Analizzato per la prima volta con Nicer, a bordo della Iss, l’ambiente fisico in cui si verificano le eruzioni quasi periodiche (Qpe), brevi e ricorrenti esplosioni di raggi X generate da buchi neri supermassicci al centro di galassie di
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
The next stop in Stockholm was to the Vasa Museum. The Vasa was a warship built in the early-to-mid 1600s, fabulously decorated and powerfully armed, but dangerously top-heavy. The king's impatience to see her sail and become flagship of the Stockholm Archipelago squadron saw her leave port on her maiden voyage without addressing the stability issues and she caught a stiffer wind than expected, turned over, and sank after just over a kilometre. The toxicity of the water around the port actually killed off main the lifeforms that would have eaten away at Vasa's timbers so she was very well preserved when she was recovered in the twentieth century.
I visited Stockholm 15 years ago, I still remember the day we visited this museum. The story of this ship is amazing and the fact they were able to take it out of the sea and put it into a museum is even more. Highly recommended for anyone visiting Stockholm 😀
La ville de Nice et le centre LGBTQIA+ Côte d'Azur ont annoncé porter plainte contre le collectif Eros, proche de l'extrême droite, après une vidéo publiée
Molti #gatti e #cani adorano passare del tempo sul #balcone o il #terrazzo di casa. Ma questo spazio aperto dev'essere adattato con cura alle loro esigenze, per garantire ai nostri pet comfort e sicurezza #benessereesalute #greenplanner
#news #EU #membership State of play: in blue EU countries in dark green countries actively negociating membership (Ukraine, Moldova, Serbia, Albania, Montenegro, North Macedonia) in light green candidate countries (Bosnia/Herzegovina, Georgia) in yellow applicants (Kosovo) in red candidates with frozen negociation (Turkey, stalled for 10 years) Most advanced is Montenegro, and some even say it could be a full member as soon as 2028.
WACREN is pleased to announce an open call for piloting #RUMBU - a shared, community-governed #repository platform for Nigerian 🇳🇬 institutions. ‘RUMBU’ aims to bridge the infrastructure gap in Nigeria's research landscape, to foster collaboration, enhance #research visibility, and ensure compliance with global #openscience standards. See details of the call here => wacren.net/en/news/open-call-p…
The Latch Hook Covered Bridge project as of May 12, 2025
It’s a very good thing I purchased all my yarns ahead of time for this latch hook rug project.
And I shall explain.
First, a recap. Here’s the left panel of what will be a three-panel rug. And I’m currently working on the right panel, and here’s where I was the last time I blogged about the project. As I mentioned in the previous blog post, by ordering all my yarn for this project ahead of time, I’ve basically guaranteed I can finish this rug without dealing with Trumpflation or tariffs or supply chain issues. It also guarantees that I can work on this in my idle time. Whatever “idle time” actually means. Ha.
Well, I did get a burst of “idle time” going, and take a lookie at how far I got on this. So what you see here is not only the road and the curb … but you also see the right side of the fence. All the little pickets in the fence. Sweet.
And I have to mention this. Working on this rug is a calming technique for me. If I have to keep dealing with the craziness in the world today, at least I can insulate myself by working on this, so that every time I view it in progress, it’s another step towards peace and relaxation. Working on this rug keeps my blood pressure from hitting TILT.
And trust me, when we’re dealing with Trump and Musk and Kennedy Jr and all the other knuckleheads …
Organisée dans le cadre de la promotion de l’art et de la solidarité, la vente aux enchères caritative qui se tiendra le samedi 17 mai s’inscrit dans la
Wissenschaftler in den USA haben eine mögliche neue Ursache für das Insektensterben ausgemacht: Der CO2-Ausstoß der Menschheit führt dazu, dass Pflanzen weniger für Insekten wichtige Nährstoffe enthalten. nd-aktuell.de/artikel/1191146.…
@nd.Aktuell Da gabs doch auch im ZDF schon mal eine Sendung dazu. Da wurde mit Pflanzen im Zelt experientiert, wo der C02-Gehalt künstlich auf erwartete Werte in 100 Jahren oder so erhöht wurde... Die Pflanzen wuchsen zwar schneller, aber für die Tiere waren sie weniger wertvoll...
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
side note (and maybe I gave flu and it’s making me more stupid) but what are the arguments for having SSL on brochureware websites that don’t collect private information?
because we used to live in a world where ISPs, open wifi networks (cafes, etc) could intercept your HTTP responses and inject javascript/HTML into your browser to force you to see ads and/or attack you
Thanks everyone for your comments on this. I like this excerpt from doesmysiteneedhttps.com:
"this discussion isn't about PKI. It's the best system we've got for right now. Deal with it and secure your site. Use CAA records to restrict which CAs can issue certificates for your site, then cross your fingers and hope transparency and oversight works (it does, so far)".
Do you all feel that there is enough integrity in browser trusted root certificate stores to still provide robust defence against the content / malware injection threat?
Also - have these kinds of injection attacks ceased now, and is SSL the reason for this?
> Do you all feel that there is enough integrity in browser trusted root certificate stores to still provide robust defence against the content / malware injection threat?
It's the best we can do with what we've got to work with. All we can hope is that the bad actors get caught from the Certificate Transparency Logs and are swiftly removed from all root certificate stores as their punishment.
Thanks again to everyone who contributed to this thread. So this is what I'm hearing:
HTTPS still matters, even for static or non-interactive sites: • Mitigates content injection: Many ISPs and network operators have historically injected ads, tracking scripts, or even malware into unencrypted traffic. HTTPS prevents this by ensuring the integrity of the response between server and browser. • Defends against surveillance and manipulation: Examples of DNS hijacking, Gmail session spoofing, and targeted malware campaigns (e.g. FinFly), all made possible through unencrypted channels. HTTPS helps block these classes of attacks. • Removes network-level ambiguity: On public or hostile networks (e.g. hotel WiFi), HTTPS is the only realistic protection against on-path attackers modifying or observing content in transit. • Accessible and frictionless today: With Let’s Encrypt etc deployment is largely automated and cost-free for most use cases. • Normalizes secure transport: Widespread adoption means sensitive or at-risk traffic doesn’t stand out. Universal encryption helps everyone by minimizing soft targets.
On the other hand:
The CA model is a systemic weakness: Certificate Authorities remain a centralized point of failure. Trust is implicit and broad, and mechanisms like Certificate Transparency offer only partial mitigation. • Operational complexity remains an issue: Some tooling (e.g. Certbot) is complex and prescriptive, and certain practices (like root-required processes) can introduce risk or confusion for small deployments. • HTTPS doesn’t secure everything: It encrypts transport, but does not protect against compromised endpoints, malicious JavaScript, or bad site logic. • Trust shifts to browser vendors: Efforts like DNS-over-HTTPS, cert pinning, and HSTS move the locus of trust from networks to browsers — trading one set of risks for another.
Yes to basically all of this, but I would suggest that trust in browsers over networks is demonstrably better, where those browsers' source code is available. With networks there are as many chances for something to be wrong as there are networks, and each network's problems are only visible and addressable by a small group. For browsers, anyone who can see the source can evaluate it, giving a much wider opportunity to spot misconfiguration and error, and it only needs correction in one place for everyone to receive the benefit.
@charlvdwalt the content of the website doesn’t matter because the content is whatever an attacker wants it to be if you aren’t using SSL. Your brochureware is now malware.
@charlvdwalt SSL is super important and all, but that statement is awfully FUD-y. The odds of somebody actually doing that are vanishingly small, but you make it sound like their site can be replaced by anyone any time
regimes have used it as an attack vector, and so did several democracies too. ISPs have used it to inject ads. Encryption isn't only about privacy, it's critical to ensure that the contents of a message you received haven't been tampered with.
@gabrielesvelto @iagox86 @charlvdwalt The regimes most of us need to worry about all have their own CA or several they can get to do their bidding with some kind of "national security letter".
@iagox86 @charlvdwalt No, it was actually a really big issue which is why Google incentivized it. ISPs were injecting ads into random webpages, law enforcement and intelligence agencies made frequent use of it, and it was also a massive privacy risk. Almost every service provider has deep packet inspection and can/will monitor everything you do.
@iagox86 @charlvdwalt I remember a Dan Kaminsky talk about how residential ISPs were starting to inject ads into cleartext websites. This would have been maybe 2007 or so.
Imagine if the legal climate then was as it is today. SSL would be illegal. Felony disregard of business model and all (h/t @pluralistic).
@todb @iagox86 @charlvdwalt @pluralistic I remember phone interviewing with some company that was doing injections as part of "web acceleration". I did not follow up once i learned that aspect.
Also that was after working at AOL and learning their image compression was actually not bad... as long as you didn't dial all the settings down to their lowest values (as they did). So would have been sometime after 2004
- adds dependency on CA - requires one more thing to work, ie be kept updated, to request new certs regularly - locks out old devices that don't support the crypto-flavor-of-the-month - the above adds friction, which makes Cloudflare et al more attractive to not have to bother, leading to increased mono culture
Encryption by default has removed a whole category of not just attacks, but scummy business practices. A little inconvenience to administrators is not even worth talking about.
Your comment reads exactly like a politician arguing for stripping worker protections or safety regulations because they inconvenience employers.
It’s tone deaf, deliberately ignorant, and dismissive of people who get to not be taken advantage of easily due to these measures.
In practice I've had more problems with broken https cert setups blocking me from pages that I've tried to access that I've had with ISP-injected ads. But I don't live in the US where that is/was legal, so YMMV I suppose.
And the fact that Letsencrypt and Cloudflare are used by such a large percentages of websites is a huge problem, IMHO. We need fewer single-points-of-failure, not more.
@mikaeleiman @slotos I would argue you see less of the latter issue because enough sites use SSL that it's not worth the effort for the ISP to set up an advertisement injection. Prevention tends to reduce the chances of a problem occuring.
@nuintari @todb @iagox86 @charlvdwalt @pluralistic Frontier (formerly Verizon's west coast network) rewrote Google search results via DNS hijacking to add referral codes to Amazon, etc, and may or may not have added their own ads. Pre SSL, of course. I had a reproducible test case that ran via cron at home so we could see when they turned it off and on.
The irony that this page isn't HTTPS and I can't change it to HTTPS, and searches from the main website drop it down to HTTP as well isn't lost on me...
(I can only guess they have a different host for their older articles that doesn't support SSL).
@azonenberg @nuintari @todb @iagox86 @charlvdwalt @pluralistic another example I can think of is that as recently as the late 10s, there was still the issue of cell vendors inserting mobile subscribers’ MSISDNs (or similar tracking ref) using HTTP transproxies for all non-HTTPS traffic - I recall this with at least one of the big US networks, and Vodacom in ZA also did something like it. probably many others worldwide if you dig around
@azonenberg @nuintari @todb @iagox86 @charlvdwalt @pluralistic it was a very big thing on public WiFi hotspots. It would break a lot of websites cos the advertising code would just jam new HTML elements in, shitty JavaScript, conflicting versions with what the page authors used... It was a nightmare
The Romanian fascist candidate shared a post on his blog, where he addresses those who will not vote for him directly. He tells them that he will "deal with each one of them", individually, after he becomes president.
Amid the uncertainty, a range of people across the internet blasted the supposed plan, slamming it as "indefensible," "incredibly illegal," and "comically corrupt." Some critics pointed out that the reporting comes after the Trump Organization, the Saudi partner DarGlobal, and a company owned by the Qatari government last month reached a deal to build a luxury golf resort in Qatar.
Robert Kiyosaki, author of Rich Dad Poor Dad, has renewed his warning against fiat currency, urging Americans to move away from what he calls “fake money” and instead invest in Bitcoin (CRYPTO:BTC), gold, and silver.
“Welcome to the era of ‘hostage politics’, where Labour is apparently your only hope.”
“There is contempt here. Instead of changes to the tax system, and a commitment to thinking differently about an economic paradigm that has reached an undeniable dead end, Labour looks at the rising wave of populist politics and decides to tell voters that populism is the problem, not the world that created it.”
First it was the Conservatives and now Reform. The only thing the government has to offer is that it’s the least worst option, says Guardian columnist Nesrine Malik
[repost Legalna Aborcja] Nie mamy wątpliwości, że napis na tym transparencie to prawda. @abotakprzychodnia powstała właśnie po to by pomagać - bez względu na powód, bez oceniania - po to by każda osoba, która potrzebuje aborcji otrzymała wsparcie.
Powstała w tym miejscu, pod Sejmem, bo politycy i polityczki od lat udawali, że aborcji nie ma zakłamując rzeczywistość. Antyaborcyjne prawo jakie mamy w Polsce skonstruowane jest tak, by osoby, które aborcje robią zostawały z tym doświadczeniem same, wpędzane w poczucie wstydu, winy i strachu.
Ponad 130 osób dziennie robi aborcje tylko ze wsparciem #aborcjabezgranic, a 250-300 to liczba aborcji robionych w Polsce każdego dnia. 1 na 3 kobiety w Polsce ma doświadczenie aborcji. (CBOS, Doświadczenia aborcyjne Polek)
Prawo antyaborcyjne po wyborach z 2023 roku miało się zmienić, a jest coraz gorzej. Organizacje, które każdego dnia zapewniają dostęp do aborcji (wyręczając w tym państwo) nie otrzymują żadnego wsparcia od rządu. Stosunek osób u władzy do aborcji widać wyraźnie po tym co od dwóch miesięcy dzieje się pod @abotakprzychodnia - politycy i polityczki znów myślą, że jeśli odwrócą głowę to aborcja zniknie.
A aborcja jest. Nie wystarczy zamknąć oczu, by przestała być potrzebna, odwrócić głowy, by kobiety przestały ją robić. Aborcja jest, bo jest potrzebna kobietom, aby czuły się bezpieczne, aby mogły decydować o swoim życiu i o życiu swojej rodziny. Aborcja to doświadczenie wielu z nas, slogan wyborczy.
@abotakprzychodnia @aborcyjnydream dziękujemy, że jesteście! Trudniej nam jest pomoc Wam na miejscu, na Wiejskiej, ale wspieramy każdego dnia!
Im bardziej oni próbują zakazać aborcji, tym bardziej my wystawiamy ją do słońca. Dlatego idziemy o krok dalej i OTWIERAMY PIERWSZY W POLSCE STACJONARNY LOKAL! Zostań jego ambasadorką!
O líder da IL está disponível para a governação se “for para mudar Portugal”, frisando que o partido vai exigir a liberalização do mercado ferroviário, baixar o IVA da construção e o IRS.
Dal 15 al 19 maggio il #MIM sarà presente al Salone del Libro di Torino! Nello spazio espositivo del MIM, presso il padiglione Oval, saranno realizzate attività informative per i docenti, gli studenti e le famiglie con un programma di oltre 40 eventi…
Dal 15 al 19 maggio il #MIM sarà presente al Salone del Libro di Torino!
Nello spazio espositivo del MIM, presso il padiglione Oval, saranno realizzate attività informative per i docenti, gli studenti e le famiglie con un programma di oltre 40 eventi…
Il #Pkk depone le armi e annucia lo scioglimento mettendo fine alla #guerra con la #Turchia durata 40 anni. Resta da vedere quali effetti concreti potrà avere sul piano politico e sociale, sia per le comunità curde in patria sia per il destino di Abdullah #Ocalan, ancora al centro di un dibattito acceso nel Paese.
“Intelligenza artificiale, intelligenza emotiva: futuro semplice o imperfetto?” è il tema della conferenza in programma sabato 10 maggio 2025 alle ore 9.00 nell’aula magna di giurisprudenza a Palazzo Cavallini, via San Faustino 41 a Brescia. Relatori Francesco Morace, Cosimo Accoto, Arturo Di Corinto, Daniele Monteleone, Nicoletta Cusano Salvatore Frattallone. Moderatori Teresa Croce e Luigi Della Bora; introduzione a cura del prof. Maurizio Tira. L’iniziativa è sotto l’egida di Lions, Leo, Fondazione Lions Clubs Distretto 108 Ib2 “Bruno Bnà” Ets, Comune di Brescia, Università degli Studi di Brescia e Fondazione UniBS.
🏛️ ■ El 'talón de Aquiles' socialista: los mensajes de Ábalos y Sánchez despiertan un nuevo revuelo político ■ El diario El Mundo desvela conversaciones entre el presidente del Gobierno y Ábalos una vez este fuese destituido. huffingtonpost.es/politica/el-…
Hamas and the United States announced an agreement today that will lead to the freeing of Israeli soldier Edan Alexander, a dual American citizen, ahead of President Donald Trump’s trip to the region.
Trump lashed out at bipartisan critics after reports revealed he plans to accept a $400 million Boeing 747-8 jet from Qatar for use as Air Force One.
In a Truth Social post, Trump dismissed concerns as “world class losers” complaining about a transparent gift. Qatar stated the plane is under legal review between its Ministry of Defense and the Pentagon.
Critics, including Sen. Bernie Sanders, Sen. Chris Murphy, and Rep. Jamie Raskin, accused Trump of corruption and violating the Constitution.
Even allies like Laura Loomer led the MAGA pushback to the jet deal.
Besides the obvious corruption, it's a national security issue. I'm not an aircraft designer, but I'm pretty sure there's quite a bit of electronics aboard that craft. Pretty easy to slip in a few listening devices.
Not to mention the refit to include all the secure communication equipment Air Force One has. Also ECM, active countermeasures, NBC equipment, refuelling, etc.
Mike
in reply to The Eddie Show 📷🎧❤️ • • •