Andreessen Horowitz is funding a company that clearly violates the inauthentic behavior policies of every major social media platform.#News #AI #a16z
a16z-Backed Startup Sells Thousands of ‘Synthetic Influencers’ to Manipulate Social Media as a Service
A new startup backed by one of the biggest venture capital firms in silicon valley, Andreessen Horowitz (a16z), is building a service that allows clients to “orchestrate actions on thousands of social accounts through both bulk content creation and deployment.” Essentially, the startup, called Doublespeed, is pitching an astroturfing AI-powered bot service, which is in clear violation of policies for all major social media platforms.“Our deployment layer mimics natural user interaction on physical devices to get our content to appear human to the algorithims [sic],” the company’s site says. Doublespeed did not respond to a request for comment, so we don’t know exactly how its service works, but the company appears to be pitching a service designed to circumvent many of the methods social media platforms use to detect inauthentic behavior. It uses AI to generate social media accounts and posts, with a human doing 5 percent of “touch up” work at the end of the process.
On a podcast earlier this month, Doublespeed cofounder Zuhair Lakhani said that the company uses a “phone farm” to run AI-generated accounts on TikTok. So-called “click farms” often use hundreds of mobile phones to fake online engagement of reviews for the same reason. Lakhani said one Doublespeed client generated 4.7 million views in less than four weeks with just 15 of its AI-generated accounts.
“Our system analyzes what works to make the content smarter over time. The best performing content becomes the training data for what comes next,” Doublespeed’s site says. Doublespeed also says its service can create slightly different variations of the same video, saying “1 video, 100 ways.”“Winners get cloned, not repeated. Take proven content and spawn variation. Different hooks, formats, lengths. Each unique enough to avoid suppression,” the site says.
One of Doublespeed's AI influencers
Doublespeed allows clients to use its dashboard for between $1,500 and $7,500 a month, with more expensive plans allowing them to generate more posts. At the $7,500 price, users can generate 3,000 posts a month.The dashboard I was able to access for free shows users can generate videos and “carousels,” which is a slideshow of images that are commonly posted to Instagram and TikTok. The “Carousel” tab appears to show sample posts for different themes. One, called “Girs Selfcare” shows images of women traveling and eating at restaurants. Another, called “Christian Truths/Advice” shows images of women who don’t show their face and text that says things like “before you vent to your friend, have you spoken to the Holy Spirit? AHHHHHHHHH”
On the company’s official Discord, one Doublespeed staff member explained that the accounts the company deploys are “warmed up” on both iOS and Android, meaning the accounts have been at least slightly used, in order to make it seem like they are not bots or brand new accounts. Doublespeed cofounder Zuhair Lakhani also said on the Discord that users can target their posts to specific cities and that the service currently only targets TikTok but that it has internal demos for Instagram and Reddit. Lakhani said Doublespeed doesn’t support “political efforts.”A Reddit spokesperson told me that Doublespeed’s service would violate its terms of service. TikTok, Meta, and X did not respond to a request for comment.
Lakhani said Doublespeed has raised $1 million from a16z as part of its “Speedrun” accelerator program “a fast‐paced, 12-week startup program that guides founders through every critical stage of their growth.”
Marc Andreessen, after whom half of Andreessen Horowitz is named, also sits on Meta’s board of directors. Meta did not immediately respond to our question about one of its board members backing a company that blatantly aims to violate its policy on “authentic identity representation.”
What Doublespeed is offering is not that different than some of the AI generation tools Jason has covered that produce a lot of the AI-slop flooding social media already. It’s also similar, but a more blatant version of an app I covered last year which aimed to use social media manipulation to “shape reality.” The difference here is that it has backing from one of the biggest VC firms in the world.
AI-Powered Social Media Manipulation App Promises to 'Shape Reality'
A prototype app called Impact describes “A Volunteer Fire Department For The Digital World,” which would summon real people to copy and paste AI-generated talking points on social media.Emanuel Maiberg (404 Media)
Breaking News Channel reshared this.
Quel guanto finito nella melma…
@Giornalismo e disordine informativo
articolo21.org/2025/10/quel-gu…
Per anni si è detto che nella storia della Sicilia vi fosse un prima ed un dopo, racchiuso in una data: 6 gennaio 1980. La data dell’uccisione di uno dei politici migliori e perbene della mia Terra, Piersanti Mattarella. È uno sbaglio. Quella data ha dentro una storia – che ho
Giornalismo e disordine informativo reshared this.
Il nuovo video di Pasta Grannies: youtube.com/watch?v=zfYaQdFNO8…
@Cucina e ricette
(HASHTAG)
Cucina e ricette reshared this.
This week, we discuss Pavlovian Chartbeat response, when to say "cum," and the wave of making things for humans, by humans.#BehindTheBlog
Behind the Blog: Making Things for Humans
This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss Pavlovian Chartbeat response, when to say "cum," and the wave of making things for humans, by humans.JOSEPH: Right now I’m in the midst of upgrading a bunch of my podcasting and related gear. I’m using the same kinda cheap to midrange web cam I got when we first launched 404 Media. My mic is fine but now that a fair number of people listen to the pod, and we want to grow it, it’s time to invest in some new tech. Jason has already done this, I’m more following his lead. I used to be very into cameras, tech, gadgets, mics, but it’s been a few years.
Because the four of us are spread all over, we can’t do the popular aesthetic of everyone sitting on a chair or sofa chatting in a podcast studio. That stuff obviously performs better on video/YouTube, which is where podcast discovery often happens now. But we can try to make our remotely recorded podcast look as good as we can. Give people something to actually look at.
This post is for subscribers only
Become a member to get access to all content
Subscribe now
Deep, la scommessa subacquea di Fincantieri tra AI, droni e sicurezza
@Notizie dall'Italia e dal mondo
Nella profondità dei fondali si gioca una parte crescente della sicurezza globale, tra reti energetiche, infrastrutture, comunicazioni e servizi essenziali per la vita di tutti. È in questo scenario che Fincantieri ha presentato Deep, un sistema di droni subacquei integrati con intelligenza artificiale e controllo digitale.
Notizie dall'Italia e dal mondo reshared this.
Mi hanno spedito un pacco con UPS, al mio indirizzo di casa. Vorrei cambiare l'indirizzo e farlo depositare ad un UPS Point, tanto me lo consegneranno sicuramente quando non sono a casa quindi meglio farlo andare lì e poi me lo vado a prendere con calma.
Vado sul sito UPS, l'opzione è disponibile, scelgo quindi di ricevere il pacco presso un UPS Point. Il sito mi propone quello più vicino a casa ma c'è anche una mappa con tutti gli altri in zona, scelgo quello che per me è più comodo.
Nella pagine del riepilogo finale, prima di confermare il cambiamento di destinazione, trovo scritto l'UPS Point più vicino a casa.
Rifaccio e rifaccio e rifaccio la procedura, niente, nonostante io scelga sempre quell'UPS Point alla fine della procedura mi ricompare sempre l'UPS più vicino a casa.
Chiedo assistenza, mi risponde il cretino digitale in chat che ovviamente non capisce nulla.
Dai e dai riesco a farmi dare un numero di telefono, mi risponde un cretino digitale sotto forma di voce registrata che mi fa le domande del caso poi ad un certo punto mi fa una domanda a cui rispondo "sì". Non capisce e mi chiede di ripetere, ripeto "sì" (da notare che fino a quel punto ci ero arrivato, quindi la parte prima l'aveva capita bene).
A questo punto comincia a parlare in inglese, ma non in inglese-inglese... sono frasi inglesi ma pronunciate come se le leggesse in italiano, e quindi diventano incomprensibili.
Niente, rinuncio.
Però che bello il servizio assistenza di UPS... proprio roba di qualità.
#UPS
Poliversity - Università ricerca e giornalismo reshared this.
è il bello dell'era dell'IA, si pensa che gli esseri umani non servano più.
Prova con Bartolini e fammi sapere 😐
Hackaday Podcast Episode 343: Double Component Abuse, a Tinkercad Twofer, and a Pair of Rants
This week, Hackaday’s Elliot Williams and Kristina Panos met up across the universe to bring you the latest news, mystery sound, and of course, a big bunch of hacks from the previous seven days or so.
On What’s That Sound, Kristina failed spectacularly. Will you fare better and perhaps win a Hackaday Podcast t-shirt? Mayhap you will.
After that, it’s on to the hacks and such, beginning with a really cool entry into the Component Abuse Challenge wherein a simple transmission line is used to multiply a voltage. We watch as a POV globe takes to the skies, once it has enough motors.
Then we discuss several awesome hacks such as an incredible desk that simulates beehive activity, a really great handheld PC build, and a Tinkercad twofer. Finally, we discuss the future of removable batteries, and the history of movable type.
Check out the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!
html5-player.libsyn.com/embed/…
Download in DRM-free MP3 and savor at your leisure.
Where to Follow Hackaday Podcast
Places to follow Hackaday podcasts:
Episode 343 Show Notes:
News:
What’s that Sound?
Interesting Hacks of the Week:
- 2025 Component Abuse Challenge: Boosting Voltage With Just A Wire
- 2025 Component Abuse Challenge: Conductive Filament Makes A Meltable Fuse
- POV Globe Takes To The Skies
- Classy Desk Simulates Beehive Activity
- What Happened To Running What You Wanted On Your Own Machine?
- Handheld PC Build Is Pleasantly Chunky
Quick Hacks:
- Elliot’s Picks:
- Open Source Hack Lets The Razer Nari Headset Work With Linux
- Making A Clock With A Retooled Unihiker K10
- Tinkercad In Color
- Tinkercad Continues To Grow Up
- Kristina’s Picks:
- Building A Minecraft Lantern For Halloween
- Kitchen Bench Splash Guard Powered By Arduino
- 2025 Component Abuse Challenge: Nail Your Next Decal
Can’t-Miss Articles:
hackaday.com/2025/10/24/hackad…
Microreattori e sicurezza nazionale. La scommessa del Pentagono
@Notizie dall'Italia e dal mondo
Basi militari americane alimentati in territorio (continentale) statunitense da small modular reactors entro l’autunno del 2028. È l’obiettivo del Janus Program, iniziativa congiunta del Dipartimento della Guerra e del Dipartimento dell’Energia annunciata dal segretario dell’Esercito Daniel P.
Notizie dall'Italia e dal mondo reshared this.
La trappola del falso supporto tecnico: attenti, è phishing
@Informatica (Italy e non Italy 😁)
È stata rivelata una campagna di truffe online che sfrutta il logo Microsoft in uno schema di falso supporto tecnico. L’attacco non punta tanto sulla sofisticazione tecnica, quanto sulla capacità di sfruttare la fiducia e la paura per ottenere il controllo completo del dispositivo della
Informatica (Italy e non Italy 😁) reshared this.
There is no evidence the Instagram and Facebook account, called Montcowatch, sells anything. Lawyers from the ACLU say the move is "wild outside the scope" of DHS' authority.
There is no evidence the Instagram and Facebook account, called Montcowatch, sells anything. Lawyers from the ACLU say the move is "wild outside the scope" of DHSx27; authority.#ICE #DHS
DHS Tries To Unmask Ice Spotting Instagram Account by Claiming It Imports Merchandise
The Department of Homeland Security (DHS) is trying to force Meta to unmask the identity of the people behind Facebook and Instagram accounts that post about Immigration and Customs Enforcement (ICE) activity, arrests, and sightings by claiming the owners of the account are in violation of a law about the “importation of merchandise.” Lawyers fighting the case say the move is “wildly outside the scope of statutory authority,” and say that DHS has not even indicated what merchandise the accounts, called Montcowatch, are supposedly importing.“There is no conceivable connection between the ‘MontCo Community Watch’ Facebook or Instagram accounts and the importation of any merchandise, nor is there any indicated on the face of the Summonses. DHS has no authority to issue these summonses,” lawyers with the American Civil Liberties Union (ACLU) wrote in a court filing this month. There is no indication on either the Instagram or Facebook account that the accounts are selling any type of merchandise, according to 404 Media’s review of the accounts. “The Summonses include no substantiating allegations nor any mention of a specific crime or potential customs violation that might trigger an inquiry under the cited statute,” the lawyers add.
💡
Do you know anything else about this case or others like it? We would love to hear from you. Using a non-work device, you can message Joseph securely on Signal at joseph.404 or Jason at jason.404A judge temporarily blocked DHS from unmasking the owners last week.
“The court now orders Meta [...] not to produce any documents or information in response to the summonses at issue here without further order of the Court,” the judge wrote in a filing. The move to demand data from Meta about the identities of the accounts while citing a customs statute shows the lengths to which DHS is willing to go to attempt to shut down and identify people who are posting about ICE’s activities.
Montcowatch is, as the name implies, focused on ICE activity in Montgomery County, Pennsylvania. Its Instagram posts are usually titled “Montco ICE alert” and include details such as where suspected ICE agents and vehicles were spotted, where suspected agents made arrests, or information about people who were detained. “10/20/25 Eagleville,” one post starts. “Suspected dentention [sic] near Ollies on Ridge Pike sometime before 7:50 am. 3 Agents and 3 Vehicles were observed.”
The Instagram account has been posting since June, and also posts information about peoples’ legal rights to film law enforcement. It also tells people to not intervene or block ICE. None of the posts currently available on the Instagram account could reasonably be described as doxing or harassing ICE officials.
On September 11, DHS demanded Meta provide identifying details on the owners of the Montcowatch accounts, according to court records. That includes IP addresses used to access the account, phone numbers on file, and email addresses, the court records add. DHS cited a law “focused on customs investigations relating to merchandise,” according to a filing from the ACLU that pushed to have the demands thrown out.
playlist.megaphone.fm?p=TBIEA2…
“The statute at issue here, 19 U.S.C. § 1509, confers limited authority to DHS in customs investigations to seek records related to the importation of merchandise, including the assessment of customs duties,” the ACLU wrote. “Identifying anonymous social media users critical of DHS is not a legitimate purpose, and it is not relevant to customs enforcement.” As the ACLU notes, a cursory look at the accounts shows they are “not engaged in commerce.” The court record points to an 2017 Office of the Inspector General report which says Customs and Border Protection (CBP) “regularly” tried much the same thing with its own legal demands, and specifically around the identity of an anonymous Twitter user.“Movant now files this urgent motion to protect their identity from being exposed to a government agency that is apparently targeting their ‘community watch’ Facebook and Instagram accounts for doing nothing more than exercising their rights to free speech and association,” those lawyers and others wrote last week.
“Movant’s social media pages lawfully criticize and publicize DHS and the government agents who Movant views as wreaking havoc in the Montgomery County community by shining a light on that conduct to raise community members’ awareness,” they added.
The judge has not yet ruled on the ACLU’s motion to quash the demands altogether. This is a temporary blockage while that case continues.
The Montocowatch case follows other instances in which DHS has tried to compel Meta to identify the owners of similar accounts. Last month a judge temporarily blocked a subpoena that was aiming to unmask Instagram accounts that named a Border Patrol agent, The Intercept reported.
Earlier this month Meta took down a Facebook page that published ICE sightings in Chicago. The move came in direct response to pressure from the Department of Justice.
Both Apple and Google have removed apps that people use to warn others about ICE sightings. Those removals also included an app called Eyes Up that was focused more on preserving videos of ICE abuses. Apple’s moves also came after direct pressure from the Department of Justice.
Montcowatch directed a request for comment to the ACLU of Pennsylvania, which did not immediately respond.
Courts Block Meta From Sharing Anti-ICE Activists’ Instagram Account Info With Feds
For now, Meta cannot disclose to federal investigators the identities of Instagram users who named and shamed a Border Patrol agent.Shawn Musgrave (The Intercept)
Decibel - Vivo da re - 1980
youtube.com/watch?v=Wrm_0zVRW1…
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
Making WiFi Sound Like Dial-Up Internet
Dial-up modems had a distinctive sound when connecting, with the glittering, screeching song becoming a familiar melody to those jumping online in the early days of the Internet. Modern digital connections don’t really have an analog to this, by virtue of being entirely digital. And yet, [Nick Bild] decided to make WiFi audible in a pleasing tribute to the modems of yore.
The reason you could hear your dial-up modem is because it was actually communicating in audio over old-fashioned telephone lines. The initialization process happened at a low enough speed that you could hear individual sections of the handshake that sounded quite unique. Ultimately, though, once a connection was established at higher speed, particularly 33.6 k or 56 k, the sound of transmission became hard to discern from static.
Modern communication methods like Ethernet, DSL, and WiFi all occur purely digitally — and in frequencies far above the audible range. Thus, you can’t really “listen” to a Wi-Fi signal any more than you can listen to the rays of light beaming out from the sun. However, [Nick] found an anachronistic way to make a sound out of WiFi signals that sounds vaguely reminiscent of old-school modems. He used a Raspberry Pi 3 equipped with a WiFi adapter, which sniffs network traffic, honing in on data going to one computer. The packet data is then sent to an Adafruit QT Py microcontroller, which uses the data to vary the amplitude of a sound wave that’s then fed to a speaker through a digital-to-analog converter. [Nick] notes this mostly just sounds like static, so he adds some adjustments to the amplitude and frequency to make it more reminiscent of old modem sounds, but it’s all still driven by the WiFi data itself.
It’s basically WiFi driven synthesis, rather than listening to WiFi itself, but it’s a fun reference to the past. We’ve talked a lot about dial-up of late; from the advanced technology that made 56 k possible, to the downfall of AOL’s long-lived service. Video after the break.
youtube.com/embed/OxAJHiVkBEM?…
Elektronische Patientenakte: Mit Sicherheitsrisiken und Nebenwirkungen
netzpolitik.org/2025/elektroni…
Offener Brief: Bürgerrechtsorganisationen pochen auf Unabhängigkeit der irischen Datenschutzaufsicht
netzpolitik.org/2025/offener-b…
Obesità, il presidente di Aifa Robert Nisticò a TPI: “La prevenzione è un dovere dello Stato”
@Politica interna, europea e internazionale
Presidente Nisticò, con l’approvazione della Legge Pella, l’Italia è il primo e unico Paese al mondo ad avere una norma per la prevenzione e la cura dell’obesità. Cosa comporta? «L’obesità è una vera e propria malattia, molto
Politica interna, europea e internazionale reshared this.
Collins Aerospace: la voce di Everest su una tempesta perfetta. Ricostruiamo i fatti
@Informatica (Italy e non Italy 😁)
Si dice spesso che la verità sia la prima vittima in una guerra, e nel confuso panorama della cybersecurity questa massima risuona con sinistra frequenza. Quella che ha colpito Collins Aerospace a settembre del 2025 non è stato un semplice
Informatica (Italy e non Italy 😁) reshared this.
Chi teme le indagini su Mattarella? Incendiata la sede di “42 Parallelo” a Roma
@Giornalismo e disordine informativo
articolo21.org/2025/10/chi-tem…
Esiste un nesso tra la bomba fatta scoppiare davanti alla casa di Sigfrido Ranucci e il devastante incendio che ieri ha distrutto a Roma la
Giornalismo e disordine informativo reshared this.
Il deputato di Forza Italia Roberto Pella a TPI: “La mia legge contro l’obesità? Pensa al domani”
@Politica interna, europea e internazionale
On. Pella, l’Italia è il primo Paese al mondo a riconoscere l’obesità come malattia, grazie alla legge recentemente approvata di cui Lei è il primo firmatario. «È un motivo di grande soddisfazione. Indubbiamente a ognuno di noi fa piacere
Politica interna, europea e internazionale reshared this.
This Week in Security: Court Orders, GlassWorm, TARmageddon, and It was DNS
This week, a US federal court has ruled that NSO Group is no longer allowed to use Pegasus spyware against users of WhatsApp. And for their trouble, NSO was also fined $4 million. It’s unclear how much this ruling will actually change NSO’s behavior, as it intentionally stopped short of applying to foreign governments.
There may be an unexpected source of leverage the US courts can exert over NSO, with the news that American investors are acquiring the company. Among the requirements of the ruling is that NSO cannot reverse engineer WhatsApp code, cannot create new WhatsApp accounts, and must delete any existing WhatsApp code in their possession. Whether this actually happens remains to be seen.
Points On the Curve
Cryptography is hard. Your implementation can do everything right, and still have a weakness. This was demonstrated yet again in the Cloudflare CIRCL cryptography library. The issue here is a Diffie-Hellman scheme using the Curve4Q elliptic curve.
Quick review: Diffie-Hellman is a technique where Bob and Alice can exchange public keys, and each combine the received public key with their own private key, and arrive at a shared secret. This can be accomplished on an elliptic curve by choosing a scalar value as a private key, and multiplying a standard generator point by that scalar to derive a new point on the curve, which serves as the public key. After the public key points are exchanged, Alice and Bob each multiply the received public point by their own secret scalar. Just like simple multiplication, this function is commutative, and results in the same answer for both.
There is a catch that can cause problems. Not every value is a valid point on the curve, and doing calculations on these invalid points can lead to unusual results. The danger here isn’t remote code execution (RCE), but leaking information about the private key when doing an invalid calculation using these invalid points.
The CIRCL library had a couple instances where invalid points could be used. There’s a quirk of deserializing FourQ points, that the x value can be interpreted two ways, essentially a positive or negative x. The CIRCL logic attempts to deserialize an incoming point in one way, and if that point is not actually on the curve, the value is inverted (technically “conjugated”), and the new point is accepted without testing. There were a few other similar cases where points weren’t being validated. These flaws were reported to Cloudflare and fixed earlier this year.
GlassWorm
We recently covered Shai Hulud, an npm worm that actively uploaded itself into other npm libraries when it found valid credentials on compromised computers. It was something of a sea change in the world of library security. Now a month later, we have GlassWorm, a vscode extension worm.
GlassWorm combines several very sneaky techniques. When it injects code into an extension, that code is hidden with Unicode shenanigans, rendering in VSCode as blank lines. Once this malicious VSCode extension is loaded, it reaches out to some interesting Command and Control (C2) infrastructure: The Solana blockchain is used as a sort of bulletproof DNS, hosting a a C2 IP address. There’s a second, almost equally weird C2 mechanism: Hosting those IP addresses in entries on a public Google Calendar.
Once this malware is running, it harvests credentials, and if it gets a chance, injects itself in the code for other extensions and tries to publish. And it also turns the compromised machine into a “Zombi”, part of a botnet, but also working as a RAT (Remote Access Trojan). All told, it’s really nasty malware, and seems to indicate a shift towards these meta-worms that are intended to infiltrate Open Source software repositories.
Speaking of npm, GitHub has begun making security enhancements in response to the Shai Hulud worm. It looks like good changes, like the deprecation of classic access tokens, in favor of shorter lived, granular tokens. TOTP (Time based One Time Password) is going away as a second factor of authentication, in favor of passkeys and similar. And finally, npm is encouraging the use of doing away with long-lived access tokens altogether, and publishing strictly from CI/CD systems.
TARmageddon
We’ve cheered on the progress of the Rust language and its security wins, particularly in the realm of memory safety. But memory management is not the only cause of security issues. The async-tar rust package had a parsing bug that allowed a .tar file to smuggle additional contents that were not seen by the initial validation step.
That has all sorts of potential security ramifications, like smuggling malicious files, bypassing filters, and more. But what’s really interesting about this particular bug is that it’s been around since the first release of the package, and async-tar has been forked into many other published packeges, some of which are in use but no longer maintained. This has turned what should have been a simple fix into a mess, and the popular tokio-tar is still unfixed.
It Was DNS
You probably noticed that the Internet was sort of a dumpster fire on Monday — more than normal. Most of the world, it seems, runs on Amazon’s AWS, and when AWS goes down, it’s surprising what else fails. There were the normal sites and services down, like Reddit, Signal, Fortnight, and Prime Video. It was a bit of a surprise that some banks were down and flights delayed. And then there were IoT devices, like smart beds, litter boxes, and smart bulbs.
And the problem, naturally, was DNS. It’s always DNS. Specifically, Amazon has pinned the outage on “…a latent race condition in the DynamoDB DNS management system that resulted in an incorrect empty DNS record…”. This bad record brought down other services that relied on it, and it didn’t take long for the problem to spin out of control.
Bits and Bytes
There’s even more DNS, with [Dan Kaminsky]’s infamous cache poisoning making an unwelcome comeback. DNS has historically run over UDP, and the Kaminsky attack was based on the lack of authorization in DNS responses. The solution was to randomize the port a request was sent from, requiring the matching response be delivered to the same port number. What’s new here is that the Pseudo Random Number Generator (PRNG) in BIND has a weakness, that could have allowed predicting those values.
TP-Link’s Omada gateways had a pair of vulnerabilities that allowed for RCE. The more serious of the two didn’t require any authentication. Noword on whether this flaw was accessible from the WAN interface by default. Patched firmware is now available.
The better-auth library patched an issue early this month, that allowed the createApiKey endpoint to run without authRequired set true, simply by providing a valid user ID. This bug has been in the library ever since API keys were added to the project. The fix landed in 1.3.26.
And for bonus points, go check out the ZDI post on Pwn2Own Ireland, that just wrapped. There were lots of IoT hacks, including at least one instance of Doom running on a printer. Summoning Team took the Master of Pwn award, nearly doubling the points earned by second place. Congrats!
DSA: EU-Kommission bemängelt Verstöße bei Instagram, Facebook und TikTok
netzpolitik.org/2025/dsa-eu-ko…
Traffico illegale di gas fluorurati ad effetto serra stoppato in Spagna
Sono state le informazioni fornite dall'Ufficio europeo per la lotta antifrode (#OLAF) a consentire il sequestro di 12.000 kg di gas fluorurati illegali nel sud-est della Spagna. Le autorità spagnole hanno confiscato un camion con bombole, del valore di circa 413.000 euro, nella provincia spagnola di Alicante. L'OLAF ha monitorato da vicino il traffico internazionale di gas fluorurati ad effetto serra verso l'UE da paesi terzi.
L'intelligence condivisa con il Servizio di Sorveglianza Doganale dell'Agenzia delle Entrate spagnola (AEAT) e le sue unità operative di Catalogna, Valencia e Alicante ha evidenziato un movimento sospetto di gas fluorurati diretti in Africa.
Le autorità spagnole sono riuscite a intercettare il camion contenente i gas fluorurati in un magazzino di Alicante, dove venivano scaricate bombole di gas refrigerante con l'obiettivo di immagazzinarle e successivamente distribuirle utilizzando furgoni a noleggio più piccoli.
Gas fluorurati e preoccupazioni ambientali
I gas fluorurati sono soggetti a quote rigorose e a una riduzione graduale ai sensi delle normative ambientali dell’UE a causa del loro impatto significativo sul riscaldamento globale. La spedizione sequestrata proveniva da paesi extra-UE e l’OLAF, in collaborazione con le autorità nazionali, sta lavorando per interrompere le reti illegali che trafficano questi potenti gas serra in Europa.
Mentre l’UE applica norme sempre più rigorose sull’uso e l’importazione di gas fluorurati, il mercato nero di questi gas si è ampliato. Dispositivi come condizionatori d’aria e sistemi di refrigerazione industriale, che si basano sui gas fluorurati, stanno alimentando questo commercio illegale. L'OLAF resta in prima linea negli sforzi volti a proteggere l'integrità ambientale dell'UE reprimendo il traffico illegale di gas fluorurati.
La missione dell'OLAF è individuare, indagare e fermare gli illeciti relativi ai fondi dell'UE.
Nella sua funzione investigativa indipendente, l'OLAF può indagare su questioni relative a frode, corruzione e irregolarità che ledono gli interessi finanziari dell'UE riguardanti: \
• tutta la spesa dell'UE: le principali categorie di spesa sono i Fondi strutturali, la politica agricola e i fondi per lo sviluppo rurale, la spesa diretta e gli aiuti esterni; \
• alcuni settori delle entrate dell'UE, principalmente i dazi doganali; \
• sospetti di cattiva condotta grave da parte del personale dell'UE e dei membri delle istituzioni dell'UE.
Una volta che l'OLAF ha completato l'indagine, spetta alle competenti autorità nazionali e dell'UE esaminare e decidere il seguito dato alle raccomandazioni dell'OLAF.
fabrizio reshared this.
“Lasciatemi morire ridendo” – Proiezione e dibattito a Vicenza con Diego Silvestri
Vicenza – Cinema Odeon, Corso Andrea Palladio 176
lunedì 3 novembre 2025
Ore 20:30
In collaborazione con la Cellula Coscioni Vicenza-Padova, Mescalito Film presenta “Lasciatemi morire ridendo”, il documentario di Massimiliano Fumagalli che racconta la storia di Stefano Gheller, giovane veneto che ha chiesto di poter accedere all’aiuto medico alla morte volontaria in Italia.
Dopo la proiezione è previsto un dibattito pubblico con la partecipazione di Diego Silvestri, in rappresentanza dell’Associazione Luca Coscioni, per approfondire i temi legati al diritto al fine vita e all’autodeterminazione.
Un appuntamento di sensibilizzazione e confronto sui diritti ancora negati e sulle battaglie civili per la libertà di scelta.
L'articolo “Lasciatemi morire ridendo” – Proiezione e dibattito a Vicenza con Diego Silvestri proviene da Associazione Luca Coscioni.
La space economy, le filiere strategiche e il ruolo delle Pmi. Intervista a Jacopo Recchia (Aviorec)
@Notizie dall'Italia e dal mondo
Il settore aerospaziale e della difesa sta vivendo una trasformazione rapida e complessa. Nuove tecnologie, supply chain sempre più integrate e il ruolo centrale delle Pmi nella filiera nazionale delineano un panorama in continua evoluzione.
Notizie dall'Italia e dal mondo reshared this.
ricordo che i no vax sostenevano che il vaccino doveva essere addirittura tossico e che chiunque si fosse vaccinato sarebbe morto al 100% entro un paio di anni...
Un inatteso effetto collaterale dei vaccini contro il COVID-19
Un gruppo di ricerca ha trovato indizi sulla capacità dei vaccini a mRNA di far funzionare meglio alcune terapie contro il cancroIl Post
𝕊𝕟𝕠𝕨 reshared this.
Caso Regeni, processo sospeso e quel fastidioso odore di affari. L’impegno del popolo giallo non si ferma
@Giornalismo e disordine informativo
articolo21.org/2025/10/caso-re…
Ora più che mai occorre illuminare a giorno quanto sta
Giornalismo e disordine informativo reshared this.
freezonemagazine.com/articoli/…
Big Daddy Wilson ci presenta il suo nuovo disco con una considerazione che così riassumiamo. “Si può immaginare la vita senza musica? Nessuna ninna nanna rilassante, nessuna serenata romantica, nessuna canzone pop vivace, nessuna sinfonia emozionante e nessuna melodia ispiratrice. La maggior parte delle persone considererebbe questa prospettiva noiosa e poco attraente. La
lindipendente.online/2025/10/2…
Le parole per raccontare le guerre. Il 30 ottobre corso di formazione dell’Odg Lazio
@Giornalismo e disordine informativo
articolo21.org/2025/10/le-paro…
Le parole per raccontare le guerre tenendo presenti i valori deontologici e una terminologia che non ferisce e non colpisce
Giornalismo e disordine informativo reshared this.
“Sanzioni ostili ma inutili” ci sono molte affermazioni di putin di questo genere.
è vero che negli ultimi 5 anni c'è stato un sovvertimento di qualsiasi più basilare regola di logica, con la scheggia impazzita di israele che pensa di poter ridisegnare i confini mondiali per legge ordinaria del proprio parlamento. nello stesso raggruppamento rientra sia le leggi russe sui propri confini nazionali che si espandono continuamente, che pure eventuali referendum russi fake... ma sentire un capo di stato che sostiene che si sente "ferito" da "sanzioni" che però comunque non hanno alcun effetto è una ulteriore escalation di questa che può essere solo definita una ridicola farsa.
veramente... è un'affermazione che va a deperimento della dignità di chi la fa. della serie rendersi ridicoli. perché alla fine puoi dire solo una delle 2 cose. 1) o è una minaccia ed è dannosa 2) o non ha effetto e non ha neppure sentito parlarne o sentirsene offesi
l'ordine nuovo portato avanti da putin, alternativo a quello usa, non pare migliore del modello precedente, in sostanza. e quando si deve cambiare per rimanere come prima per quanto mi riguarda io voto per nessun cambiamento. cambiare per in cambiamento fine a se stesso senza progresso non ha senso. o c'è progresso o non c'è progresso. solo questo conta. a livello globale chiaramente. non locale.
Caso Regeni, processo sospeso e quel fastidioso odore di affari. L’impegno del popolo giallo non si ferma
@Giornalismo e disordine informativo
articolo21.org/2025/10/caso-re…
Ora più che mai occorre illuminare a giorno quanto sta
Giornalismo e disordine informativo reshared this.
La “lotta antidroga” di Trump punta con forza alla guerra con Caracas
@Notizie dall'Italia e dal mondo
Allo scopo di mettere sotto pressione Maduro, la Casa Bianca ha trasferito sul piano militare un problema che fino a ieri veniva gestito dalle forze di polizia e dalla Guardia Costiera
L'articolo La “lotta antidroga” di Trump punta con forza alla guerra con Caracas proviene
Notizie dall'Italia e dal mondo reshared this.
REPORTAGE. Messico: lo Stato che fa sparire i propri figli
@Notizie dall'Italia e dal mondo
Da oltre un decennio, i genitori dei 43 studenti di Ayotzinapa cercano la verità su una sparizione che coinvolge polizia, esercito e narcotraffico, mentre in Messico le persone scomparse superano le 124 mila.
L'articolo REPORTAGE. Messico: lo Stato che fa sparire i propri figli proviene da Pagine
Notizie dall'Italia e dal mondo reshared this.
freezonemagazine.com/news/thom…
In libreria dal 31 Ottobre 2025 Un thriller avvincente e morale, a tinte noir, che scava nel cuore oscuro del Sud degli Stati Uniti. Un romanzo sulla colpa, sulla giustizia negata, sul privilegio e sull’eredità mai estinta del razzismo. Venerdì 31 ottobre readerforblind pubblica The White League, romanzo di Thomas Zigal tradotto da […]
L'articolo Thomas Zigal – The White League proviene da FRE
Trump vuole diventare azionista anche delle società di computing quantistico
L'articolo proviene da #StartMag e viene ricondiviso sulla comunità Lemmy @Informatica (Italy e non Italy 😁)
Prosegue il "capitalismo politico" di Trump: dopo Intel e le compagnie minerarie, il governo degli Stati Uniti potrebbe diventare azionista anche delle società di computing quantistico. Washington vuole
reshared this
La Cellula Coscioni di Orvieto al Disability Pride – Corteo e incontro pubblico per l’autodeterminazione
In occasione del Disability Pride Orvieto 2025, la Cellula Coscioni di Orvieto parteciperà con entusiasmo e determinazione a una giornata dedicata ai diritti, all’inclusione e alla libertà di scelta delle persone con disabilità.
Dalle ore 9.30 nella Sala del Governatore di Palazzo dei Sette, si terrà un incontro pubblico con attivisti, esperti ed esponenti istituzionali. Sarà l’occasione per affrontare, insieme alla Cellula Coscioni di Orvieto, i nodi ancora irrisolti legati alle barriere – fisiche, culturali e istituzionali – che limitano la piena partecipazione delle persone con disabilità nella società.
Il corteo inizierà alle ore 16:00 in Piazza della Repubblica e attraverserà il centro storico per rivendicare pari diritti, accessibilità e autodeterminazione per tutte e tutti.
Al centro del dibattito anche la necessità di garantire l’accesso ai diritti fondamentali: dalla salute all’autonomia, dalla libertà personale al diritto a scegliere sul proprio corpo e sul proprio futuro.
L'articolo La Cellula Coscioni di Orvieto al Disability Pride – Corteo e incontro pubblico per l’autodeterminazione proviene da Associazione Luca Coscioni.
Scandalo deepfake intorno alle elezioni irlandesi rivela le falle nei controlli sull’AI
L'articolo proviene da #Euractiv Italia ed è stato ricondiviso sulla comunità Lemmy @Intelligenza Artificiale
Un video deepfake della candidata alla presidenza irlandese Catherine Connolly, diventato virale sui social media, ha riacceso i riflettori sulla
reshared this
Otttoz
in reply to Antonella Ferrari • • •Giornalismo e disordine informativo reshared this.