“Per il ministro Urso il problema dell’ex Ilva è l’Autorizzazione Integrata Ambientale, come se a pesare sulla trattativa con Baku Steel fosse l’eccesso di vincoli ambientali.
“Grazie, cari amici, per il vostro servizio alla verità”. È l’omaggio ai rappresentanti dei media convenuti a Roma per il Conclave e ricevuti oggi in udienza in Aula Paolo VI.
Analizzato per la prima volta con Nicer, a bordo della Iss, l’ambiente fisico in cui si verificano le eruzioni quasi periodiche (Qpe), brevi e ricorrenti esplosioni di raggi X generate da buchi neri supermassicci al centro di galassie di
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
The next stop in Stockholm was to the Vasa Museum. The Vasa was a warship built in the early-to-mid 1600s, fabulously decorated and powerfully armed, but dangerously top-heavy. The king's impatience to see her sail and become flagship of the Stockholm Archipelago squadron saw her leave port on her maiden voyage without addressing the stability issues and she caught a stiffer wind than expected, turned over, and sank after just over a kilometre. The toxicity of the water around the port actually killed off main the lifeforms that would have eaten away at Vasa's timbers so she was very well preserved when she was recovered in the twentieth century.
I visited Stockholm 15 years ago, I still remember the day we visited this museum. The story of this ship is amazing and the fact they were able to take it out of the sea and put it into a museum is even more. Highly recommended for anyone visiting Stockholm 😀
La ville de Nice et le centre LGBTQIA+ Côte d'Azur ont annoncé porter plainte contre le collectif Eros, proche de l'extrême droite, après une vidéo publiée
Molti #gatti e #cani adorano passare del tempo sul #balcone o il #terrazzo di casa. Ma questo spazio aperto dev'essere adattato con cura alle loro esigenze, per garantire ai nostri pet comfort e sicurezza #benessereesalute #greenplanner
📣 We're looking for communities and individuals interested in setting up their own Bonfire instances over the next weeks. We need your help to: - Use Bonfire in real-world scenarios - Federate with each other and the wider fediverse to test interoperability - Monitor performance under active use
Your feedback will help us get Bonfire Social across the finish line to a stable 1.0 release! We’ll be happy to provide guidance throughout the whole process ✊
For those interested in setting up Bonfire with a declarative approach on #Guix systems let me know if I can help. Currently my personal instance is running on the latest Guix at bonfire.fishinthecalculator.me .
@sounddrill @pescetarian I do completely back up this proposal: at a minimum, Bf should work with any standard ActivityPub client.
Then, if certain features specific to Bf are not implemented on them, it makes total sense to add them to a specific client.
Also, a progressive web app seems a very solid starting point bcs sustaining a native app takes a huge effort along time, and it is debatable if this is the best use of the limited efforts available as of now. 😀
We did implement a partial Mastodon REST API as a proof-of-concept (attached are some screenshots of a Bonfire feed displayed in different clients). Of course that would come with several limitations, like when displaying activity/objects/metadata not supported by the API and client, or with features not available such as the option to select custom boundaries/circles when posting...
So it could be possible but would offer quite a limited window into Bonfire while being quite an extensive API to maintain. We'd welcome contributors/PRs who want to make that happen though!
Not a programmer here, but if UX/interaction is useful, we already collaborated a bit before and can happily engage again. 😀
I heard and understand the point, but still think that interoperability with the rest of the Fediverse (as possible) is crucial.
Also, having seen people maintaining native apps for IOS and Android (ind it's various parallel working versions), just wanted to warn about the (potentially) upcoming ragnarok that could ensue... ^_^"
@pescetarian @sounddrill @edumerco i would also think having a masto compatible REST API would be a huge boon for your project. there's a very strong and high-quality app ecosystem. you mention this would be a limited window onto Bonfire, is that just because you only implemented a proof-of-concept so far, or is it because Bonfire would have features that the existing clients wouldn't support (yet)?
(i maintain a client for mastodon API servers, and i explicitly aim to ensure support for software beyond mastodon itself. i suspect other client devs would behave similarly, but this only happens on the basis of supporting the masto api.)
Context As Bonfire continues to evolve, we frequently receive questions and proposals about client compatibility and API support. This issue summarizes the main client API options available or that...
> you mention this would be a limited window onto Bonfire, is that just because you only implemented a proof-of-concept so far, or is it because Bonfire would have features that the existing clients wouldn't support (yet)?
It's because of features not available in the Masto API schema (like boundaries/circles) but also since Bonfire is extensible and some extensions implement new object/activity types beyond the note/post...
As mentioned in the issue, we could extend the API but then each client would have to specifically implement the additions. There's a risk of duplicating types added by other apps in incompatible ways unless there's something like FEPs or RFCs for the API schema?
I’ve been reflecting for some time on building a local social network prototype for my city, aimed at connecting people who are dissatisfied and seeking solutions to their everyday problems, starting from their own neighborhoods. At the same time, I’d like this medium to give rise to a local journalism collective made up of these people and focused on these issues.
#news #EU #membership State of play: in blue EU countries in dark green countries actively negociating membership (Ukraine, Moldova, Serbia, Albania, Montenegro, North Macedonia) in light green candidate countries (Bosnia/Herzegovina, Georgia) in yellow applicants (Kosovo) in red candidates with frozen negociation (Turkey, stalled for 10 years) Most advanced is Montenegro, and some even say it could be a full member as soon as 2028.
Pour des questions perso, je suis à la recherche de personne trans qui ont pas fait leur CEC mais qui se sont présenté.es à des élections (pro ou municipales....)
“Permettetemi di ribadire oggi la solidarietà della Chiesa ai giornalisti incarcerati per aver cercato e raccontato la verità, e di chiederne la liberazione”.
WACREN is pleased to announce an open call for piloting #RUMBU - a shared, community-governed #repository platform for Nigerian 🇳🇬 institutions. ‘RUMBU’ aims to bridge the infrastructure gap in Nigeria's research landscape, to foster collaboration, enhance #research visibility, and ensure compliance with global #openscience standards. See details of the call here => wacren.net/en/news/open-call-p…
The Latch Hook Covered Bridge project as of May 12, 2025
It’s a very good thing I purchased all my yarns ahead of time for this latch hook rug project.
And I shall explain.
First, a recap. Here’s the left panel of what will be a three-panel rug. And I’m currently working on the right panel, and here’s where I was the last time I blogged about the project. As I mentioned in the previous blog post, by ordering all my yarn for this project ahead of time, I’ve basically guaranteed I can finish this rug without dealing with Trumpflation or tariffs or supply chain issues. It also guarantees that I can work on this in my idle time. Whatever “idle time” actually means. Ha.
Well, I did get a burst of “idle time” going, and take a lookie at how far I got on this. So what you see here is not only the road and the curb … but you also see the right side of the fence. All the little pickets in the fence. Sweet.
And I have to mention this. Working on this rug is a calming technique for me. If I have to keep dealing with the craziness in the world today, at least I can insulate myself by working on this, so that every time I view it in progress, it’s another step towards peace and relaxation. Working on this rug keeps my blood pressure from hitting TILT.
And trust me, when we’re dealing with Trump and Musk and Kennedy Jr and all the other knuckleheads …
Nel 2024-25 solo quattro regioni italiane hanno garantito una copertura completa per i neonati. Secondo i dati rilasciati da Cittadinanzattiva, la protezione pe
I enjoyed the Pakistani animation “The Glassworker” (on SBSOnDemand in Australia). The visuals are stunning, and it’s such an undisguised homage to Miyazaki that it seems wrong-headed to decry it as derivative. Unsure what to make of the ending, but definitely worth watching.
Wissenschaftler in den USA haben eine mögliche neue Ursache für das Insektensterben ausgemacht: Der CO2-Ausstoß der Menschheit führt dazu, dass Pflanzen weniger für Insekten wichtige Nährstoffe enthalten. nd-aktuell.de/artikel/1191146.…
@nd.Aktuell Da gabs doch auch im ZDF schon mal eine Sendung dazu. Da wurde mit Pflanzen im Zelt experientiert, wo der C02-Gehalt künstlich auf erwartete Werte in 100 Jahren oder so erhöht wurde... Die Pflanzen wuchsen zwar schneller, aber für die Tiere waren sie weniger wertvoll...
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
side note (and maybe I gave flu and it’s making me more stupid) but what are the arguments for having SSL on brochureware websites that don’t collect private information?
because we used to live in a world where ISPs, open wifi networks (cafes, etc) could intercept your HTTP responses and inject javascript/HTML into your browser to force you to see ads and/or attack you
Thanks everyone for your comments on this. I like this excerpt from doesmysiteneedhttps.com:
"this discussion isn't about PKI. It's the best system we've got for right now. Deal with it and secure your site. Use CAA records to restrict which CAs can issue certificates for your site, then cross your fingers and hope transparency and oversight works (it does, so far)".
Do you all feel that there is enough integrity in browser trusted root certificate stores to still provide robust defence against the content / malware injection threat?
Also - have these kinds of injection attacks ceased now, and is SSL the reason for this?
> Do you all feel that there is enough integrity in browser trusted root certificate stores to still provide robust defence against the content / malware injection threat?
It's the best we can do with what we've got to work with. All we can hope is that the bad actors get caught from the Certificate Transparency Logs and are swiftly removed from all root certificate stores as their punishment.
Thanks again to everyone who contributed to this thread. So this is what I'm hearing:
HTTPS still matters, even for static or non-interactive sites: • Mitigates content injection: Many ISPs and network operators have historically injected ads, tracking scripts, or even malware into unencrypted traffic. HTTPS prevents this by ensuring the integrity of the response between server and browser. • Defends against surveillance and manipulation: Examples of DNS hijacking, Gmail session spoofing, and targeted malware campaigns (e.g. FinFly), all made possible through unencrypted channels. HTTPS helps block these classes of attacks. • Removes network-level ambiguity: On public or hostile networks (e.g. hotel WiFi), HTTPS is the only realistic protection against on-path attackers modifying or observing content in transit. • Accessible and frictionless today: With Let’s Encrypt etc deployment is largely automated and cost-free for most use cases. • Normalizes secure transport: Widespread adoption means sensitive or at-risk traffic doesn’t stand out. Universal encryption helps everyone by minimizing soft targets.
On the other hand:
The CA model is a systemic weakness: Certificate Authorities remain a centralized point of failure. Trust is implicit and broad, and mechanisms like Certificate Transparency offer only partial mitigation. • Operational complexity remains an issue: Some tooling (e.g. Certbot) is complex and prescriptive, and certain practices (like root-required processes) can introduce risk or confusion for small deployments. • HTTPS doesn’t secure everything: It encrypts transport, but does not protect against compromised endpoints, malicious JavaScript, or bad site logic. • Trust shifts to browser vendors: Efforts like DNS-over-HTTPS, cert pinning, and HSTS move the locus of trust from networks to browsers — trading one set of risks for another.
Yes to basically all of this, but I would suggest that trust in browsers over networks is demonstrably better, where those browsers' source code is available. With networks there are as many chances for something to be wrong as there are networks, and each network's problems are only visible and addressable by a small group. For browsers, anyone who can see the source can evaluate it, giving a much wider opportunity to spot misconfiguration and error, and it only needs correction in one place for everyone to receive the benefit.
@charlvdwalt the content of the website doesn’t matter because the content is whatever an attacker wants it to be if you aren’t using SSL. Your brochureware is now malware.
@charlvdwalt SSL is super important and all, but that statement is awfully FUD-y. The odds of somebody actually doing that are vanishingly small, but you make it sound like their site can be replaced by anyone any time
regimes have used it as an attack vector, and so did several democracies too. ISPs have used it to inject ads. Encryption isn't only about privacy, it's critical to ensure that the contents of a message you received haven't been tampered with.
@gabrielesvelto @iagox86 @charlvdwalt The regimes most of us need to worry about all have their own CA or several they can get to do their bidding with some kind of "national security letter".
@iagox86 @charlvdwalt No, it was actually a really big issue which is why Google incentivized it. ISPs were injecting ads into random webpages, law enforcement and intelligence agencies made frequent use of it, and it was also a massive privacy risk. Almost every service provider has deep packet inspection and can/will monitor everything you do.
@iagox86 @charlvdwalt I remember a Dan Kaminsky talk about how residential ISPs were starting to inject ads into cleartext websites. This would have been maybe 2007 or so.
Imagine if the legal climate then was as it is today. SSL would be illegal. Felony disregard of business model and all (h/t @pluralistic).
@todb @iagox86 @charlvdwalt @pluralistic I remember phone interviewing with some company that was doing injections as part of "web acceleration". I did not follow up once i learned that aspect.
Also that was after working at AOL and learning their image compression was actually not bad... as long as you didn't dial all the settings down to their lowest values (as they did). So would have been sometime after 2004
- adds dependency on CA - requires one more thing to work, ie be kept updated, to request new certs regularly - locks out old devices that don't support the crypto-flavor-of-the-month - the above adds friction, which makes Cloudflare et al more attractive to not have to bother, leading to increased mono culture
Encryption by default has removed a whole category of not just attacks, but scummy business practices. A little inconvenience to administrators is not even worth talking about.
Your comment reads exactly like a politician arguing for stripping worker protections or safety regulations because they inconvenience employers.
It’s tone deaf, deliberately ignorant, and dismissive of people who get to not be taken advantage of easily due to these measures.
In practice I've had more problems with broken https cert setups blocking me from pages that I've tried to access that I've had with ISP-injected ads. But I don't live in the US where that is/was legal, so YMMV I suppose.
And the fact that Letsencrypt and Cloudflare are used by such a large percentages of websites is a huge problem, IMHO. We need fewer single-points-of-failure, not more.
@mikaeleiman @slotos I would argue you see less of the latter issue because enough sites use SSL that it's not worth the effort for the ISP to set up an advertisement injection. Prevention tends to reduce the chances of a problem occuring.
@nuintari @todb @iagox86 @charlvdwalt @pluralistic Frontier (formerly Verizon's west coast network) rewrote Google search results via DNS hijacking to add referral codes to Amazon, etc, and may or may not have added their own ads. Pre SSL, of course. I had a reproducible test case that ran via cron at home so we could see when they turned it off and on.
The irony that this page isn't HTTPS and I can't change it to HTTPS, and searches from the main website drop it down to HTTP as well isn't lost on me...
(I can only guess they have a different host for their older articles that doesn't support SSL).
@azonenberg @nuintari @todb @iagox86 @charlvdwalt @pluralistic another example I can think of is that as recently as the late 10s, there was still the issue of cell vendors inserting mobile subscribers’ MSISDNs (or similar tracking ref) using HTTP transproxies for all non-HTTPS traffic - I recall this with at least one of the big US networks, and Vodacom in ZA also did something like it. probably many others worldwide if you dig around
@azonenberg @nuintari @todb @iagox86 @charlvdwalt @pluralistic it was a very big thing on public WiFi hotspots. It would break a lot of websites cos the advertising code would just jam new HTML elements in, shitty JavaScript, conflicting versions with what the page authors used... It was a nightmare
“Portare avanti una comunicazione diversa, che non ricerca il consenso a tutti i costi, non si riveste di parole aggressive, non sposa il modello della competizione, non separa mai la ricerca della verità dall’amore con cui umilmente dobbiamo cercarl…
The Romanian fascist candidate shared a post on his blog, where he addresses those who will not vote for him directly. He tells them that he will "deal with each one of them", individually, after he becomes president.
Amid the uncertainty, a range of people across the internet blasted the supposed plan, slamming it as "indefensible," "incredibly illegal," and "comically corrupt." Some critics pointed out that the reporting comes after the Trump Organization, the Saudi partner DarGlobal, and a company owned by the Qatari government last month reached a deal to build a luxury golf resort in Qatar.
Robert Kiyosaki, author of Rich Dad Poor Dad, has renewed his warning against fiat currency, urging Americans to move away from what he calls “fake money” and instead invest in Bitcoin (CRYPTO:BTC), gold, and silver.
“Welcome to the era of ‘hostage politics’, where Labour is apparently your only hope.”
“There is contempt here. Instead of changes to the tax system, and a commitment to thinking differently about an economic paradigm that has reached an undeniable dead end, Labour looks at the rising wave of populist politics and decides to tell voters that populism is the problem, not the world that created it.”
First it was the Conservatives and now Reform. The only thing the government has to offer is that it’s the least worst option, says Guardian columnist Nesrine Malik
[repost Legalna Aborcja] Nie mamy wątpliwości, że napis na tym transparencie to prawda. @abotakprzychodnia powstała właśnie po to by pomagać - bez względu na powód, bez oceniania - po to by każda osoba, która potrzebuje aborcji otrzymała wsparcie.
Powstała w tym miejscu, pod Sejmem, bo politycy i polityczki od lat udawali, że aborcji nie ma zakłamując rzeczywistość. Antyaborcyjne prawo jakie mamy w Polsce skonstruowane jest tak, by osoby, które aborcje robią zostawały z tym doświadczeniem same, wpędzane w poczucie wstydu, winy i strachu.
Ponad 130 osób dziennie robi aborcje tylko ze wsparciem #aborcjabezgranic, a 250-300 to liczba aborcji robionych w Polsce każdego dnia. 1 na 3 kobiety w Polsce ma doświadczenie aborcji. (CBOS, Doświadczenia aborcyjne Polek)
Prawo antyaborcyjne po wyborach z 2023 roku miało się zmienić, a jest coraz gorzej. Organizacje, które każdego dnia zapewniają dostęp do aborcji (wyręczając w tym państwo) nie otrzymują żadnego wsparcia od rządu. Stosunek osób u władzy do aborcji widać wyraźnie po tym co od dwóch miesięcy dzieje się pod @abotakprzychodnia - politycy i polityczki znów myślą, że jeśli odwrócą głowę to aborcja zniknie.
A aborcja jest. Nie wystarczy zamknąć oczu, by przestała być potrzebna, odwrócić głowy, by kobiety przestały ją robić. Aborcja jest, bo jest potrzebna kobietom, aby czuły się bezpieczne, aby mogły decydować o swoim życiu i o życiu swojej rodziny. Aborcja to doświadczenie wielu z nas, slogan wyborczy.
@abotakprzychodnia @aborcyjnydream dziękujemy, że jesteście! Trudniej nam jest pomoc Wam na miejscu, na Wiejskiej, ale wspieramy każdego dnia!
Im bardziej oni próbują zakazać aborcji, tym bardziej my wystawiamy ją do słońca. Dlatego idziemy o krok dalej i OTWIERAMY PIERWSZY W POLSCE STACJONARNY LOKAL! Zostań jego ambasadorką!
O líder da IL está disponível para a governação se “for para mudar Portugal”, frisando que o partido vai exigir a liberalização do mercado ferroviário, baixar o IVA da construção e o IRS.
Dal 15 al 19 maggio il #MIM sarà presente al Salone del Libro di Torino! Nello spazio espositivo del MIM, presso il padiglione Oval, saranno realizzate attività informative per i docenti, gli studenti e le famiglie con un programma di oltre 40 eventi…
Dal 15 al 19 maggio il #MIM sarà presente al Salone del Libro di Torino!
Nello spazio espositivo del MIM, presso il padiglione Oval, saranno realizzate attività informative per i docenti, gli studenti e le famiglie con un programma di oltre 40 eventi…
"Une question de temps, surtout, avant que ces « déchirures » s’expriment publiquement"
Alors, pour toute personne qui suit les questions sur l'#antisémitisme et les attentats du 7 octobre 2023 ainsi que le génocide palestinien en cours, encore plus lorsqu'on est proche de personnes de culture judaïque (où finalement chaque personne a une lecture propre de la situation) ces déchirures n'ont pas attendu ces personnalités médiatiques pour s'exprimer publiquement. Ça discute, ça débat et ça s'engueule depuis plus de 2 ans. 🙄
Bravant ce qu’elle décrit comme une « injonction au silence », et par « amour d’Israël », la rabbine Delphine Horvilleur a dénoncé, dans une tribune publiée jeudi 8 mai, la « déroute politique » de l’Etat hébreu.
Il fondo pensione per far crescere nel tempo un capitale, la creazione di un tesoretto da spendere dopo i 65 anni l’investimento in unica soluzione di somme importanti (tra i 300 e i 500 mila euro) per incassare affitti o cedole.
Mike
in reply to The Eddie Show 📷🎧❤️ • • •