Salta al contenuto principale


in reply to FundMECFS

The other issue is that ideally we would need the lemm.ee admins to send that, but I'm not sure they want to interact with the site before it shuts down.
in reply to Blaze (he/him)

Yeah…

Maybe we just need to make a couple more front page memes about lemm.ee



SpaceX's Starship blows up ahead of 10th test flight




Keebin’ With Kristina: The One With The Gaming Typewriter





Iran refuses to surrender, interview with journalist Marwa Osman




There can be no winners in a US-China AI arms race


The United States and China are entangled in what many have dubbed an “AI arms race.”

In the early days of this standoff, US policymakers drove an agenda centered on “winning” the race, mostly from an economic perspective. In recent months, leading AI labs such as OpenAI and Anthropic got involved in pushing the narrative of “beating China” in what appeared to be an attempt to align themselves with the incoming Trump administration. The belief that the US can win in such a race was based mostly on the early advantage it had over China in advanced GPU compute resources and the effectiveness of AI’s scaling laws.

But now it appears that access to large quantities of advanced compute resources is no longer the defining or sustainable advantage many had thought it would be. In fact, the capability gap between leading US and Chinese models has essentially disappeared, and in one important way the Chinese models may now have an advantage: They are able to achieve near equivalent results while using only a small fraction of the compute resources available to the leading Western labs.




From Gaza to Iran: How Empire Manufactures War (Video 43mins)


As Israel bombs Iran, and the threat of U.S. military escalation grows by the hour, the world’s attention is being pulled into yet another war that Israel started and the West manufactured. After flattening Gaza and locking down the West Bank Israel has now dragged Iran into open confrontation — and is calling on the U.S. to finish the job.




N. Korea calls Israel 'cancer-like entity', blames US and West for Iran war



in reply to ikidd

By chaining legitimate services such as udisks loop-mounts and PAM/environment quirks, attackers who own any active GUI or SSH session can vault across polkit's allow_active trust zone and emerge as root in seconds.


I recognize a few of those words.

in reply to iAmTheTot

Basically it's two vulns chained; first one gives a remote user privileges that a physically present user would get, in order to do things like put a thumbdrive in and have it mount. Then that udisks privilege can be subverted to escalate that level to root. So as long as you can start a remote session, you can pull root and it doesn't even look that hard.
in reply to ikidd

So how would a bad actor start a remote session on my Linux pc?

Edited to add, downvoted for trying to learn is a new one for me.

Questa voce è stata modificata (3 mesi fa)
in reply to iAmTheTot

They probably can not. Unless you've setup your router such that anyone can connect to an ssh instance running on your PC, and then also use a bad password. Public wifi + having something like ssh running + having a bad password.

Your PC probably doesn't satisfy these requirements (yay!), but some servers might.

in reply to iAmTheTot

You probably already do, but if you need SSH, use crowdsec, SSHGuard or fail2ban to help filter bot nets.

I have IPs hitting from all over the world, trying logins all the time. Like several per minute, I can only imagine what it would be like if I wasn't blocking IPs with multiple failed login attempts.

in reply to iAmTheTot

The technique described here is only a concern if the 'bad actor' has access to a user account on your machine in the first place.
in reply to iAmTheTot

No, there are other ways to get access to your machine without needing it. In general you can classify vulnerabilities as either code execution or privilege escalation, a code execution vulnerability allows an attacker to execute code on your machine, a privilege escalation allows him to break barriers that you might have imposed on him.

For example, if you're running service X as root, and someone manages to find a way to use something on service X to execute code, they might get a reverse shell to your box and run anything there. So you might set service X to run as your user instead of root, now that vulnerability is less important because it only compromises your user, but the attacker could use this one in conjunction with the other one to gain control of your user, then escalate to become root.

If this is something you're interested in, there's a cool website called hackthebox where you have to do these sort of things for real. If you want to have an idea on how it looks, there are some excellent videos here showing walkthroughs for many of them he boxes, I recommend checking something labeled easy since these boxes can get quite complex, but it will give you a good idea of the steps attackers need to take to compromise your system

in reply to iAmTheTot

Yes, or SSH keys or any other means of user authentication. The cool thing in this technique is that it's twofold and you (as an attacker) can cherry-pick the info given. If you walk up locally to someone's running system, you could skip the first half and go with the 'hey, can you resize this XFS image for me' bit.
Questa voce è stata modificata (3 mesi fa)
in reply to ikidd

Or ditch udisks in favour of pmount (or udevil?), which shouldn't be affected as far as I can tell. That will get you a few months' grace before a similar problem pops up there.






Microsoft prepared to abandon high-stakes talks with OpenAI, FT reports


Microsoft is prepared to abandon its high-stakes negotiations with OpenAI over the future of its alliance, the Financial Times reported on Wednesday.

The tech giant has considered pausing discussions with the ChatGPT maker if the two sides remain unable to agree on critical issues such as the size of Microsoft's future stake in OpenAI, the report said, citing people familiar with the matter.

https://www.reuters.com/business/microsoft-prepared-walk-away-high-stakes-talks-with-openai-ft-reports-2025-06-18/



Polish scientists urge public to step up war on drought


Scientists in Poland have called on the public to step up efforts to combat drought, revealing that around 45% of the country’s forests and agricultural land are under threat.

The appeal was made on World Day to Combat Desertification and Drought, with scientists warning that drought had now become an annual issue.

Currently, surface water resources per capita (the amount of renewable surface water available for each person in a specific location) stand at 1,600 cubic meters per year, approximately three times below the European average.

In an open letter published on their website, Poland’s national water authority, Polish Waters (Wody Polskie), wrote: “Despite Poland’s seemingly moderate climate, summer droughts have been observed since 2011.”

Financial losses stemming from drought were placed at 2.6 billion złotys in 2018 alone.

Now, Polish Waters have issued a rallying cry calling on the forestry commission, regional authorities, farmers and entrepreneurs to join forces to do their bit.

“The key is to retain water where it falls,” wrote Polish Waters. “Through water retention and wise water management, we can protect our fields, forests and cities from the effects of drought. Together we can restore balance to the landscape and take care of the future.”

Continuing, Polish Waters apportioned much of the blame on climate change, citing it as a major driver of drought.

“This process is further modulated by seasonal precipitation patterns, surface runoff, water storage, and interactions with vegetation.”

“Recent weather patterns, characterized by prolonged droughts interspersed with heavy rainfall, are further exacerbating the problem. While droughts leave land dehydrated for years, heavy rainfall washes away topsoil instead of replenishing it,” they added.

Farmers have been particularly impacted by Poland’s spate of droughts, with one report showing that 45% of the county’s forests and agricultural fields are at risk, with central Poland and Wielkopolska in west-central Poland the most vulnerable of all.

Traditionally, agricultural droughts have been viewed as a particular problem, with their effects including lower yields, poorer crop quality, higher susceptibility to diseases and pests, and higher end prices for the consumer.

To fight drought, Polish Waters has already completed 55 investments valued at 150 million złotys, among them the modernization of the Ruda reservoir near the northeastern town of Mława.

The authority has also embarked on an aggressive educational campaign aimed at promoting smaller scale retention measures, switching lawns out in favor of flowery meadows and encouraging the planting of drought-resistant plants.

“Let’s work together for the people, for nature and for future generations,” added Polish Waters.



Some Democratic senators regret voting to confirm Kristi Noem as DHS secretary


Sen. Adam Schiff, D-Calif., who voted against Noem, tore into her performance.

"It's really hard to imagine someone doing a worse job as the secretary of homeland security," Schiff said in an interview. "The draconian, inconsistent, inflammatory immigration policies; the lawlessness; the rendering of people outside the country to maximum-security prisons; the arrest of U.S. citizens; the constant, bizarre spectacle of her doing dress-up outside of a maximum-security prison; or in her various cosplay. It's embarrassing, and it takes the focus off of what should be the heart of that job, and that is protecting our homeland security."



Parsing ICE’s mixed-up, hard-to-believe assault claims | ICE officials keep touting a 413 percent increase in assaults on officers to justify anonymity.


Access options:
* gift link - registration required
* archive.today - shows all text and images, but interactive graph doesn't work

The key thing is that they're just making up numbers to justify secret police attacking Americans and our elected representatives:





'Debt trap' is a Western cover-up for its power-lust




Seyed Mohammad Marandi: Iran Prepares for War with America


in reply to ☆ Yσɠƚԋσʂ ☆

Same warmongers that lured America into war with Iraq are now using the same tactics to cripple Iran for GREATER ISNOTREAL.



Daniel Kahn & The Painted Bird: "The Butcher's Share"





Some of your AI prompts could cause 50 times more CO2 emissions than others




Some of your AI prompts could cause 50 times more CO2 emissions than others





Soirée d'accueil et présentation XR Nantes


24 septembre 2025, 19:00:00 CEST - GMT+2 - La Dérive, 44000, Nantes, France
Set 24
Soirée d'accueil et présentation XR Nantes
Mer 19:00 - 21:00
XR Nantes

Tu as envie de t'engager, tu nous a découvert et te demande si XR est fait pour toi ? On te propose un moment de rencontre et d'échange pour discuter, découvrir notre groupe, et comment le rejoindre ! Des membres d'XR Nantes présenteront le mouvement et son fonctionnement, suivi d'un débat et de discussions en plus petits groupes !

Rdv à La Dérive, 1 Rue du Gué Robert

Si vous voulez consommer, prévoyez du liquide, pas de paiement carte

Entrée libre, sans inscription

Le lieu est partiellement accessible PMR : la largeur de porte d'entrée est inférieure aux normes PMR, néanmoins d'expérience une personne en fauteuil électrique peut entrer. Pour plus d'infos, contactez-nous : nantes@extinctionrebellion.fr

Questa voce è stata modificata (4 settimane fa)


Army gives shady offer to tech bros so they can play soldier


At first glance, it seems like Silicon Valley executives have the perfect life, what with the unimaginable wealth and power and such. But what if they’re sad they don’t get to put on big boy pants and pretend they’re warfighters? What then, America?

Thankfully the Army has invented a way to give tech execs participation trophies—surely that is the best and most noble use of our armed forces.

A new Army initiative titled “Detachment 201: The Army’s Executive Innovation Corps” promises to “fuse cutting-edge tech expertise with military innovation.”

Just in case this conflict of interest wasn’t blatant enough, Katrina Mulligan, former chief of staff to the Army secretary, posted more big news on LinkedIn Monday, announcing that, since being rewarded its $200 million contract, OpenAI is now bringing her on to run a new initiative, “OpenAI for Government,” which will supposedly “help accelerate the U.S. government’s adoption of AI.”

Notably absent from the list of Big Special Boys with Big Special Army Jobs is Musk and any of his companies. In the halcyon days of the Trump-Musk alliance, he was getting literal billions in government contracts, awarded with no oversight and no regard for the obvious conflict of interest.

SpaceX was on track to help build the Golden Dome missile shield, a Trump fixation and boondoggle that will not work but will nonetheless cost somewhere between $119 billion and $6.4 trillion. But now there’s nary a mention of SpaceX while Golden Dome missile shield partner Palantir’s star is rapidly ascending.



How to combat infection of your system?


So I jumped from Windows to Linux, endeavouros btw, and would like to know:

how you keep your system clean?
If you are infected how do you find out? What do you do about it then?

in reply to dontbelievethis

Install updates regularly. Don't install software from unofficial sources. If you see a recommendation like run curl something | sudo bash, ignore it. And, in general, don't run anything as root unless you understand what you are doing and why this cannot be done without root privileges.
in reply to dontbelievethis

Somthing you need to be very careful is your clipboard when you copy/past from the internet to your terminal. It can contain hidden malicious code... Nasty shit !

security.stackexchange.com/que…

Always past into a text based application before pasting to your terminal.



The 16‑kilobyte curtain. How Russia’s new data‑capping censorship is throttling Cloudflare


A new form of state-level internet filtering that restricts data flow is disrupting access to large portions of the global web for Russian citizens. Cloudflare, the world leader in DDoS protection and high-traffic load management, is being targeted by these new data caps, which appear designed to push users toward Russian-controlled services. Meanwhile, the move leaves Russian businesses dangerously exposed.


The 16‑kilobyte curtain. How Russia’s new data‑capping censorship is throttling Cloudflare


A new form of state-level internet filtering that restricts data flow is disrupting access to large portions of the global web for Russian citizens. Cloudflare, the world leader in DDoS protection and high-traffic load management, is being targeted by these new data caps, which appear designed to push users toward Russian-controlled services. Meanwhile, the move leaves Russian businesses dangerously exposed.



Kamala Harris Didn’t Lose Because of Racism


Many Democrats continue to believe that the racism of average Americans — many of whom voted for Barack Obama twice — explains why Donald Trump won. This moralism suits party elites who would rather demonize the public than address growing inequality.



YSK about your search engines, and whether they have a independent search index or not


Most people either use google as their search engine, or one of the "privacy friendly ones" (ddg, qwant, brave, startpage, ...), or use self hosted or publicly available metasearch engines, like searxng, or whoogle, etc.

This websites lists out websites which have their own indexes, and which depend on big providers.

Why YSK?

It is good for your privacy to not use a big provider like google, which now prefers to serve you ai generated ssummaries, which are based on a few giant websites, and this is not good for a open web.

I am also a person who almost always uses "(insert query) reddit" to get better results, because I mostly do not want SEO spam, and reddit results used to be human generated content. Now even that is hit and miss. Also, reddit made a deal with google, so for newer results from reddit, you can only get them from google.

Then we have the "privacy friendly ones" which most of the time are wrappers for other bigger indexes, for example ddg famously uses bing, brave "suppliments" (read this suppliments as almost always) it's results from google, startpage is basically a google frontend, etc. Brave, qwant, and few others also claim to have their own indexes, but they are small and not rich as google and bing. Also, wwhen you think about it - what is their business model - how do they get money for the search apis - most either serve adds or have some form of tracking. Also, bing has "kinda" closed it's search api (not really clear about this), so many of these privacy friendly options will have to either switch to google, or only serve using their indexes.

Meta-search engines kinda seem like better options, as you can run searxng on your own machine, or use the public ones, but it still has problems. You are still bringing the big providers traffic, which makes their advertisement clients happier and prefer them over smaller search engines. If you use a public instance, then it is good for your privacy, but the public instance would now generate a lot traffic, and often get banned or rate limited, and hence you can not rely on them. If you use your personal instances (I did this for a long time), you will still be tracked as your IP is still visible. You avoid their annoying ui and popups but still are tracked.

So what should you use?

You can only decide this. I would prefer something which has a reasonable business model - if they do advertisement, that should ideally be non tracking. Ideally their client and server code should be foss (so you can verify their claims), or have paid plans or apis if you do not want ads.

For example, Kagi has only paid plans, but I do not prefer or use them, because they are expensive (5 dollars for 300 searches per month or something similar. I am from one of third world countries, and 5 dollars is a lot. plus 300 searches seem less to me) but that is subjective, and your privacy has a price, so this is not neccessarily a objectively bad thing. But their code is closed source, and they do not completely use their own indexes.

I have also used Mullvad's Leta search engine for about a month, and they are now effectively frontends for brave search or google (you can choose). Their business plan initially was that Leta was only available to their VPN clients, and VPN subscription would supplement the search cost. Now they have it available for free, so I do not really understand their business plan (maybe the number of clients they have is large enough, and number of leta users is small, that they can afford to run leta for loss, and maybe as possible advertisement for mullvad. Mullvad to me is a good privacy centric company. I am not their client, but they seem to be trust worthy. You can try them, but you would still support some big provider.

You can also try the independent search providers listed in the article. They are often small, serve bad (subjectively speaking; your taste regarding search engines is also heavily tuned to google like results because of years of exposure to it) results, but using them also supports open web (you would often find that these smaller providers do not have good indexes for big websites, and sometimes it is intentional, sometimes it is a byproduct of them being careful, or the websites banning/rate limiting then).

I have now started trying stract, and will try others too. You should also consider trying some independent search engines.

In my personal case - I have a offline setup where I have large sections of wikipedia and a few other websites (like programning language docs, or my favorite manga wiki, will be adding much of stack overflow soon) available offline, and I use my custon launcher to search through them (faster then searching them online). I bookmark a lot of sites (~ 2000) and do this to stop searching the same stuff over and over again. This has reduced at least 30-40% of all my searches. But I still need a search engine for anything I do not have currently, or stuff I do not/ can not get. I am trying stract, because it is open source, they seen to have some fine plans for business in future (non tracking, current search term related ads or subscription service ; currenlty they are running on previous funding from nlnet); search results are acceptable (not good, but servicable); and finally - it is written in RUST (I an a rust fan). I am not affiliated with the project, but just spreading a good word because I just found them, and could not find much online.

PS: I am not used to writing much, and not a good typist. Please forgive the brevity. Feel free to correct me, both on spellings and content

Questa voce è stata modificata (3 mesi fa)
in reply to sga

Very much a hit or miss, but I’ve enjoyed the marginalia search index.

Otherwise I just use duckduckgo for simplicity’s sake. But when I want a non-commercial result marginalia is my go-to.

Questa voce è stata modificata (3 mesi fa)


The Bad Science Behind Trans Medicine Bans


The conservative movement has built its case against gender-affirming care on the authority of anachronistic, faulty clinical research.