Salta al contenuto principale



Grave vulnerabilità nel plugin Forminator di WordPress: oltre 600.000 siti a rischio


Una grave vulnerabilità sta mettendo in allarme la comunità di WordPress, con oltre 600.000 siti web a rischio a causa di una falla nel plugin Forminator. L’exploit, identificato con il codice CVE-2025-6463, è stato classificato con un indice di gravità di 8.8 su 10 secondo il sistema CVSS, evidenziando il suo elevato grado di pericolosità.

Questa falla sfrutta una combinazione di debolezze nel sistema di validazione dei campi e nella logica di eliminazione dei file. Gli attaccanti possono utilizzarla per forzare l’eliminazione del file wp-config.php, un elemento essenziale per la configurazione di WordPress. Una volta eliminato, il sito viene riportato alla fase di installazione iniziale, consentendo ai malintenzionati di collegarlo a un database sotto il loro controllo e ottenere il pieno accesso al sito.

Secondo i dati ufficiali di WordPress.org, il plugin Forminator è attualmente utilizzato da oltre 600.000 siti attivi in tutto il mondo. Sebbene sia stata rilasciata una patch correttiva nella versione 1.44.3, il numero di download dell’aggiornamento – circa 200.000 – suggerisce che molti siti rimangono vulnerabili. Questa discrepanza sottolinea la lentezza con cui molti amministratori di siti web affrontano le questioni di sicurezza, aumentando il rischio di compromissione.

ilsoftware.it/grave-vulnerabil…





Un anno senza aggiornamenti. Ha ancora senso la comunità "Erotica"?


Sensitive content





Arrivano nuovi link profilo per SimpleX


da simplex.chat/blog/20250703-sim…

SimpleX Chat ha risolto un grosso problema: prima era difficilissimo aggiungere nuovi contatti perché bisognava condividere link lunghissimi e complessi che sembravano quasi dei virus o comunque dei link poco sicuri.

Ora hanno creato link corti e semplici e facili da mostrare anche tramite codice QR e puoi vedere subito chi stai aggiungendo prima di iniziare a chattare.



Patti Smith - Banga (2012)


Tirando in ballo il cane di Ponzio Pilato chiamato "Banga" (dal libro "Il maestro e Margherita" di Bulgakov), la nostra sacerdotessa del rock pubblica il suo undicesimo album. Disco di inediti (a parte un brano) che esce a otto anni da Trampin' e a cinque da Twelve, album di solo cover... Leggi e ascolta...


Patti Smith - Banga (2012)


immagine

Tirando in ballo il cane di Ponzio Pilato chiamato “Banga” (dal libro “Il maestro e Margherita” di Bulgakov), la nostra sacerdotessa del rock pubblica il suo undicesimo album. Disco di inediti (a parte un brano) che esce a otto anni da Trampin' e a cinque da Twelve, album di solo cover. Patti Smith pubblica un'album di canzoni, quelle classiche, quelle che seguono la “forma” vera, ballate che raccontano “storie” di persone, fatti e tragedie personali e sociali. Tra i brani infatti, troviamo riferimenti che vanno dal terremoto in Giappone alle scomparse di Amy Winehouse e Maria Schneider. Le dodici canzoni che compongono l'album sono costruite su testi importanti, sono riflessioni ed esperienze, cariche di poesia e di reale vita quotidiana. Dodici canzoni per dodici tributi, dodici omaggi a persone, amici, personalità e popoli che in qualche modo hanno colpito i sentimenti della poetessa e che poi ha messo in musica... artesuono.blogspot.com/2014/11…


Ascolta: album.link/i/529605595


HomeIdentità DigitaleSono su: Mastodon.uno - Pixelfed - Feddit






'I've been turned into an AI train announcer - and no one told me'


This is pretty disturbing, I hope she gets a massive paycheck for this violation.



Trump’s Defiance of TikTok Ban Prompted Immunity Promises to 10 Tech Companies


FOIA.

The Justice Department is advancing a radical theory of presidential power, nullifying Congress’s foreign affairs powers whenever the president finds them inconvenient.

These letters provide a legal rationale (if it can be called that) for the Trump administration’s commitment not to enforce the Protecting Americans from Foreign Adversary Controlled Applications Act (PAFACAA), the divestment-or-ban law that the Supreme Court upheld in January. The letters make two central claims, both of which are astonishing in their breadth and implications for executive power.

  • Akamai Technologies
  • Amazon
  • Apple Inc.
  • Digital Realty Trust, Inc.
  • Fastly, Inc.
  • Google, Inc.
  • LG Electronics USA, Inc.
  • Microsoft Corporation
  • Oracle Corporation
  • T-Mobile US, Inc.
Questa voce è stata modificata (2 mesi fa)


Trump’s Defiance of TikTok Ban Prompted Immunity Promises to 10 Tech Companies


FOIA.

The Justice Department is advancing a radical theory of presidential power, nullifying Congress’s foreign affairs powers whenever the president finds them inconvenient.

These letters provide a legal rationale (if it can be called that) for the Trump administration’s commitment not to enforce the Protecting Americans from Foreign Adversary Controlled Applications Act (PAFACAA), the divestment-or-ban law that the Supreme Court upheld in January. The letters make two central claims, both of which are astonishing in their breadth and implications for executive power.

  • Akamai Technologies
  • Amazon
  • Apple Inc.
  • Digital Realty Trust, Inc.
  • Fastly, Inc.
  • Google, Inc.
  • LG Electronics USA, Inc.
  • Microsoft Corporation
  • Oracle Corporation
  • T-Mobile US, Inc.
Questa voce è stata modificata (2 mesi fa)


Thanks to the "you need to buy a new PC for running W11" bullshit, scammers are selling ewaste at full price to inexperienced people


And from the glowing reviews it's clear that

  1. W11 doesn't actually need a new PC to run and the limitations are completely artificial
  2. For many people, a ten years old PC is fast enough (or even faster than a brand new Intel N100 PC that is officially W11 compatible). They won't even notice that's something from 2015, as long it has a shiny new case, enough RAM and SSD
  3. Amazon doesn't care that the PC comes with pirated software, or that someone is scamming their customers, as long they get their 15% cut from marketplace sales (the cost of a genuine license of W11 pro and office exceeds the price of those ewaste specials)

don't like this

in reply to Moonrise2473

Could you explain why you consider these overpriced/scam? If those use new parts and come with warranty, at least the top one, seems fine. Can you do a breakdown of what it should cost?

My Windows PC has i5-6500 in it and I definitely don't consider it e-waste.

Questa voce è stata modificata (2 mesi fa)
in reply to Farid

I call it ewaste because it is coming from that. Banks and corporations change computers every 3-5 years because accounting love to lease rather to buy

Those computers go to ewaste centers, then some not honest sellers take the components (that usually were left on 24/7 because in offices nobody bothers to turn off computers) and put them in brand new cases

That's why is a scam, selling old stuff that came from an ewaste center as brand new

in reply to Moonrise2473

But "e-waste" means something so outadet that it's useless. Or unrepairable. Those computers are perfectly fine for 80% of users.

And are they explicitly saying that these are new? While you know for sure it's heavily used equipment?

in reply to Moonrise2473

But are you certain they aren't new and this is a scam? I'm interested to know how you determined those are used.

Btw, where does it say "Nuovo"? I can't find it. Is it not on the screenshot?

Questa voce è stata modificata (2 mesi fa)
in reply to Moonrise2473

So keeping it from being actual ewaste it's now going to be used by someone... That seems like a good thing.

The only downside I see is that it isn't disclosed

in reply to Jakeroxs

My gripe with that is that the seller is scamming inexperienced people, they think that they are buying a brand new PC while instead it's not

(The fact that a 400 euro PC includes 600 euro of software licenses should ring a bell about the legitimacy to the buyer, though)

in reply to Moonrise2473

How are they scamming? They list the specs right there again the only issue is that they are used parts potentially, but I'm not sure how you know these examples are specifically sourced as you claim.
in reply to Jakeroxs

It is unrealistic that parts with that age are brand new, available in that quantity. It might happens that some distributor misplaces some box and a couple computers are old new stock after a decade, but hundreds?

Also: W11 pro OEM is 120 euro and office 365 perpetual doesn't even exist, and if they meant office 2024 home and business is 299 euro. 120+299 exceed the listing price

in reply to Moonrise2473

Banks and corporations change computers every 3-5 years because accounting love to lease rather to buy


3-5 years is a pretty standard depreciation schedule for IT equipment like computers, peripheral accessories etc.

Computers and laptops (using Straight-line method): 31.67% with a useful life of 3 years.

Computers and laptops (using Written Down Value method): 63.16% with a useful life of 3 years

It really has nothing to do with leasing vs. buying.

in reply to LilB0kChoy

Yes ok from an accounting point of view.

But from a functional point of view?

I see how my bank teller works: they connect to a terminal server

I see how my other bank works: a VM that runs AS/400 that is acting as a terminal to their mainframe

Why they're changing computers so often? The first one can use any PC released in the past 15 years and the second one can use any released in the past 30 years



World Health Organization (WHO) launches bold push to raise health taxes and save millions of lives



The “3 by 35” Initiative targets tobacco, alcohol, and sugary drinks to cut deaths and boost health and development funding

The World Health Organization (WHO) today has launched a major new initiative urging countries to raise real prices on tobacco, alcohol, and sugary drinks by at least 50% by 2035 through health taxes in a move designed to curb chronic diseases and generate critical public revenue. The “3 by 35” Initiative comes at a time when health systems are under enormous strain from rising noncommunicable diseases (NCDs), shrinking development aid and growing public debt.

The consumption of tobacco, alcohol, and sugary drinks are fueling the NCD epidemic. NCDs, including heart disease, cancer, and diabetes, account for over 75% of all deaths worldwide. A recent report shows that a one-time 50% price increase on these products could prevent 50 million premature deaths over the next 50 years.







Big Tech Execs Commissioned into the Army [16:52 | JUL 03 2025 | Glenn Greenwald]


cross-posted from: lemmy.world/post/32434347

Skip Timestamps and Generated Summary below:

Skip Timestamps:

  1. 0:00.000 - 0:06.250 Intermission
  2. 14:21.000 - 16:26.000 Sponsor

Generated Summary:

Main Topic: The increasing integration of Big Tech companies with the US government and military, specifically focusing on the commissioning of tech executives into the Army Reserve.

Key Points:

  • Tech Execs Joining the Army: Executives from Meta, OpenAI, and Palantir are joining the US Army Reserve as part of a new "Innovation Corps" (Detachment 2011) to bring tech upgrades to the military.
  • Motivations: The tech executives cite patriotism and a desire to equip the military for conflicts with high-tech adversaries like China. The speaker suggests the tech sector will also profit from this arrangement.
  • Fascism Analogy: The speaker draws a parallel to fascism, where there is no separation between the public and private sectors, and corporations and the government work together for the same goals.
  • Debunking the "Aversion" Myth: The speaker refutes the idea that Silicon Valley was previously averse to working with the military, citing examples like the Snowden revelations and existing contracts between tech companies and intelligence agencies (CIA, NSA).
  • Historical Context: The speaker references John Poindexter and Palantir's origins, highlighting the long-standing relationship between Silicon Valley and the intelligence community.
  • Alarming Language: The speaker finds the language used by the tech executives about uniting American innovation with the military's mission to be alarming, echoing the core tenet of fascism.
  • Eisenhower's Warning: The speaker invokes Dwight Eisenhower's warning about the militarization of American life, suggesting that this integration is a realization of that warning on a grander scale.

Highlights:

  • The commissioning of tech executives into the Army Reserve is presented as a significant development, symbolizing the deepening ties between Big Tech and the US military.
  • The speaker emphasizes the potential dangers of this integration, drawing parallels to fascism and raising concerns about the erosion of the separation between corporate and state power.
  • The historical context provided challenges the narrative of a recent shift in Silicon Valley's relationship with the military, revealing a long history of cooperation.

About Channel:

Independent, Unencumbered Analysis and Investigative Reporting, Captive to No Dogma or Faction.



Emerald Lake loop Yoho National Park, BC


Nature walk, 3.2 mi loop
406 ft
Hiked 6/5/25

An extremely popular lake in Yoho National Park, this nature walk can be done as a full loop or shortened to near nothing and still be enjoyable. Named for its vibrant color, Emerald lake is surrounded on all sides by stunning views of the local mountains, and serves as an access to several great larger hikes such as Yoho Pass/Yoho Lake.

Looking south across Emerald lake towards Mount Burgess which is reflected in the rippled water.

The view from the south side of Emerald lake showing the avalanche zone of Emerald peak, which was still closed due to avalanche risk at the time.

Looking north from Emerald lake shows the vast avalanche field and flood plains that feeds the lake. Carmar peak, Mt Marpole, and the ridge leading up to the President sit in the background.



La musica e il dilemma: che aspetto avrebbe avuto l'immortale Lady Greensleves? - Il blog di Jacopo Ranieri









[JS Required] The Locknet: How China Controls Its Internet and Why It Matters


Questa voce è stata modificata (2 mesi fa)


[JS] The Locknet: How China Controls Its Internet and Why It Matters


Questa voce è stata modificata (1 settimana fa)


Large majority of French, German and Spanish public back tough EU stance on Big Tech, despite risk to Trump relations


Around half also believe Big Tech companies are more powerful than the EU
Questa voce è stata modificata (2 mesi fa)

Kilgore Trout doesn't like this.



Large majority of French, German and Spanish public back tough EU stance on Big Tech, despite risk to Trump relations


Around half also believe Big Tech companies are more powerful than the EU
Questa voce è stata modificata (2 mesi fa)


Researchers finds high levels of dangerous air particles(PM2.5) in air near electric vehicle fast charging stations.


  • At the charging stations, daily concentrations of dangerous air particles, known as PM2.5, ranged from 7.3 to 39.0 micrograms per cubic meter.
  • Urban sites without fast-charging stations had concentrations of PM2.5 ranging from only 3.6 to 12.4 micrograms per cubic meter.
  • The tiny particles likely come from particle resuspension around Direct Current Fast Charging power cabinets. Cooling fans designed to prevent the electronics from overheating can also stir up dust and particles from internal surfaces.
Questa voce è stata modificata (2 mesi fa)


Researchers finds high levels of dangerous air particles(PM2.5) in air near electric vehicle fast charging stations.


  • At the charging stations, daily concentrations of dangerous air particles, known as PM2.5, ranged from 7.3 to 39.0 micrograms per cubic meter.
  • Urban sites without fast-charging stations had concentrations of PM2.5 ranging from only 3.6 to 12.4 micrograms per cubic meter.
  • The tiny particles likely come from particle resuspension around Direct Current Fast Charging power cabinets. Cooling fans designed to prevent the electronics from overheating can also stir up dust and particles from internal surfaces.
Questa voce è stata modificata (2 mesi fa)


“Guidare in America”


Non avevo troppo idea che guidare negli Stati Uniti fosse così… crazy… (e ormai questo è l’unico aggettivo che so usare per porre enfasi positiva, un po’ come i redditor che usano sempre e solo la parola “wholesome”, ma lasciamo stare…) ma a quanto pare quelli lì hanno fatto anche cose… non direi buone, però […]

octospacc.altervista.org/2025/…


“Guidare in America”


youtube.com/watch?v=LxLw120wrq…

Non avevo troppo idea che guidare negli Stati Uniti fosse così… crazy… (e ormai questo è l’unico aggettivo che so usare per porre enfasi positiva, un po’ come i redditor che usano sempre e solo la parola “wholesome”, ma lasciamo stare…) ma a quanto pare quelli lì hanno fatto anche cose… non direi buone, però ecco, la proverbiale medaglia che da un lato è schifosa marcia dall’altro lato è evidentemente quasi scintillante.

Si parla ovviamente di guidare veicoli personali a motore, e quindi nel 99% dei casi automobili… mostri gargantueschi che ricordano automobili, si intende, ma da nazionalista europea giustamente sto già digressando. Gli autobus lì nell’isolotto oltreoceanico sono rari come miraggi, i treni quasi letteralmente non sanno cosa siano, e le distanze di tutti i giorni sono talmente grosse che parlare di monopattini (un saluto al nostro caro e sempre sul pezzo Salvini, a tal proposito) e bici elettriche sarebbe completamente fuori contesto… però, guardando tutta la cosa dalla prospettiva di un ipotetico guidatore, anziché pedone e cittadino (magari europeo…) con il desiderio di vivere in ambienti a misura umana, davvero bisogna dire che lì se la passano bene, alla grande, al top, al SUV, al…

Che lì il carburante costi in media poco (anche se non in tutti gli stati è economico quanto in Florida; o costoso quanto in Florida, suppongo) lo si sapeva già… anche se, da gran tirchia e abituata alla gratuità del camminare (e della bici non elettrica, appena me la prendo), pure 50 dollari per ~60 litri di benzina a me fanno male al cuore… ma altre cose mi colgono un po’ di sorpresa, invece. Tipo, non avevo mai pensato al fatto che le loro strade fossero sensibilmente più larghe delle nostre… suppongo che in video e film a caso non si noti e bisogna provare di persona per accorgersene, però, quindi ok. Così come (al di fuori dei vari scherzi) ignoravo che lì siano tutti relativamente imbranati a guidare… perché qui in Italia la gente non mi sembra chissà quanto competente, e perché non immaginavo che lì avessero automobili così avanzate da arrivare letteralmente a guidarsi da sole (anche quelle non fighette-Tesla “full self driving”, e che evidentemente li rendono più incapaci).

Insomma, roba da pazzi questa America, e quindi forse un po’ riesco a capire innanzitutto come mai il sogno americano non sia morto tra chi vive lì, e poi in che modo i loro bimbi siano capaci di imparare a guidare a soli 8 anni solo grazie a YouTube. E questo per non parlare di come sono assolutamente implosa quando Francescone ha detto che lì per prendere la patente si spendono appena 50 dollari (e il web mi conferma che la media in tutti gli USA è tra 50 e 100 dollari)… altro che il latrocinio non solo italiano, ma europeo! Qui io devo stare sveglia la notte per architettare come dovrei fare a prendermi la patente senza troppa sbatta e riuscendo ancora a scroccarla ai miei genitori — giusto per tenerla nel cassetto per le emergenze, proprio giusto a prendere polvere, perché invece di guidare in Italia non c’ho sbatta e preferisco farmi le strade provinciali in pattini a rotelle — e invece loro stanno beati nella Land of The Free (la stessa dove è molto pericoloso criticare il presidente, ma intanto…)

#America #car #DaCostaACosta #driving #FrancescoCosta #guidare #USA




Judge rejects executive order claiming ‘invasion’ at the border


A federal judge Wednesday ruled as unlawful an executive order by President Donald Trump that barred asylum by claiming an “invasion” at the southern border and the need to protect states.

“The President cannot adopt an alternative immigration system, which supplants the statutes that Congress has enacted,” District of Columbia U.S. District Judge Randolph Moss wrote in his opinion.

“Here, nothing in the (Immigration and Nationality Act) or the Constitution grants the President or his delegees the sweeping authority asserted in the Proclamation and implementing guidance,” continued Moss, who was appointed by former President Barack Obama.

The order from Moss also prevents the U.S. Department of Homeland Security from enforcing the executive order.

He also agreed to certify a class for potential asylum-seekers, which comes after last week’s Supreme Court ruling that curtailed nationwide injunctions from lower courts. Certifying a class was suggested by the court to give judges an avenue to make an order broader.

https://northdakotamonitor.com/2025/07/02/repub/trump-dealt-loss-as-judge-rejects-executive-order-claiming-invasion-at-the-border/



Bondi made changes to DOJ policy. Her former client Pfizer might have benefited


For the past several years, pharmaceutical giant Pfizer has been under investigation by the U.S. Department of Justice for potential foreign corruption violations related to its activities in China and Mexico, according to the company’s financial filings.

But that appears to have changed after the Trump administration tapped Pam Bondi — previously an outside legal counsel for Pfizer — to lead the Justice department as attorney general.

In the company’s most recent annual report, filed three weeks after Bondi took office in early February, there was no longer any reference to the Justice Department investigations into the company’s potential violation of the Foreign Corrupt Practice Act. A quarterly report in May also contains no reference to these investigations.



[JS] The Past, Present, and Future of Police Body Cameras


Artificial intelligence (AI) is reshaping the criminal justice system. Law enforcement agencies are using it to predict crime, expedite response, and streamline routine tasks. One of the most promising applications can be found in body camera programs, where AI is transforming unmanageable archives of footage into active sources of insight.

AI can now analyze hundreds of hours of video in seconds. Early pilot programs suggest that these video-reviewing tools, when guided by human oversight, can uncover critical evidence that might otherwise be overlooked, reduce pretrial bottlenecks, and identify potential instances of officer misconduct. But these benefits come with risks. Absent clear guardrails, the same technologies could drift toward government overreach, blurring the line between public safety and state surveillance.

The line between public security and state surveillance lies not in technology, but in the policies that govern it. To responsibly harness AI and mitigate these risks, we recommend that agencies and policymakers:


  • Establish and enforce clear use policies. Statewide rules for body camera use and AI governance ensure consistency across jurisdictions, particularly in areas like body camera activation, evidence sharing, and public disclosure.
  • Pair technology with human oversight. AI should enhance—not replace—human decision-making. Final judgments must rest with trained personnel, supported by independent policy oversight from civilian review boards.
  • Safeguard civil liberties. Safeguards must be in place to protect individual rights, limit surveillance overreach, and ensure data transparency. For example, limiting facial recognition during constitutionally protected activities like protests will help ensure AI is aligned with democratic ideals.


With the right guardrails in place, AI can elevate body cameras from after-action archival tools to always-on intelligence tools, informing decisions in the moment, when it matters most.
Questa voce è stata modificata (1 settimana fa)


[JS Required] The Past, Present, and Future of Police Body Cameras


Artificial intelligence (AI) is reshaping the criminal justice system. Law enforcement agencies are using it to predict crime, expedite response, and streamline routine tasks. One of the most promising applications can be found in body camera programs, where AI is transforming unmanageable archives of footage into active sources of insight.

AI can now analyze hundreds of hours of video in seconds. Early pilot programs suggest that these video-reviewing tools, when guided by human oversight, can uncover critical evidence that might otherwise be overlooked, reduce pretrial bottlenecks, and identify potential instances of officer misconduct. But these benefits come with risks. Absent clear guardrails, the same technologies could drift toward government overreach, blurring the line between public safety and state surveillance.

The line between public security and state surveillance lies not in technology, but in the policies that govern it. To responsibly harness AI and mitigate these risks, we recommend that agencies and policymakers:


  • Establish and enforce clear use policies. Statewide rules for body camera use and AI governance ensure consistency across jurisdictions, particularly in areas like body camera activation, evidence sharing, and public disclosure.
  • Pair technology with human oversight. AI should enhance—not replace—human decision-making. Final judgments must rest with trained personnel, supported by independent policy oversight from civilian review boards.
  • Safeguard civil liberties. Safeguards must be in place to protect individual rights, limit surveillance overreach, and ensure data transparency. For example, limiting facial recognition during constitutionally protected activities like protests will help ensure AI is aligned with democratic ideals.


With the right guardrails in place, AI can elevate body cameras from after-action archival tools to always-on intelligence tools, informing decisions in the moment, when it matters most.


Republican FCC scraps ban on prison phone price gouging, a gift to some of his big donors


The Federal Communications Commission will no longer enforce a rule capping the price of prison phone calls, according to an announcement made Monday by FCC Chairman Brendan Carr.

The move suspends a 2024 FCC decision that capped the price of in-state phone calls at 6 cents minute for prisons and large jails and 7 cents per minute for medium-sized jails. Before the decision, a 15-minute phone call could cost as much as $11.35 at large jails in some states. Under the 2024 rules, those same phone calls would cost 90 cents.