Supply Chain Wormable? Arrivano i pacchetti NPM con malware auto-propagante
I ricercatori di sicurezza hanno scoperto la compromissione di oltre 180 pacchetti npm, infettati da un malware auto-propagante progettato per infettare altri pacchetti. La campagna, soprannominata Shai-Hulud, è probabilmente iniziata con l’hacking del pacchetto @ctrl/tinycolor, scaricato oltre 2 milioni di volte a settimana.
Il nome Shai-Hulud deriva dai file shai-hulud.yaml utilizzati dal malware. È un riferimento ai giganteschi vermi delle sabbie di Dune di Frank Herbert. Il problema è stato portato per la prima volta all’attenzione dello sviluppatore Daniel Pereira, che ha avvisato la comunità di un attacco su larga scala alla catena di fornitura.
“In questo momento, mentre leggete questo, è in corso la distribuzione di malware all’interno di npm”, ha affermato Pereira, esortando tutti a non installare le ultime versioni di @ctrl/tinycolor.
Lo sviluppatore ha tentato di avvisare il team di sicurezza di GitHub tramite canali privati, poiché gli aggressori avevano preso di mira “repository multipli” e divulgare pubblicamente l’attacco avrebbe potuto creare ulteriori rischi. Tuttavia, contattare GitHub si è rivelato troppo difficile, quindi Pereira ha segnalato pubblicamente il problema.
I ricercatori di Socket e Aikido stanno attualmente indagando sull’incidente e hanno scoperto che almeno 187 pacchetti sono stati compromessi. Tra i pacchetti interessati, diversi sono pubblicati dall’account npmjs dell’azienda di sicurezza informatica CrowdStrike.
“Dopo aver scoperto diversi pacchetti dannosi nel registro pubblico npm (un repository open source di terze parti), li abbiamo rimossi rapidamente e aggiornato preventivamente le nostre chiavi”, hanno riferito i rappresentanti di CrowdStrike. “Questi pacchetti non sono utilizzati da Falcon, la nostra piattaforma non è interessata e i clienti rimangono protetti. Stiamo collaborando con npm e conducendo un’indagine approfondita.”
ReversingLabs, a sua volta, descrive questo incidente come “il primo del suo genere, un worm autoreplicante che infetta i pacchetti npm e ruba i token cloud”. I ricercatori ritengono che l’attacco abbia avuto origine nel pacchetto rxnt-authentication, una versione dannosa del quale è stata pubblicata su npm il 14 settembre 2025.
Secondo ReversingLabs, il responsabile di techsupportrxnt può essere considerato il “paziente zero”. La chiave per scoprire la fonte dell’attacco risiede nel modo esatto in cui l’account techsupportrxnt è stato compromesso. È possibile che tutto sia iniziato con un’email di phishing o con lo sfruttamento di una GitHub Action vulnerabile.
Le versioni compromesse dei pacchetti sono dotate di un meccanismo di autopropagazione del malware, che prende di mira altri pacchetti dei gestori interessati. Secondo i ricercatori di Socket, il malware ha scaricato ogni pacchetto dal manutentore, ha modificato il suo package.json, ha iniettato lo script bundle.js, ha riconfezionato l’archivio e lo ha pubblicato di nuovo, “garantendo così la trojanizzazione automatica dei pacchetti downstream”.
Lo script bundle.js utilizza TruffleHog, uno scanner legittimo per la ricerca di segreti, progettato per sviluppatori e professionisti di sicurezza. TruffleHog consente di rilevare informazioni riservate trapelate accidentalmente, come chiavi API, password e token, da repository e altre fonti. Lo script dannoso ha abusato dello strumento per trovare token e credenziali cloud.
L'articolo Supply Chain Wormable? Arrivano i pacchetti NPM con malware auto-propagante proviene da il blog della sicurezza informatica.
PCBs the Prehistoric Way
When we see an extremely DIY project, you always get someone who jokes “well, you didn’t collect sand and grow your own silicon”. [Patrícia J. Reis] and [Stefanie Wuschitz] did the next best thing: they collected local soil, sieved it down, and fired their own clay PCB substrates over a campfire. They even built up a portable lab-in-a-backpack so they could go from dirt to blinky in the woods with just what they carried on their back.
This project is half art, half extreme DIY practice, and half environmental consciousness. (There’s overlap.) And the clay PCB is just part of the equation. In an effort to approach zero-impact electronics, they pulled ATmega328s out of broken Arduino boards, and otherwise “urban mined” everything else they could: desoldering components from the junk bin along the way.
The traces themselves turned out to be the tricky bit. They are embossed with a 3D print into the clay and then filled with silver before firing. The pair experimented with a variety of the obvious metals, and silver was the only candidate that was both conductive and could be soldered to after firing. Where did they get the silver dust? They bought silver paint from a local supplier who makes it out of waste dust from a jewelry factory. We suppose they could have sat around the campfire with some old silver spoons and a file, but you have to draw the line somewhere. These are clay PCBs, people!
Is this practical? Nope! It’s an experiment to see how far they can take the idea of the pre-industrial, or maybe post-apocalyptic, Arduino. [Patrícia] mentions that the firing is particularly unreliable, and variations in thickness and firing temperature lead to many cracks. It’s an art that takes experience to master.
We actually got to see the working demos in the flesh, and can confirm that they did indeed blink! Plus, they look super cool. The video from their talk is heavy on theory, but we love the practice.
DIY clay PCBs make our own toner transfer techniques look like something out of the Jetsons.
media.ccc.de/v/38c3-clay-pcb/o…
Il RE di RaidForums resta in bilico. La battaglia tra USA e Portogallo per la sua estradizione
L’Alta Corte di Londra ha annullato la decisione di estradare il cittadino portoghese Diogo Santos Coelho negli Stati Uniti. Il giovane, noto con lo pseudonimo di Omnipotent, era l’amministratore di uno dei più grandi forum di hacker, RaidForums.
La storia inizia nel gennaio 2022, quando Coelho si reca nel Regno Unito per far visita alla madre. Lì viene arrestato. Da allora, è in un limbo da più di tre anni: due Paesi si contendono la sua estradizione.
Gli Stati Uniti chiedono l’estradizione di Coelho per crimini legati alla gestione di RaidForums. Il Portogallo ha inviato un proprio ordine, citando i danni arrecati alle sue organizzazioni e ai suoi cittadini.
Lo stesso Coelho voleva recarsi in Portogallo e ha ufficialmente accettato l’estradizione.
Le autorità britanniche si sono trovate in una situazione difficile. La legge prevede una procedura speciale nel caso in cui più paesi richiedano l’estradizione di una persona. Ma nel suo caso queste regole non sono state rispettate.
Il Ministro dell’Interno ordinò che Coelho fosse trasferito negli Stati Uniti, ma lo fece frettolosamente. Il tribunale stabilì che la decisione si basava su documenti inesatti e che era stata presa senza tenere conto della posizione della difesa.
Il problema principale era che a Coelho non fu data l’opportunità di presentare le sue argomentazioni per l’estradizione in Portogallo. Le sue argomentazioni non furono nemmeno prese in considerazione.
Il giudice Linden ha riscontrato diverse violazioni. Secondo l’ordinanza del tribunale, al ministro è stato detto che le accuse statunitensi e portoghesi erano “identiche”, sebbene l’ordinanza portoghese includesse ulteriori accuse di riciclaggio di denaro e frode fiscale.
Inoltre, la decisione si basava sul presupposto che tutte le vittime si trovassero negli Stati Uniti. Ma le prove dimostravano il contrario: le vittime erano sparse in tutto il mondo, compreso il Portogallo stesso.
La corte ha inoltre affermato che il ministro non ha tenuto conto della natura più grave delle accuse portoghesi e dei legami personali di Coelho con il Paese. Gli è stato diagnosticato l’autismo, è a rischio di suicidio e riceve assistenza familiare e terapeutica nel suo Paese d’origine.
Il Ministero dell’Interno è ora tenuto a riesaminare le richieste concorrenti. A Coelho è stato concesso il diritto di presentare le sue argomentazioni prima che venga presa una nuova decisione.
Come ha osservato lo stesso Coelho, questo non garantisce l’estradizione in Portogallo, ma dà ai suoi avvocati la possibilità di essere ascoltati. Tra le argomentazioni della difesa c’è il fatto che alcuni dei presunti crimini siano stati commessi quando era minorenne, nonché il suo status di vittima della tratta di esseri umani.
L'articolo Il RE di RaidForums resta in bilico. La battaglia tra USA e Portogallo per la sua estradizione proviene da il blog della sicurezza informatica.
Le start-up europee possono sfuggire alla “valle della morte”?
L'articolo proviene da #Euractiv Italia ed è stato ricondiviso sulla comunità Lemmy @Intelligenza Artificiale
L’Europa è da tempo una fucina di idee brillanti. Dai progressi rivoluzionari in materia di IA compiuti a Parigi alle innovazioni tecnologiche verdi realizzate a Stoccolma, le start-up
A New Generation of Spacecraft Head to the ISS
While many in the industry were at first skeptical of NASA’s goal to put resupply flights to the International Space Station in the hands of commercial operators, the results speak for themselves. Since 2012, the SpaceX Dragon family of spacecraft has been transporting crew and cargo from American soil to the orbiting laboratory, a capability that the space agency had lost with the retirement of the Space Shuttle. Putting these relatively routine missions in the hands of a commercial provider like SpaceX takes some of the logistical and financial burden off of NASA, allowing them to focus on more forward-looking projects.
But as the saying goes, you should never put all of your eggs in one basket. As successful as SpaceX has been, there’s always a chance that some issue could temporarily ground either the Falcon 9 or the Dragon.
While Russia’s Progress and Soyuz vehicles would still be available in an emergency situation, it’s in everyone’s best interest that there be multiple backup vehicles that can bring critical supplies to the Station.
Which is precisely why several new or upgraded spacecraft, designed specifically for performing resupply missions to the ISS and any potential commercial successor, are coming online over the next few years.
In fact, one of them is already flying its first mission, and will likely have arrived at the International Space Station by the time you read this article.
Cygnus XL
The Cygnus was the second commercial spacecraft to deliver cargo to the ISS back in 2013, and like the Dragon, has gone through several upgrades and revisions over the years. Rather than starting from a clean slate, the Orbital Sciences Corporation based the vehicle’s pressurized module on the Multi-Purpose Logistics Module which was originally designed to fly inside the Space Shuttle’s cargo bay to provide onboard laboratory space before the construction of the ISS. This was paired with a service module that was derived from their line of communication satellites.
It retains the same 3.07 m (10.1 ft) diameter of the original Cygnus, but the length of the vehicle has been increased from 5.14 m (16.9 ft) to 8 m (26 ft). This has nearly doubled the internal pressurized volume of the craft, and the payload capacity has been increased from 2,000 kg (4,400 lb) to 5,000 kg (11,000 lb).
While the Dragon can autonomously dock with the ISS, the Cygnus XL needs to be captured by an astronaut using the Station’s robotic arm, and manually moved into position where it’s eventually bolted into place — a process known as berthing. This is a more labor intensive method of connecting a visiting spacecraft, but it does have at least one advantage, as the diameter of the berthing ports is larger than that of the docking ports. At least in theory, this means Cygnus XL would be able to deliver bulkier objects to the Station than the Dragon or any other spacecraft that makes use of the standard docking ports.
Like the earlier versions of the craft, Cygnus XL is an expendable vehicle, and lacks the heat shield that would be necessary to reenter Earth’s atmosphere safely. Once the vehicle delivers its cargo and is detached from the Station, it’s commanded to perform a deorbit maneuver which will cause it to burn up in the atmosphere. But even this serves an important function, as the astronauts will load the vehicle with trash before it departs, ensuring that refuse from the Station is destroyed in a safe and predictable manner.
HTV-X
Like the Cygnus XL, the HTV-X is an upgraded version of a spacecraft which has already visited the ISS, namely the H-II Transfer Vehicle (HTV). Designed and built by the Japan Aerospace Exploration Agency (JAXA), the first flight of this upgraded cargo vehicle is tentatively scheduled for late October.
Attached to the opposite side of the service module is an unpressurized cargo module. This is similar to the “trunk” of the Dragon spacecraft, in that it’s essentially just a hollow cylinder with shelves and mounting points inside. This module could potentially be used to bring up components that are intended to be attached to the outside of the ISS, or it could hold experiments and modules that are designed to be exposed to the space environment.
Like the Cgynus XL, the HTV-X will berth to the ISS rather than dock, and it will also burn up after its mission is complete. However the HTV-X is designed to fly freely on its own for up to 18 months after it delivers its cargo to the Station, which JAXA calls the “Technology Demonstration Phase” of the mission. This will essentially allow the agency to perform a second mission after the vehicle has completed its supply run, greatly improving the overall cost effectiveness of the program.
Dream Chaser
Far and away the most ambitious of these new spacecraft is the Dream Chaser, developed by Sierra Space. Reminiscent of a miniature version of the Space Shuttle, this winged vehicle is designed to land like an airplane at the end of its mission. This not only means it can bring material back down to Earth at the end of its mission, but that it can do so in a much less jarring manner than a capsule that ends up splashing down into the ocean under parachutes. This is a huge benefit when dealing with fragile cargo or scientific experiments, and is a capability not offered by any other currently operational spacecraft.
The Dream Chaser has been in active development for over 20 years, but its origins date back even farther than that, as it’s based on HL-20 Personnel Launch System concept from the 1980s. While it was initially designed for crew transport, it lost out to SpaceX and Boeing during NASA’s Commercial Crew Program selection in 2014. It did however secure a contract from the space agency in 2016 for six cargo missions to the ISS. To qualify for these missions, several changes were made to the original design, such as the addition of an expendable module that will attach to the rear of the vehicle to increase its relatively limited internal cargo capacity of 910 kg (2,000 lb) by 4,500 kg (10,000 lb).
The first orbital test flight of the Dream Chaser is currently scheduled to take place before the end of the year, but that date has already slipped several times. Being a reusable vehicle like the Dragon, the first Dream Chaser spaceplane is expected to fly multiple operational missions while a second craft is being assembled.
After completing their contractually obligated missions to the ISS, there are currently plans for the Dream Chaser to fly at least one mission for the United Nations Office for Outer Space Affairs, which will carry an array of scientific experiments provided by member nations that do not have their own domestic space programs. The company also says they remain committed to bringing the crewed version of Dream Chaser to fruition, likely as part of their partnership with Blue Origin to develop the Orbital Reef — a “mixed-use business park” in space.
Time is Running Out
It might seem strange that three different spacecraft are scheduled to enter service before the end of the year, but of course, the clock is ticking. Although the date has been pushed out a number of times over the years, the current 2030 timeline for the decommissioning of the International Space Station seems to be holding so far. With as little as five years left to go before the ISS joins us Earthlings back here on the surface, it’s now or never for any vehicles designed for service missions. This is doubly true for companies such as Sierra Space, who have already agreed to perform a set number of missions.
At the same time, any of these vehicles could support a future commercial space station, should one actually materialize. We’ve covered some of the post-ISS plans previously, but given how volatile the aerospace world is, nothing is a given until it’s actually in orbit.
La Spagna indagherà sulle violazioni dei diritti umani commesse da Israele nella Striscia di Gaza.
like this
reshared this
Librarians Are Being Asked to Find AI-Hallucinated Books#News
Librarians Are Being Asked to Find AI-Hallucinated Books
Reference librarian Eddie Kristan said lenders at the library where he works have been asking him to find books that don’t exist without realizing they were hallucinated by AI ever since the release of GPT-3.5 in late 2022. But the problem escalated over the summer after fielding patron requests for the same fake book titles from real authors—the consequences of an AI-generated summer reading list circulated in special editions of the Chicago Sun-Times and The Philadelphia Inquirer earlier this year. At the time, the freelancer told 404 Media he used AI to produce the list without fact checking outputs before syndication.“We had people coming into the library and asking for those authors,” Kristan told 404 Media. He’s receiving similar requests for other types of media that don’t exist because they’ve been hallucinated by other AI-powered features. “It’s really, really frustrating, and it’s really setting us back as far as the community’s info literacy.”
AI tools are changing the nature of how patrons treat librarians, both online and IRL. Alison Macrina, executive director of Library Freedom Project, told 404 Media early results from a recent survey of emerging trends in how AI tools are impacting libraries indicate that patrons are growing more trusting of their preferred generative AI tool or product, and the veracity of the outputs they receive. She said librarians report being treated like robots over library reference chat, and patrons getting defensive over the veracity of recommendations they’ve received from an AI-powered chatbot. Essentially, like more people trust their preferred LLM over their human librarian.
“Librarians are reporting this overall atmosphere of confusion and lack of trust they’re experiencing from their patrons,” Macrina told 404. “They’re seeing patrons having seemingly diminished critical thinking and curiosity. They’re definitely running into some of these psychosis and other mental health issues, and certainly seeing the people who are more widely adopting it also being those who have less digital literacy about it and a general sort of loss of retention.”
As a reference librarian, Kristan said he spends a lot of time thinking about how fallible the human mind can be, especially as he’s fielding more requests for things that don’t exist than ever before. Fortunately, he’s developed a system: Search for the presumed thing by title in the library catalog. If it’s not in the catalog, he checks the global library catalog WorldCat. If it isn’t there, he starts to get suspicious.
“Not being in WorldCat might mean it’s something that isn’t catalogued like a Zine, a broadcast, or something ephemeral, but if it’s parading as a traditional book and doesn’t have an entry in the collective library catalog, it might be AI,” Kristan explained.
From there, he might connect the title to a platform like Kindle Direct Publishing—one way AI-generated books enter the market—or the patron will tell him their source is an AI-powered chatbot, which he will have to explain, likely hallucinated the name of the thing they’re looking for. A thing that doesn't exist.
As much as library workers try to shield their institutions from the AI-generated content onslaught, the situation is and has been, in many ways, inevitable. Companies desperate to rush generative AI products to market are pushing flawed products onto the public that are predictably being used to pollute our information ecosystems. The consequences are that AI slop is entering libraries, everyone who uses AI products bears at least a little responsibility for the swarm, and every library worker, regardless of role, is being asked to try and mitigate the effects.
Collection development librarians are requesting digital book vendors like OverDrive, Hoopla and CloudLibrary to remove AI slop titles as they’re found. Subject specialists are expected to vet patron requested titles that may have been written in part with AI without having to read every single title. Library technology providers are rushing to implement tools that librarians say are making library systems catalogs harder to use.
Jaime Taylor, an academic library resource management systems supervisor with the University of Massachusetts, says vendors are shoehorning Large Language Models (LLMs) into library systems in one of two ways. The first is a natural language search (NLS) or a semantic search that attempts to draw meaning from the words to find complementary search results. Taylor says these products are misleading in that they claim to eliminate the need for the strict keyword searches or Boolean operators when searching library catalogs and databases, when really the LLM is doing the same work on the backend.
“These companies all advertise these tools as knowing your intent,” Taylor told 404 Media. “Understanding what you meant when you put those terms in. They don’t know. They don’t understand. None of those things are true. There is no technical way these tools can do that.”
The other tool Taylor is seeing in library technology are AI-generated summaries based on journal articles, monographs, and other academic sources through a product called AI Insights, which incorporates new information into an existing LLM with a system called retrieval-augmented generation (RAG). Taylor and colleagues have found RAG doesn’t really help improve the accuracy of AI-generated summaries through beta testing AI tools in library tech for companies like Clarivate, Elsevier and EBSCO.
“It reads everything on both pages,” she added. “It can’t tell where the article you’re looking for starts and stops, so it gives you takeaways from every word on the page. This was really bad when we tested it with book reviews, because book reviews are often very short and there’ll be half a dozen on one page, which would end up giving us really mixed up information about every book review on the page, even though the record we were looking at was only looking for one of them, because it was a scanned page from an older journal.”
Taylor says neither type of product is ready for market, but especially not the AI summaries that do what an abstract does but a lot worse. She’s turned what ones she can off, but expects fewer vendors will allow her and other librarians to do so in the future to record more favorable use cases. The problem, she says, is these companies are rushing products to market, making the skills academic librarians are trying to teach students and researchers to use obsolete.
“We are trying to teach how to construct useful, exact searching,” she said. “But really [these products’ intent] is to make that not happen. The problem with that in a university library is we’re trying to teach those skills but we have tools that negate that necessity. And because those tools don’t work well, you’ve not learned the skill and you’re still getting crap results, so you’re never going to get better results because you didn’t learn the skill.”
Plenty of library workers remain cautiously optimistic about the potential for generative AI integrations and what that could mean for information retrieval and categorization. But for most librarians, the rollout has been clunky, error-filled and disorienting, for them and their patrons.
“As someone who feels like a big part of my job is advocacy for the position, for the principles of the profession, I am here to not look at whether a resource is good or bad,” said Kristan. “I don’t look at the output, the relationship that it has with the patrons, and what it’s being used for in the long run of the future. Like, I’m not out here just breaking looms and machine weaving machinery just for the hell of it. I’m saying this is not good for the community and we need to find equitable alternatives to ensure that things are going well for the lives of our patrons.”
Readers Annoyed When Fantasy Novel Accidentally Leaves AI Prompt in Published Version, Showing Request to Copy Another Writer's Style
A scammer left glaringly obvious evidence of using AI to write portions of a fantasy novel and even tried to copy the style of a real author.Victor Tangermann (Futurism)
Breaking News Channel reshared this.
Per i morti di Reggio Emilia
Fausto Amodei, l'autore, ci ha lasciato oggi.
youtube.com/watch?v=WmFYVEiXGy…
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
reshared this
Ministero dell'Istruzione
Per la campagna #MiStaiACuore, tutte le classi dalla prima primaria alla terza della scuola secondaria dell’Istituto Comprensivo "Città dei Bambini" di Mentana (RM) hanno svolto lezioni di primo soccorso e BLSD.Telegram
Listening for the Next Wow! Signal with Low-Cost SDR
As you might expect, the University of Puerto Rico at Arecibo has a fascination with radio signals from space. While doing research into the legendary “Wow! Signal” detected back in 1977, they realized that the burst was so strong that a small DIY radio telescope would be able to pick it up using modern software-defined radio (SDR) technology.
This realization gave birth to the Wow@Home project, an effort to document both the hardware and software necessary to pick up a Wow! class signal from your own backyard. The University reasons that if they can get a bunch of volunteers to build and operate these radio telescopes, the resulting data could help identify the source of the Wow! Signal — which they believe could be the result of some rare astrophysical event and not the product of Little Green Men.
Ultimately, this isn’t much different from many of the SDR-based homebrew radio telescopes we’ve covered over the years — get a dish, hook your RTL-SDR up to it, add in the appropriate filters and amplifiers, and point it to the sky. Technically, you’re now a radio astronomer. Congratulations. In this case, you don’t even have to figure out how to motorize your dish, as they recommend just pointing the antenna at a fixed position and let the rotation of the Earth to the work — a similar trick to how the legendary Arecibo Observatory itself worked.
The tricky part is collecting and analyzing what’s coming out of the receiver, and that’s where the team at Arecibo hope to make the most headway with their Wow@Home software. It also sounds like that’s where the work still needs to be done. The goal is to have a finished product in Python that can be deployed on the Raspberry Pi, which as an added bonus will “generate a live preview of the data in the style of the original Ohio State SETI project printouts.” Sounds cool to us.
If you’re interested in lending a hand, the team says they’re open to contributions from the community — specifically from those with experience RFI shielding, software GUIs, and general software development. We love seeing citizen science, so hopefully this project finds the assistance and the community it needs to flourish.
Thanks to [Mark Stevens] for the tip.
Investire nella sicurezza. Perché il settore difesa attira sempre più fondi privati
@Notizie dall'Italia e dal mondo
Negli ultimi anni, l’intersezione tra capitale privato e settore della difesa ha visto un’evoluzione significativa. Storicamente, la difesa è stata considerata una prerogativa statale, con le grandi aziende contractor a dominare il mercato. Tuttavia, le
freezonemagazine.com/news/sane…
In libreria dal 26 Settembre 2025 Il capolavoro della narrativa thailandese contemporanea, per scoprire una letteratura ancora trascurata in Italia. Phraek Nam Daeng è un villaggio ai margini del tempo, dove l’infanzia trascorre tra risaie, notti d’inverno pungenti e racconti sussurrati attorno al fuoco. In questo angolo della Thailandia rurale, il vecchio
L'ex lobbista di Meta nominato commissario del DPC: Meta ora si regola ufficialmente da sola Secondo quanto riportato dalle notizie irlandesi, Niamh Sweeney, un'ex lobbista senior di Meta, dovrebbe entrare a far parte della Commissione irlandese per la protezione dei dati (DPC) in qualità di commissario nel mese di ottobre mickey18 September 2025
Privacity reshared this.
EDRi-gram, 17 September 2025
What has the EDRi network been up to over the summer? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: age verification gains traction, EU’s deregulation spree risks entire digital rulebook, & more!
The post EDRi-gram, 17 September 2025 appeared first on European Digital Rights (EDRi).
400 Schulen besucht: Was Kinder im Netz erleben, und was Politik daraus lernen kann
netzpolitik.org/2025/400-schul…
VIDEO. Gaza in fiamme: bombardamenti e pulizia etnica mentre Israele pianifica profitti sulle macerie
@Notizie dall'Italia e dal mondo
Intanto, nel sud della Striscia i militari consegnano più armi e promettono più potere e terra alle milizie locali di Abu Shabab, che secondo le informazioni dei media di Tel Aviv, ora "combattono" al fianco dei
Safe, così Londra e Ottawa possono rientrare nei giochi della difesa europea
@Notizie dall'Italia e dal mondo
L’Unione europea potrebbe aprire le porte del suo principale strumento finanziario per la difesa a due alleati storici come Regno Unito e Canada. Con la decisione del Consiglio europeo, la Commissione ha ricevuto il mandato a negoziare la partecipazione di Londra e
Gaza e Netanyahu. La giustizia internazionale e i doppi standard che la delegittimano
@Giornalismo e disordine informativo
articolo21.org/2025/09/gaza-e-…
In questo periodo di crisi profonda dei diritti umani e di delegittimazione di qualsiasi concetto cui segua
Meta punta tutto sugli smart glasses con EssilorLuxottica
L'articolo proviene da #StartMag e viene ricondiviso sulla comunità Lemmy @Informatica (Italy e non Italy 😁)
Il Meta Connect 2025 è ormai una fiera di occhiali smart. Abbandonati i visori per il metaverso, Meta punta tutto sugli smart glasses realizzati con EssilorLuxottica. Ecco novità, prezzi (non proprio popolari), ma anche interrogativi sui
L’offensiva della Casa Bianca contro comici e giornalisti
@Giornalismo e disordine informativo
articolo21.org/2025/09/loffens…
“Abbiamo raggiunto nuovi minimi durante il fine settimana con i Maga che hanno cercato di caratterizzare il ragazzo che ha ucciso Charlie Kirk come qualcosa di diverso da uno di loro e hanno fatto di
freezonemagazine.com/news/bow-…
Organizzato da Stand Bike Cafè e Bad Guy Brewery, il Bow è alla sua ottava edizione ed è una giornata di arte, condivisione e solidarietà. Con la collaborazione di LIPU e associazioni che si occupano di fragilità e reinserimento: Anffas, Raices, Philia e AmaRachi. La musica acustica andrà avanti ininterrottamente dalle 11.30 (ad inaugurare i […]
L'articolo Bow Free Folk Festival 2025 proviene da F
freezonemagazine.com/articoli/…
Ci sono libri che non cercano di dare una verità definitiva, ma di restituire la densità umana dietro i conflitti. Vite al fronte di Luca Steinmann appartiene a questa categoria.
freezonemagazine.com/articoli/…
The Whale, la balena, questo il titolo del nuovo lavoro di Chantal Acda che viene pubblicato il 19 settembre, un disco che, lo dichiariamo subito, ha fatto facilmente breccia nei nostri cuori, con una serie di ascolti che si sono naturalmente intensificati nel corso dei giorni. Credo che per dare il giusto peso alla Acda […]
L'articolo Chantal Acda – The Whale proviene da FREE ZONE MAGAZINE.
The Whale, la
La morte di Auguste – di Georges Simenon
@Giornalismo e disordine informativo
articolo21.org/2025/09/la-mort…
A Roma, con allegra familiarità ma senza alcun disprezzo li chiamano buiaccari, o almeno li chiamavano quando ancora c’erano quei buchi di trattorie, senza alcuna pretesa, in cui ci si affollava tra i vapori dei fornelli per gustare il cibo di una cucina
Project Kuiper, ecco come Amazon sfiderà Starlink sulla banda larga satellitare
L'articolo proviene da #StartMag e viene ricondiviso sulla comunità Lemmy @Informatica (Italy e non Italy 😁)
Amazon punta a offrire servizi tramite Kuiper, il suo progetto di Internet satellitare, a Stati Uniti, Canada, Francia, Germania e Regno Unito entro la fine del primo
Scoprire di essere omosessuali da adulte
Succede più alle donne che agli uomini, tanto che hanno un nome apposta e nutriti gruppi online dove confrontarsiIl Post
Steradiodj. La web radio di Stefano Pietta è attiva tutti i giorni 24 ore su 24
@Giornalismo e disordine informativo
articolo21.org/2025/09/steradi…
Steradiodj, la webradio fondata, diretta e condotta dal Manerbiese Stefano Pietta, è lieta di presentarsi a tutti voi. “Ho fondato questa
Arabia Saudita e Pakistan firmano un patto di difesa comune
@Notizie dall'Italia e dal mondo
L'Arabia Saudita e il Pakistan firmano un accordo di difesa comune strategica. Riad aumenta le distanze da Washington
L'articolo Arabia Saudita e Pakistan firmano un patto di difesa comune pagineesteri.it/2025/09/18/asi…
PODCAST. Testimonianza da Gaza: “Qui è una catastrofe”
@Notizie dall'Italia e dal mondo
Pagine Esteri ha raggiunto nel campo di tende di Mawasi, a sud di Gaza, Sami Abu Omar, direttore del centro culturale italo-palestinese Vik. Le sue parole riassumono il dramma della popolazione palestinese, travolta dall'offensiva israeliana su Gaza City.
L'articolo PODCAST. Testimonianza da Gaza:
Pordenone Linux User Group aps – PNLUG - 11ª Conferenza LibreItalia
pnlug.it/2025/09/18/11a-confer…
Segnalato da Linux Italia e pubblicato sulla comunità Lemmy @GNU/Linux Italia
Siamo incredibilmente orgogliosi ed entusiasti di annunciare la nostra partecipazione alla 11ª Conferenza LibreItalia, un appuntamento imperdibile per tutti
Addio a Hussein Alnajjar, un giovane infermiere di Medici Senza Frontiere ucciso a Gaza
@Giornalismo e disordine informativo
articolo21.org/2025/09/addio-a…
Gaza piange Hussein Alnajjar, giovane infermiere di Medici Senza Frontiere (MSF), che ha perso la vita il 16
like this
reshared this
Tutti contro la Cina, aumenta la tensione nei mari asiatici
@Notizie dall'Italia e dal mondo
Esercitazioni congiunte, scaramucce e aumento delle spese militari. Aumenta la tensione in Estremo Oriente dove diversi paesi, insieme agli Stati Uniti, sono mobilitati contro la Cina
L'articolo pagineesteri.it/2025/09/18/asi…
LinuxTrent - Comunità vicine
linuxtrent.it/associazioni-vic…
Segnalato da Linux Italia e pubblicato sulla comunità Lemmy @GNU/Linux Italia
Ecco l’elenco delle associazioni e comunità “vicine” al LinuxTrent, sia geograficamente che “filosoficamente”: Hackinpovo: associazione di studenti universitari che si preoccupa di diffondere i concetti…
rag. Gustavino Bevilacqua reshared this.
Simone Cumbo
in reply to Informa Pirata • • •Informa Pirata likes this.
Informa Pirata reshared this.
Informa Pirata
in reply to Simone Cumbo • •Simone Cumbo
in reply to Informa Pirata • • •Informa Pirata likes this.
Lyra
in reply to Simone Cumbo • • •Simone Cumbo
in reply to Lyra • • •Informa Pirata likes this.
Informa Pirata reshared this.
Informa Pirata
in reply to Simone Cumbo • •@Simone Cumbo purtroppo non posso darti torto. Del resto, sono decenni che non azzecco scommesse sui trend del mercato... se non sono in grado di comprendere un fenomeno, dovrei evitare di escluderne il successo! 🤣
@Lyra