Salta al contenuto principale



Hackaday Podcast Episode 343: Double Component Abuse, a Tinkercad Twofer, and a Pair of Rants


This week, Hackaday’s Elliot Williams and Kristina Panos met up across the universe to bring you the latest news, mystery sound, and of course, a big bunch of hacks from the previous seven days or so.

In Hackaday news, OMG Supercon is almost here! And we just revealed the badge! In other news, we’ve still got a contest running. Read all about the 2025 Component Abuse Challenge, sponsored by DigiKey, and check out the contest page for all the details.

On What’s That Sound, Kristina failed spectacularly. Will you fare better and perhaps win a Hackaday Podcast t-shirt? Mayhap you will.

After that, it’s on to the hacks and such, beginning with a really cool entry into the Component Abuse Challenge wherein a simple transmission line is used to multiply a voltage. We watch as a POV globe takes to the skies, once it has enough motors.

Then we discuss several awesome hacks such as an incredible desk that simulates beehive activity, a really great handheld PC build, and a Tinkercad twofer. Finally, we discuss the future of removable batteries, and the history of movable type.

Check out the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

html5-player.libsyn.com/embed/…

Download in DRM-free MP3 and savor at your leisure.

Where to Follow Hackaday Podcast

Places to follow Hackaday podcasts:



Episode 343 Show Notes:

News:



What’s that Sound?



Interesting Hacks of the Week:



Quick Hacks:



Can’t-Miss Articles:



hackaday.com/2025/10/24/hackad…



Microreattori e sicurezza nazionale. La scommessa del Pentagono

@Notizie dall'Italia e dal mondo

Basi militari americane alimentati in territorio (continentale) statunitense da small modular reactors entro l’autunno del 2028. È l’obiettivo del Janus Program, iniziativa congiunta del Dipartimento della Guerra e del Dipartimento dell’Energia annunciata dal segretario dell’Esercito Daniel P.



La trappola del falso supporto tecnico: attenti, è phishing


@Informatica (Italy e non Italy 😁)
È stata rivelata una campagna di truffe online che sfrutta il logo Microsoft in uno schema di falso supporto tecnico. L’attacco non punta tanto sulla sofisticazione tecnica, quanto sulla capacità di sfruttare la fiducia e la paura per ottenere il controllo completo del dispositivo della



There is no evidence the Instagram and Facebook account, called Montcowatch, sells anything. Lawyers from the ACLU say the move is "wild outside the scope" of DHS' authority.

There is no evidence the Instagram and Facebook account, called Montcowatch, sells anything. Lawyers from the ACLU say the move is "wild outside the scope" of DHSx27; authority.#ICE #DHS


DHS Tries To Unmask Ice Spotting Instagram Account by Claiming It Imports Merchandise


The Department of Homeland Security (DHS) is trying to force Meta to unmask the identity of the people behind Facebook and Instagram accounts that post about Immigration and Customs Enforcement (ICE) activity, arrests, and sightings by claiming the owners of the account are in violation of a law about the “importation of merchandise.” Lawyers fighting the case say the move is “wildly outside the scope of statutory authority,” and say that DHS has not even indicated what merchandise the accounts, called Montcowatch, are supposedly importing.

“There is no conceivable connection between the ‘MontCo Community Watch’ Facebook or Instagram accounts and the importation of any merchandise, nor is there any indicated on the face of the Summonses. DHS has no authority to issue these summonses,” lawyers with the American Civil Liberties Union (ACLU) wrote in a court filing this month. There is no indication on either the Instagram or Facebook account that the accounts are selling any type of merchandise, according to 404 Media’s review of the accounts. “The Summonses include no substantiating allegations nor any mention of a specific crime or potential customs violation that might trigger an inquiry under the cited statute,” the lawyers add.

💡
Do you know anything else about this case or others like it? We would love to hear from you. Using a non-work device, you can message Joseph securely on Signal at joseph.404 or Jason at jason.404

A judge temporarily blocked DHS from unmasking the owners last week.

“The court now orders Meta [...] not to produce any documents or information in response to the summonses at issue here without further order of the Court,” the judge wrote in a filing. The move to demand data from Meta about the identities of the accounts while citing a customs statute shows the lengths to which DHS is willing to go to attempt to shut down and identify people who are posting about ICE’s activities.

Montcowatch is, as the name implies, focused on ICE activity in Montgomery County, Pennsylvania. Its Instagram posts are usually titled “Montco ICE alert” and include details such as where suspected ICE agents and vehicles were spotted, where suspected agents made arrests, or information about people who were detained. “10/20/25 Eagleville,” one post starts. “Suspected dentention [sic] near Ollies on Ridge Pike sometime before 7:50 am. 3 Agents and 3 Vehicles were observed.”

The Instagram account has been posting since June, and also posts information about peoples’ legal rights to film law enforcement. It also tells people to not intervene or block ICE. None of the posts currently available on the Instagram account could reasonably be described as doxing or harassing ICE officials.

On September 11, DHS demanded Meta provide identifying details on the owners of the Montcowatch accounts, according to court records. That includes IP addresses used to access the account, phone numbers on file, and email addresses, the court records add. DHS cited a law “focused on customs investigations relating to merchandise,” according to a filing from the ACLU that pushed to have the demands thrown out.
playlist.megaphone.fm?p=TBIEA2…
“The statute at issue here, 19 U.S.C. § 1509, confers limited authority to DHS in customs investigations to seek records related to the importation of merchandise, including the assessment of customs duties,” the ACLU wrote. “Identifying anonymous social media users critical of DHS is not a legitimate purpose, and it is not relevant to customs enforcement.” As the ACLU notes, a cursory look at the accounts shows they are “not engaged in commerce.” The court record points to an 2017 Office of the Inspector General report which says Customs and Border Protection (CBP) “regularly” tried much the same thing with its own legal demands, and specifically around the identity of an anonymous Twitter user.

“Movant now files this urgent motion to protect their identity from being exposed to a government agency that is apparently targeting their ‘community watch’ Facebook and Instagram accounts for doing nothing more than exercising their rights to free speech and association,” those lawyers and others wrote last week.

“Movant’s social media pages lawfully criticize and publicize DHS and the government agents who Movant views as wreaking havoc in the Montgomery County community by shining a light on that conduct to raise community members’ awareness,” they added.

The judge has not yet ruled on the ACLU’s motion to quash the demands altogether. This is a temporary blockage while that case continues.

The Montocowatch case follows other instances in which DHS has tried to compel Meta to identify the owners of similar accounts. Last month a judge temporarily blocked a subpoena that was aiming to unmask Instagram accounts that named a Border Patrol agent, The Intercept reported.

Earlier this month Meta took down a Facebook page that published ICE sightings in Chicago. The move came in direct response to pressure from the Department of Justice.

Both Apple and Google have removed apps that people use to warn others about ICE sightings. Those removals also included an app called Eyes Up that was focused more on preserving videos of ICE abuses. Apple’s moves also came after direct pressure from the Department of Justice.

Montcowatch directed a request for comment to the ACLU of Pennsylvania, which did not immediately respond.


#ice #x27 #DHS


Making WiFi Sound Like Dial-Up Internet


Dial-up modems had a distinctive sound when connecting, with the glittering, screeching song becoming a familiar melody to those jumping online in the early days of the Internet. Modern digital connections don’t really have an analog to this, by virtue of being entirely digital. And yet, [Nick Bild] decided to make WiFi audible in a pleasing tribute to the modems of yore.

The reason you could hear your dial-up modem is because it was actually communicating in audio over old-fashioned telephone lines. The initialization process happened at a low enough speed that you could hear individual sections of the handshake that sounded quite unique. Ultimately, though, once a connection was established at higher speed, particularly 33.6 k or 56 k, the sound of transmission became hard to discern from static.

Modern communication methods like Ethernet, DSL, and WiFi all occur purely digitally — and in frequencies far above the audible range. Thus, you can’t really “listen” to a Wi-Fi signal any more than you can listen to the rays of light beaming out from the sun. However, [Nick] found an anachronistic way to make a sound out of WiFi signals that sounds vaguely reminiscent of old-school modems. He used a Raspberry Pi 3 equipped with a WiFi adapter, which sniffs network traffic, honing in on data going to one computer. The packet data is then sent to an Adafruit QT Py microcontroller, which uses the data to vary the amplitude of a sound wave that’s then fed to a speaker through a digital-to-analog converter. [Nick] notes this mostly just sounds like static, so he adds some adjustments to the amplitude and frequency to make it more reminiscent of old modem sounds, but it’s all still driven by the WiFi data itself.

It’s basically WiFi driven synthesis, rather than listening to WiFi itself, but it’s a fun reference to the past. We’ve talked a lot about dial-up of late; from the advanced technology that made 56 k possible, to the downfall of AOL’s long-lived service. Video after the break.

youtube.com/embed/OxAJHiVkBEM?…


hackaday.com/2025/10/24/making…




Offener Brief: Bürgerrechtsorganisationen pochen auf Unabhängigkeit der irischen Datenschutzaufsicht


netzpolitik.org/2025/offener-b…



Obesità, il presidente di Aifa Robert Nisticò a TPI: “La prevenzione è un dovere dello Stato”


@Politica interna, europea e internazionale
Presidente Nisticò, con l’approvazione della Legge Pella, l’Italia è il primo e unico Paese al mondo ad avere una norma per la prevenzione e la cura dell’obesità. Cosa comporta? «L’obesità è una vera e propria malattia, molto



Collins Aerospace: la voce di Everest su una tempesta perfetta. Ricostruiamo i fatti


@Informatica (Italy e non Italy 😁)
Si dice spesso che la verità sia la prima vittima in una guerra, e nel confuso panorama della cybersecurity questa massima risuona con sinistra frequenza. Quella che ha colpito Collins Aerospace a settembre del 2025 non è stato un semplice




Il deputato di Forza Italia Roberto Pella a TPI: “La mia legge contro l’obesità? Pensa al domani”


@Politica interna, europea e internazionale
On. Pella, l’Italia è il primo Paese al mondo a riconoscere l’obesità come malattia, grazie alla legge recentemente approvata di cui Lei è il primo firmatario. «È un motivo di grande soddisfazione. Indubbiamente a ognuno di noi fa piacere



This Week in Security: Court Orders, GlassWorm, TARmageddon, and It was DNS


This week, a US federal court has ruled that NSO Group is no longer allowed to use Pegasus spyware against users of WhatsApp. And for their trouble, NSO was also fined $4 million. It’s unclear how much this ruling will actually change NSO’s behavior, as it intentionally stopped short of applying to foreign governments.

There may be an unexpected source of leverage the US courts can exert over NSO, with the news that American investors are acquiring the company. Among the requirements of the ruling is that NSO cannot reverse engineer WhatsApp code, cannot create new WhatsApp accounts, and must delete any existing WhatsApp code in their possession. Whether this actually happens remains to be seen.

Points On the Curve


Cryptography is hard. Your implementation can do everything right, and still have a weakness. This was demonstrated yet again in the Cloudflare CIRCL cryptography library. The issue here is a Diffie-Hellman scheme using the Curve4Q elliptic curve.

Quick review: Diffie-Hellman is a technique where Bob and Alice can exchange public keys, and each combine the received public key with their own private key, and arrive at a shared secret. This can be accomplished on an elliptic curve by choosing a scalar value as a private key, and multiplying a standard generator point by that scalar to derive a new point on the curve, which serves as the public key. After the public key points are exchanged, Alice and Bob each multiply the received public point by their own secret scalar. Just like simple multiplication, this function is commutative, and results in the same answer for both.

There is a catch that can cause problems. Not every value is a valid point on the curve, and doing calculations on these invalid points can lead to unusual results. The danger here isn’t remote code execution (RCE), but leaking information about the private key when doing an invalid calculation using these invalid points.

The CIRCL library had a couple instances where invalid points could be used. There’s a quirk of deserializing FourQ points, that the x value can be interpreted two ways, essentially a positive or negative x. The CIRCL logic attempts to deserialize an incoming point in one way, and if that point is not actually on the curve, the value is inverted (technically “conjugated”), and the new point is accepted without testing. There were a few other similar cases where points weren’t being validated. These flaws were reported to Cloudflare and fixed earlier this year.

GlassWorm


We recently covered Shai Hulud, an npm worm that actively uploaded itself into other npm libraries when it found valid credentials on compromised computers. It was something of a sea change in the world of library security. Now a month later, we have GlassWorm, a vscode extension worm.

GlassWorm combines several very sneaky techniques. When it injects code into an extension, that code is hidden with Unicode shenanigans, rendering in VSCode as blank lines. Once this malicious VSCode extension is loaded, it reaches out to some interesting Command and Control (C2) infrastructure: The Solana blockchain is used as a sort of bulletproof DNS, hosting a a C2 IP address. There’s a second, almost equally weird C2 mechanism: Hosting those IP addresses in entries on a public Google Calendar.

Once this malware is running, it harvests credentials, and if it gets a chance, injects itself in the code for other extensions and tries to publish. And it also turns the compromised machine into a “Zombi”, part of a botnet, but also working as a RAT (Remote Access Trojan). All told, it’s really nasty malware, and seems to indicate a shift towards these meta-worms that are intended to infiltrate Open Source software repositories.

Speaking of npm, GitHub has begun making security enhancements in response to the Shai Hulud worm. It looks like good changes, like the deprecation of classic access tokens, in favor of shorter lived, granular tokens. TOTP (Time based One Time Password) is going away as a second factor of authentication, in favor of passkeys and similar. And finally, npm is encouraging the use of doing away with long-lived access tokens altogether, and publishing strictly from CI/CD systems.

TARmageddon


We’ve cheered on the progress of the Rust language and its security wins, particularly in the realm of memory safety. But memory management is not the only cause of security issues. The async-tar rust package had a parsing bug that allowed a .tar file to smuggle additional contents that were not seen by the initial validation step.

That has all sorts of potential security ramifications, like smuggling malicious files, bypassing filters, and more. But what’s really interesting about this particular bug is that it’s been around since the first release of the package, and async-tar has been forked into many other published packeges, some of which are in use but no longer maintained. This has turned what should have been a simple fix into a mess, and the popular tokio-tar is still unfixed.

It Was DNS


You probably noticed that the Internet was sort of a dumpster fire on Monday — more than normal. Most of the world, it seems, runs on Amazon’s AWS, and when AWS goes down, it’s surprising what else fails. There were the normal sites and services down, like Reddit, Signal, Fortnight, and Prime Video. It was a bit of a surprise that some banks were down and flights delayed. And then there were IoT devices, like smart beds, litter boxes, and smart bulbs.

And the problem, naturally, was DNS. It’s always DNS. Specifically, Amazon has pinned the outage on “…a latent race condition in the DynamoDB DNS management system that resulted in an incorrect empty DNS record…”. This bad record brought down other services that relied on it, and it didn’t take long for the problem to spin out of control.

Bits and Bytes


There’s even more DNS, with [Dan Kaminsky]’s infamous cache poisoning making an unwelcome comeback. DNS has historically run over UDP, and the Kaminsky attack was based on the lack of authorization in DNS responses. The solution was to randomize the port a request was sent from, requiring the matching response be delivered to the same port number. What’s new here is that the Pseudo Random Number Generator (PRNG) in BIND has a weakness, that could have allowed predicting those values.

TP-Link’s Omada gateways had a pair of vulnerabilities that allowed for RCE. The more serious of the two didn’t require any authentication. Noword on whether this flaw was accessible from the WAN interface by default. Patched firmware is now available.

The better-auth library patched an issue early this month, that allowed the createApiKey endpoint to run without authRequired set true, simply by providing a valid user ID. This bug has been in the library ever since API keys were added to the project. The fix landed in 1.3.26.

And for bonus points, go check out the ZDI post on Pwn2Own Ireland, that just wrapped. There were lots of IoT hacks, including at least one instance of Doom running on a printer. Summoning Team took the Master of Pwn award, nearly doubling the points earned by second place. Congrats!


hackaday.com/2025/10/24/this-w…




La space economy, le filiere strategiche e il ruolo delle Pmi. Intervista a Jacopo Recchia (Aviorec)

@Notizie dall'Italia e dal mondo

Il settore aerospaziale e della difesa sta vivendo una trasformazione rapida e complessa. Nuove tecnologie, supply chain sempre più integrate e il ruolo centrale delle Pmi nella filiera nazionale delineano un panorama in continua evoluzione.




Big Daddy Wilson – Smiling All Day Long
freezonemagazine.com/articoli/…
Big Daddy Wilson ci presenta il suo nuovo disco con una considerazione che così riassumiamo. “Si può immaginare la vita senza musica? Nessuna ninna nanna rilassante, nessuna serenata romantica, nessuna canzone pop vivace, nessuna sinfonia emozionante e nessuna melodia ispiratrice. La maggior parte delle persone considererebbe questa prospettiva noiosa e poco attraente. La


Il genocidio a Gaza è un crimine collettivo: il nuovo rapporto di Francesca Albanese - L'INDIPENDENTE
lindipendente.online/2025/10/2…




“Sanzioni ostili ma inutili” ci sono molte affermazioni di putin di questo genere.

è vero che negli ultimi 5 anni c'è stato un sovvertimento di qualsiasi più basilare regola di logica, con la scheggia impazzita di israele che pensa di poter ridisegnare i confini mondiali per legge ordinaria del proprio parlamento. nello stesso raggruppamento rientra sia le leggi russe sui propri confini nazionali che si espandono continuamente, che pure eventuali referendum russi fake... ma sentire un capo di stato che sostiene che si sente "ferito" da "sanzioni" che però comunque non hanno alcun effetto è una ulteriore escalation di questa che può essere solo definita una ridicola farsa.

veramente... è un'affermazione che va a deperimento della dignità di chi la fa. della serie rendersi ridicoli. perché alla fine puoi dire solo una delle 2 cose. 1) o è una minaccia ed è dannosa 2) o non ha effetto e non ha neppure sentito parlarne o sentirsene offesi

l'ordine nuovo portato avanti da putin, alternativo a quello usa, non pare migliore del modello precedente, in sostanza. e quando si deve cambiare per rimanere come prima per quanto mi riguarda io voto per nessun cambiamento. cambiare per in cambiamento fine a se stesso senza progresso non ha senso. o c'è progresso o non c'è progresso. solo questo conta. a livello globale chiaramente. non locale.




La “lotta antidroga” di Trump punta con forza alla guerra con Caracas


@Notizie dall'Italia e dal mondo
Allo scopo di mettere sotto pressione Maduro, la Casa Bianca ha trasferito sul piano militare un problema che fino a ieri veniva gestito dalle forze di polizia e dalla Guardia Costiera
L'articolo La “lotta antidroga” di Trump punta con forza alla guerra con Caracas proviene



Non lasciamo sole le donne iraniane!


@Giornalismo e disordine informativo
articolo21.org/2025/10/non-las…
Le donne e le ragazze iraniane non dimentichiamole e non lasciamole sole: per sempre “Donna-Vita-Libertà” Grido di allarme lanciato da SOHYLA ARJMAND attivista e testimone iraniana dell’Associazione “Donne per Nasrin” che “Articolo21 liberi di” raccoglie. In



REPORTAGE. Messico: lo Stato che fa sparire i propri figli


@Notizie dall'Italia e dal mondo
Da oltre un decennio, i genitori dei 43 studenti di Ayotzinapa cercano la verità su una sparizione che coinvolge polizia, esercito e narcotraffico, mentre in Messico le persone scomparse superano le 124 mila.
L'articolo REPORTAGE. Messico: lo Stato che fa sparire i propri figli proviene da Pagine



Thomas Zigal – The White League
freezonemagazine.com/news/thom…
In libreria dal 31 Ottobre 2025 Un thriller avvincente e morale, a tinte noir, che scava nel cuore oscuro del Sud degli Stati Uniti. Un romanzo sulla colpa, sulla giustizia negata, sul privilegio e sull’eredità mai estinta del razzismo. Venerdì 31 ottobre readerforblind pubblica The White League, romanzo di Thomas Zigal tradotto da […]
L'articolo Thomas Zigal – The White League proviene da FRE


CONGO. La pace di Trump è un inferno


@Notizie dall'Italia e dal mondo
Trump si vanta di aver riportato la pace in Congo, ma combattimenti e abusi continuano e l'emergenza umanitaria è disastrosa. La Casa Bianca punta a sfruttare le terre rare di cui è ricco il sottosuolo del paese africano
L'articolo CONGO. La pace di Trump è un pagineesteri.it/2025/10/24/afr…






Ott 24
Prova di evento - Test di federazione eventi Friendica
Ven 23:30 - 23:30
utentediprova
Ciao questo è un test di federazione degli eventi Friendica




cedolare secca


l'aumento della cedolare secca serve contro il rincaro affitti in città?
Affitto villetta sul Trasimeno, chi a vuole come affitto lungo?



The first application of enteral ventilation—aka breathing through the bum—to humans proved the technique is safe.#TheAbstract


Breathing Through Our Butts Declared Safe After First Human Trial


🌘
Subscribe to 404 Media to get The Abstract, our newsletter about the most exciting and mind-boggling science news and studies of the week.

Hold onto your butts, because one day you might be breathing through them.

Scientists have tested out enteral ventilation—a possible method of administering oxygen with a liquid delivered through the rectum that is then absorbed into the intestines—in humans for the first time. The trial demonstrated that this method of ventilation is safe and “paves the way for future studies to see if this technique can help patients with respiratory failure,” according to a study published on Monday in the journal Med.

“Enteral ventilation is not meant to replace mechanical ventilators or ECMO, but rather to serve as a complementary oxygenation route,” said Takanori Takebe, an expert in organoid medicine with appointments at both Cincinnati Children’s Hospital Medical Center and the University of Osaka, in an email to 404 Media. The technique proves a backdoor “to provide partial oxygen support while allowing the lungs to rest,” he added.

But while this method is safe for humans, it hasn’t been experimentally shown to work on patients experiencing respiratory distress yet. If future trials show that enteral ventilation is also effective, it could potentially help newborns and premature infants who are struggling to establish lung function after birth, aid patients with severe respiratory failure or Acute Respiratory Distress Syndrome (ARDS), or be applied in other situations in which temporary oxygen supplementation is needed.

“In such cases, intestinal oxygen delivery could serve as a ‘bridge’ therapy until normal respiration or full ventilatory support can be established,” Takebe said.
A figure outlining the first enteral ventilation trial in humans. Image: Fujii, Tasuku et al.
The team previously published a study in 2021 that showed enteral ventilation was effective in ameliorating respiratory failure in rats, mice, and pigs. This initial trial in humans involved 27 healthy male volunteers, who received a liquid called perfluorodecalin through their rectums in an enema-like process.

Since the trial was only intended to determine the safety of the procedure, rather than probe its efficacy in humans, the perfluorodecalin was not oxygenated and none of the volunteers were experiencing any respiratory distress during the course of the study.

“The results aligned closely with what we had anticipated from our preclinical data,” Takebe said. “We found that intrarectal administration of perfluorodecalin up to 1,000 mL was safe and well tolerated, with only mild and transient gastrointestinal symptoms such as bloating.”

“The next phase will involve testing ‘oxygenated’ perfluorodecalin (O₂-PFD) in patients with hypoxemia to evaluate actual oxygen transfer efficacy,” he added. “We are currently planning a Phase II trial in collaboration with clinical partners in Japan and the U.S.”

Takebe and his colleagues were inspired to develop this roundabout route by aquatic species, such as loaches, which absorb oxygen through their intestines to survive in low-oxygen environments. While the idea of rectally administering perfluorodecalin is relatively new, the use of oxygenated liquid for ventilation dates back decades. It even shows up in James Cameron’s 1989 thriller The Abyss, which includes a real scene of a rat breathing in a tank of liquid perfluorocarbon.

The technique may prove to be an effective means to alleviate respiratory distress in humans, but it’s also inspired its fair share of jokes because, well, it is about butt breath, after all.

In 2024, for instance, Takebe’s team received the Ig Nobel Prize, a satirical award that honors “achievements so surprising that they make people laugh, then think,” according to its website. Fellow Ig Nobel awardees include a team that levitated a frog in midair and another that investigated why pregnant women aren’t constantly tipping over.

“Receiving the Ig Nobel Prize was both humorous and humbling,” Takebe said. “It was a reminder that truly unconventional ideas often begin at the boundary between curiosity and skepticism.”

“While the prize is lighthearted in tone, I do believe it serves a serious purpose, encouraging the public to stay curious and to appreciate how even seemingly odd scientific questions can lead to meaningful innovations,” he concluded. “What began as a playful concept is now moving closer to a viable medical technology.”

🌘
Subscribe to 404 Media to get The Abstract, our newsletter about the most exciting and mind-boggling science news and studies of the week.




È uscito il nuovo numero di The Post Internazionale. Da oggi potete acquistare la copia digitale


@Politica interna, europea e internazionale
È uscito il nuovo numero di The Post Internazionale. Il magazine, disponibile già da ora nella versione digitale sulla nostra App, e da domani, venerdì 24 ottobre, in tutte le edicole, propone ogni due settimane inchieste e approfondimenti sugli affari e il potere




trump è riuscito a fare un danno serio... apparire come debole e incostante, e quindi in definitiva inefficace. la usa politica ondivaga questo produce: un danno di immagine. ma non è utile alla nostra causa. non c'è da rallegrarsene. bene o male al momento dipendiamo ancora noi europei dalla deterrenza usa. e certo pacifismo è utile solo a putin.

qr.ae/pCs2ln



An analysis of how tools to make non-consensual sexually explicit deepfakes spread online, from the Institute for Strategic Dialogue, shows X and search engines surface these sites easily.#Deepfakes #Socialmedia


New Research Shows Deepfake Harassment Tools Spread on Social Media and Search Engines


A new analysis of synthetic intimate image abuse (SIIA) found that the tools for making non-consensual, sexually explicit deepfakes are easily discoverable all over social media and through simple searches on Google and Bing.

Research published by the counter-extremism organization Institute for Strategic Dialogue shows how tools for creating non-consensual deepfakes spread across the internet. They analyzed 31 websites for SIIA tools, and found that they received a combined 21 million visits a month, with up to four million visits in one month.

Chiara Puglielli and Anne Craanen, the authors of the research paper, used SimilarWeb to identify a common group of sites that shared content, audiences, keywords and referrals. They then used the social media monitoring tool Brandwatch to find mentions of those sites and tools on X, Reddit, Bluesky, YouTube, Tumblr, public pages on Instagram and Facebook, forums, blogs and review sites, according to the paper. “We found 410,592 total mentions of the keywords between 9 June 2020 and 3 July 2025, and used Brandwatch’s ability to separate mentions by source in order to find which sources hosted the highest volumes of mentions,” they wrote.

The easiest place to find SIIA tools was through simple web searches. “Searches on Google, Yahoo, and Bing all yielded at least one result leading the user to SIIA technology within the first 20 results when searching for ‘deepnude,’ ‘nudify,’ and ‘undress app,’” the authors wrote. Last year, 404 Media saw that Google was also advertising these apps in search results. But Bing surfaces the tools most readily: “In the case of Bing, the first results for all three searchers were SIIA tools.” These weren’t counting advertisements on the search engines that the websites would have paid for, but were organic search results surfaced by the engines’ crawlers and indexing.

X was another massively popular way these tools spread, they found: “Of 410,592 total mentions between June 2020 and July 2025, 289,660 were on X, accounting for more than 70 percent of all activity.” A lot of these were bots. “A large volume of traffic appeared to be inorganic, based on the repetitive style of the usernames, the uniformity of posts, and the uniformity of profile pictures,” Craanen told 404 Media. “Nevertheless, this activity remains concerning, as its volume is likely to attract new users to these tools, which can be employed for activities that are illegal in several contexts.”

One major spike in mentions of the tools on social media happened in early 2023 on Tumblr, when a woman posted about her experience being a target of sexual harassment from those very same tools. As targets of malicious deepfakes have said over and over again, the price of speaking up about one’s own harassment, or even objecting to the harassment of others, is the risk of drawing more attention and harassment to themselves.

‘I Want to Make You Immortal:’ How One Woman Confronted Her Deepfakes Harasser
“After discovering this content, I’m not going to lie… there are times it made me not want to be around any more either,” she said. “I literally felt buried.”
404 MediaSamantha Cole


Another spike on X in 2023 was likely the result of bot advertisements for a single SIIA tool, Craanen said, and the spike was a result of those bots launching. X has rules against “unwanted sexual conduct and graphic objectification” and “inauthentic media,” but the platform remains one of the most significant places where tools for making that content are disseminated and advertised.

Apps and sites for making malicious deepfakes have never been more common or easier to find. There have been several incidents where schoolchildren have used “undress” apps on their classmates, including last year when a Washington state high school was rocked by students using AI to take photos from other children’s Instagram accounts and “undress” around seven of their underage classmates, which police characterized as a possible sex crime against children. In 2023, police arrested two middle schoolers for allegedly creating and sharing AI-generated nude images of their 12 and 13 year old classmates, and police reports showed the preteens used an application to make the images.

A recent report from the Center for Democracy and Technology found that 40 percent of students and 29 percent of teachers said they know of an explicit deepfake depicting people associated with their school being shared in the past school year.

Laws About Deepfakes Can’t Leave Sex Workers Behind
As lawmakers propose federal laws about preventing or regulating nonconsensual AI generated images, they can’t forget that there are at least two people in every deepfake.
404 MediaSamantha Cole


The “Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks” (TAKE IT DOWN) Act, passed earlier this year, requires platforms to report and remove synthetic sexual abuse material, and after years of state-by-state legislation around deepfake harassment is the first federal-level law to attempt to confront the problem. But critics of that law have said it carries a serious risk of chilling legitimate speech online.

“The persistence and accessibility of SIIA tools highlight the limits of current platform moderation and legal frameworks in addressing this form of abuse. Relevant laws relating to takedowns are not yet in full effect across the jurisdictions analysed, so the impact of this legislation cannot yet be fully known,” the ISD authors wrote. “However, the years of public awareness and regulatory discussion around these tools, combined with the ease with which users can still discover, share and deploy these technologies suggests that takedowns cannot be the only tool used to counter their proliferation. Instead, effective mitigation requires interventions at multiple points in the SIIA life cycle—disrupting not only distribution but also discovery and demand. Stronger search engine safeguards, proactive content-blocking on major platforms, and coordinated international policies are essential to reducing the scale of harm.”




Meta’s Ray-Ban glasses usually include an LED that lights up when the user is recording other people. One hobbyist is charging a small fee to disable that light, and has a growing list of customers around the country.#Privacy #Meta


A $60 Mod to Meta’s Ray-Bans Disables Its Privacy-Protecting Recording Light


The sound of power tools screech in what looks like a workshop with aluminum bubble wrap insulation plastered on the walls and ceiling. A shirtless man picks up a can of compressed air from the workbench and sprays it. He’s tinkering with a pair of Meta Ray-Ban smart glasses. At one point he squints at a piece of paper, as if he is reading a set of instructions.

Meta’s Ray-Ban glasses are the tech giant’s main attempt at bringing augmented reality to the masses. The glasses can take photos, record videos, and may soon use facial recognition to identify people. Meta’s glasses come with a bright LED light that illuminates whenever someone hits record. The idea is to discourage stalkers, weirdos, or just anyone from filming people without their consent. Or at least warn people nearby that they are. Meta has designed the glasses to not work if someone covers up the LED with tape.

That protection is what the man in the workshop is circumventing. This is Bong Kim, a hobbyist who modifies Meta Ray-Ban glasses for a small price. Eventually, after more screeching, he is successful: he has entirely disabled the white LED that usually shines on the side of Meta’s specs. The glasses’ functions remain entirely intact; the glasses look as-new. People just won’t know the wearer is recording.

This post is for subscribers only


Become a member to get access to all content
Subscribe now


Ikkle Gemz Universe+ reshared this.



The app, which went viral before facing multiple data breaches, is currently unavailable on the Apple App Store.#tea #News


Apple Removes Women Dating Safety App from the App Store


Apple has removed Tea, the women’s safety app which went viral earlier this year before facing multiple data breaches, from the App Store.

“This app is currently not available in your country or region,” a message on the Apple App Store currently says when trying to visit a link to the app.

Apple told 404 Media in an email it removed the app, as well as a copycat called TeaOnHer, for failing to meet the company’s terms of use around content moderation and user privacy. Apple also said it received an excessive number of complaints, including ones about the personal data of minors being posted in the apps.

💡
Do you know anything else about this removal? Do you work at Tea or did you used to? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

The company pointed to parts of its guidelines including that apps are not allowed to share someone’s personal data without their permission, and that apps need a mechanism for reporting objectionable content.

Randy Nelson, head of insights and media resources at app intelligence company Appfigures, first alerted 404 Media to the app’s removal.

This post is for subscribers only


Become a member to get access to all content
Subscribe now


#News #tea