Although Robert F. Kennedy gets the credit for popularizing it, George Bernard Shaw said: “Some men see things as they are and say, ‘Why?’ I dream of things that never were and say, ‘Why not?'” Well, [Hadz] didn’t wonder why there weren’t many GPU debuggers. Instead, [Hadz] decided to create one.

It wasn’t the first; he found some blog posts by [Marcell Kiss] that helped, and that led to a series of experiments you’ll enjoy reading about. Plus, don’t miss the video below that shows off a live demo.

It seems that if you don’t have an AMD GPU, this may not be directly useful. But it is still a fascinating peek under the covers of a modern graphics card. Ever wonder how to interact with a video card without using something like Vulkan? This post will tell you how.

Writing a debugger is usually a tricky business anyway. Working with the strange GPU architecture makes it even stranger. Traps let you gain control, but implementing features like breakpoints and single-stepping isn’t simple.

We’ve used things like CUDA and OpenCL, but we haven’t been this far down in the weeds. At least, not yet. CUDA, of course, is specific to NVIDIA cards, isn’t it?

youtube.com/embed/HDMC9GhaLyc?…

hackaday.com/2025/12/16/debugg…

“Come prima cosa vorrei ringraziare di cuore le studentesse e gli studenti dei collettivi studenteschi che hanno, con coraggio, respinto i volantinaggi di Blocco Studentesco e CasaPound davanti al Chierici e allo Spallanzani” – dichiara Alessandro Miglioli, consigliere comunale per Verdi e Possibile a margine dell’approvazione dell’ Ordine del giorno Urgente a sostegno dei ragazzi e delle ragazze che, sabato 6 dicembre, hanno fronteggiato gli attivisti di Blocco Studentesco e CasaPound durante la distribuzione di volantini inneggianti a idee e concetti neofascisti.

“I fatti di sabato scorso sono gli ultimi di una serie di atti e provocazioni che queste formazioni di estrema destra neofascista hanno fatto sul territorio della nostra città. Tutto questo è inaccettabile, soprattutto queste situazioni che coinvolgono gli ingressi degli istituti scolastici e studenti spesso minorenni” – continua Miglioli.

Nell’ultimo anno la nostra città è stata sfortunatamente teatro di vari eventi che segnalano una recrudescenza delle idee fasciste e neofasciste. Già a partire dal dicembre 2024 quando Roberto Fiore, fondatore della formazione politica Forza Nuova, aveva annunciato l’intenzione di aprire una sede della sua compagine politica nella nostra città. A marzo 2025 la Rete dei Patrioti, altra organizzazione di ispirazione neofascista, annunciò l’organizzazione di una pericolosa manifestazione che ha dato seguito però ad una bellissima risposta da parte della città, con una imponente manifestazione antifascista. Blocco Studentesco e CasaPound da diverso tempo stanno cercando di infiltrarsi a Reggio Emilia e in provincia, sospinti anche dal clima politico a loro favorevole visto i noti legami tra il partito che guida il governo e queste formazioni di stampo neofasciste.

“Lo spirito della città, Medaglia d’oro per la resistenza, che ha respinto la manifestazione fascista di marzo 2025 va sostenuto e coltivato con energia. Per questo, mi unisco e rilancio l’appello del segretario generale della CGIL, Cristian Sesena all’unità di tutte le forze antifasciste della città. Non ci deve essere spazio per queste ideologie neofasciste nelle scuole e nella nostra città.”

Con questo atto formale, il Consiglio Comunale non solo esprime solidarietà e un doveroso ringraziamento alle studentesse e agli studenti coinvolti, ma soprattutto riafferma una volta di più l’assoluta incompatibilità fra l’ideologia fascista e i valori fondanti la società, la cultura e la comunità di Reggio Emilia.

“In un momento storico come questo, dove le ondate nere che si rifanno alle idee criminali di fascismo e nazismo sono sempre più normalizzate e sdoganate, riaffermare quanto si chiede nell’Ordine del Giorno è quantomai prioritario e necessario. Dobbiamo continuare ad essere vigili e attenti, denunciare e protestare ogni qualvolta che atti come quelli della mattinata di sabato vengono compiuti” – chiude il consigliere comunale.”

Puoi guardare qui l’intervento in Consiglio Comunale del 15 dicembre: youtube.com/watch?v=Wk3HTQpfhaw&feature=youtu.be

L'articolo Miglioli: nelle scuole di Reggio Emilia non c’è spazio per le ideologie neofasciste proviene da Possibile.

I love first builds! They say so much about a person, because you see what’s paramount to them in a keyboard. You can almost feel their frustration at other keyboards come through their design choices. And the Lobo by [no-restarts] is no exception to any of this.

There’s just something about this Corne-like object with its custom case and highly-tappable and variously tilted keycaps. The list of reasons for being begins innocently enough with [no-restarts] wanting a picture of their dog on the case.

Image by [no-restarts] via redditFrom there, things get really personal. You may notice the thumb cluster is slightly different — [no-restarts] doesn’t like the thumb tuck required by the Corne to reach the innermost keys. I really dig the homing bumps on the middle thumb keys. Another difference is the splayed layout, as [no-restarts] is especially prone to pinky splay. Finally, there are a pair of OLEDs hiding on the inner sides of the case, which are designed to be visible when tented.

Overall, [no-restarts] is happy with it, but has some ideas for revision. Yep, that sounds about right. The Lobo is all hand-wired, and there’s a PCB with hot swap sockets in its future. If you’re interested in the case files, GitHub is your friend.

Getting a Handle on Grabshell

[kurisutofujp] recently saw a GrabShell in the flesh, and why haven’t I heard of this keyboard before? The next best time is now, so here we go with the explanation, both for myself and the other 9,999.

Image by [kurisutofujp] via redditEssentially, this thing is made for using while you wander around the office (or the Metaverse). You can hold it in mid-air, secured in your Gargoyle-ness with a pair of straps, your fingers wrapped around to hit the alphas.

But you don’t have to use it that way, see. You can stand it up on the desk if you don’t want to type in mid-air. It can also be opened sort of halfway and used like a SafeType vertical keyboard.

If none of this excites you, GrabShell can also be laid flat on the desk. The distance between the two halves in this configuration is quite generous, and frankly, I’m a bit jealous.

So let’s talk about the generous thumbing-around area. As you’ll see in the video below, the left has a joystick and a toggle switch that flips it from arrow keys to mouse cursor. There’s a serious-looking scroll wheel beneath that. All three of these can be pushed in for additional inputs.

The right side of the thumb panel has a sweet-looking trackball that’s housed in a really cool-looking way. Another cool thing: there’s a frigging I2C port on the top, just exposed and hanging out because reasons.

Switch-wise, the board is a mix of hot-swappable Gateron G Pro browns and low-profile Gaterons under double-shot ABS keycaps. I think it sounds nice in the video below; others say it sounds cheap and hollow. To each their own.

youtube.com/embed/O7p68Gxxlfo?…

The Centerfold: ZMK Dongle Repackaged As Vintage Computer

Image by me using images by [mharzhyall] via redditIt’s just so cute, that’s why it’s here. The buttons, they do nothing, but that’s okay — they might could do something in the future.

This is a ZMK dongle, like I said in the subheading, and [mharzhyall] put a new case around it. Basically it lets you connect keyboards wirelessly.

Do you rock a sweet set of peripherals on a screamin’ desk pad? Send me a picture along with your handle and all the gory details, and you could be featured here!

Historical Clackers: the Edland Typewriter Was a Total Flop

The Antikey Chop reports that this curious little rook-looking index typewriter was such as flop as to be nearly lost to history entirely.
Image via The Antikey Chop
Produced between 1891 and 1893 by the Liberty Mfg. Company, the machine was conceived by Joseph Laurentius Edland of Brooklyn, NY. All seemed lost until 1964, when a handful of Edlands were found languishing in a warehouse in Galway, NY.

Although only made for two years, there were three different versions developed. The one pictured here is the second, with a metal base and embossed index, whereas the first had a wood base and flat index.

The third version, the Typewheel Edland, had a typewheel for a print element à la the Blick. Edlands cost a semi-reasonable $5 at the outset, but eventually doubled in price.

So, why the absolute failure? It was no better or worse a machine than its contemporaries, but perhaps just wasn’t well-marketed. Another theory is that the Edland failed because they were made of pot metal. Seems reasonable. Want to know how to use one? RTFM (PDF).

Finally, a Keyboard with a Mechanical Watch Movement

Wait, what? Why though? Well, it ticks along as you type, is that cool? It might be fun to see if you can keep up a certain number of keystrokes per second. Okay, I’m warming up to this idea pretty quickly, can you tell?

The Nama keyboard, dubbed after the scientific term for the mammoth, is appropriately named. It can weigh up to an astonishing 19.4 lbs (8.8 kg) depending on the case material. (Consider that a Model M, a proper bludgeoning device in its own right, weighs just 5 lbs (2.2 kg).)
This Nama has a tourbillion movement, the granddaddy of them all. Image by Wuque Studio via Notebook Check
Nama comes from Wuque Studio, and was built as an ode to their manufacturing capabilities. Now this is starting to make more sense. They are the Banana Republic to vendor Chilkey’s Old Navy, who are the brand behind the ND75, if that rings any bells.

Now the Nama looks like your basic mechanical keyboard on the surface, but five years of design decisions went into this line. You can get it with an aluminium case (14.5 lbs / 6.6 kg) or a brass CNC’d case (18.95 lbs / 8.6 kg), which of course is what makes it so heavy.

But yeah, the defining feature is definitely the watch movement. You bet your Backspace it’s fully functional except as a watch, and it doubles as a volume control knob, so you don’t have to settle for touching it with just your eyeballs.

Yeah, so the astute among you will have noticed that there are no numbers or hands on the watch movement, which would be, what, tacky? I don’t know anymore. At any rate, it’s protected by a piece of sapphire glass, which should keep Cheetos dust and such out of there.

Oh, you want to know the cost? $749 for the bare-bones with no movement, and $1299 for the brass-bottomed boy with the tourbillion. That’s… actually not that bad for a tourbillion movement.

youtube.com/embed/ROmD6F3XZEw?…

Got a hot tip that has like, anything to do with keyboards? Help me out by sending in a link or two. Don’t want all the Hackaday scribes to see it? Feel free to email me directly.

hackaday.com/2025/12/16/keebin…

I dati del “Report Cittadini Stranieri in Emilia Romagna — Residenti e dinamiche demografiche. Anno 2025″ confermano come il fenomeno migratorio sia in Emilia-Romagna una realtà strutturale, stabile, e sempre più intrecciata con i processi demografici, economici e sociali del nostro territorio.

Al 1° gennaio 2024 i cittadini e le cittadine stranieri residenti in Emilia-Romagna sono 575.476 (12,9% della popolazione complessiva), in incremento di oltre 6.600 persone rispetto all’anno precedente. L’Emilia-Romagna è da diversi anni la regione italiana con la più alta incidenza, seguita dalla Lombardia (12,1%).

Le donne sono la maggioranza delle persone straniere residenti in Emilia-Romagna dal 2009 (in Italia dal 2008). Al 1° gennaio 2024 sono il 52,1% del totale dei residenti stranieri in regione.

Proprio per questo è fondamentale considerare le limitazioni dei diritti delle donne (trans e cisgender) in senso ampio, ponendo l’attenzione su questioni come i matrimoni riparatori, la violenza domestica, il mancato accesso all’aborto e altre forme di negazione del potere decisionale sul proprio corpo. Allo stesso tempo, è necessario rivedere il concetto di “paese sicuro”, con un’attenzione particolare alle esigenze delle persone trans, intersessuali e appartenenti alla comunità LGBTQIA+.

La struttura anagrafica delle persone straniere è decisamente più giovane di quella delle persone italiane.
I minori stranieri residenti in Emilia-Romagna sono circa 113.551, quasi un quinto (19,7%) del totale degli stranieri, così come in Italia.
Tra questi c’è una percentuale di minori stranieri non accompagnati (MSNA) che al 31 ottobre 2025 risultano 1243 in regione, di cui quasi il 67% ha tra i 16 e i 17 anni.

Uno dei momenti più delicati per i MSNA risiede nel compimento del 18esimo anno di età e la sua transizione alla vita adulta.
Soli, senza documenti per potere lavorare regolarmente o trovare casa, questi ragazzi sono facile preda di organizzazioni criminali che alimentano lo sfruttamento nei settori produttivi meno sicuri o le reti di sfruttamento come il traffico sessuale.

Le principali modalità di acquisizione della cittadinanza italiana in regione risultano essere:
— per residenza (da almeno dieci anni)
— per trasmissione da parte di genitori
— per elezione (al compimento dei 18 anni per chi è nato in Italia)

Le difficoltà per richiederla rimangono tante:
— per ottenere la cittadinanza servono sempre 10 anni di residenza
— le procedure rimangono lunghe e allungano i tempi ben oltre i 10 anni

Oltre ai risultati del referendum di sei mesi fa, il tema della migrazione è sempre più centrale nel dibattito politico. Tuttavia, il linguaggio usato è spesso tecnico e inaccessibile o, peggio, trattato in maniera vaga e faziosa, ostacolando un sano confronto democratico.

«I dati non ci bastano. La nostra visione è che le persone siano una ricchezza e l’accoglienza un valore fondamentale. Con l’inverno demografico che stiamo affrontando, la crisi economica e moltissime persone migranti sfruttate nel mercato irregolare del lavoro, tuttə potremmo beneficiare di una convivenza solidale finalmente!»

Quali sono le proposte di Possibile per cambiare tutto questo?

- Ampliamento e semplificazione degli ingressi regolari e ripristino della protezione internazionale
— Rispetto della dignità della persona nell’accoglienza diffusa sul territorio, rafforzando il Sistema di accoglienza e integrazione, e garantendo ai Comuni le necessarie risorse finanziarie, potenziare nei territori i servizi sociali, educativi e di avviamento al lavoro
— Valorizzazione del contributo del terzo settore e delle stesse diaspore organizzate, secondo il principio costituzionale della sussidiarietà
— Introduzione di meccanismi di regolarizzazione su base individuale per coloro che sono già stabilmente inseriti in Italia e valorizzazione delle conoscenze e competenze degli immigrati, troppo spesso ignorate o sminuite
— Rispetto del principio di non discriminazione e contrasto ad ogni forma di razzismo e odio; tutela delle vittime di tratta, violenza e grave sfruttamento.
— Chiusura dei CPR – Centri di Permanenza per il Rimpatrio

Simona Bravaglieri
Possibile Rimini

L'articolo Perché è importante leggere il report sui cittadini stranieri in Emilia-Romagna proviene da Possibile.

When the Tamagotchi first launched all those decades ago, it took the world by storm. It was just a bunch of simple animations on a monochrome LCD, but it had heart, and people responded to that. Modern technology is capable of so much more, so [CiferTech] set out to build a virtual pet that can sniff out WiFi networks.

The build employs an ESP32-S3, perhaps the world’s favorite microcontroller that has WiFi baked right in from the factory. It’s paired with a 240×240 TFT LCD that delivers bright, vivid colors to show the digital pet living inside. Addressable WS2812B LEDs and a simple sound engine provide further feedback on the pet’s status.

The pet has various behaviors coded in, like hunting, exploring, and resting, and moods such as “happy,” “curious,” and “bored.” For a bit of environmental reactivity, [CiferTech] also made the local WiFi environment play a role. Nearby networks can influence the “hunger, happiness, and health” of the pet.

Incidentally, if you’ve ever wondered what made the Tamagotchi tick, we’ve explored that before, too.

youtube.com/embed/UCHQCaAtMd8?…

hackaday.com/2025/12/16/virtua…

Although metal alloys is not among the most exciting topics for most people, the moment you add the word ‘radioactive’, it does tend to get their attention. So too with the once fairly common Mag-Thor alloys that combine magnesium with thorium, along with other elements, including zinc and aluminium. Its primary use is in aerospace engineering, as these alloys provide useful properties such as heat resistance, high strength and creep resistance that are very welcome in e.g. jet engines.

Most commonly found in the thorium-232 isotope form, there are no stable forms of this element. That said, Th-232 has a half-life of about 14 billion years, making it only very weakly radioactive. Like uranium-238 and uranium-235 it has the unique property of not having stable isotopes and yet still being abundantly around since the formation of the Earth. Thorium is about three times as abundant as uranium and thus rather hard to avoid contact with.

This raises the question of whether thorium alloys are such a big deal, and whether they justify removing something like historical artefacts from museums due to radiation risks, as has happened on a few occasions.

Elemental Facts

Thorium-232 decay chain. (Source: Wikimedia)
Since the (probably machine-generated) article that inspired these questions didn’t bother to include any useful details or references, it’s time to do a bit of a dive ourselves. This starts with the element thorium and its isotopes.

Obviously the problem with thorium here is not so much with the metal itself or its elementary properties, but rather the fact that a small fraction will decay into radium-228 via alpha decay. This has a half-life measured in years before rapidly passing through actinium-228 to become thorium-228, with a half-life of 1.9 years.

The subsequent decay chain is pretty rapid, taking it through very short-lived isotopes of radon-220, polonium-216 and so on until it becomes stable lead-208. Virtually all of this occurs via alpha decay. Of note is again that the initial isotope here – Th-232 – has a half-life of 14 billion years, or roughly the estimated age of the Universe. This makes it by far the most stable unstable isotope, with U-238 having a half-life of only about 4.463 billion years. Effectively, for most intents and purposes it might as well be a stable isotope.

Thorium is found in most rocks and soil, at around 6 ppm, with several minerals like thorite and monazite containing significantly higher levels.

This raises the question of how dangerous Th-232 truly is, such as when you start concentrating it in some fashion. How much radiation exposure do you experience once you take e.g. thorium ore and wear it around, or concentrate it into pure Th-232 and combine it with magnesium into a metal alloy that people regularly spend time around?

Negative Vibes

One persistent fad in the ‘alternative health’ community is that of negative ions and kin, with many shops selling items like bracelets and similar body-worn items that are supposed to generate these chi-balancing vibes via special ions. Interestingly, some of these are sold with thorium or uranium isotopes embedded in them.

Since these items are worn directly against the skin for extended periods of time, they form an excellent test case of the potential harm of such direct exposure to a significant amount of these isotopes.

According to the fact sheet on on the NRC website, as performed by Oak Ridge National Laboratory (ORNL), these items contain sometimes quite significant quantities of the radioactive material that range from Th-232 to U-238 and even Ra-226, some at more than 0.05% by weight to the point where they would have required a radioactive material license. The estimated local skin equivalent radiation dose was said to be more than the IAEA limit of 50 mSv annually. Despite this, these items require no special disposal methods and you are free to keep using them, albeit with some precautions.

Another study showed an annual exposure of 1.22 mSv, which with the assumed validity of the linear no-threshold (LNT) model would lead one to expect to see some kind of negative health effects. So far these have remained absent despite the popularity of these bracelets and the close contact.

TIG Welding

Thoriated tungsten TIG welding electrodes, with red band. (Credit: Weldguru.com)
Outside of accidental exposure in the case of weird bracelets, there is a common use case for thorium, with thoriated tungsten welding electrodes. These are used with DC TIG welding, and contain around 1% (yellow band) to around 2% (red band) of thorium oxide (ThO₂). Although an alternative exists with cerium oxide (CeO₂) in ceriated tungsten electrodes, thoriated tungsten remains popular due to the long lifespan and good performance with common applications.

Although it’s noted that thoriated tungsten electrodes are radioactive due to the small percentage of thorium within the ThO₂, it is such a small amount that no special precautions seem to be warranted. Much like with the thorium oxide found in the aforementioned bracelets and kin, you’ll probably be fine if you don’t try eating it.

Since thorium is also not a heavy metal, unlike uranium, it is in that regard significantly safer, as is its oxide form which does not have the pyrophoric proclivity of the metal form.

Alloys

Compressor of a J-79 jet engine with Mag-Thor alloy sections (Credit: T.P. Kuipers et al., Ministerie van Defensie, Bundeswehr
This brings us back to the thorium-metal alloys which started the whole journey. A number of missiles and jet engines have used or currently use Mag-Thor alloys, which has led to for example the Dutch and German defense ministries investigating the radiation exposure from the J-79 jet engines, as found in F-104G Starfighter and F-4 Phantom aircraft.

The reason for this investigation was, as stated, the expected radiation dose when these engines and their respective aircraft are being worked on, handled for disposal, or displayed in a museum or collection. Here we also see the amount of thorium added to the used alloy, at up to 4% by weight, with an average of 1.7%. This means that the overwhelming majority of metal in these alloys is magnesium.

Part of the study was the measured dose at various distances from the components examined, along with a potential cumulative dose. Even in the most conservative scenario the dose came to about 1.2 µSv/hour, or less than 1 mSv/year, since it was probably assumed that people generally do not live 24/7 around these objects.

Realistically, a much bigger potential health risk involving thorium would be something along the lines of incandescent gas lantern mantles, which leads to significant higher exposure to the general public. Not to mention the hazards of the radioactive potassium-40 in something like bananas.

hackaday.com/2025/12/16/thoriu…

FOR IMMEDIATE RELEASE:

New York, Dec. 16, 2025 — President Donald Trump on Monday followed through on his threats to sue the BBC over its editing of his remarks on Jan. 6, 2021, for a documentary.

The following can be attributed to Seth Stern, director of advocacy at Freedom of the Press Foundation (FPF):

“If any ordinary person filed as many frivolous multibillion-dollar lawsuits as Donald Trump, they’d be sanctioned and placed on a restricted filers list. By my count, Trump has demanded at least $65 billion in damages from media outlets in lawsuits filed since his second term started — almost nine times his current estimated net worth, according to Forbes.

“The U.S. has laws in place to restrict litigation by prisoners, the most powerless people in our society, because of their supposed propensity to file bad faith litigation. Meanwhile, the most powerful man in the world gets away with filing more nonsense lawsuits than practically anyone, incarcerated or otherwise.

“Perhaps the interview edit in question wasn’t the BBC’s best work. The BBC has acknowledged that. But U.S. defamation law is compensatory, not punitive. You don’t get to call out any alleged journalistic blunder and demand $10 billion.

“It’s preposterous for Trump to claim those damages when he won the 2024 election and hasn’t lost a penny because of the BBC’s editing. It’s also absurd for him to claim associating him with January 6 is defamatory after he spent years insisting nothing bad happened that day and then pardoned those involved. And it’s similarly outrageous that his claims are based on supposedly damaging implications of his using the word “fight.” He sells T-shirts with that word on them.

“Putting aside the incoherence of Trump claiming election interference damages for an election he won, his damages theory also concedes that he views the presidency as a personal profit-making venture.

“Fortunately for the BBC, we’ve seen this movie before. Caving to Trump gets you nothing. Plus, Trump’s hand is considerably weaker than in the past — his authoritarian censorship antics are increasingly unpopular. People are tired of his thin-skinned bully tactics. The only way for the BBC to preserve its journalistic integrity is to fight back.”

Please contact us if you would like further comment.

freedom.press/issues/trumps-bb…

Una nuova versione, la 8.8.9, del noto editor di testo Notepad++, è stata distribuita dagli sviluppatori, risolvendo una criticità nel sistema di aggiornamento automatico. Questo problema è venuto a galla dopo che alcuni utilizzatori e investigatori hanno rilevato che, anziché scaricare legittimi aggiornamenti, il sistema provvedeva a scaricare eseguibili dannosi.

I primi indizi del problema sono emersi nei forum della comunità di Notepad++.

Un utente ha segnalato, ad esempio, di aver riscontrato che l’aggiornamento dello strumento GUP.exe (WinGUp) stava eseguendo un file che sembrava sospetto, %Temp%AutoUpdater.exe, il quale aveva iniziato a raccogliere dati relativi al sistema.

Il malware eseguiva i tipici comandi di ricognizione e salvava i risultati nel file a.txt:

• cmd /c netstat -ano >> a.txt
• cmd /c systeminfo >> a.txt
• cmd /c tasklist >> a.txt
• cmd /c whoami >> a.txt

Dopo aver raccolto i dati, curl.exe è stato utilizzato per inviare un file a temp[.]sh, un servizio di condivisione di file e testo già visto in altre campagne malware. Poiché GUP utilizza la libreria libcurl, non curl.exe, e non raccoglie affatto tali informazioni, i membri del forum hanno ipotizzato che l’utente abbia installato una build non ufficiale e infetta di Notepad++ oppure che il traffico di aggiornamento sia stato intercettato.

Per ridurre il rischio di intercettazione del traffico, lo sviluppatore Don Ho ha rilasciato la versione 8.8.8 il 18 novembre, che scarica gli aggiornamenti solo da GitHub. Tuttavia, questa soluzione si è rivelata insufficiente. Pertanto, il 9 dicembre è stata rilasciata la versione 8.8.9, con misure di sicurezza più rigorose: ora l’editor non installerà gli aggiornamenti a meno che non siano firmati dal certificato dello sviluppatore.

“A partire da questa versione, Notepad++ e WinGUP controllano la firma e il certificato dei programmi di installazione scaricati durante il processo di aggiornamento. Se il controllo fallisce, l’aggiornamento verrà interrotto”, si legge nell’annuncio ufficiale.

Va notato che all’inizio di dicembre, il noto specialista in sicurezza informatica Kevin Beaumont ha dichiarato di essere a conoscenza di tre organizzazioni che avevano subito incidenti correlati a Notepad++. “Sono stato contattato da tre aziende che stavano riscontrando problemi di sicurezza su computer che eseguivano Notepad++. Sembra che i processi di editing venissero utilizzati come punto di accesso primario”, ha scritto Beaumont. “Di conseguenza, gli aggressori ricorrevano all’intervento manuale.”

Il ricercatore ha osservato che tutte le organizzazioni interessate avevano interessi nell’Asia orientale e che l’attività dannosa sembrava mirata. Il fatto è che, quando Notepad++ verifica la presenza di aggiornamenti, accede a notepad-plus-plus.org/update/g… Se è disponibile una nuova versione, il server restituisce un file XML con il percorso dell’aggiornamento:

Beaumont ha ipotizzato che il meccanismo di aggiornamento automatico potrebbe essere stato compromesso per distribuire aggiornamenti dannosi che avrebbero consentito l’accesso remoto agli aggressori.

Lo specialista ha anche osservato che gli aggressori spesso utilizzano pubblicità dannose per distribuire versioni infette di Notepad++, che alla fine installano malware. Anche il bollettino ufficiale sulla sicurezza di Notepad++ contiene qualche incertezza. L’indagine è in corso e il metodo esatto di intercettazione del traffico non è ancora stato determinato.

Si consiglia vivamente a tutti gli utenti di aggiornare Notepad++ alla versione 8.8.9. Si segnala inoltre che, a partire dalla versione 8.8.7, tutti i file binari e gli installer ufficiali devono essere firmati con un certificato valido. Se l’utente ha installato un certificato radice personalizzato precedente, è necessario rimuoverlo.

L'articolo Supply Chain. Aggiornavi Notepad++ e installavi malware: cosa è successo davvero proviene da Red Hot Cyber.

ubiquità: no grazie
spieghiamoci, dunque:

noblogo.org/differx/ubiquita-n…

#annotazione #ubiquita #slowforward #EntropiaGratis

As of Dec. 15, the U.S. Press Freedom Tracker has documented 32 detainments or charges against journalists in the U.S. — 28 of those at immigration-related protests — according to a new report released by the Freedom of Press Foundation (FPF) project this week.

The report notes how, unlike most years, the majority of journalists were released without charges or had them soon dropped, with law enforcement instead focusing on deterring news gathering rather than pursuing charges.

• Read the Tracker's 2025 arrest report

Tracker Senior Reporter Stephanie Sugars, who authored the report, said it was “shocking” to see the sharp increase in the number of journalists released without being charged.

“While perhaps a sign that officers know the journalists cannot be charged as protesters, each detention pulls eyes and ears from often chaotic protest scenes, and that may well be the point,” Sugars said.

For journalist Dave Decker, being arrested at an anti-deportation demonstration in Miami last month and held in custody for more than 30 hours was a way to “put the brakes on press freedom,” he told the Tracker.

“News is only news for a couple of hours, when it’s breaking like that,” Decker said. “I would say that there were no wires out there, there were no local people, there were no stand-ups, no TV, no helicopter. There was none of that there. So I was literally the only journalist out there. They effectively stopped the news from getting out.”

In 2025, more than 30 journalists were detained or charged for doing their jobs.

freedom.press/issues/report-mo…