Salta al contenuto principale



Design Review: LattePanda Mu NAS Carrier


It is a good day for design review! Today’s board is the MuBook, a Lattepanda Mu SoM (System-on-Module) carrier from [LtBrain], optimized for a NAS with 4 SATA and 2 NVMe ports. It is cheap to manufacture and put together, the changes are non-extensive but do make the board easier to assemble, and, it results in a decent footprint x86 NAS board you can even order assembled at somewhere like JLCPCB.

This board is based on the Lite Carrier KiCad project that the LattePanda team open-sourced to promote their Mu boards. I enjoy seeing people start their project from a known-working open-source design – they can save themselves lots of work, avoid reinventing the wheel and whole categories of mistakes, and they can learn a bunch of design techniques/tips through osmosis, too. This is a large part of why I argue everyone should open-source their projects to the highest extent possible, and why I try my best to open-source all the PCBs I design.

Let’s get into it! The board’s on GitHub as linked, already containing the latest changes.

Git’ting Better


I found the very first review item when downloading the repo onto my computer. It took a surprising amount of time, which led me to believe the repo contains a fair bit of binary files – something quite counterproductive to keep in Git. My first guess was that the repo had no .gitignore for KiCad, and indeed – it had the backups/ directory with a heap of hefty .zips, as well as a fair bit of stuff like gerbers and footprint/symbol cache files. I checked in with [LtBrain] that these won’t be an issue to delete, and then added a .gitignore from the Blepis project.

This won’t make the repo easier to check out in the future, sadly – the hefty auto-generated files are still in the repo history. However, at least it won’t grow further as KiCad puts new archives into the backups/ directory, and, it’s good to keep .gitignore files in your KiCad repos so you can easily steal them every time you start a new project.

Apart from that, a .gitignore also makes working with your repository way way easier! When seeing changes overview in git status or GitHub Desktop, it’s way nicer to, and you even get a shot at reviewing changes in your commits to make sure you’re not adding something you don’t want in the repository. Oh, and, you don’t risk leaking your personal details as much, since things like auto-generated KiCad lockfiles will sometimes contain your computer name or your user name.

Now that the PCB Git-ability has been improved, let’s take a look at the board, first and foremost; the schematic changes here are fairly minimal, and already reviewed by someone else.

Cheap With Few Compromises


There’s plenty of PCIe, USB3, and SATA on this board – as such, it has to be at least four layers, and this one is. The SIG-GND-GND-SIG arrangement is only slightly compromised by a VDC (12 V to 15 V) polygon on one of the layers, taking up about 30% of space, and used to provide input power to Mu and also onboard 3.3 V and 5 V regulators.

Of course, with so many interfaces, you’ll also want to go small – you’ll have to fit a lot of diffpairs on the board, and you don’t want them flowing too close to each other to avoid interference. This board uses approximately 0.1 mm / 0.1 mm clearances, which, thankfully, work well enough for JLCPCB – the diffpairs didn’t even need to be redrawn much. Apart from that, the original design used 0.4 mm / 0.2 mm vias. Problem? JLC has a $30 surcharge for such vias for a board of this size. No such thing for 0.4 mm / 0.3 mm vias, surprisingly, even though the annular ring is way smaller.

I went and changed all 0.4 mm / 0.2 mm vias to 0.4 mm / 0.3mm vias, and that went surprisingly well – no extra DRC errors. The hole-to-copper distance is set to be pretty low in this project, to 0.15 mm, because that’s inherited from LattePanda carrier files, so I do hope that JLC doesn’t balk at those vias during the pre-production review. Speaking of DRC, I also set all courtyard errors to “ignore” – not only does this category have low signal-to-noise ratio, the LattePanda module courtyard also would raise problems at all items placed under the module, even though there’s plenty of space as long as you use a DDR socket tall enough.

One thing looked somewhat critical to me, though – the VDC polygon, specifically, the way it deprived quite a few diffpairs from GND under them.

Redraw, Nudge, Compromise


Remember, you want a ground polygon all along the underside of the differential pair, from start to finish, without interruptions – that ground polygon is where ground return current flows, and it’s also crucial in reaching the right differential pair impedance. The VDC polygon did interrupt a good few pairs, however.

Most of those interruptions were fixed easily by lifting the VDC polygon. Highlighting the net (` keyboard key) showed that there’s only really 4 consumers of the VDC power input, and all of them were above the overwhelming majority of the diffpairs. REFCLKs for M.2 sockets had to be rerouted to go over ground all throughout, though, and I also added a VDC cutout to pull gigabit Ethernet IC PCIe RX/TX pairs over VDC for most of their length.

This polygon carries a fair bit of current, a whole N100 (x86) CPU’s worth and then some, and remember – inner layers are half as thick, only 0. 5oz instead of 1 oz you get for outer layers by default. So, while we can cut into it, the VDC path has to be clear enough. A lot of items on VDC, like some gigabit controller power lines, ended up being moved from the VDC polygon layer to the opposite inner layer – now, they’re technically on the layer under PCIe and gigabit Ethernet pairs, but it’s a better option than compromising VDC power delivery. I also moved some VDC layer tracks to B.Cu and F.Cu; remember, with high-speed stuff you really want to minimize the number of inner layer tracks.

Loose Ends


With the vias changed and polygon redrawn, only a few changes remained. Not all diffpair layer crossings had enough vias next to them, and not all GND pads had vias either – particularly on the Mu and M.2 slots, what’s with high-speed communications and all, you have to make sure that all GND pads have GND vias on them. Again, highlight GND net (`) and go hunting. Afterwards, check whether you broke any polygons on inner layers – I sure did accidentally make a narrow passage on VDC even more narrow with my vias, but it didn’t take much to fix. Remember, it’s rare that extra vias cost you extra, so going wild on them is generally safe.

The SATA connector footprint from Digikey was faulty – instead of plated holes for through-hole pins, it had non-plated holes. Not the kind of error I’ve ever seen with easyeda2kicad, gotta say. As an aside, it was quite a struggle to find the proper datasheet on Digikey – I had to open like five different PDFs before I found one with footprint dimension recommendations.

A few nets were NC – as it turned out, mostly because some SATA ports had conflicting names; a few UART testpoints were present in the schematic but not on the board, so I wired them real quick, too. DRC highlighted some unconnected tracks – always worth fixing, so that KiCad can properly small segments into longer tracks, and so that your track moves don’t then result in small track snippets interfering with the entire plan. Last but not least, the BIOS sheet in the schematic was broken for some reason; KiCad said that it was corrupted. Turned out that instead of BIOS.kicad_sch, the file was named bios.kicad_sch – go figure.

Production Imminent


These changes helped [LtBrain] reduce PCB manufacturing cost, removed some potential problems for high-speed signal functioning, and fixed some crucial issues like SATA port mounting pins – pulling an otherwise SMD-pad SATA port off the board is really easy on accident! They’re all on GitHub now, as you’d expect, and you too can benefit from this board now.



8/19: Oppose Police Social Media Surveillance


Boston Police (BPD) continue their efforts rollout more surveillance tools. This time on social media.

On August 19th, the Boston Public Safety Committee will hold a hearing on the Boston 2024 Surveillance Technology Report including police usage of three new tools to monitor social media posts. Any tool BPD uses will feed into the Boston Regional Information Center (BRIC) and Federal agencies such as ICE, CBP and the FBI.

If you want to tell the Boston Public Safety committee to oppose this expansion of surveillance, please show up on the 19th virtually. Details are posted, but to sign up to speak, email ccc.ps@boston.gov and they will send you a video conference link. We especially encourage Boston Pirates to attend and speak against this proposal. The Docket # is 1357.


masspirates.org/blog/2025/08/1…



Continuous-Path 3D Printed Case is Clearly Superior


[porchlogic] had a problem. The desire was to print a crystal-like case for an ESP32 project, reminiscent of so many glorious game consoles and other transparent hardware of the 1990s. However, with 3D printing the only realistic option on offer, it seemed difficult to achieve a nice visual result. The solution? Custom G-code to produce as nice a print as possible, by having the hot end trace a single continuous path.

The first job was to pick a filament. Transparent PLA didn’t look great, and was easily dented—something [porchlogic] didn’t like given the device was intended to be pocketable. PETG promised better results, but stringing was common and tended to reduce the visual appeal. The solution to avoid stringing would be to stop the hot end lifting away from the print and moving to different areas of the part. Thus, [porchlogic] had to find a way to make the hot end move in a single continuous path—something that isn’t exactly a regular feature of common 3D printing slicer utilities.

The enclosure itself was designed from the ground up to enable this method of printing. Rhino and Grasshopper were used to create the enclosure and generate the custom G-code for an all-continuous print. Or, almost—there is a single hop across the USB port opening, which creates a small blob of plastic that is easy to remove once the print is done, along with strings coming off the start and end points of the print.

Designing an enclosure in this way isn’t easy, per se, but it did net [porchLogic] the results desired. We’ve seen some other neat hacks in this vein before, too, like using innovative non-planar infill techniques to improve the strength of prints.

youtube.com/embed/2Sy50BrlDMo?…

Thanks to [Uxorious] and [Keith Olson] for the tip!


hackaday.com/2025/08/12/contin…



A DEA agent used a local cop's password "for federal investigations in late January 2025 without [the cop's] knowledge of said use."

A DEA agent used a local copx27;s password "for federal investigations in late January 2025 without [the copx27;s] knowledge of said use."#Flock


Feds Used Local Cop's Password to Do Immigration Surveillance With Flock Cameras


A Drug Enforcement Administration agent used a local police officer’s password to the Flock automated license plate reader system to search for someone suspected of an “immigration violation.” That DEA agent did this “without [the local police officer’s] knowledge,” and the password to the Flock account, which belonged to the Palos Heights PD, has since been changed. Using license plate readers for immigration enforcement is illegal in Illinois, and casual password sharing between local police and federal law enforcement for access to surveillance systems is, at the very least, against Flock’s terms of service.

The details of the search were first reported by the investigative news outlet Unraveled, which obtained group chats about the search using a public records request. More details about the search were obtained and shared with 404 Media by Shawn, a 404 Media reader who filed a public records request with Palos Heights after attending one of our FOIA Forums.

DEA agent used Illinois cop’s Flock license plate reader password for immigration enforcement searches
A federal Drug Enforcement Administration agent on a Chicago area task force used Palos Heights Detective Todd Hutchinson’s login credentials to perform unauthorized searches this past January. Group chat screenshots obtained via public records request show the detective and the feds discussing the incident.
Unraveled Press


Flock makes automated license plate reader (ALPR) cameras, which passively collect the time, plates, and model of cars that drive past them and enter them into a network that can then be searched by police. Our investigation in May showed that federal agents were gaining side-door access into this system by asking local police to perform immigration enforcement searches for them; the new documents show that in some cases, local police have simply given federal agents their passwords.

The documents obtained by Unraveled show details of an internal investigation done by the Palos Heights, Illinois police department in response to a series of questions that I asked them for an article we published in May that appeared to show a Todd Hutchinson, a police officer in Palos Heights, performing a series of Flock searches in January as part of their research into an “immigration violation.”

At the time, Palos Heights police chief Mike Yott told me that Hutchinson was a member of a DEA task force “that does not work immigration cases.”

“None of our officers that work with federal agencies have cross designation as immigration officers, and therefore have no immigration authority, and we and our partner agencies are very sensitive to the fact that we and the State of Illinois do not pursue immigration issues,” Yott said. “Based on the limited information on the report, the coding/wording may be poor and the use of Flock may be part of a narcotics investigation or a fugitive status warrant, which does on occasion involve people with various immigration statuses.”

Our reporting set off an internal investigation into what these searches were for, and who did them, according to the documents obtained by Unraveled. According to a July 9 investigation report written by the Palos Heights Police Department, Hutchinson was the only task force member who had access to Flock. Information about what the search was actually for is redacted in the internal investigation, and neither the Palos Heights Police Department nor the DEA has said what it was for.

“Hutchinson advised that it was common that he allowed others to use his login to Flock during the course of their drug investigations. TFO Hutchinson spoke to his group and learned that one of the DEA agents completed these searches and used his login information,” the report says. The DEA agent (whose name is redacted in the report) “did in fact use Hutchinson’s login for federal investigations in late January 2025 without Hutchinson’s knowledge of said use.”

“When I had shared my account with the Special Agent, I believed it would only be used for DEA/narcotics related investigations,” Hutchinson wrote in an email to his bosses explaining why he shared his password. Hutchinson said in a series of text messages to task force officers, which were also obtained by Unraveled, that he had to change the password to lock other members of the task force out of the system.

“What’s the new password?,” a task force member wrote to Hutchinson.

“Sorry man. Keys had to be taken away,” he responded.

The task force member replied with a gif of a sad Chandler Bing from friends sitting in the rain.

“Hey guys I no longer have access to Flock cause Hutch took my access away,” another group text reads. “Apparently someone who has access to his account may have been running plates and may have placed the search bar ‘immigration’.. which maybe have brought undue attention to his account. Effective immediately Defer all flock inquiries to Toss Hutchinstein[sic].”

“Dear Todd, I hope you don’t get in trouble cause of my mistake,” the DEA agent joked in the group chat. “U were so helpful in giving the group access but now that is gone, gone like dust,…..in the wind … Trust is broken / I don’t know if bridges can be mended … one day we might be back to normal but until then I will just have to sit by this window and pray things will return … Best Regards. Ps, can u flock a plate for me”

“Only time will tell my fate, I suppose,” Hutchinson responded. “What’s the plate? And confirming it is NOT for immigration purposes…”

“It was a test …… and u passed ….,” the DEA agent responds.

In response to a separate public records request filed by Shawn, the 404 Media reader, and shared with us, the Palos Heights Police Department said “Our investigation into this matter has revealed that while these inquiries appear to have been run as part of a taskforce assignment, no member of the Palos Heights Police Department ‘ran’ those queries. They were, apparently, run by another, non-Palos Heights, task force member who used a Palos Height's member's sign in and password information without his knowledge.”

The Palos Heights Police Department said in its investigation files that “this incident has brought to light the need to review our own protocols of LPR use.” The police department said that it had decided to limit searches of its Flock system only to agencies within the state of Illinois, rather than to police departments around the country. The department also turned on two-factor authentication, which had not been previously enabled.

“Lastly, I believe there is a need to start a monthly review of our own flock searches to ensure our officers are working within standards and compliant with all policies and laws,” the report says.

Palos Heights’ casual sharing of passwords to a powerful surveillance system is a violation of Flock’s terms of service, which states “Authorized End Users shall not share their account username or password information and must protect the security of the username and password.”

More concerningly, it shows, as we have been reporting, that there are very few practical guardrails on how Flock is being used. The DEA does not have a contract with Flock, and police generally do not obtain a warrant to use Flock. We have repeatedly reported on police officers around the country who have offered to either run plates for their colleagues or to give them access to their logins, even when those agencies have not gone through proper acquisition channels.

The Palos Heights police department did not respond to a request for comment from 404 Media. The DEA told 404 Media “we respectfully refer you to the Palos Heights Police Department.” Flock also did not respond to a request for comment. The House Oversight Committee announced last week that it had launched an investigation into how Flock is being used to search for immigration violations.




Come celebrate with us and catch a LIVE recording of the 404 Media podcast.#party


You're Invited: 404 Media's Second Anniversary Party and LIVE PODCAST!


​We've survived and thrived for two years and are ready to celebrate with you, the ones who made it possible!

Come have a cocktail or locally-brewed beer on us at vertical farm and brew lab farm.one. We'll also record a live podcast with the whole 404 crew, for the first time in person together since... well, two years ago!

GET TICKETS HERE

Doors open at 6, programming begins at 6:45, good hangs to continue after. Open bar (tip your bartenders), and pizza will be available for purchase on-site if you're hungry.

​​Free admission for 404 Media subscribers at the supporter level. Sign up or check your subscription here. Once you're a supporter, scroll to the bottom of this post for the code to enter at checkout on the Luma page. Or buy tix for yourself or a friend to make sure you have a spot on the list.

​We'll also have some merch on hand that'll be discounted for IRL purchases.

If getting into the coolest party of the summer isn't enticing enough, you'll be supporting the impact of our journalism, which so far this year has included:

Our earlier work has shut down surveillance companies and triggered hundreds of millions of dollars worth of fines too. Our paying subscribers are the engine that powers this impactful journalism. Every subscription, monthly or annual, makes a real difference and makes it possible to do our work.

Thank you to our friends at DeleteMe for making this celebration possible.

Fine print: Tickets are required for entry, including for subscribers. 21+ only. Seating for the podcast is open but limited and includes standing room; a ticket doesn't guarantee a seat but let staff onsite know if you require one. Photos will be taken at the event. Venue reserves the right to refuse entry. Good vibes only, see you soon!

Code for subscribers is below the images.



Scenes from our panel at SXSW 2025, our DIY hackerspace party in LA on July 30, and our first anniversary party last year.

Upgrade to continue reading


Become a paid member to get access to all premium content
Upgrade




Remembering James Lovell: the Man Who Cheated Death in Space


Many people have looked Death in the eye sockets and survived to tell others about it, but few situations speak as much to the imagination as situations where there’s absolutely zero prospect of rescuers swooping in. Top among these is the harrowing tale of the Apollo 13 moon mission and its crew – commanded by James “Jim” Lovell – as they found themselves stranded in space far away from Earth in a crippled spacecraft, facing near-certain doom.

Lovell and his crew came away from that experience in one piece, with millions tuning into the live broadcast on April 17 of 1970 as the capsule managed to land safely back on Earth, defying all odds. Like so many NASA astronauts, Lovell was a test pilot. He graduated from the US Naval Academy in Maryland, serving in the US Navy as a mechanical engineer, flight instructor and more, before being selected as NASA astronaut.

On August 7, 2025, Lovell died at the age of 97 at his home in Illinois, after a dizzying career that saw a Moon walk swapped for an in-space rescue mission like never seen before.

Joining The Navy

The USS Shangri-La underway in 1970. (Credit: US Navy)The USS Shangri-La underway in 1970. (Credit: US Navy)
James Arthur Lovell Jr. was born in Cleveland, Ohio, on March 25, 1928. He was the sole child, with his father dying in a car accident when he was five years old. After this he and his mother lived with a relative in Indiana, before moving to Wisconsin where Lovell attended Juneau High School. He attained the Boy Scouts’ highest rank of Eagle Scout, while also displaying an avid interest in rocketry including the building of flying models.

After graduating from high school, Lovell studied engineering under the US Navy’s Flying Midshipman program from 1946 to 1948, which focused on training new naval aviators. This was a sponsored program by the US Navy, with the student required to enlist as Apprentice Seaman and to serve in the Navy for five years, including one year of active duty.

As this program was being rolled back in the wake of the end of WW2, Lovell saw himself and others like him pressured to transfer out, with Lovell applying at the US Naval Academy in Annapolis, Maryland. Here he would continue his engineering studies, graduating with a Bachelor of Science degree in the Spring of 1952.

After graduation he was commissioned as an ensign in the US Navy, got selected for naval aviation training and was later assigned to the Essex-class aircraft carrier USS Shangri-La during the 1950s where he flew many missions, racking up a reported total of 107 carrier landings. Once back ashore he became a flight instructor for Navy pilots.

To Space And Beyond


With NASA selecting its future astronauts from the military’s test pilots for a variety of reasons, it was only a matter of time before Lovell would be in the running for the first group of astronauts considering his performance in the Navy. Although he got put on the list of potential astronauts for Project Mercury, he narrowly missed joining the Mercury Seven. After applying for the second group, however, he ended up being selected for Mercury’s successor project: Project Gemini.
The Pacific Ocean as seen from the Gemini 7 capsule on 8 December 1965 by astronauts Borman and Lovell. (Credit NASA)The Pacific Ocean as seen from the Gemini 7 capsule on 8 December 1965 by astronauts Borman and Lovell. (Credit NASA)
Lovell would fly on two Gemini missions, Gemini 7 and Gemini 12, with the latter seeing Lovell being joined by Edwin “Buzz” Aldrin as the pilot. Before embarking on Gemini 7, Lovell and his fellow astronaut Frank F. Borman were given the advice by Pete Conrad – who had previously spent eight days on Gemini 5 – to take books along for the ride. Considering that Gemini 7 was an endurance mission lasting nearly two weeks, this turned out to be very good advice, indeed.
Edwin "Buzz" Aldrin performing an EVA during the first day of the 4-day Gemini 12 mission. (Credit: NASA)Edwin “Buzz” Aldrin performing an EVA during the first day of the 4-day Gemini 12 mission. (Credit: NASA, James Lovell)
The four-day Gemini 12 mission would be the last mission in the project, taking place during November of 1966. During this mission Aldrin demonstrated a number of extra-vehicular activities (EVAs), showing that humans could perform activities outside of the spacecraft, thus clearing the way for Project Apollo.

Lucky Apollo 13


Although Lovell is generally associated with Apollo 13, his third spaceflight was on Apollo 8 which launched on December 21st of 1968. This was the first manned Apollo mission to make it to the Moon following Apollo 7 which stayed in Earth’s orbit. During Apollo 8 the crew of three – Borman, Lovell and Anders – completed ten orbits around Earth’s companion, making it the first time that humans had laid eyes on the far side of the Moon and were able to observe an Earthrise.
The famous 'Earthrise' photo by William Anders taken during Apollo 8. (Source: NASA)The famous ‘Earthrise’ photo by William Anders taken during Apollo 8. (Source: NASA)
With the Apollo program in constant flux, Apollo 8’s mission profile was changed from a more conservative Earth orbit-bound test with the – much delayed lunar module (LM) – to the very ambitious orbiting of the Moon. This put the Apollo program back on track, however, as it skipped a few intermediate steps. After Apollo 9 demonstrated the full lunar EVA suit in space as well as docking with the LM in Earth orbit, Apollo 10 was the wet dress rehearsal for the first true Moon landing with Neil Armstrong and Buzz Aldrin taking the honors.

After Apollo 12 delivered its second batch of astronauts to the lunar surface, it was finally time for Lovell as the commander and Fred Haise as the LM pilot to add their footprints to the lunar regolith as part of the Apollo 13 mission. After two successful Moon landings, when Apollo 13 took off from the landing pad on April 11, 1970, it seemed that this was going to be mostly a routine mission.

After making it about 330,000 km from Earth, the Apollo 13 crew was going through their well-practiced schedule, with only one active issue bothering them and ground control in Houston. This issue involved the pressure sensor in one of the service module (SM) oxygen tanks. Ground control requested that the crew try activating the stirring fans in the oxygen tanks to see whether de-stratifying the contents of the affected oxygen tank might fix the odd readings.

Ninety-five seconds after Command Module (CM) pilot John Swigert activated these fans the three astronauts heard a loud bang, accompanied by electrical power fluctuations and the attitude control thrusters automatically engaging. After briefly losing communications with Earth, Swigert called back to Houston with the now famous “Houston, we have had a problem.” phrase.

youtube.com/embed/MdvoA-sjs0A?…

As indicated by the resulting investigations, one of the oxygen tanks (Oxygen Tank 2) that fed the fuel cells for power generation had turned into a bomb owing to manufacturing and handling defects years prior. The resulting explosion also caused the loss of Oxygen Tank 1 and ultimately putting all of the CM’s fuel cells out of commission. With the CM’s batteries rapidly draining, the Apollo 13 astronauts only had minutes to put a plan together with Houston, to use the LM as their lifeboat and to devise a way to plan a course back to Earth after a fly-by of the Moon.

As these immediate concerns were addressed and Apollo 13 found itself on a course that should take it safely back to Earth, two new issues cropped up. The first was that of potable water, as normally the CM’s fuel cells would create all the water that they’d need during the mission. With the CM and its fuel cells out of commission, they had to strictly ration their limited supply, all the way down to 200 mL per person per day.
The adapted carbon dioxide scrubber on Apollo 13. (Credit: NASA)The adapted carbon dioxide scrubber on Apollo 13. (Credit: NASA)
The other issue concerned the carbon dioxide levels. Although the LM carried sufficient oxygen, CO2 scrubbers were required to keep the levels of this gas at healthy levels, even as the crew kept adding to it with their breathing. The lithium hydroxide pellet-based scrubbers in the CM and LM were up to their individual tasks, but the LM was equipped only for the 45 hours that two astronauts would spend on the lunar surface, not keep three astronauts alive for the time that it’d take to travel back to Earth.

Annoyingly, the CM and LM scrubber canisters had different dimensions that prevented the astronauts from simply availing themselves of the CM scrubbers. This was fortunately nothing that some solid arts and crafts experience can’t fix, and the CM canisters were made to work using plastic manual covers, duct tape and whatever else was needed to bridge the gaps.

With all the essentials dealt with as well as possible considering the circumstances, the three astronauts set in for a very long and very cold wait. As most systems were shut down to preserve every bit of energy there was little any of them could do against the cold of space itself seeping into the LM even as moisture condensed on all surfaces.

Before nearing Earth, Lovell and his crew were tasked with configuring the LM’s navigation computer in preparation for final approach, as well as starting the CM up from its cold shutdown. With every step of this re-entry and required separation of the SM, CM and ultimately the LM being completely unlike the normal procedure that they had trained for, there existed significant uncertainty about how well it all would work.

Fortunately everything went off relatively without any issues and on April 17 of 1970 all three Apollo 13 astronauts made a soft splash back on Earth. This would also be Lovell’s fourth and final spaceflight.

Retirement

Apollo 13's capsule splashing down on April 17 1970. (Credit: NASA)Apollo 13’s capsule splashing down on April 17 1970. (Credit: NASA)
Lovell would retire from the Navy and the space program on March 1, 1973. For decades afterwards he’d serve as CEO, president and similar roles for a range of companies before retiring in 1991, only staying on the board of directors for a number of corporations including the Astronautics Corporation of America. With the fame that Apollo 13 had brought him and his two fellow astronauts none of them ever fully left the public eye.

A number of films and documentaries were made about the Apollo 13 mission, which was termed a ‘successful failure’. Lovell would make a number of cameos, with the 1995 film Apollo 13 based on Lovell’s book Lost Moon being one of the most notable examples.

With Lovell’s death, Fred Haise is now the last remaining member of Apollo 13 to still be alive, after Jack Swigert died from cancer in 1982.

Although a lot has been said already about Apollo 13 nearly ending in tragedy, including its auspicious number in many Western cultures, it’s impossible to deny that this mission’s crew were among the luckiest imaginable. In the dark and cold of Space, trapped between Earth and the Moon, they found themselves among the best friends imaginable to together solve a puzzle, even as their own lives were on the line.

If the oxygen tank had exploded on the return trip from the Moon, all astronauts would have likely perished. Similarly, if any of the other events during the mission had played out slightly differently, or if another emergency had occurred on top of the existing ones, things might have turned out very differently.

If there’s anything to be learned from Lovell’s life, it is probably that ‘luck’ is relative, and that team work goes a very long way.


hackaday.com/2025/08/12/rememb…



Come previsto, il bug di WinRAR è diventato un’arma devastante per i cyber criminali


Come era prevedibile, il famigerato bug scoperto su WinRar, viene ora sfruttato attivamente dai malintenzionati su larga scala, vista la diffusione e la popolarità del software.

Gli esperti di ESET hanno segnalato che la vulnerabilità di WinRAR (CVE-2025-8088) recentemente risolta è stata utilizzata come 0-day negli attacchi di phishing ed è stata utilizzata per installare il malware RomCom.

La vulnerabilità era correlata al directory traversal ed è stata risolta a fine luglio con il rilascio di WinRAR versione 7.13. Il problema consentiva l’utilizzo di archivi appositamente preparati e la decompressione dei file lungo un percorso specificato dagli aggressori.

Durante la decompressione di un file, le versioni precedenti di WinRAR, le versioni Windows di RAR, UnRAR, il codice sorgente di UnRAR portatile e la libreria UnRAR.dll potevano utilizzare il percorso di un archivio appositamente preparato anziché quello specificato dall’utente”, hanno spiegato gli sviluppatori dell’archiviatore . “Le versioni Unix di RAR, UnRAR, il codice sorgente di UnRAR portatile e la libreria UnRAR, così come RAR per Android, non erano vulnerabili.

Pertanto, sfruttando questo bug, gli aggressori potrebbero creare archivi che decomprimono file eseguibili dannosi nella cartella di avvio di Windows situata in:

  • %APPDATA%\Microsoft\Windows\Start Menu\Programmi\Esecuzione automatica (locale per l’utente);
  • %ProgramData%\Microsoft\Windows\Start Menu\Programmi\Esecuzione automatica (per tutti gli utenti).

Dopo il successivo accesso, tale file viene eseguito automaticamente, consentendo all’aggressore di eseguire codice sull’host remoto.

Questo problema è stato scoperto dagli esperti ESET nel luglio 2025 e ora segnalano che, anche prima del rilascio della patch, CVE-2025-8088 è stato utilizzato negli attacchi come vulnerabilità zero-day.

Secondo i ricercatori, la vulnerabilità è stata sfruttata in attacchi di phishing mirati volti a diffondere malware del gruppo di hacker RomCom (noto anche come Storm-0978, Tropical Scorpius e UNC2596), tra cui varianti di SnipBot, RustyClaw e Mythic.

Secondo quanto riferito, la campagna aveva come obiettivo aziende finanziarie, manifatturiere, della difesa e della logistica in Canada e in Europa.

Il gruppo RomCom è stato precedentemente collegato ad attacchi ransomware, furto di dati a scopo di riscatto e campagne di furto di credenziali. RomCom è noto per lo sfruttamento di vulnerabilità zero-day e l’utilizzo di malware personalizzati per rubare dati e persistere nei sistemi.

ESET sottolinea che la stessa vulnerabilità è stata recentemente sfruttata da un altro aggressore ed è stata scoperta in modo indipendente dalla società russa BI.ZONE. Inoltre, il secondo aggressore ha iniziato a sfruttare la vulnerabilità CVE-2025-8088 pochi giorni dopo il RomCom.

L'articolo Come previsto, il bug di WinRAR è diventato un’arma devastante per i cyber criminali proviene da il blog della sicurezza informatica.



When a Badge Misses the Mark: WHY 2025


The largest European hacker camp this year was in the Netherlands — What Hackers Yearn (WHY) 2025 is the latest in the long-running series of four-yearly events from that country, and 2025 saw a move from the Flevoland site used by SHA2017 and MCH2021, back to just north of Alkmaar in Noord-Holland, where the OHM2013 event took place. WHY has found itself making the news in the Dutch technical media for all the wrong reasons over the last few days, after serious concerns were raised about the fire safety of its badge.
The cell supplied with a WHY 2025 badge, with very clear fire safety warningThis is the cell supplied with the WHY badge, complete with manufacturer’s warning.
The concerns were raised from the RevSpace hackerspace in Leidschendam, and centre around the design of the battery power traces on the PCB between the battery holders and the power supply circuitry. Because the 18650 cells supplied with that badge lack any protection circuitry, bridging the power traces could be a fire risk.

In short: their report names the cell holders as having tags too large for their pads on the PCB, a too-tight gap between positive and negative battery traces, protected only by soldermask, and the inadequacy of the badge’s short circuit protection. In the event that metal shorted these battery tags, or wore through the soldermask, the batteries would be effectively shorted, and traces or components could get dangerously hot.

The WHY organizers have responded with a printed disclaimer leaflet warning against misuse of the cells, and added a last-minute epoxy coating to the boards to offer additional protection. Some people are 3D-printing cases, which should also help reduce the risk of short-circuiting due to foreign metal objects. A powerbank with short-circuit protection would solve the problem as well. Meanwhile a group of hackers collecting aid for Ukraine are accepting the batteries as donations.

It’s understood that sometimes bugs find their way into any project, and in that an event badge is no exception. In this particular case, the original Dutch badge team resigned en masse at the start of the year following a disagreement with the WHY2025 organizers, so this badge has been a particularly hurried production. (Editor’s note: the group that brought the 18650 concerns to light has some overlap with the group that left the WHY2025 badge project.) Either way, we are fortunate that the issue was spotted before any regrettable incidents occurred.


hackaday.com/2025/08/12/when-a…



come ho già scritto il risultato, per un paese che importa praticamente tutto, prodotti finiti e semilavorati, è più o meno come aver inserito anche negli usa l'IVA e non al 22%... un'imposta indiretta. a noi piace piangersi addosso ma a piangere sono soprattutto i cittadini usa.

reshared this



A Gaza il “giornalisticidio” prosegue indisturbato


@Giornalismo e disordine informativo
articolo21.org/2025/08/a-gaza-…
Prosegue a Gaza il giornalisticidio, parte del genocidio in atto a Gaza. Sono ormai oltre 230 i cronisti assassinati, compresi i sei eliminati ieri. Contro di loro ê ripartita l’ennesima campagna “erano solo




Lezioni di conversazione in italiano


Uso spesso podcast e video di persone di madrelingua inglese per migliorare la conoscenza della lingua.

Mi piacerebbe restituire il favore.

Ho pensato che magari da qualche parte sul pianeta c'è qualcuno che studia italiano a cui potrebbe fare altrettanto comodo avere uno sparring partner, quindi non podcast e video ma vere conversazioni on-line (gratuite).

Non so da che parte partire per far arrivare la notizia a chi potrebbe essere interessato, voi come fareste?

reshared this

in reply to alephoto85

@alephoto85

Sì in effetti è una buona idea, non ci avevo pensato. Grazie.

Anche se a me piacerebbe di più farlo con gente che sta dall'altra parte del mondo, così potrei approfittarne per farmi raccontare qualcosa di come vivono laggiù 😀

in reply to Max - Poliverso 🇪🇺🇮🇹

capisco! Ci sta effettivamente! Sono sicuro però che anche chi arriva qui da lontano avrà qualcosa da raccontare in merito.

Se trovo altre cose online ti scrivo ma adesso mi vengono in mente solo quelle 😅

Questa voce è stata modificata (1 mese fa)


onestamente a vederlo dal di fuori pare che putin abbia come unico scopo il consumare fino all'ultima briciola di risorse russa, con quale scopo futuro diverso dal collasso è davvero difficile da immaginare. forse è una svendita. certo non collasserà oggi o domani ma prima o poi i nodi vengono al pettine. e nessuno ha resistenza infinita. tutto ha un punto di rottura, a volte invisibile. la russia può mandare al macello un numero infinito di uomini? sicuramente no. anche se magari può contare su tutta la popolazione della corea del nord.


«Non c’è nessun caro ombrellone»

ci vuole coraggio a definire i prezzi in italia non esosi e non un'emergenza... pazzesca la ghigna che ha la gente. fosse per me renderei obbligatoria una spiaggia libera accanto a ogni stabilimento a pagamento.

in reply to simona

una cosa è certa... se costano così caro non è certo per pagare la concessione demaniale allo stato... una cifra praticamente simbolica.




L’Italia investe nelle startup tecnologiche israeliane


@Notizie dall'Italia e dal mondo
La Cassa Depositi e Prestiti destina decine di milioni di euro a imprese israeliane di intelligenza artificiale e calcolo quantistico. L’obiettivo è attrarre in Italia competenze e innovazione, dimenticando la distruzione di Gaza
L'articolo L’Italia investe nelle startup tecnologiche israeliane



Le fatiche di Eva: la strada ancora lunga verso la parità


@Giornalismo e disordine informativo
articolo21.org/2025/08/le-fati…
Unendo esperienza personale e dati di accreditati studi nazionali e internazionali, Paola Mascaro, manager e già presidente di Valore D, propone una lettura sul difficile cammino verso una parità di



Se il capitalismo perde il suo «spirito»*


@Giornalismo e disordine informativo
articolo21.org/2025/08/se-il-c…
Da qualche tempo quotidiani e libri si soffermano, più o meno approfonditamente, sul tema della transizione globale in atto. Si riflette sulla inusitata fase di “riproduzione del sistema” che sta avvolgendo il pianeta, con l’unica costante, rispetto al






A ‘massive failure’ in Kansas: Two years since the Marion County Record raid


The police raid of the Marion County Record’s newsroom on Aug. 11, 2023, shocked the country but proved to be just one of a series of alarming attacks on local journalism that year. It was also a preview of how lawless and incompetent governments can use strained constructions of the law as pretext to retaliate against journalists they dislike, as we now see not only in small-town America but at the federal level. As the death of Record co-owner Joan Meyer the next day tragically proved, by the time justice takes its course — if it ever does — the damage has often already been done.

We asked investigative journalist Jessica McMaster to reflect on her award-winning coverage of the raid for KSHB-TV in Kansas City, Missouri. The interview is below. You can also read about or watch our discussion with Record publisher Eric Meyer earlier this year.

On a Friday afternoon in 2023, news broke of a police raid of the Marion County Record newsroom and its publisher Eric Meyer’s home. Did you realize right away that this needed to be not just a statewide story but a national one?

I realized right away this was a big story. Once the news broke that Joan Meyer died, I knew we had to go to Marion — the backlash was immediate and the responses were coming in from across the country.

Over the course of many months, it became clear that the raid wasn’t a random instance of police overresponding to a citizen complaint. Details began to emerge about local officials, including the police chief, Gideon Cody, and their conduct before, during, and after the raid — even before coming to Marion. Plenty of great local journalists did amazing work covering the story, but you seemed to get a large share of the big scoops. Without divulging any confidences, how were you able to pull it off, especially being based in Kansas City, not particularly close to Marion?

I worked a lot of hours. In the beginning, we stayed overnight in Marion. After that, it was a lot of driving back and forth, while taking calls from sources at all hours of the night. I’d been a journalist long enough to know that a story this big doesn’t die down for a few weeks. We made the commitment to drive the five-hour round trip daily. I didn’t always know what our angle would be, but I knew I’d find it.

“If journalists are not willing to report on the ongoing attacks against the free press, who will?”


Jessica McMaster

Talk about the level of transparency — or lack thereof — that you encountered from government officials, both in Marion and statewide, during your reporting on the raid. What were some of the challenges you needed to overcome, in terms of secrecy and accessing information that was of public interest?

Gideon Cody wasn’t talking. The county attorney wasn’t talking. The Kansas Bureau of Investigation was saying very little. Almost immediately, it had the appearance that everyone involved in this was covering their own tail — and of course they were. This was a huge mess. We leaned on the gift of open records laws to get most of our information. Getting emails and text messages helped piece the parts of the story together that those in power wanted to remain a secret. We knew they’d try and block us — we were prepared to fight back. There were times when we had to get our attorneys involved when information was being withheld. On a story like this, the details don’t reveal the truth all at once. It trickles out over time. It’s always fun to look back and see how it all comes together — one information request, or leak, at a time.

At Freedom of the Press Foundation (FPF), we were glued to your X feed for real-time updates. We probably weren’t the only ones. Can you talk about the challenge of breaking news on social media while also investigating the bigger stories?

This is one of my favorite parts about covering a big story — connecting with people in real time. I had people from other countries sending me emails and tweeting to me that they were following me for updates. I was not asked to use social media in real time by my employer — it’s just something I’d become accustomed to doing since early on in my career. With Marion, we were getting updates constantly — social media made it easy to get that information out quickly. I don’t see using social media as a challenge — I think it’s a tool to connect with our followers more authentically and bring them along on the journey with us. Of course, if I have to get my broadcast script in urgently, or I have to be on camera within the next few minutes, I’ll take a break from providing live updates and come back to it once I’m done.

Were there any stories you were able to break while covering the raid that you felt were particularly important to the public’s understanding of what went on?

We broke so many stories over the first couple of months. I remember driving to Marion during that first week of coverage. I didn’t know what the story would be on this particular day. It was our plan to find the story once we got there. About an hour into our trip, while driving past a cornfield, my cellphone rings and it’s the attorney for Marion County Record. He tips me off that the county attorney has revoked the search warrants. He gave me a two-minute head start before he planned to tell all the other reporters. This was arguably the biggest break in the case — it’s the first time officials publicly admitted the raids shouldn’t have happened. This squashed any doubts of wrongdoing on behalf of the newspaper — and people, especially in Marion — did have their doubts. So, of course, I’m scrambling to get this information out there. Minutes after I broke the news on X, the county attorney sent a press release to all newsrooms with his statement on revoking the warrants.

“It’s hard for a lot of us to grasp that so many people, in positions of power, failed in such spectacular fashion to do their jobs.”


Jessica McMaster

What insights did you come away with about the state of press freedom in Kansas and in the United States?

This was a massive failure by several people within the justice system. I think that’s what’s so shocking about this entire thing — most of us assume a police chief would understand press freedom laws. If a police chief doesn’t, we’d assume a county attorney would. If a county attorney doesn’t, we’d assume a district judge would. If no one understands these laws — surely someone will look it up. The amount of layers Gideon Cody’s attack on the newspaper survived is astonishing. What did all these people, who are supposed to understand the law, think the response would be? I think it’s hard for a lot of us to grasp that so many people, in positions of power, failed in such spectacular fashion to do their jobs.

Do you think the raid had an ongoing chilling effect on journalism?

I think the chilling effect comes from a culmination of attacks that have been launched against the free press over the past several years. We’ve seen this play out in other instances, during protests for example, where police assault or arrest journalists for doing their jobs. I think Marion was another example of that.

Despite your award-winning work on the raid and all the other great work you’ve done, less than two years after the raid, your position at KSHB-TV, Kansas City’s NBC affiliate, was eliminated. What does that say about the state of the news industry and whether local investigative reporting is valued these days?

The company I worked for always valued investigative journalism — it’s why I stayed in my position for a decade. I think what we’re seeing is that many local newsrooms are becoming more and more risk averse. I personally felt this shift over the past few years. When newsrooms operate from a place of fear, it’s very difficult for reporters to do their job, especially investigative reporters who, by nature, do more high-risk, accountability-focused stories.

What’s next for you? I saw that your X post about the layoff said your time as an investigative journalist was coming to an end. Are you done with journalism or are you going to look for a way back in? And why?

I love journalism. I believe in its purpose. I believe in its power. We need solid journalists who aren’t afraid to hold the powerful accountable. That said, I don’t see myself stepping back into a newsroom. At least not anytime soon. I took the summer off to focus on my kids and reflect on what I want to do next, which has been such a gift. I plan to keep writing and creating content for something I believe in.

Journalists often feel like covering press freedom stories is difficult, because they’re making themselves the story or because their objectivity will be questioned, for example. What do you say to that, and what’s your advice to journalists and editors wondering whether it’s a good idea to report on press freedom violations?

Stick to the facts. That’s my advice. While I didn’t initially know why police raided the newspaper, I knew this was fundamentally wrong. I knew police should’ve served a subpoena, as opposed to busting down the doors. I knew the free press has protections, both locally and federally. All of that gave me grounds to cover this story. It can be uncomfortable reporting on something so closely tied to our personal lives — but if journalists are not willing to report on the ongoing attacks against the free press, who will?


freedom.press/issues/a-massive…

Gazzetta del Cadavere reshared this.



#Trump e #Putin al caminetto


altrenotizie.org/primo-piano/1…




Anduril accelera nell’Indo-Pacifico. Nuovi accordi con Taiwan e Corea del Sud

@Notizie dall'Italia e dal mondo

Dopo America ed Europa, Anduril ha messo gli occhi anche sull’Indo-Pacifico. L’emerging tech Usa, leader nel comparto dell’IA applicata alla difesa, ha recentemente concluso due accordi che pongono le basi della sua futura espansione in estremo oriente. Da un lato



The human voiceover artists behind AI voices are grappling with the choice to embrace the gigs and earn a living, or pass on potentially life-changing opportunities from Big Tech.#AI #voiceovers


Voiceover Artists Weigh the 'Faustian Bargain' of Lending Their Talents to AI


Acting is an industry of feast and famine, where performers’ income can swing widely by role, by month, and by year. It’s a field where people often face the choice between passion, creativity, and taking a commercial gig for a check. As with so much else, this delicate personal calculation is now being disrupted by AI.

Last month, online actors’ jobs boards were flooded with a very specific, very well-paid role. Nestled between student short film gigs and callouts for background dancers, was the ambiguously-named opportunity “Technology Company AI Project.” According to the job listing on cast and crew job board Mandy, it would pay up to $80,000, for only 19 total hours of work. This is unusually high for an industry where a national-level ad campaign for a big brand might pay $6,000.

Upgrade to continue reading


Become a paid member to get access to all premium content
Upgrade




The OverDrive is made to let ground vehicles navigate tough terrain with minimal input from humans.#military #AIbots



#NoiSiamoLeScuole, con i fondi del #PNRR finalizzati alla costruzione di nuove scuole sono stati demoliti e sono in corso di ricostruzione due istituti in Sicilia e uno in Lombardia.


se lo dice israele ci sarà proprio da crederci che fosse un terrorista... specchiata onestà. poveretto e poveretti.


a volte chi vede invadere una nazione libera, può stranamente pensare che si tratti dell'invasione di una nazione libera... non credo che in nazismo c'entri molto. ma poi, da nazione libera, non ho neppure capito cosa dovrebbe fregare alla russia anche se l'ucraina fosse nazista. la russia ha invaso l'iran per quello che fa alle donne? o l'afganistan? il mondo è pieno di stati merda con il sostegno della russia.


Terre rare, gli Usa puntano a estrarle e raffinarle in casa. Ecco come

@Notizie dall'Italia e dal mondo

Il rafforzamento dell’ecosistema della Difesa Usa non passa solamente per l’assegnazione di nuove commesse, ma anche dal consolidamento di una filiera interamente radicata sul territorio nazionale. Il Dipartimento della Difesa statunitense ha infatti concesso il primo prestito



Heatmiser – Mic City Songs
freezonemagazine.com/articoli/…
La ripubblicazione di un album, a mio avviso fondamentale nella definizione delle coordinate di quello che è l’Indie Rock oggi, partendo proprio da quello che è stato, è un evento che non andrebbe sottovalutato da chi ama “perdersi” nei meandri di un genere, sì conosciuto, ma che, per dimensioni, scelte di pubblicazioni, spesso difficilissime da […]
L'articolo Heatmiser – Mic City Songs proviene
La



GLOBAL SUMUD FLOTILLA. A fine agosto e inizio settembre decine di imbarcazioni salperanno per Gaza


@Notizie dall'Italia e dal mondo
Prima dalla Spagna e poi dal Nordafrica gli attivisti di 44 paesi proveranno a rompere il blocco navale israeliano di Gaza e a portare aiuti umanitari ai civili palestinesi. A bordo ci sarà ancora Greta



Pace tra Armenia e Azerbaigian. Il passo falso di Mosca e i timori dell’Iran


@Notizie dall'Italia e dal mondo
L'intesa firmata a Washington favorisce l'Azerbaigian, la Turchia e gli Stati Uniti, che rimettono piede nel cortile di casa russo. Teheran teme e denuncia la manovra a tenaglia
L'articolo Pace tra Armenia e Azerbaigian. Il passo falso di Mosca e i timori dell’Iran proviene da Pagine