table. Peace, of course, must be comprehensive, fair and sustainable, backed by strong security guarantees," said Austrian Minister.
This Week in Security: Bogus Ransom, WordPress Plugins, and KASLR
There’s another ransomware story this week, but this one comes with a special twist. If you’ve followed this column for long, you’re aware that ransomware has evolved beyond just encrypting files. Perhaps we owe a tiny bit of gratitude to ransomware gangs for convincing everyone that backups are important. The downside to companies getting their backups in order is that these criminals are turning to other means to extort payment from victims. Namely, exfiltrating files and releasing them to the public if the victim doesn’t pay up. And this is the situation in which the Akira ransomware actors claim to have Apache’s OpenOffice project.
There’s just one catch. Akira is threat
... mostra di più
This Week in Security: Bogus Ransom, WordPress Plugins, and KASLR
There’s another ransomware story this week, but this one comes with a special twist. If you’ve followed this column for long, you’re aware that ransomware has evolved beyond just encrypting files. Perhaps we owe a tiny bit of gratitude to ransomware gangs for convincing everyone that backups are important. The downside to companies getting their backups in order is that these criminals are turning to other means to extort payment from victims. Namely, exfiltrating files and releasing them to the public if the victim doesn’t pay up. And this is the situation in which the Akira ransomware actors claim to have Apache’s OpenOffice project.
There’s just one catch. Akira is threatening to release 23 GB of stolen documents, which include employee information — and the Apache Software Foundation says those documents don’t exist. OpenOffice hasn’t received a demand and can’t find any evidence of a breach. It seems likely that Akira has hit some company, but not part of the Apache Software Foundation. Possibly someone that heavily uses OpenOffice, or even provides some level of support for that application. There is one more wrinkle here.
Since Apache OpenOffice is an open source software project, none of our contributors are paid employees for the project or the foundation…
First off, there are plenty of open source projects that have employee contributors, and it’s quite odd to imply otherwise. But second, for something as important as an office suite, this is a rather startling statement: there are no paid employees working on the OpenOffice code base.
NPM Typosquat Sophistication
There’s another NPM typosquatting campaign, which is barely news at this point. This one is newsworthy because these malicious packages use multiple layers of obfuscation, and lived on NPM for over four months. They use a clever bit of social engineering during package installation, in the form of a fake CAPTCHA prompt. The idea is that it makes the user less suspicious of the package, and also gives a legitimate reason for network access. But in reality, requiring user interaction defeats any automated analysis efforts.
The first layer of obfuscation consists of an eval() call with a bunch of decoder functions and an ugly encoded string. The result from that set of functions is URL-encoded and needed decoding, followed by an XOR with a key value. And finally, the executable function that finally emerges uses switch/case statements and hard-to-read values. It’s just a web to work through.
The payload behavior is boring in comparison, looking for any credentials on the system and uploading them to a remote server. It also checks for interesting browser cookies and passwords in the password manager, and any authentication tokens it can find.
WordPress Plugin Problems
[István Márton] at Wordfence has the story on a pair of WordPress plugins with severe vulnerabilities, effecting a whopping 500,000 sites combined. Up first is AI Engine, with 100,000 installs. This plugin has an unauthenticated URL endpoint that can expose a bearer token, which then allows access to the MCP endpoint, and arbitrary control of users. The good news here is that the plugin is not vulnerable by default, and requires the “No-Auth URL” setting to be configured to be vulnerable.
The other plugin is Post SMTP, with 400,000 installs. It replaces WordPress’s PHP email handling, and one of the features is the ability to view those emails from the logs. The problem was that before 3.6.1, viewing those email logs didn’t require any permissions. At first blush, that may seem like a medium severity problem, but WordPress is often configured to allow for password resets via emailed links, which means instant account takeover. Both issues have been fixed, and releases are available.
React Native CLI and Metro
A combination of the React Native CLI package and the Metro development server exposed React Native developers to a nasty 9.8 CVSS Remote Code Execution (RCE) CVE. The first element of this vulnerability is the fact that when Metro opens ports for hosting development work, it doesn’t bind to localhost, but listens on all interfaces by default.
When a new Reactive Native project is created without using a framework, some boilerplate code is run as part of the initialization. The end result is that /open-url handler is added to the project, and this handler calls open() with an outside string from the URL. It’s not hard to imagine how this can be abused for arbitrary code injection.
KASLR
Let’s talk about address randomization. Specifically, Kernel Address Space Layout Randomization (KASLR). It’s one of the defenses against turning an arbitrary memory write into a working exploit. If an attacker can’t predict where kernel objects will be in memory, twiddling bits is more likely to crash the system than result in code execution. It’s great in theory. The problem is that it doesn’t necessarily exist in reality.
That’s the story from [Seth Jenkins] at Google’s Project Zero, who was looking for ways to crack Pixel phones. It turns out that memory hotplugging is supported by Linux on Android, and that potential hotplug memory needs a lot of room in the linear memory map. So much room that it’s impractical to also randomize that layout. So while we still technically have KASLR protecting the kernel from attacks, there’s a really big gotcha in the form of the linear memory map.
Bits and Bytes
If you want a really deep dive into how BLE works, and how to investigate an existing BLE connection with an SDR, [Clément Ballabriga] from Lexfo has the scoop. It is significantly more complicated than you might expect, particularly since BLE uses frequency hopping, and a wide enough range of frequencies that your SDR almost certainly can’t capture them all at once. That means breaking a tiny part of the signal security, in order to accurately predict the frequency hops.
Cisco’s Unified Contact Center Express (UCCX) has several vulnerabilities that allows an attacker to run code as root. One vulnerability is in handling arbitrary file uploads by the Java Remote Method Invocation system. Another is an authentication bypass that can be exploited by coercing the target system to use a malicious remote server as part of the authentication process. Fixes are available, and so far it doesn’t look like these flaws have been used in the wild.
I’ve seen this flaw conflated with CVE-2025-38593, a Bluetooth vulnerability recently fixed in the Linux kernel. This is a medium severity race condition in the kernel that can lead to a double-free and a system crash. There doesn’t seem to be a way to turn this into an RCE, as is reflected by its CVSS of 4.7.
The United States has granted Hungary a one-year exemption from sanctions on Russian oil and gas. The decision came after Hungarian Prime Minister Viktor Orbán
Pressure on russia Is Still Insufficient, and Any Weakening Within Already Existing Formats of Pressure Only Encourages Putin to Prolong the War – Address by President #Zelenskyy 08.11.2025
Extract Weak responses to russian brazenness spur russia to continue the war. We need so many sanctions, so much pressure, so much support for life that russia is stripped of all means of existence in wartime.
Pi-Powered Camera Turns Heads and Lenses In Equal Measure
Have you ever seen photos of retro movie sets where the cameras seem to be bedazzled with lenses? Of course you can only film via one lens at a time, but mounting multiple lenses on a turret as was done in those days has certain advantages –particularly when working with tiny M12 lenses, like our own [Jenny List] recently did with this three-lens, Pi-zero based camera.
Given that it’s [Jenny], the hardware is truly open source, with not just the Python code to drive the Pi but the OpenSCAD code used to generate the STLs for the turret and the camera body all available via GitHub under a generous CC-BY-SA-4.0 li
... mostra di più
Pi-Powered Camera Turns Heads and Lenses In Equal Measure
Have you ever seen photos of retro movie sets where the cameras seem to be bedazzled with lenses? Of course you can only film via one lens at a time, but mounting multiple lenses on a turret as was done in those days has certain advantages –particularly when working with tiny M12 lenses, like our own [Jenny List] recently did with this three-lens, Pi-zero based camera.
Given that it’s [Jenny], the hardware is truly open source, with not just the Python code to drive the Pi but the OpenSCAD code used to generate the STLs for the turret and the camera body all available via GitHub under a generous CC-BY-SA-4.0 license. Even using a cheap sensor and lenses from AliExpress, [Jenny] gets good results, as you can see from the demo video embedded below. (Jump to 1:20 if you just want to see images from the camera.)
The lenses are mounted to a 3D printed ring with detents to lock each quickly in place, held in place by a self-tapping screw, proving we at Hackaday practice what we preach. (Or that [Jenny] does, at least when it comes to fasteners.) Swapping lenses becomes a moment’s twist, as opposed to fiddling with tiny lenses hoping you don’t drop one. We imagine the same convenience is what drove turret cameras to be used in the movie industry, once upon a time.
💥 Unique content! The operators of the 93rd Motorized Rifle Brigade flew a drone on a fiber optic into a dugout, where, according to intelligence, 2 Russians were hiding.
❗️The drone flew into the dugout, but did not detonate. He left it in the dugout. The 2nd drone explode!
The Auschwitz camp was established in June 1940 for male prisoners. The first groups of women were incarcerated by the Germans more than a year and a half la...
Plastic recycling is something that many of us strive to accomplish, but we often get caught up in the many hurdles along the way. [Brothers Make] are experienced in the world of plastic recycling and graced us with a look into a simple and reliable way to get consistent thin sheets of durable plastic. Using a common T-shirt press and a mixture of plastic scraps, you can get the process down quickly.
Summarizing the process is pretty easy due to its simplicity. You take a T-shirt press, put some Teflon baking sheets on both sides of some plastic scraps, and then press. Repeating this a couple of times with different colored plastic will get you a nice looking sheet of usable sheets for any purpose you could dream of. Thicker pieces
... mostra di più
Artsy and Durable Recycling from a Heat Press
Plastic recycling is something that many of us strive to accomplish, but we often get caught up in the many hurdles along the way. [Brothers Make] are experienced in the world of plastic recycling and graced us with a look into a simple and reliable way to get consistent thin sheets of durable plastic. Using a common T-shirt press and a mixture of plastic scraps, you can get the process down quickly.
Summarizing the process is pretty easy due to its simplicity. You take a T-shirt press, put some Teflon baking sheets on both sides of some plastic scraps, and then press. Repeating this a couple of times with different colored plastic will get you a nice looking sheet of usable sheets for any purpose you could dream of. Thicker pieces can have some life changing applications, or as simple as guitar picks, as shown by [Brothers Make].
Make sure to try out this technique yourself if you have access to a press! Overuse of plastic is a widely known issue, and yet it feels like almost no one attempts to solve it. If you want a different kind of application, try making your own 3D printing filament out of recycled plastic!
AFU are working directly in the city, identifying and eliminating the enemy. Our assault groups are clearing the occupiers house after house. Particular attention is paid to identifying and destroying enemy UAV crews.
Old horsehair fishing nets from Brittany, once used to catch monkfish, are now shielding Ukraine’s frontlines from Russian drones. 280km of repurposed netting, sent by Kernic Solidarités, is being stretched across trenches and roads, forming traps that snare drones like flies in a web.
Il motivo è che il settore sanitario, a livello globale, continua a essere tra quelli maggiormente impattati in caso di attacchi cyber. In media, infatti, da gennaio 2023 si sono verificati 4,3 attacchi informatici al mese ai danni di strutture sanitarie. Di questi, circa la metà ha dato luogo a incidenti con un impatto effettivo sui servizi erogati (in termini di disponibilità e riservatezza), causandone talvolta il blocco con gravi ripercussioni a danno dell’utenza e mettendo a rischio la privacy dei pazienti.
Nel periodo da gennaio
Il Report evidenzia che molti attacchi informatici hanno successo perché spesso vengono trascurate, o mal implementate, le più basilari misure di cybersicurezza con una carente formazione specifica del personale impiegato in ospedali, centri medici, cliniche e altre strutture sanitarie.
youtube.com/watch?v=RcfTAPeCak…
Michael 🇺🇦
Unknown parent • • •