Salta al contenuto principale


in reply to Davriellelouna

This is 'GM in 2008' all over again.

(because a company that's 'too big to fail' has been bailed out by the government before)

Questa voce è stata modificata (2 settimane fa)


CrowdBucks is a new payment system for the Fediverse


This was initially demoed at FediCon 2025, but CrowdBucks is an open source, self-hostable fundraising system that allows people to financially support one another. You use your existing Fediverse account to hold a fundraiser, and can also donate to other people's fundraisers as well. The form factor is kind of similar to Kickstarter or Patreon.


CrowdBucks is a new payment system for the Fediverse


More developments are happening on the front to provide payment and monetization options for the Social Web. Over the past few years, there have been interesting experiments in making this possible. Mitra, notably, pioneered subscription payments by utilizing Monero. Bandwagon has also built on the concept by instead relying on integrations with traditional payment networks, starting with Stripe and PayPal. The short-lived SubClub implemented private feeds for paid access.

Introducing CrowdBucks


CrowdBucks is a new effort developed by Charles Iliya Krempeaux, better known by his online moniker, Reiver. It builds on some of the ideas previous implementations have tried, and aims to make the process as smooth and simple as possible.

“The long-term vision that CrowdBucks is a part of is to create a payments layer for the Fediverse,” Reiver explains, “obviously, it’s not the only part, there will be other projects later.”
CrowdBucks caption saying "All You Have to Do...As a Helper...1. Open a CrowdBucks Page2. Sign In with a Fediverse Account3. Donate"Source: CrowdBucks

Signing Up


Instead of forcing users to create yet another account, CrowdBucks does something really smart: you can just sign in with an existing Fediverse account.

At the moment, sign-in is limited to just Mastodon, but the plan is to gradually support a number of different platforms. Since a lot of Fediverse software implements part of the Mastodon API, I attempted to log in with both Akkoma and WordPress, but neither one seems to work yet. We opted to use a tried-and-true community instance.

After doing the Authorization dance, CrowdBucks directs users to a simple dashboard, where they are prompted to do basic setup for their page. Fediverse integration automatically pulls in profile details, including the username, avatar, header, and handle, although most of the public-facing details can be customized.


Getting Set Up


The first thing to do with your account is to set fundraising goals and donation tiers. The flow feels reminiscent of something like Kickstarter or Patreon, where rewards can be spelled out as something symbolic, something digital, or even something tangible.
You can view our demo account here. Please, don’t actually donate to this.

Donations and Payments


Support tiers can be set up with any monthly denomination, and these get prominently displayed on your CrowdBucks page. Donors can use their CrowdBucks accounts to find a page, select a tier, and support creators and projects easily.

When a person pledges towards a Tier, they’re automatically taken to a checkout page. For the time being, the only supported Payment Processor is Stripe. Reiver has explained that this is because Stripe was easiest to implement, but the team intends to also add support for PayPal and other providers, as well as support for standards such as Web Monetization and OpenPayments.


Quick Demo


CrowdBucks was initially revealed in a brief demo at FediCon a few weeks ago, which was recorded and added alongside the FediCon Talks on PeerTube. It’s a useful insight into where Reiver is coming from, what’s being built, and ideas of what CrowdBucks could be used for.

spectra.video/videos/embed/5bp…

Open Source and Self-Hostable


“Anyone will be able to set up their own CrowdBucks server,” Reiver explains, “just like anyone can set up their own Mastodon server.”

The CrowdBucks project itself is licensed under the GNU AGPL, with source code readily available. The CrowdBucks.fund site is simply operated as a flagship instance, but the goal is to allow anyone to host their own version as part of their operational infrastructure.

“We want CrowdBucks to help pay server bills, to support developers building Fedi software, and to fund creators on the Fediverse. The whole thing is designed to be native to the Fediverse.”

Future Plans


While the project itself is still fairly young, the team is actively thinking about how to improve. One area CrowdBucks is already exploring involves the ability for the app to post to the Fediverse on the behalf of fundraisers, for example, to give credit to supporters. Another possibility might involve collaborating with Emissary to standardize pieces involving payments and private access.

This is an exciting endeavor, and might be one of the most polished attempts yet to make payments possible on the Social Web. Hopefully, existing projects will get involved, and hash out the details on how to make this as open and interoperable as possible.

ShareOpenly logo Share


reshared this

in reply to Sean Tilley

Just curious: would any of this be able to circumvent or prevent this unspeakable crime:

Gofundme cancels accounts of Palestinians:
mastodon.social/@daliamohisen/…


I just received news that crushed me on top of everything I’m already enduring. An email was sent to my cousin
the one who manages our campaign abroad, since we Palestinians from Gaza are not allowed to create accounts or links ourselves. He set it up for us, but unfortunately, we have received only a small amount of donations so far.


How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories


Black Hat USA presentation.

::: spoiler Comments
- Hackernews
:::

In this blog post, we explain how we got remote code execution (RCE) on CodeRabbit’s production servers, leaked their API tokens and secrets, how we could have accessed their PostgreSQL database, and how we obtained read and write access to 1 million code repositories, including private ones.
Questa voce è stata modificata (3 settimane fa)



Zero-Day Vulnerability allow attackers to steal users data Found in Password Managers( 1Password, Bitwarden, LastPass, Enpass, iCloud Passwords, and LogMeOnce remain unpatched— still vulnerable)


cross-posted from: programming.dev/post/36006277

Independent verification and publication by Socket Security.

Fixed: NordPass, ProtonPass, RoboForm, Dashlane, Keeper

Still vulnerable: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce

::: spoiler Key Points


  • A new clickjacking technique where a malicious script manipulates UI elements that browser extensions inject into the DOM by making them invisible using javascript.
  • In my research, I selected 11 password managers that are used as browser extensions and the result was that all were vulnerable to "DOM-based Extension Clickjacking". Tens of millions of users could be at risk (~40 million active installations).
  • A single click anywhere on the attacker's website could leak credit card details including security codes (6 out of 9 were vulnerable) or exfiltrate stored personal information (8 out of 10 vulnerable).
  • All password managers filled credentials not only to the "main" domain, but also to all subdomains. An attacker could easily find XSS or other vulnerabilities and steal the user's stored credentials with a single click (10 out of 11), including TOTP (9 out of 11). In some scenarios, passkey authentication could also be exploited (8 out of 11).
  • All vulnerabilities were reported in April 2025 with a notice that public disclosure will be in August 2025. Some vendors have still not fixed described vulnerability: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce. Users of these password managers may still be at risk (~32.7 million active installations).
  • For Chromium-based browser users it is recommended to configure site access to "on click" in extension settings. This configuration allows users to manually control autofill functionality.
  • The described technique is general and I only tested it on 11 password managers. Other DOM-manipulating extensions are probably vulnerable (password managers, crypto wallets, notes etc.).
    :::




Zero-Day Vulnerability allow attackers to steal users data Found in Password Managers( 1Password, Bitwarden, LastPass, Enpass, iCloud Passwords, and LogMeOnce remain unpatched— still vulnerable)

Fixed: NordPass, ProtonPass, RoboForm, Dashlane, Keeper

Still vulnerable: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce

::: spoiler Key Points

  • A new clickjacking technique where a malicious script manipulates UI elements that browser extensions inject into the DOM by making them invisible using javascript.
  • In my research, I selected 11 password managers that are used as browser extensions and the result was that all were vulnerable to "DOM-based Extension Clickjacking". Tens of millions of users could be at risk (~40 million active installations).
  • A single click anywhere on the attacker's website could leak credit card details including security codes (6 out of 9 were vulnerable) or exfiltrate stored personal information (8 out of 10 vulnerable).
  • All password managers filled credentials not only to the "main" domain, but also to all subdomains. An attacker could easily find XSS or other vulnerabilities and steal the user's stored credentials with a single click (10 out of 11), including TOTP (9 out of 11). In some scenarios, passkey authentication could also be exploited (8 out of 11).
  • All vulnerabilities were reported in April 2025 with a notice that public disclosure will be in August 2025. Some vendors have still not fixed described vulnerability: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce. Users of these password managers may still be at risk (~32.7 million active installations).
  • For Chromium-based browser users it is recommended to configure site access to "on click" in extension settings. This configuration allows users to manually control autofill functionality.
  • The described technique is general and I only tested it on 11 password managers. Other DOM-manipulating extensions are probably vulnerable (password managers, crypto wallets, notes etc.).
    :::



https://marektoth.com/blog/dom-based-extension-clickjacking/

Questa voce è stata modificata (3 settimane fa)


Zero-Day Vulnerability allow attackers to steal users data Found in Password Managers( 1Password, Bitwarden, LastPass, Enpass, iCloud Passwords, and LogMeOnce remain unpatched— still vulnerable)


cross-posted from: programming.dev/post/36006277

Independent verification and publication by Socket Security.

Fixed: NordPass, ProtonPass, RoboForm, Dashlane, Keeper

Still vulnerable: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce

::: spoiler Key Points


  • A new clickjacking technique where a malicious script manipulates UI elements that browser extensions inject into the DOM by making them invisible using javascript.
  • In my research, I selected 11 password managers that are used as browser extensions and the result was that all were vulnerable to "DOM-based Extension Clickjacking". Tens of millions of users could be at risk (~40 million active installations).
  • A single click anywhere on the attacker's website could leak credit card details including security codes (6 out of 9 were vulnerable) or exfiltrate stored personal information (8 out of 10 vulnerable).
  • All password managers filled credentials not only to the "main" domain, but also to all subdomains. An attacker could easily find XSS or other vulnerabilities and steal the user's stored credentials with a single click (10 out of 11), including TOTP (9 out of 11). In some scenarios, passkey authentication could also be exploited (8 out of 11).
  • All vulnerabilities were reported in April 2025 with a notice that public disclosure will be in August 2025. Some vendors have still not fixed described vulnerability: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce. Users of these password managers may still be at risk (~32.7 million active installations).
  • For Chromium-based browser users it is recommended to configure site access to "on click" in extension settings. This configuration allows users to manually control autofill functionality.
  • The described technique is general and I only tested it on 11 password managers. Other DOM-manipulating extensions are probably vulnerable (password managers, crypto wallets, notes etc.).
    :::




Zero-Day Vulnerability allow attackers to steal users data Found in Password Managers( 1Password, Bitwarden, LastPass, Enpass, iCloud Passwords, and LogMeOnce remain unpatched— still vulnerable)

Fixed: NordPass, ProtonPass, RoboForm, Dashlane, Keeper

Still vulnerable: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce

::: spoiler Key Points

  • A new clickjacking technique where a malicious script manipulates UI elements that browser extensions inject into the DOM by making them invisible using javascript.
  • In my research, I selected 11 password managers that are used as browser extensions and the result was that all were vulnerable to "DOM-based Extension Clickjacking". Tens of millions of users could be at risk (~40 million active installations).
  • A single click anywhere on the attacker's website could leak credit card details including security codes (6 out of 9 were vulnerable) or exfiltrate stored personal information (8 out of 10 vulnerable).
  • All password managers filled credentials not only to the "main" domain, but also to all subdomains. An attacker could easily find XSS or other vulnerabilities and steal the user's stored credentials with a single click (10 out of 11), including TOTP (9 out of 11). In some scenarios, passkey authentication could also be exploited (8 out of 11).
  • All vulnerabilities were reported in April 2025 with a notice that public disclosure will be in August 2025. Some vendors have still not fixed described vulnerability: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce. Users of these password managers may still be at risk (~32.7 million active installations).
  • For Chromium-based browser users it is recommended to configure site access to "on click" in extension settings. This configuration allows users to manually control autofill functionality.
  • The described technique is general and I only tested it on 11 password managers. Other DOM-manipulating extensions are probably vulnerable (password managers, crypto wallets, notes etc.).
    :::



https://marektoth.com/blog/dom-based-extension-clickjacking/

Questa voce è stata modificata (3 settimane fa)


Zero-Day Vulnerability allow attackers to steal users data Found in Password Managers( 1Password, Bitwarden, LastPass, Enpass, iCloud Passwords, and LogMeOnce remain unpatched— still vulnerable)


Fixed: NordPass, ProtonPass, RoboForm, Dashlane, Keeper

Still vulnerable: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce

::: spoiler Key Points

  • A new clickjacking technique where a malicious script manipulates UI elements that browser extensions inject into the DOM by making them invisible using javascript.
  • In my research, I selected 11 password managers that are used as browser extensions and the result was that all were vulnerable to "DOM-based Extension Clickjacking". Tens of millions of users could be at risk (~40 million active installations).
  • A single click anywhere on the attacker's website could leak credit card details including security codes (6 out of 9 were vulnerable) or exfiltrate stored personal information (8 out of 10 vulnerable).
  • All password managers filled credentials not only to the "main" domain, but also to all subdomains. An attacker could easily find XSS or other vulnerabilities and steal the user's stored credentials with a single click (10 out of 11), including TOTP (9 out of 11). In some scenarios, passkey authentication could also be exploited (8 out of 11).
  • All vulnerabilities were reported in April 2025 with a notice that public disclosure will be in August 2025. Some vendors have still not fixed described vulnerability: Bitwarden, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce. Users of these password managers may still be at risk (~32.7 million active installations).
  • For Chromium-based browser users it is recommended to configure site access to "on click" in extension settings. This configuration allows users to manually control autofill functionality.
  • The described technique is general and I only tested it on 11 password managers. Other DOM-manipulating extensions are probably vulnerable (password managers, crypto wallets, notes etc.).
    :::

https://marektoth.com/blog/dom-based-extension-clickjacking/

Questa voce è stata modificata (3 settimane fa)
in reply to Ŝan

Research on only 11 password managers

others DOM-manipulating extensions will be vulnerable (password managers, crypto wallets, notes etc. )





Maneskin, reunion nel 2025: bilanci in calo e Victoria De Angelis batte Damiano da solista


I Maneskin sono pronti a tornare insieme nel 2025. Dopo la pausa che ha segnato la carriera della band romana, i conti economici e i risultati da solisti hanno accelerato la decisione della reunion. Victoria De Angelis si è distinta con un successo superiore rispetto a Damiano David, e la band tornerà a esibirsi dal vivo entro fine 2025, con un tour mondiale già previsto per il 2026.

LEGGI TUTTO 👉 MANESKIN: REUNION NEL 2025

reshared this



Claire Danes, Jim Parsons – „Ein Kind wie Jake“ (2018)

Vor sieben Jahren konnte diese Geschichte vielleicht noch wie ein intimes Indie-Drama aus Brooklyn wirken, aber heute erkennen wir, dass der Film eine Vorwarnung war. Denn längst nicht nur in den USA hat sich seither ein Kulturkampf entfesselt, der gegen jede Form von Förderung von Vielfalt und geschlechtlicher Selbstbestimmung aufmarschieren lässt. Kulturkrieger:innen streichen systematisch Programme, verbannen Bücher aus Schulen, säubern Lehrpläne und selbst das Fernsehen. Zu unserem Glück aber noch nicht bei 3Sat. (3Sat)




AWS chooses Intel again


Amazon Web Services (AWS) has teamed up with Intel to announce the eighth generation of memory-optimized EC2 instances: the R8i and R8i-flex. These new instance types run on specially developed Intel Xeon 6 processors with DDR5 7200 MT/s memory.




Intel ghosts researcher who found web apps spilled 270K staff records


Chipzilla quietly fixed the problems without responding to the person who found them


Netanyahu slams Macron for fuelling 'antisemitic fire'


Jerusalem (AFP) – Israeli Prime Minister Benjamin Netanyahu upbraided President Emmanuel Macron in a letter seen by AFP on Tuesday, blaming the French leader's move to recognise a Palestinian state for fuelling antisemitism.

Late last month, Macron said France would formally recognise a Palestinian state during a UN meeting in September, drawing a swift rebuke from Israel.

By announcing the move, France was set to join a growing list of nations to have recognised statehood for the Palestinians since the start of the Gaza war nearly two years ago.

In the letter sent to Macron, Netanyahu said antisemitism had "surged" in France following the announcement.

"Your call for a Palestinian state pours fuel on this antisemitic fire. It is not diplomacy, it is appeasement. It rewards Hamas terror, hardens Hamas's refusal to free the hostages, emboldens those who menace French Jews and encourages the Jew-hatred now stalking your streets," Netanyahu wrote in the letter.

The Israeli premier went on to call on Macron to confront antisemitism in France, saying he must "replace weakness with action, appeasement with resolve, and to do so by a clear date: the Jewish New Year, September 23".

According to an AFP tally, at least 145 of the 193 UN members now recognise or plan to recognise a Palestinian state, including Australia, Britain and Canada.

Canberra joined the list earlier this month, announcing its intention to recognise a Palestinian state in September.

Netanyahu slammed his Australian counterpart Anthony Albanese on Tuesday, labelling him a "weak politician who betrayed Israel and abandoned Australia's Jews," in an angry post on his office's official X account.

The personal attack came amid a diplomatic spat between the two countries after the Australian government on Monday cancelled the visa of far-right Israeli politician Simcha Rothman.

Rothman, whose ultranationalist party is in Netanyahu's governing coalition, had been scheduled to speak at events organised by the Australian Jewish Association.

Hours after his visa was cancelled, Israel's Foreign Minister Gideon Saar said he had revoked the visas of Australia's representatives to the Palestinian Authority.

In a statement, Australian Foreign Minister Penny Wong said revoking their visas was an "unjustified reaction" by Israel and that Netanayahu's government was "isolating Israel and undermining international efforts towards peace and a two-state solution".

in reply to xiao

<...> blaming the French leader's move to recognise a Palestinian state for fuelling antisemitism.


This war criminal is so used to using "antisemitism" as a sword/shield for everything that he doesn't even realize how insane that sounds...

What labelling everything critical of Israeli state as "antisemitism" really achieves is making people insensitive to real antisemitism. Jews should be the first ones to call this out if not out of basic decency, then at least for self-preservation.

Questa voce è stata modificata (3 settimane fa)


Andrew Niccol – „Anon“ (2018)

Eine urbane Dystopie, in der jede Blickbewegung lückenlos dokumentiert wird. Ein digitaler Käfig. Eine Welt, in der jede Erinnerung und jeder Augenaufschlag gespeichert ist. Das Ganze als kühler Techno-Thriller erzählt. Kein Übermaß an Action, dafür eine Gewalt, die vor allem durch Bilder wirkt – Bilder, die manipuliert, überschrieben, gehackt werden. Ein Science-Fiction der in die Zeit passt, wie wenig andere. Andrew Niccol hat gezeigt, wie es geht! (ZDF)

in reply to Mediathekperlen

Das Setdesign ist - wie bei Gattaca - klasse. Allein die Aschenbecher überall, die Autos, der Beton, cool. Bis zum Ende des Films drängt sich ein wenig der Gedanke auf, der Minimalismus gründet lediglich auf knappem Budget
Die Grundidee ist stark, erinnert an den Roman "Replay" von B.Stein oder an "Strange Days". Dann ein erstes Logik-Fragezeichen [s.Spoiler im nächsten Tröt], 1-2 undeutliche Motivationen und zum Ende leidlich konstruiert aufgelöst. >

@mediathekperlen @filmeundserien @ZDF

in reply to ᴺⁱˡᶻ 🍸

Spoiler

Sensitive content

in reply to ᴺⁱˡᶻ 🍸

Spoiler

Sensitive content



benefits of using GB Whatsapp


In today’s fast-paced digital world, communication apps have become a necessity, and WhatsApp is at the top of the list. However, many users are looking for more features, flexibility, and customization options that the official app doesn’t offer. This is where GB WhatsApp comes in as a popular alternative.

One of the biggest benefits of GB WhatsApp is its enhanced customization. Unlike the standard version, it allows users to change themes, fonts, and colors, giving a more personalized chatting experience. For people who love to make their app look unique, this is a major advantage.

Another benefit is the privacy features. GB WhatsApp lets you hide your online status, blue ticks, and even typing indicators. This gives you full control over how others see your activity, making communication more private and stress-free.

GB WhatsApp also offers advanced media sharing. While the official app limits file size and quality, GB WhatsApp lets you send larger videos, more images at once, and share high-resolution files without compression. This is especially useful for professionals, students, or anyone who frequently exchanges media.

Additionally, features like dual accounts on the same phone, auto-reply, and extended status updates make GB WhatsApp a versatile tool. It combines the simplicity of WhatsApp with added functionality that saves time and improves the overall experience.

For users who want to explore these extra features safely and efficiently, visiting trusted sources is essential. You can learn more and access GB WhatsApp updates at www.gbwhatsap.id
.

In short, GB WhatsApp provides freedom, privacy, and personalization that the official version lacks. Whether you want to stand out with unique themes or enjoy advanced sharing features, it’s an excellent choice for modern communication.

Technology reshared this.



Tra la via Amerina e il Jazz


19 settembre 2025 20:00:00 CEST - GMT+2 - Campo Antico Ricevimenti, 01028, Orte, Italia
Set 19
Tra la via Amerina e il Jazz
Ven 20:00 - 22:00
Elisabetta Fratoni Jazz Quartet

L'Elisabetta Fratoni Jazz Quartet torna a suonare al Campo Antico Ricevimenti di #Orte 🎺 🎤 🎹 🥁

Per prenotare: campoantico.it/ciao-estate-ben…

#ItaliaJazz #LazioJazz #ViterboJazz #OrteJazz

in reply to Elisabetta Fratoni Jazz Quartet

Per prenotare: campoantico.it/ciao-estate-ben…



[Question] Anyone here currently writing a story?


How's your story coming along?

What's it about?

What genre(s) is it written in?

#ADHD
in reply to ComradeMiao

Basically, yeah. I didn't plan for it to be a metaphor for capitalism / climate change, but it ended up there.


Proton Authenticator


As more and more of our important personal data is stored online and more and more hacks of corporate databases make that data available to the worst people, the need for added security on our online accounts has grown considerably. It’s no longer enough

As more and more of our important personal data is stored online and more and more hacks of corporate databases make that data available to the worst people, the need for added security on our online accounts has grown considerably. It’s no longer enough to have a secure, hard to crack password. We now need to enable two-factor/multi-factor authentication (2FA/MFA). These services allow you to use something you have, such as your smartphone, along with something you know, in this case your password, to ensure that your account stays secure.

Previously, MFA services were only available for government organizations or enterprise banking services. Now, MFA apps are available to anybody with a smart phone or a computer. Large tech companies such as Google and Microsoft provide free MFA apps, for use with their own services as well as with others which offer MFA for their accounts. You can even sync these apps between devices to ensure you always have your MFA accounts available to you. One thing these apps do not provide, however, is encryption of your MFA accounts. If your Google account is hacked, the hackers could gain access to your MFA codes.

Proton, a Swiss company known for its focus on user privacy and security, has released their own authenticator app, Proton Authenticator. This app, available on all major computer and mobile operating systems, adds end-to-end encryption between devices to keep your MFA accounts secure and safe. If your Proton account is hacked, your MFA accounts are still not visible to the hackers. The app is also open source, allowing anyone to inspect the code and verify its security. Finally, the app is free with no Proton account requirement to use it.

You can find more information about Proton Authenticator as well as download options for your devices here.

An interface displaying an authenticator application. It shows a list of services like Proton, Amazon, Revolut, PayPal, Binance, Netflix, Uber, and Notion, each with corresponding authentication codes and status indicators.
An interface displaying an authenticator application. It shows a list of services like Proton, Amazon, Revolut, PayPal, Binance, Netflix, Uber, and Notion, each with corresponding authentication codes and status indicators.

in reply to floofloof

Weird that they started pushing bad updates after they fired all those people

Must be a coincidence



Pritzker, taking aim at Trump, crypto ‘bros,’ signs laws to regulate digital currency industry, crypto ATMS


The laws will bolster consumer protections for crypto users and limit withdrawals to $2,500 a day for new users of digital currency kiosks, which have become magnets for scams and drug-dealing.

The Illinois Department of Financial and Professional Regulation, which has been given the power to regulate digital asset exchanges and businesses, will require the crypto industry to comply with protections now in place for consumers of traditional financial services, such as banks.

Crypto businesses will have to keep enough money on hand to operate effectively and have plans to target fraud and money-laundering.

To prevent fraud, the state will cap daily transaction amounts at kiosks at $2,500 for new customers, limit transaction fees at kiosks to 18% and provide full refunds to new customers who get defrauded.



Proton shifts out of Switzerland over snooping law fears


Proton is beginning to shift its physical infrastructure out of Switzerland, fearing a fresh bout of government snooping baked into the country's updated surveillance laws.

The company has confirmed that Lumo, its newly launched AI chatbot positioned as a privacy-friendly ChatGPT rival, is the first to move. Servers for the product are now being housed in Germany, with Norway also in the frame for future operations. This comes amid serious grumbling about amendments to the country’s existing surveillance ordinance, which would force VPNs and messaging apps to identify users and store their data for up to six months.

Proton has been vocal about its opposition since May. In a statement roton’s head of anti-abuse and account security Eamonn Maguire said: “Because of legal uncertainty around Swiss government proposals to introduce mass surveillance, proposals that have been outlawed in the EU, Proton is moving most of its physical infrastructure out of Switzerland. Lumo will be the first product to move."


Well, fuck. "You can keep your Nazi gold to yourself, but we need your LLM interactions."




Every question you ask, every comment you make, I'll be recording you


Recently, OpenAI ChatGPT users were shocked – shocked, I tell you! – to discover that their searches were appearing in Google search. You morons! What do you think AI chatbots are doing? Doing all your homework for free or a mere $20 a month? I think not!

When you ask an AI chatbot for an answer, whether it's about the role of tariffs in decreasing prices (spoiler: tariffs increase them,); whether your girlfriend is really that into you; or, my particular favorite, "How to Use a Microwave Without Summoning Satan," OpenAI records your questions. And, until recently, Google kept the records for anyone who is search savvy to find them.

It's not like OpenAI didn't tell you that if you shared your queries with other people or saved them for later use, it wasn't copying them down and making them potentially searchable. The company explicitly said this was happening.

The warning read: "When users clicked 'Share,' they were given the option to 'Make this chat discoverable.' Under that, in smaller text, was the explanation that you were allowing it to be 'shown in web searches'."


Well, of course.



Sam Altman admits OpenAI ‘totally screwed up’ its GPT-5 launch and says the company will spend trillions of dollars on data centers


“I literally lost my only friend overnight with no warning,” one person posted on Reddit, lamenting that the bot now speaks in clipped, utilitarian sentences. “The fact it shifted overnight feels like losing a piece of stability, solace, and love.”

reddit.com/r/ChatGPT/comments/…

in reply to themachinestops

"will spend trillions of dollars on data centers" Hurray!

It's not enough that the planet is dying. They're speeding it up as well!

Questa voce è stata modificata (2 settimane fa)


Ollama bug allows drive-by attacks - patch now


A now-patched flaw in popular AI model runner Ollama allows drive-by attacks in which a miscreant uses a malicious website to remotely target people's personal computers, spy on their local chats, and even control the models the victim's app talks to, in extreme cases by serving poisoned models.

GitLab's Security Operations senior manager Chris Moberly found and reported the flaw in Ollama Desktop v0.10.0 to the project's maintainers on July 31. According to Moberly, the team fixed the issue within hours and released the patched software in v0.10.1 — so make sure you've applied the update because Moberly on Tuesday published a technical writeup about the attack along with proof-of-concept exploit code.

"Exploiting this in the wild would be trivial," Moberly told The Register. "There is a little bit of work to build the proper attack infrastructure and to get the interception service working, but it's something an LLM could write pretty easily."


This makes me less enthusiastic about local models. I mean, nothing on the internet is inherently secure and the patch came quickly, but local LLMs being hackable in the first place opens a new can of worms.



Come fare per ascoltare bene da computer un CD 'protetto'?


Vi ricordate quando nei primi anni 2000 i CD musicali erano fatti in modo che se provavi ad ascoltarli in un computer si sentivano male?
Lo facevano per scoraggiare le copie, fare gli mp3, ecc.

Ma oggi questa cosa si può aggirare?

Ad esempio, di recente ho messo le mani su Minutes to midnight dei Linkin Park (sì, sono un romantico collezionista) e con mia sorpresa, quando lo metto nel pc si sente in quel modo. Sia Linux che Windows.

Mi direte che posso semplicemente ascoltarlo nella radio, e infatti è ciò che faccio di solito, ma mi ha comunque stupito.
Oggigiorno esiste un modo per far leggere bene dal pc un CD di questo tipo?

Questa voce è stata modificata (3 settimane fa)


gnammi coi pixel (art) sulla carta e non il webbe!


Chiedo scusa se mi permetto di arrivare così, lanciando da in un attimo questa bomba che livellerà ogni cosa presente in tutto il raggio tracciato automaticamente dai più stupidi utenti di Internet che si copiano a vicenda… Ma ho ultimissimamente trovato la forma ultima, più che perfettissima, di divertimento con le pixel-art, e non posso […]

octospacc.altervista.org/2025/…


gnammi coi pixel (art) sulla carta e non il webbe!


Chiedo scusa se mi permetto di arrivare così, lanciando in un attimo questa bomba che livellerà ogni cosa presente in tutto il raggio tracciato automaticamente dai più stupidi utenti di Internet che si copiano a vicenda… Ma ho ultimissimamente trovato la forma ultima, più che perfettissima, di divertimento con le pixel-art, e non posso ovviamente tenermela solo per me; sono fin troppo generosa… 🤗

Da svariate settimane, infatti, molti stanno fottutamente perdendo la testa per un robo chiamato Wplace che, prima di capire cosa fosse, mi dava una sensazione di deja-vu talmente grande che non so come spiegare, ma già solo questo dovrebbe far capire quanto questi siti dove si ha una tela di pixel condivisa su cui disegnare non siano nulla di nuovo, e siano semplicemente una moda che ciclicamente ritorna e scompare. E, appunto, essendo questa una moda… non voglio dire che sta già per scemare ad appena 2 mesi dal rilascio, ma le notizie degli ultimissimi giorni presentano talmente tanti problemi per cui, secondo me, la fine è vicina. 😈

Il servizio non riesce a stare dietro l’afflusso enorme di utenti, per esempio, e ora hanno implementato persino una coda di accesso, perché l’alternativa sarebbe avere il server che va down per l’ennesima volta… e ci sono già anche diverse controversie politico-amministrative, che sono sempre simpatiche, oltre ad acquisti in-app opzionali giustificati come donazioni agli sviluppatori, che avvantaggiano chi può pagare a discapito degli altri. In breve: grande monnezza di cui, se non fosse per dare contesto alla mia bomba, nemmeno discuterei… 🤥

Quindi, tornando al mio… Io lo so che disegnare pixel art in programmi di grafica fatti apposta è noioso e per questo non lo farete mai, così come so che in Animal Crossing è troppo restrittivo per via della tela di appena 32×32 (anche se i disegni si possono piazzare per terra e dunque nell’effettivo averne di più grandi combinati, ma vabbè), e anche che fare le pixel art in Excel o equivalenti è divertente solo quando si è a scuola o a lavoro, e mi rendo persino conto che disegnarle dentro Minecraft alla lunga stanca, pure se in multiplayer… Ma allora, regà, a questo punto… famoli su carta! 😳
Disegno di Hatsune Miku in corso come spiegato, quadernino A5 appoggiato al monitor del PC con Pignio, pennarelli STABILO point 88 affianco.
Mannaggia alla miseria, aò! E che cavolo ci voleva a mettere le cose in questo modo? Semplicemente, si prende un bel quadernino a quadretti — o quadernone, qualora la brama di pixel sia specialmente potente — e, dopo aver un attimo aqquratamente ponderato sulla quantità di lettere Q in questa mia frase, con degli utensili da sqrittura e/o disegno minuzioso — vanno bene penne colorate, pennarelli a punta fine, o altrimenti pastelli se vi piace rompervi le mani a furia di calcare, vedete un po’ voi — si inizia a lavorare di manine; e non di indici, come ormai voi zetini fate in ogni situazione senza soluzione di continuità alquna! 💣💥

Ma davvero, comunque: se vi piace creare o ricopiare i disegnini pixelosi, provate un po’ questa opzione. Completamente al di fuori delle meccaniche merdose del software online moderno, senza disservizi, senza tempi di attesa imposti tra un pixel e l’altro o comunque limiti artificiali in generale, ma solo ed esclusivamente gnam. A onor del vero, devo ammettere che mi sento un po’ una vecchia nonna bacucca a fare questo lavoro qui sulla carta, eh… però è comunque rilassante e intrigante e, nel bene o nel male, i quadratini fatti a manella non saranno mai perfetti, quindi ogni copia del disegno sarà effettivamente unica e irreplicabile (quindi, pure alla strafaccia degli NFT!) 😘

L’unica cosa che mi chiedo è… se per gli AI-bro la scusa per non poter disegnare a mano è che gli manca il materiale, per i moda-della-pixel-art-online-bro invece cosa sarà? Certamente non i costi, visto che bastano penne di merda, e non servono per forza i pennarelli da 1 euro e 60 centesimi ciascuno, come invece io essendo principessa (“si si, ‘a principessa de Fregene“) pretendo… io temo sarà la mancanza di skill da un lato, e di pazienza dall’altro, visto che comunque fare un pixel sul quaderno (ed è irreale questa frase, ma ok) è a lungo andare più tosto che cliccare i tastini; e, mancando sia il CTRL+Z che gomme decenti (i pennarelli sono indelebili, e i pastelli si sciordano con la gomma), non sono ammesse distrazioni. ☠️

Comunque, qui stavo ricopiando un disegno di Hatsune Miku, giusto per, ed è veramente gnam. Non rinnegando completamente le comodità dell’hi-tech, ho caricato il riferimento su Pignio, dopo averlo trovato dal web, per non perderlo, e i crediti sono lì (anche se la pagina originale è ed era morta, sad). L’unica cosa che oggettivamente è un problema, secondo me, sono i colori… io ne ho appena 7, a parte il nero (e 3 li ho comprati solo stamattina, solo gli altri avevo prima!), e chiaramente le difficoltà ci sono: per simulare (male) il verde acqua scuro di contorno sui capelli di Miku ho dovuto mischiare azzurro, verdino e grigio… e la pelle ho dovuto farla gialla, mamma mia. Prossima volta, meglio se mi invento un’illustrazione mia… 💔

#art #carta #drawing #HatsuneMiku #paper #PixelArt



in reply to Tony Bark

If Intel has to give the US government 5%, Starlink should have to give back 25%.





Microsoft employees occupy headquarters in protest of Israel contracts


On Tuesday, a group of current and former Microsoft employees, as well as community members, took over a plaza at Microsoft’s headquarters in Redmond, Washington, as part of a No Azure for Apartheid protest.

They declared the area a “Liberated Zone” encampment and said they had changed its name from East Campus Plaza to “The Martyred Palestinian Children’s Plaza.” The organization, which announced and distributed pictures of the takeover in a press release, said around 50 people were in attendance at the start of the event.

The protesters set up tents and artistic homages to the losses in Gaza, including shrouds and a large plate that reads “Stop Starving Gaza.” They also set up a negotiating table with a sign inviting Microsoft executives to “come to the table” and end the company’s partnership with the Israeli military. The group says it plans to occupy the plaza until they are forcibly removed. Microsoft did not immediately respond to a request for comment.


in reply to Tony Bark

Couldn't asocial media just having them not visible to others but not telling them? Because if they block them, they just create another account or move somewhere else.


2 septembre 2025, 18:30:00 CEST - GMT+2 - Le Baranoux, 75019, Paris, France
Set 2
Soirée de soutien aux activistes en procès contre LVMH
Mar 18:30 - 21:30
XR Paris-Nord

Le 2 septembre, 4 militant.es sont en procès pour une action dénonçant l'optimisation fiscale du groupe LVMH. Pour s'être oppposé.es à un système destructeur qui accroit les inégalités au lieu de financer la transition vers un monde plus juste et soutenable, iels doivent répondre devant la justice.

Afin de les soutenir et de nous aider à faire face aux frais de justice, rejoins-nous au Baranoux le 2 septembre à partir de 18h30 pour une soirée festive avec des jeux, une tombola et un DJ set par le collectif Pas Prévu!

L'entrée est gratuite, sans inscription; une cantine à prix libre est prévue sur place.



dmca resistant piracy DDL file list ?


Hello, what hosting service or pastebin service would you use to host a list of DDL link for movies and tv shows (and avoid DMCA)?
I was planning to use rentry but there are a lot of filled take down requests in lumen database.
I'd spend as less as possibile, my goal is to host a very simple html page with a list of links, similar to ElAmigos webpage, nothing more. I'd really prefer to use free tools but it seems not feasible.

Do you have any suggestion or experience?

in reply to sh3ll

Each time you want to send someone a link to the list, send the list instead.

in reply to yonderbarn

People really need to stop giving a fuck about what "businesses" think about political candidates, and anything in general.
in reply to HulkSmashBurgers

yeah these articles (and tv news segments) are always like

you know these machines we designated to specifically crush the average person while enriching the very worst? yeah they might not be happy with this. you'd hate that wouldn't you?


uhh, no, I'd love that actually. whatever they hate the most, do it please. if they complain after, double it and repeat until morale improves.

in reply to pyre

uhh, no, I'd love that actually. whatever they hate the most, do it please. if they complain after, double it and repeat until morale improves.


Yeah because if they hate it, it's probably benefical for us!



Privacy‑Preserving Age Verification Falls Apart On Contact With Reality