Some of the most popular content on Facebook leading up to the election was AI-generated Elon Musk inspiration porn made by people in other countries that went viral in the US.#AI #Facebook #AISlop
Donald Trump, presidente eletto degli Stati Uniti, ha annunciato di aver scelto Pete Hegseth come membro del suo nuovo gabinetto, nel ruolo di segretario della Difesa. Il nuovo capo del Pentagono non viene dagli apparati ed è un conservatore di lunga data. Nel comunicato che ne annuncia la nomina, Trump
Some brand names become the de facto name for the generic product. Xerox, for example. Or Velcro. Teletype was a trademark, but it has come to mean just about any teleprinter communicating with another teleprinter or a computer. The actual trademark belonged to The Teletype Corporation, part of Western Electric, which was, of course, part of AT&T. But there were many other companies that made teleprinters, some of which were very influential.
The teleprinter predates the computer by quite a bit. The original impetus for their development was to reduce the need for skilled telegraph operators. In addition, they found use as crude wordprocessors, although that term wouldn’t be used for quite some time.
Telegraph
An 1855 keyboard telegraph (public domain). Early communication was done by making and breaking a circuit at one station to signal a buzzer or other device at a distant station. Using dots and dashes, you could efficiently send messages, but only if you were proficient at sending and receiving Morse code. Sometimes, instead of a buzzer, the receiving device would make marks on a paper — sort of like a strip recorder.
In the mid-1800s, several attempts were made to make machines that could print characters remotely. There were various schemes, but the general idea was to move a print head remotely and strike it against carbon paper to leave a letter on a blank page.
By 1874, the Frenchman Èmile Baudot created a 5-bit code to represent characters over a teleprinter line. Like some earlier systems, the code used two shift characters to select uppercase letters (LTRS) and figures (FIGS). This lets the 32 possible codes represent 26 letters, 10 digits, and a few punctuation marks. However, if the receiver missed a shift character, the message would garble badly. This was especially a problem over radio links.
Paper Tape
Donald Murray made a big improvement in 1901. Instead of directly sending characters from a keyboard to the wire, his apparatus let the operator punch a paper tape. Then a machine used the paper tape to send characters to the remote station which would punch an identical tape. That tape could go through another machine to print out the text on it. Murray rearranged the Baudot code slightly, adding things we use today, like the carriage return and the line feed.
The problem that remained was keeping the two ends of the circuit in sync. An engineer working for the Morton Salt Company solved that problem, which Edward Klienschmitt independently improved. The basic idea had been around for a while — using a start pulse to kick off each character — but these two patents around 1919 made it work.
Patents
Instead of fighting a big patent war, the two companies, Morkrum (partly owned by the owner of Morton Salt) and Klienschmitt, merged in 1924 and produced an even better machine. This was the birth of the modern teleprinter. In fact, the company that was formed from this merger would eventually become The Teletype Corporation and was bought by AT&T in 1930 for $30 million in stock.
Some early teleprinters were page printers that typed on the page like a typewriter. Others were tape printers that spit out a tape with letters on it. Often, the tape had a gummed back so the operator could cut it into strips and stick it to a telegram form, something you may have seen in old movies.
In addition to public telegrams, there were networks of commercial stations known as Telex and TWX — precursors to modern e-mail. These networks were like a phone system for teleprinters. You’d dial a Telex number and send a message to that machine. Many teleprinters had an internal wheel that a technician could set (by breaking off tabs) to send a WRU code (who are you) in response to a query. So connecting to the Hackaday Telex and sending WRU might reply “HACKDAY.” In addition, you could ring a bell on the remote machine. So a single bell might be a normal message, but ten bells might indicate an urgent message.
Word Processing
While replacing telegraphs was an obvious use of teleprinter technology, you might wonder how people could use these as crude word processors. The key was the paper tape and a simple paper tape trick. A Baudot machine would have five possible punches on one row of the tape. You can think of it as a binary number from 00000 (no punch) to 11111 (all positions punched out). The trick is that if all positions are punched out, the reader would ignore that position and move on to the next character. They also usually had a code that would stop the reading process.
This allowed you to do a few things. First, you could punch a tape and then make many copies of the same document. If you made a mistake, you could overpunch the tape to remove any unpunched holes and “delete” characters. It was also common to use several fully punched-out characters as a leader or a trailer, which allowed you to line up two tapes and paste them together.
So, to insert something, you could identify about a dozen characters around the insert and over-punch them. Then, you’d prepare another tape that had the new text, including the characters you punched over. You’d start that tape with a leader and end it with a trailer of fully punched positions. Then, you can cut the old tape and splice the new tape’s leader and trailer over the parts you punched out in the first step. A lot of work? Yes, but it’s way better than retyping everything by hand.
Once you create your master tape, you could turn out many originals. You could even do a sort of mail merge. Suppose I have a form letter reminding you to pay your bill. The master tape would have a pause in key places. So, the operator would do something like type the date, name, and address. Then, they would press start. The tape would type “Dear ” and then read a stop code. The operator could type the name and press start again. Now, the tape would run up until a later point, and another stop code would let the operator enter the account number and press start again. The next stop might be for the balance due, and a final stop for the due date. Pretty revolutionary for the 1940s.
Really high-tech installations used two tapes, one loop with the form letter and another unlooped tape with the input data. The operator did almost nothing, and all the letters were printed automatically.
An ASR-33 (CC-BY-SA-3.0 by [ArnoldReinhold])Of course, not all teleprinters were used like this. Many teletypes had letters in their name to indicate their configuration. An RO, for example, had no keyboard or paper tape. KSR teletypes (e.g., KSR 28) had keyboards and no tape equipment. An ASR (like an ASR 33) had both keyboards and a paper tape reader and writer). These ASR 33s were especially popular as I/O devices for early microcomputers. Teleprinters were also used on many early computers. Both the Harvard Mark I and the MIT Whirlwind I used Frieden Flexowriters, a teleprinter made by Frieden, a company eventually acquired by the Singer sewing machine company.
Flexowriters were known to be used to generate form letters for both the White House and the United States Congress. Combined with an autopen, the system could create letters that people would perceive as hand-typed and signed, even though they were really automatically generated. You can see a Flexowriter in action in the video below.
Another trick was to take a tape with a header and a trailer and paste them together to form a loop. Then the printer would just print the same thing over and over. I saw a particularly odd use of this back in the 1970s.
I was in a mall. There was a booth there purporting to have a handwriting analysis computer. I wasn’t willing to spend $2 on an obvious scam, but I hovered around, trying to understand how it worked. It was oddly familiar, but I couldn’t place it. The machine was very large and had many blinking lights and spinning disks. It looked like a prop from a very cheap 1950s science fiction movie.
People would pay their money and write something on a piece of blank paper. The clerk would take that paper and place it in a slot. With the press of a button, the machine would suck the paper in and spit it out with some fortune cookie message towards the bottom of the page. It might say, “You are stronger than people realize.”
The bulk of a Flexowriter like this one was hidden under the “computer” (CC-BY-SA-3.0 by [Godfrey Manning])After a half hour, I remembered where I recognized the machine from. The big box was, of course, a fraud. But it was hiding something and the only part of that something visible was a row of brown buttons. Those brown buttons belonged to a Frieden Flexowriter. You can see the brown buttons near the top of the unit in the picture.
Once I realized that was the “brain” of the device, it was obvious how it worked. Hidden inside was the paper tape reader. It had a loop of tape containing some line feeds, a fortune, more line feeds, and a stop code. The whole loop might have had a dozen or so fortune cookies, each with a stop code at the end of each.
When you put the paper in the slot, it really went around the teleprinter’s platen. You press the start tape button, and the line feeds suck up the paper and advance past the writing. Then, the fortune types out on the page. The final line feeds eject the page, and then it stops, ready for the next fortune. Pretty clever, although totally fraudulent.
Death of the Teleprinter
Teleprinters couldn’t survive the “glass teletype” revolution. CRT-based terminals swept away the machines from most applications. Real wordprocessors and magnetic media wiped out the applications in wordprocessing and typesetting.
Companies like Teletype, Olivetti, and Siemens (disclosure: Hackaday is part of Supply Frame, which is part of Siemens) stopped making teleprinters֫. In today’s world, these seem impossibly old-fashioned. But in 1932, they were revolutionary, as seen in the video below.
If you noticed the similarity between most modern teleprinters and electric typewriters, you aren’t wrong. Linux will still let you log in using a hardcopy terminal.
L'articolo proviene da #Euractiv Italia ed è stato ricondiviso sulla comunità Lemmy @Intelligenza Artificiale I commissari designati per comporre il futuro collegio della Commissione europea guidata da Ursula von der Leyen sono stati messi messi
No, non si tratta di un nuovo episodio di Black Mirror.
Alla 15ª China International Aerospace Expo (China Air Show), non solo è possibile ammirare vari modelli di aerei militari solcare il cielo azzurro, ma anche assistere alle capacità avanzate di diversi equipaggiamenti senza pilota. Tra questi, il “Robot Wolf,” sviluppato autonomamente in Cina, ha fatto il suo debutto dinamico in questa esposizione.
Il team Robot Wolf è suddiviso in unità con ruoli specifici: un veicolo di comando principale, un robot Wolf da ricognizione ed esplorazione, un robot Wolf per attacchi di precisione, e un robot Wolf di supporto logistico. Il robot da ricognizione è incaricato della raccolta di informazioni sugli obiettivi, mentre il robot d’attacco di precisione, equipaggiato con un’arma da fuoco, rappresenta la principale forza offensiva del gruppo. Il robot di supporto logistico può trasportare rifornimenti e munizioni, integrandosi con il sistema di operazioni collettive, che consente l’interconnessione tra persone, veicoli e unità Wolf, per una condivisione delle informazioni e una cooperazione autonoma e dinamica. Il robot d’attacco può quindi lanciare colpi di precisione sugli obiettivi grazie ai dati trasmessi dai robot da ricognizione.
In scenari operativi reali, queste unità robotiche possono condurre operazioni personalizzate per i soldati su terreni complessi. Questa strategia intelligente e autonoma per operazioni di gruppo senza pilota è particolarmente efficace in ambienti complessi come aree urbane, montuose e d’altipiano, dove le comunicazioni e le capacità offensive tradizionali sono spesso limitate. Grazie a questi avanzati robot Wolf, le squadre speciali e di fanteria possono eseguire operazioni integrate su larga scala, offrendo così uno strumento strategico all’avanguardia.
Il “Robot Wolf” rappresenta un importante passo avanti nelle tecnologie di automazione e robotica militare, mettendo in luce la crescente capacità della Cina di sviluppare equipaggiamenti avanzati e indipendenti. Grazie alla suddivisione dei compiti tra robot di comando, ricognizione, attacco e supporto, questa piattaforma dimostra un alto livello di integrazione tra intelligenza artificiale e operazioni tattiche. La possibilità di comunicazione autonoma e la coordinazione in tempo reale tra le varie unità Wolf offrono nuove prospettive per l’efficacia delle operazioni in contesti complessi e pericolosi, migliorando significativamente le prestazioni tattiche e riducendo il rischio per il personale militare.
Questa innovazione potrebbe rivoluzionare il modo in cui vengono condotte le operazioni militari, specialmente in ambienti urbani e montani, dove le difficoltà logistiche e di comunicazione sono spesso significative. Inoltre, la flessibilità e l’autonomia delle unità Wolf aprono nuove possibilità per impieghi a lungo termine, con minore dipendenza dal supporto diretto delle truppe. Con questi sviluppi, la Cina punta a consolidare la propria posizione come leader nel campo delle tecnologie militari avanzate, suggerendo che il futuro della guerra sarà sempre più segnato dall’integrazione tra uomini e macchine autonome.
@Notizie dall'Italia e dal mondo Nonostante i calciatori uccisi a Gaza, le strutture sportive distrutte e il campionato bloccato a causa delle limitazioni di movimento imposte da Israele nei Territori occupati, la federazione palestinese ha deciso di tentare di qualificarsi alle fasi finali della coppa del mondo
@Politica interna, europea e internazionale Il presidente della Repubblica Sergio Mattarella ha risposto a Elon Musk, che aveva attaccato la magistratura del nostro Paese, ricordando all’uomo più ricco del mondo che “l’Italia sa badare a se stessa”. “L’Italia è un grande paese democratico e devo
In-space manufacturing is a big challenge, even with many of the same manufacturing methods being available as on the ground. These methods include rivets, bolts, but also welding, the latter of which was first attempted fifty years ago by Soviet cosmonauts. In-space welding is the subject of a recently announced NASA collaboration. The main aspects to investigate are the effects of reduced gravity and varying amounts of atmosphere on welds.
The Soviets took the lead in space welding when they first performed the feat during the Soyuz-6 mission in 1969. NASA conducted their own welding experiments aboard Skylab in 1973, and in 1984, the first (and last) welds were made in open space during an EVA on the Salyut-7 mission. This time around, NASA wants to investigate fiber laser-based welding, as laid out in these presentation slides. The first set of tests during parabolic flight maneuvers were performed in August of 2024 already, with further testing in space to follow.
Back in 1996 NASA collaborated with the E.O. Paton Welding Institute in Kyiv, Ukraine, on in-space welding as part of the ISWE project which would have been tested on the Mir space station, but manifesting issues ended up killing this project. Most recently ESA has tested in-space welding using the same electron-beam welding (EBW) approach used by the 1969 Soyuz-6 experiment. Electron beam welding has the advantage of providing great control over the weld in a high-vacuum environment such as found in space.
So why use laser beam welding (LBW) rather than EBW? EBW obviously doesn’t work too well when there is some level of atmosphere, is more limited with materials and has as only major advantage that it uses less power than LBW. As these LBW trials move to space, they may offer new ways to create structure and habitats not only in space, but also on the lunar and Martian surface.
Featured image: comparing laser beam welding with electron beam welding in space. (Source: E. Choi et al., OSU, NASA)
@Notizie dall'Italia e dal mondo Affermano il contrario otto gruppi umanitari, tra cui Oxfam e Save the Children, secondo i quali il governo Netanyahu non ha soddisfatto le richieste presentate proprio dagli americani un mese fa e i palestinesi rischiano la carestia, specie
Global Navigation Satellite Systems (GNSS) are collections, or constellations of satellite positioning systems. There are several GNSSs launched by different countries currently in operation: GPS (US), GLONASS (Russia), Galileo (EU), BeiDou Navigation Satellite System (BDS, China), Navigation with Indian Constellation (NavIC, India) and Quazi-Zenith Satellite System (QZSS, Japan). These systems are used for positioning, navigation and timing (PNT) by a wide range of industries: agriculture, finance, transportation, mobile communications, banking and others.
There are three major segments involved in GNSS operations:
The satellites themselves, orbiting Earth at an altitude of 19,000–36,000 kilometers (11,800–22,400 miles).
The control segment consisting of ground-based master control stations, monitoring stations and data upload stations (or ground antennas). Monitor stations track satellites and collect various associated data, such as navigation signals, range or carrier measurements. They then transmit the data to the master control stations. The master control stations in their turn adjust the satellite orbit parameters if necessary, using data upload stations to upload commands to the satellites.
Various user hardware, such as mobile phones, vehicles, etc. that receives satellite signals and uses them to derive position and time information to operate correctly.
Both monitor stations and user devices are equipped with GNSS receivers, the former being more complex than the latter. These receivers may be accessed through a control interface, which enables configuring and troubleshooting them. However, if accessed by an adversary, it may pose a significant threat given that critical operations, such as air traffic control and marine navigation, may rely on these receivers. In this article, we’ll review the state of GNSS receiver security in 2024.
What are the threats to GNSS systems?
There are several possible attack vectors against GNSS systems. First, satellite signal may be jammed. By the time a GNSS signal reaches a ground-based receiver, its power is rather low. If another device’s signal in the same or an adjacent frequency band is powerful enough, the receiver may not detect the GNSS signal. The interference may be both accidental and intentional. There’s a number of inexpensive devices available online and designed to jam GNSS signals.
Second, GNSS signal may be blocked in some areas by large structures, such as skyscrapers and other tall buildings. This could hardly be considered an intentional attack, however; as cities grow, the number of such areas may grow, too.
Third, GNSS signal may be spoofed. Unlike jamming, spoofing is always an intentional attack. The attacker uses a ground-based device, which imitates a satellite, providing invalid information to the GNSS receiver. As a result, the receiving device calculates an incorrect position.
Fourth, physical attacks against satellites are possible, although not likely. And, last but not least, a cyberattack can be conducted against a vulnerable GNSS receiver.
Internet-exposed GNSS receivers and attacks on them
In 2023, at least two black hat groups conducted multiple attacks against GNSS receivers. In May that year, SiegedSec, a hacktivist and crimeware group, gained access to satellite receivers in Colombia in response to a hacker being arrested by authorities. In mid-2023, the group targeted devices belonging to multiple entities in the U.S., and claimed to have accessed satellite receivers in Romania. Although they haven’t caused any damage apart from accessing sensitive data and publishing screenshots through their channels, unauthorized access by an attacker to GNSS receivers can be a lot more destructive.
Another group attacking satellite receivers in 2023 was GhostSec. Throughout the year, they targeted numerous GNSS receivers in various countries including Russia and Israel. In some of the attacks they claimed to have not only accessed but also wiped data from the compromised satellite receivers, which illustrates the possible damage from such incidents.
Cybersecurity firm Cyble analyzed the attack surface against satellite receivers from five major vendors, and found out that as of March 2023, thousands of these receivers were exposed online. Broken down by vendor, the numbers were as follows:
Vendor
Number of exposed receivers
Top countries
GNSS-1
3,641
USA Japan Canada
GNSS-2
4,864
Australia Greece Italy
GNSS-3
899
Russia Poland USA
GNSS-4
343
South Korea USA France
GNSS-5
28
China Thailand USA
Internet-exposed GNSS receivers in 2024
A year later, we decided to look at how the situation had changed. During our research, we analyzed information on satellite receiver vulnerabilities that had already been available online. Kaspersky solutions were not used to gather the information on these vulnerabilities; instead, third-party search engines designed to map and gather information about internet-connected devices and systems were used.
We first performed research similar to that done by Cyble (as far as we could guess their methodology) by searching for all exposed instances produced by five major GNSS receiver vendors without specifying that they should be satellite receivers. Our investigation revealed that, as of July 2024, 10,128 instances used globally were exposed over the internet, which was even more than in March 2023.
Vendor
Number of exposed receivers
Top countries
GNSS-1
5,858
USA Ecuador Jamaica
GNSS-2
2,094
Australia Thailand Russia
GNSS-3
901
USA Germany Russia
GNSS-4
890
Austria USA France
GNSS-5
385
Thailand USA China
With these results, we conducted broader research covering 70 GNSS receiver vendors used globally. This time, we performed a more specific search for exposed instances that included the vendor name and the use of “GNSS” systems clearly specified.
Our research revealed that 3,028 receivers remained vulnerable to attacks over the internet.
TOP 5 vendors whose GNSS receivers are vulnerable to internet attacks (download)
We used the information collected above to compile a list of countries with the highest numbers of mentions among those most affected by the exposed instances for the major GNSS receiver vendors. Most vulnerable receivers by a specific vendor were largely found in the United States, Germany, Australia, Russia and Japan.
TOP 5 countries with the highest numbers of exposed receivers by certain vendors (download)
In a July 2024 global overview not limited to specific vendors, we found almost 3,937 GNSS instances accessible over the internet. From the geographical point of view, most of the exposed receivers – over 700 instances – were located in Ecuador. Jamaica was the second with 500 instances, closely followed by the United States. Almost 400 exposed receivers were found in the Czech Republic and China, and almost 300 were located in Brazil. Japan, Russia, Canada and Germany were among most vulnerable countries, too.
TOP 10 countries with the highest numbers of exposed receivers (download)
If we look at the anonymized data about the entities that use these exposed instances, we can see that most of the vulnerable receivers belong to organizations in the following industries: telecommunications, cloud computing and energy. However, at least one e-commerce retailer is also using exposed GNSS receivers.
TOP 10 companies that use exposed GNSS receivers (download)
Most of the discovered instances ran on various open-source and proprietary Linux distributions. However, we also found exposed Windows-based receivers. Moreover, different devices had different versions of the OS installed, which made the attack surface on the vulnerable GNSS receivers even broader.
TOP 10 exposed GNSS receiver OS versions
The exposed devices were vulnerable to a range of flaws, which could cause various types of damage to the system. Among the most frequently occurring vulnerabilities in the GNSS receivers were denial of service vulnerabilities, which could render the device useless if exploited; exposure of information resulting in data breaches, privilege escalation flaws, a buffer overflow, and several code injection or execution flaws that could result in the attacker gaining control over the receiver.
TOP 10 vulnerabilities found in GNSS receivers exposed to the internet
In November, we performed the global research again to find out that the number of exposed receivers reached 4,183. Compared to July, there was a slight shift in the geography of these receivers: while Ecuador remained the number 1 affected country, Jamaica, Czech Republic and Russia left the TOP 10, Germany jumped to the second place, and Iran entered the list as the fourth most vulnerable country.
TOP 10 countries with the highest number of exposed receivers, November 2024 (download)
Protection against space-related threats
Besides basic cybersecurity rules that equally apply to all computer systems, there are specialized tools that are designed to address space-related threats. For example, to improve threat identification and information exchange in this area, the Aerospace Corporation has created the Space Attack Research and Tactic Analysis (SPARTA) matrix, designed to formalize TTPs of space-related threat actors.
The SPARTA project also provides a mapping of MITRE’s D3FEND matrix, which covers possible countermeasures and defense tactics, to space-related threats. This mapping can help organizations develop a robust defense for their space systems.
Conclusions
GNSS systems are vital for a wide range of industries that rely on satellites for positioning and time synchronization. An attack against such a system may cause significant damage to the target organization. There are several ways an attacker can interfere with a GNSS. Some of these, such as physical attacks on satellites, are rather expensive and unlikely, while others are easy enough for a malicious group to pull off. One of these vectors is exploitation of ground-based GNSS receivers, which are available over the internet and vulnerable to known or as-yet-unknown flaws. The year 2023 saw a series of attacks on GNSS receivers by hacktivist groups.
As the results of our research show, as at July 2024, there were still nearly 4000 vulnerable devices that could be exploited by adversaries. To protect their systems from internet-based attacks, organizations should keep GNSS receivers unreachable from the outside. If internet access is a necessity, we recommend protecting your devices with robust authentication mechanisms.
Il Patch Tuesday di novembre di Microsoft ha corretto 91 vulnerabilità. Tra queste ci sono quattro vulnerabilitàzero-day critiche delle quali 2 sfruttate attivamente attraverso l’esecuzione di codice remoto.
Categorie di vulnerabilità risolte
Di seguito la categorizzazione delle vulnerabilità risolte con il patch tuesday di Novembre:
26 Elevazione delle vulnerabilità dei privilegi;
2 Funzionalità di sicurezza: bypassare le vulnerabilità;
52 Vulnerabilità relative all’esecuzione di codice in modalità remota;
1 Vulnerabilità nella divulgazione di informazioni;
4 Vulnerabilità di tipo Denial of Service;
3 Vulnerabilità legate allo spoofing.
Tuttavia, l’elenco non include 2 vulnerabilità nel browser Edge, che erano state corrette in precedenza, il 7 novembre.
Delle quattro vulnerabilità critiche corrette nel Patch Tuesday di novembre, due sono già state sfruttate attivamente dagli aggressori e tre sono state divulgate pubblicamente. Microsoft classifica una vulnerabilità zero-day come un problema non noto o sfruttato attivamente quando non è stata ancora rilasciata una correzione ufficiale.
Vulnerabilità sfruttate attivamente
CVE-2024-43451 (punteggio CVSS : 6,5) – Vulnerabilità relativa alla divulgazione dell’hash NTLM Una vulnerabilità consente a un utente malintenzionato remoto di ottenere gli hash NTLMv2 degli utenti con un’interazione minima con un file dannoso. Secondo Microsoft, anche una semplice azione come selezionare (clic singolo) o visualizzare (clic destro) un file può portare a una fuga di dati.
CVE-2024-49039 (punteggio CVSS : 8,8) – Vulnerabilità legata all’elevazione dei privilegi nell’Utilità di pianificazione di Windows. Un’applicazione appositamente predisposta può aumentare i privilegi a un livello di integrità medio, il che potrebbe consentire a un utente malintenzionato di eseguire codice o accedere a risorse a un livello di integrità superiore rispetto a ambiente di esecuzione.
Vulnerabilità divulgate pubblicamente che non sono state utilizzate negli attacchi
CVE-2024-49040 (punteggio CVSS : 7,5) – Vulnerabilità di spoofing in Microsoft Exchange Server Un problema consente lo spoofing dell’indirizzo del mittente nei messaggi di posta elettronica inviati ai destinatari locali. Dopo l’aggiornamento, Microsoft avviserà gli utenti delle e-mail sospette con una notifica che recita: “Avviso: questa e-mail potrebbe essere sospetta. Si prega di controllare la fonte prima di aprire collegamenti o allegati.”
CVE-2024-49019 (punteggio CVSS : 7,8) – Vulnerabilità relativa all’elevazione dei privilegi nei servizi certificati Active Directory. Questo difetto consente di ottenere i diritti di amministratore di dominio tramite l’uso dei certificati incorporati della versione 1. Il problema è correlato ai modelli di certificato in cui la fonte del nome del soggetto è la richiesta e i diritti di registrazione dei certificati vengono forniti a un’ampia gamma di utenti.
Le patch di Microsoft mirano a prevenire l’ulteriore sfruttamento di queste vulnerabilità e a migliorare la sicurezza degli utenti di fronte alla crescente attività dei criminali informatici. Questa pagina fornisce un elenco completo delle vulnerabilità risolte negli aggiornamenti del Patch Tuesday di novembre 2024.
Nel Patch Tuesday di ottobre, Microsoft ha corretto 118 vulnerabilità, due delle quali sono state attivamente sfruttate dagli aggressori. Tre delle vulnerabilità identificate hanno un livello di gravità critico, 113 sono classificate come importanti e due sono classificate come moderate.
Simple bots, updates to Loops, and Flipboard takes over some automated RSS accounts.
The News
The upcoming shutdown of the botsin.space server has lead to some renewed experimentation and development work around bots on the fediverse. Terence Eden has built a bot to be as simple as possible, needing only 2 files to run. This bot can be bridged to Bluesky as well.
Some more updates on Loops, with some crucial missing features now being added: tapping the Home button brings you to the top of the feed, a pull to refresh, and tabs for notification, search and explore. Loops is also taking a decidedly different approach from other fediverse platforms; while many fediverse platforms pride themselves on not having an algorithmic feed, developer Daniel Supernault is working on placing For You Page is becoming front-and-center for Loops. In turn this makes it difficult for new Loops servers to set up and compete, and Supernault is actively considering having the flagship loops.video server function as the centralised service for the For You algorithm.
Flipboard is taking over the accounts on the press.coop server. Press.coop was a fediverse server that mirrors the RSS feeds of news organisations, and republished them on an unofficial press.coop account. In the press release, press.coop owner Dick Hardt says that he noticed that now that Flipboard is part of the fediverse, these news organisations already have a more official presence on the fediverse via Flipboard. ActivityPub allows for an easy transfer here, if you followed a press.coop account you are now automatically following the corresponding Flipboard account instead.
The fediverse has tied up user names quite strictly to fediverse servers: your username handle contains the server name itself, following the convention of @username@serverdomain.tld. This means your account is tied up to the server and server domain, which does occasionally lead to issues with servers disappearing because the domain is not available anymore. This convention is not in fact mandated by ActivityPub, and the ‘WebFinger Split-Domain Canary‘ is a showcase that it is possible to have an account where the domain in the username is different from the server that the account is on. For developers interested in experimenting what is further possible in the fediverse this might be an interesting direction to look at.
Heise.de has consistently been sharing statistics on the sources of traffic to their news site, and for the last two weeks Mastodon has overtaken X in traffic, with Bluesky and Threads far behind.
In This Issue
* A Note From The Editor
* Features
* Upcoming Events
* Featured Streamer: Kristoffer Lislegaard
* Closing Remarks
A Note From The Editor
Welcome back! I took the month of October off as a matter of personal mental health…
L’annuncio della joint venture tra Leonardo e Rheinmetall inizia a dare i suoi primi frutti, fungendo da catalizzatore per altri esponenti dell’industria nazionale della Difesa. Iveco defence vehicles (Idv), divisione del Gruppo Iveco specializzata
“Come definito da Robert Leonhard nel suo libro ‘L’arte della manovra’, la ‘guerra di manovra’ è ‘il mezzo per sconfiggere… il nemico’. L’obiettivo è raggiungere la vittoria, non il mantenimento della competizione. Per ottenere questa vittoria è necessaria un’aggressività che,
@Notizie dall'Italia e dal mondo Il Consiglio di Sicurezza delle Nazioni Unite ha dato avvio al dibattito sulla proposta di risoluzione presentata dalla Gran Bretagna per fermare i combattimenti e portare soccorso alla popolazione stremata L'articolo SUDAN. ONU chiede un corridoio
La Camera dei deputati ha approvato in via definitiva il disegno di legge per la ratifica e l’esecuzione della Convenzione sull’istituzione del GCAP (Global Combat Air Programme), firmata a Tokyo il 14 dicembre 2023. Con 215 voti favorevoli e 43 contrari (Movimento Cinque Stelle e
L’Unione europea potrebbe realizzare il più grande investimento di sempre sulla Difesa, pari a quasi 400 miliardi di euro. Secondo un articolo del Financial Times, Brussels starebbe valutando di reindirizzare una parte consistente del bilancio comune, circa 392 miliardi di euro, verso il
Tra un mese devo fare un piccolo intervento che, per quanto veloce, richiederà l'anestesia totale. Mi fa più paura questa che l'operazione in sé (è la prima volta). 🙄
Annunci: Meta vuole essere "meno illegale", ma molto più fastidioso... Nella battaglia sull'uso illegale dei dati personali per la pubblicità, Meta ha annunciato un'altra variazione: Questa volta Meta proverà annunci "meno personalizzati", che potrebbero infastidire gli utenti e indurli ad acconsentire. mr12 November 2024
Annunci: Meta è orgoglioso di essere "meno illegale", ma presto più fastidioso Nella battaglia sull'uso illegale dei dati personali per la pubblicità, Meta ha annunciato un'altra variazione: Questa volta Meta proverà annunci "meno personalizzati", che potrebbero infastidire gli utenti e indurli ad acconsentire. mr12 November 2024
The Secret Service has used a technology called Locate X which uses location data harvested from ordinary apps installed on phones. Because users agreed to an opaque terms of service page, the Secret Service believes it doesn't need a warrant.
The Secret Service has used a technology called Locate X which uses location data harvested from ordinary apps installed on phones. Because users agreed to an opaque terms of service page, the Secret Service believes it doesnx27;t need a warrant.#FOIA #Privacy
The Secret Service has used a technology called Locate X which uses location data harvested from ordinary apps installed on phones. Because users agreed to an opaque terms of service page, the Secret Service believes it doesn't need a warrant.
@Politica interna, europea e internazionale I giudici bloccano il trasferimento dei migranti in Albania: cosa succede adesso Ieri, lunedì 11 novembre, il Tribunale di Roma non ha convalidato il trattenimento in Albania di sette migranti egiziani e bengalesi che erano stati intercettati nei giorni precedenti dalla
@Notizie dall'Italia e dal mondo Le nomine confermate e i nomi che circolano da più voci compongono un quadro di estremismo e intransigenza: sostegno incondizionato a Israele in tutti i consessi nazionali e internazionali, politiche di deportazione e repressione contro i migranti, scontro con l'Iran, opposizione a Cina, Cuba e alle esperienze
@Notizie dall'Italia e dal mondo Hanno ottenuto oltre il 70% dei voti nei loro distretti in Michigan e nel Minnesota. Annunciano che saranno tenaci oppositrici di Donald Trump che nel 2019 arrivò a minacciarle L'articolo Stati Uniti. Le
@Politica interna, europea e internazionale “Questi giudici devono andarsene”. Così Elon Musk commenta su X la notizia della mancata convalida da parte del Tribunale di Roma del trattenimento di sette migranti trasferiti dalle autorità italiane nei centri temporanei italiani su territorio albanese.
#Scuola, il Ministro Giuseppe Valditara ha firmato oggi il decreto che stanzia 12,8 milioni di euro a favore delle scuole con classi in cui la presenza di studenti stranieri che entrano per la prima volta nel sistema scolastico italiano supera il 20%…
#Scuola, il Ministro Giuseppe Valditara ha firmato oggi il decreto che stanzia 12,8 milioni di euro a favore delle scuole con classi in cui la presenza di studenti stranieri che entrano per la prima volta nel sistema scolastico italiano supera il 20%…
Changelog: 🦝 add option to load media only when connected over a WiFi network; 🦝 add option to open web pages in internal viewer; 🦝 default visibility for replies and warning if higher visibility than original post; 🦝 prevent changing visibility in post edits; 🦝 make plain text mode the default choice for composition; 🦝 remove "other" section in login; 🦝 improved video player; 🦝 render custom emojis inside poll options; 🦝 layout fixes: chat title, user items in inbox, loading indicators in buttons; 🦝 fix occasional crash in profile screen; 🦝 add more unit tests; 🦝 several dependency updates.
If things go well, this may be the final round of tests before the first stable release. The last bit will probably be making crash reports opt-out by default.
I'm also very pleased to inform you that the app has been accepted by IzzyOnDroid, so installing it is a lot easier if you use it or have its source added to your FDroid app.
Ho visto l'aggiornamento su fdroid , la ricerca ora funziona e non riavvia più l'applicazione . Complimenti ottimo lavoro . Usandola ieri si era riavviata una volta anche cercando di rispondere ad post ,oggi sembrerebbe di no .
Ciao ti do il mio input iniziale: al prinicipio ero un po' confuso... Lo stream di default segue più lo stile Mastodon che quello di Friendica, ma dopo un paio di cambi sono riuscito a farlo più simile a come io uso la WebUI, sebbene sono rimasto col dubbio se il tab "subscription" mostra anche le ricerche salvate.
Un'opzione che ho visto che non è ancora presente è quello di lasciare la barra dei comandi fissa, spero puoi mettere questa richiesta nel tuo todo-list.
@ l'opzione principale per rendere la timeline più "usabile" è abilitare l'opzione "Escludi risposte dalla timeline".
Quello che si vede nel feed "Iscrizioni" è il risultato di una chiamata GET v1/timelines/home che fa parte delle API Mastodon esposte dai server Friendica e che, da quel ho capito, include anche i post contenenti gli hashtag seguiti (in gergo Friendica le "ricerche salvate").
Cosa intendi con "tenere fissa la barra dei comandi"? La barra di navigazione inferiore (Timeline, Esplora, Inbox, Profilo) che sparisce quando scorri? Se sì, è certamente fattibile tenerla fissa, posso aggiungere un'opzione nella schermata delle impostazioni, avevo fatto la stessa identica cosa nel client per Lemmy ma pensavo non interessasse a nessuno questa funzione.
...da quel hi capito, include anche i post contenenti gli hashtag seguiti (in gergo Friendica le "ricerche salvate").
Mitico! 🤩
La barra di navigazione inferiore
Si quella, non mi veniva il nome in italiano... 😅 A me la barra che appare e scompare fa venire il mal di testa... 😵💫 Apprezzerei se potessi tenerla fissa! 🙏
@❄️ freezr ❄️ scusami, una domanda: tengo fisse la barra superiore e quella inferiore, ma il "floating action button" (ovvero il pallozzo colorato che permette di creare un post, aggiungere un elemento o rispondere) in basso a destra? blocco anche lui?
Se proprio vuoi essere un figo puoi mettere una opzione per fissarla in alto e in basso... 😏
Personalmente odio il "pallozzo" e lo preferirei integrato nella barra di navigazione come nell'immagine postata.
Io sono un grande sostenitore di Diaspora, non so se hai mai usato il wrapper per Android chiamato Dandelior, potrebbe essere fonte d'inspirazione: sopratutto per come gestisce le risposte.
Ad esempio io ho una vera e propria intolleranza al "farting mode" stile Mastodon, dove le risposte sono totalmente sconnesse al loro "post" di appartenenza... 👎
Questo post sarà lungo e articolato, ma l’obiettivo che mi sono prefissato è quello di aiutare gli utenti a conoscere il Web sociale e a farlo nel modo più semplice attraverso l’ingresso nel Fediverso. Questa prima parte si concentra su un’introduzione generale al Web sociale e a fornire una prima visione “stereoscopica” del Fediverso attraverso due esperienze totalmente diverse: Mastodon e…
"Attualmente i fast radio burst, o Frb, confermati sono centinaia e gli scienziati hanno raccolto prove sempre più evidenti di ciò che li innesca: stelle di neutroni altamente magnetizzate, note come magnetar. Una prova fondamentale è arrivata quando una magnetar è esplosa nella nostra galassia e diversi osservatori, tra cui il progetto Stare2 (Survey for Transient Astronomical Radio Emission 2) del Caltech, hanno ripreso il fenomeno in tempo reale."
un tempo quando qualcuno rispondeva a qualcun altro riportava quello che aveva capito e lo commentava. anche perché puoi aver scritto più di una cosa. ma questo presuppone che chi ti risponde ti avesse ascoltato, prima. adesso dici 2 cose e la risposta è generica e neppure si capisce a quale delle N cose che hai detto si riferisce. ammesso che si riferisca a quello che hai scritto. veramente viene da dubitare di far parte della stessa specie di scimmie che ha conquistato il mondo e costruito tecnologie incredibili. stiamo perdendo collettivamente la testa.
📚 Nel centenario della nascita del maestro Alberto Manzi, la Biblioteca del #MIM espone una selezione di note e decreti ministeriali che documentano la collaborazione tra il Ministero e la RAI, che portò la didattica sul piccolo schermo.
📚 Nel centenario della nascita del maestro Alberto Manzi, la Biblioteca del #MIM espone una selezione di note e decreti ministeriali che documentano la collaborazione tra il Ministero e la RAI, che portò la didattica sul piccolo schermo.
L'articolo proviene da #Euractiv Italia ed è stato ricondiviso sulla comunità Lemmy @Intelligenza Artificiale La Commissione europea ha affidato la stesura del Codice di condotta per l’intelligenza artificiale per
@Politica interna, europea e internazionale La Russa commenta la vittoria di Donald Trump e attacca Taylor Swift Ignazio La Russa ha commentato la vittoria di Donald Trump alle elezioni presidenziali Usa esprimendo forti critiche nei confronti dello star system americano e in particolar modo
#NoiSiamoLeScuole questa settimana è dedicato a due scuole di Portici, in provincia di Napoli: l’IIS “Francesco Saverio Nitti” che, con i fondi del #PNRR “Scuola 4.
#NoiSiamoLeScuole questa settimana è dedicato a due scuole di Portici, in provincia di Napoli: l’IIS “Francesco Saverio Nitti” che, con i fondi del #PNRR “Scuola 4.
Poliverso - notizie dal Fediverso ⁂
in reply to Signor Amministratore ⁂ • •@Signor Amministratore ⁂ @Mac Franc @informapirata ⁂ :privacypride: @Mac Franc @Test: palestra e allenamenti :-) @Poliverso :friendica:
Risposta
dallo stesso software Friendica
Dalla stessa istanza Poliverso
Test: palestra e allenamenti :-) reshared this.
Mac Franc
in reply to Poliverso - notizie dal Fediverso ⁂ • • •@Poliverso - notizie dal Fediverso ⁂ @informapirata ⁂ :privacypride: @Signor Amministratore ⁂ @Poliverso :friendica: @Test: palestra e allenamenti :-)
Risposta
Dallo stesso software Friendica
La istanza diversa Polli
Test: palestra e allenamenti :-) reshared this.
Poliverso & Poliversity
in reply to Signor Amministratore ⁂ • • •Da software diverso Mastodon
Federico Verso
in reply to Signor Amministratore ⁂ • • •Software diverso mastodon
Test: palestra e allenamenti :-) reshared this.
Signor Amministratore ⁂
in reply to Signor Amministratore ⁂ • •@Signor Amministratore ⁂ @Mac Franc @informapirata ⁂ :privacypride: @Franc Mac @Test: palestra e allenamenti :-) @Poliverso :friendica:
Risposta
Dallo stesso account
Test: palestra e allenamenti :-) reshared this.