Cybersecurity & cyberwarfare ha ricondiviso questo.

«Il Dipartimento di Stato degli Stati Uniti sta ora offrendo sovvenzioni fino a 3 milioni di dollari a gruppi allineati al movimento MAGA in Europa, scrive il Financial Times.
Quindi fammi capire...
Putin conduce una guerra in Europa. Questo costringe l'Europa a comprare armi dagli Stati Uniti. Trump aggiunge un margine del 10% su quelle armi per riempire le sue casse. Poi spende soldi in Europa per far avanzare gruppi che siano pro-Putin. In breve: gli Stati Uniti stanno combattendo attivamente contro il mondo democratico spingendo il progetto di Putin nei paesi che combattono il progetto di Putin».

mastodon.social/@randahl/11692…


The US state department is now offering grants of up to $3 million to MAGA-alligned groups in Europe, writes FT.

So let me get this straight…

Putin wages a war in Europe. That forces Europe to buy weapons from the US. Trump ads a 10 percent markup on those weapons to fill his coffers. He then spends money on advancing groups in Europe that are pro Putin. In short: The US is actively fighting against the democratic world by pushing the Putin agenda in countries fighting the Putin agenda.


Questa voce è stata modificata (1 mese fa)

AIM-ing For a More Open Platform Than Discord


The media in this post is not displayed to visitors. To view it, please log in.

The OpenOscar Server in terminal, with Pidgin connected

Do you remember AIM? It may suprize you to hear that AOL’s instant messanger was actually supported all the way up to 2017– two years after Discord launched. Unlike Discord, AIM is a protocol, not a platform. Everything on your favourite Discord server is at the mercy of the corporate masters of said server; you can’t just spool up your own. Not so for AIM, as [Veronica] explains, both on her blog and in a YouTube video that we’ve embedded below.

The key is the fact that the AIM protocol isn’t locked into AOL’s now-defunct servers; it was reverse engineered in its prime for open-source messengers like Pidgin. You can host your own server, too, using the OpenOscarServer by [mk6i]. Even better, it’s not just AIM, but ICQ! In the sort of irony you only get in real life, the OpenOscar community does all its support on a Discord server. But then, they couldn’t hardly do it over AIM or ICQ these days.

For those of you who were too old or too young to get sucked into the 90s instant messenger craze, these protocols don’t just create chat rooms, that would be the even older Internet Relay Chat protocol, but usually worked more like SMS text messages. You have a contact list, and you send messages to your contacts via a server that acts as a hub. Once upon a time, that server was AOL’s, but now thanks to the OpenOscar project, it can be anybody’s computer. Of course, like texting, you can rope all of your contacts into one big group chat, and the protocol does support images and VOIP. (Which is starting to sound a lot like Discord.)

If you’re tired of your friend-group being at the mercy of American tech companies, [Veronica]’s blog post serves as a good guide to get you started running OpenOscarServer on a Linux system; she used a virtual private server but figures a Raspberry Pi ought to have enough grunt if you don’t have a huge number of people signed up.

For completeness, we should mention that while AOL pulled the plug on AIM nearly a decade back, ICQ, the other protocol supported by OpenOscarServer, lasted straight through until 2024.

Thanks to Keith Olson for the tip! Our tipsline is based on decentralized “electronic mail” technology that anyone can access.

youtube.com/embed/VDQTuJWST4M?…


hackaday.com/2026/07/14/aim-in…

Benchmarking Repairability Scores with an Asus Tablet


The media in this post is not displayed to visitors. To view it, please log in.

A few years ago, France introduced a mandatory repairability score for consumer goods like laptops and tablets. It involves five criteria that range from documentation and availability of spare parts to ease of disassembly, with the manufacturer using a government-provided checklist to determine their score.

Recently Asus determined that their Asus ROG Flow Z13 – model GZ302EA – scored a 10 out of 10 using this system. This led [iFixit] to run the same tablet/laptop hybrid through their own rating system.

You can find the filled-out spreadsheet for this device here, with this Asus-provided site showing a list of devices that all score a 10/10 or a measly 9.9/10 according to this system. As a self-reported score it is hard to take it as the objective truth, as there is every incentive for the manufacturer to tweak the truth to their own benefit and gloss over inconveniences. This is where it’s interesting to compare it with [iFixit]’s 7/10 score.

On documentation, Asus gives itself a perfect score but [iFixit] finds it to be incomplete. Removal of one fan requires the disassembly of the cooler with its liquid metal thermal interface on the CPU. The wireless card, and most ports, are soldered to the mainboard. On the bright side, after you get the screen off, the insides are quite modular, which is a plus.

[iFixit] dings three points: for documentation, soldered-down components, and a fan accessibility glitch. Parts accessibility outside of France is also significantly harder, but one can hardly blame the French system for that. Overall the French self-reported rating would seem to be a fair start, but depending on which criteria you define as required you may find yourself disagreeing with the score.

In the case of LPDDR5 RAM one could argue for example that with LPCAMM2 modules soldering RAM onto the mainboard ought to be a thing of the past, and Wi-Fi modules should always be removable as well. You can take that up with the French regulators.

youtube.com/embed/1rTzEE3qyNk?…


hackaday.com/2026/07/14/benchm…

Full Body VR Tracking Is Just Some Recycled Hardware Away


The media in this post is not displayed to visitors. To view it, please log in.

Full body tracking in VR applications involves attaching sensors to one’s body, and [Jaki] has a DIY method to do it on the cheap: the Vive Tracker Lite project repurposes Vive controllers as lighthouse-based trackers, no hardware modifications required.

A common method of doing body tracking is to strap on some Vive trackers. Those are extremely hacker-friendly pieces of hardware, but [Jaki] observed that older Vive VR controllers can be had for cheap, and already contain everything a tracker needs. Some new firmware and a custom mount is all it takes to turn them into perfectly usable body trackers.

But what about a wireless receiver? [Jaki] has that covered as well with the $5 Viva Dongle, which uses a Pro Micro NRF52840 to act as a cheap DIY alternative to the official dongle hardware.

We appreciate the effort put into making this project accessible to everyone, even novices. [Jaki]’s put effort into a Python program with a full GUI to make the flashing of firmware as easy as possible for both projects. Experimenting with body tracking in VRChat or games with mods is just some recycled hardware away.

Granted, a Vive controller is not the slimmest piece of hardware, but all it takes is a firmware change and a 3D-printed fixture to make a perfectly serviceable tracker. That being said, we’re sure an enterprising hardware hacker may crack a controller open and embark on a serious rebuild, or even interface to some of the inputs in a clever way. If you’ve done that or know of someone who has, drop us a note on our tips line because we’d love to see it.


hackaday.com/2026/07/14/full-b…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
securityaffairs.com/195347/sec…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The Neo Geo Does Run DOOM After All


The media in this post is not displayed to visitors. To view it, please log in.


Demonstration of the DoomGeo port of Doom to the Neo Geo. (Credit: Sabino, GitHub)Demonstration of the DoomGeo port of Doom to the Neo Geo. (Credit: Sabino, GitHub)
Perhaps the most ridiculous statement that anyone can make is that a computer system with clearly enough processing power ‘cannot run DOOM‘. This is why we accept the premise that a PDP-11 cannot run this game, but something on the order of a Neo Geo gaming console with its 68000 processor and for the time impressive GPU definitely ought to be able to.

The stated problem here is a lack of RAM for a framebuffer, with the CPU only having 64 kB to play with. This limitation now has seen two different approaches to try and circumvent it, as covered by [Modern Vintage Gamer].

The first project here is Doom64kB, which as the name suggests tries to somehow work with this system RAM limitation. It uses the Doom8088 port for the original IBM PC and similar Intel 8088-based systems. This had to massively reduce the feature list, including the lack of texture mapping for floors and ceiling, no saving or loading, and no music.

The other project is DoomGeo, which doesn’t try to bend the Neo Geo hardware to its will, but accepts the Neo Geo way of doing things: involving sprite strips, pre-baked graphics, fix-layer UI, and a minimum of runtime data. This of course drastically changes how the Doom game engine normally works, with its framebuffer-based rendering.

From this we can thus conclude that it’s not so much the processing power that limits where DOOM can run, but more of how framebuffer-friendly the system architecture is, yet with some ingenuity and a complete rewrite of the game engine even that is no major obstacle.

(Top image: Neo Geo AES console. Credit: Evan-Amos, Wikimedia)

youtube.com/embed/VJwffCeo4jU?…


hackaday.com/2026/07/14/the-ne…

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

🍿 Costa Concordia Incubo in mare (2026)
🫡 Chiara Messineo
📺 Netflix

⭐⭐

💭 Schettino torni a bordo cazzo!

🔗 imdb.com/title/tt43595399/

Le due stelle non per la realizzazione del documentario, no.

Sono per il magone che ancora accompagna tutti quelli che hanno avuto a che fare con quella nave. Un'altra tragedia causata dalla vanagloria di un umano.

Ho ancora i brividi.

#Film #SerieTV #filmedì #docu

Cybersecurity & cyberwarfare ha ricondiviso questo.

U.S. #Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses
securityaffairs.com/195336/sec…
#securityaffairs #hacking

2026 Frikkin Lasers Challenge: Laser Bandsaw


The media in this post is not displayed to visitors. To view it, please log in.

Can you call it a bandsaw if it has neither band nor saw? [WeldingRod1] does, with his entry in the laser contest — a manually-controlled laser cutter that he’s dubbed a Laser Bandsaw. Some might quibble that it’s not actually sawing with the beam, and others will inevitably find the safety implications rather frightening. We think it’s a fun project and that [WeldingRod1] can call it what he wants, as long as he follows his own advice and keeps his laser goggles firmly on his precious vision orbs.

He has actually put some thought into what started as the physical manifestation of a joke in a podcast. The blue diode laser — a NUBM44 diode rated at 7 W — got a custom-made copper heatsink. It’s also got a hefty beam dump in the form of a stack of box knife blades. That’s very necessary to keep the beam from reflecting where it shouldn’t, especially when you consider this operates like a regular band saw: you turn it on, and it’s ready to cut. With only 7 W of laser power it can’t cut that much, mind you, but apparently it’s great on balsa wood and blasts black paint off like nobody’s business.

Now if this was our shop we’d probably want to put the laser diode onto some kind of CNC platform, be it Cartesian or SCARA. But we’ve seen that done many, many times and if you’ve got the motor skills this might be just the tool for you. There’s a pinout and STLs for the 3D printed frame on the project page if you’re interested. If not, why are you still here? The article is finished. Go make something lase and send it in. The deadline for the 2026 Frikkin Laser Contest is fast approaching!

2026 Hackaday Freaking Lasers Contest


hackaday.com/2026/07/14/2026-f…

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Dipinti trafugati in Italia rientrano nel nostro Paese grazie alle indagini dei Carabinieri TPC e delle Autorità della Romania


Dieci dipinti, rubati il 23 agosto 2024 in un'abitazione di Bassano del Grappa (Vicenza) e trasportati illegalmente in Romania, sono stati rimpatriati in Italia grazie all'azione congiunta dei #Carabinieri per la Tutela del Patrimonio Culturale (#TPC) e delle autorità rumene. Le opere, attribuite a maestri della pittura italiana tra il XV e il XVII secolo, avevano causato un danno economico di oltre 90.000 euro al collezionista proprietario.

Le indagini, coordinate dalla Procura di Vicenza e avviate dalla Sezione Antiquariato dei Carabinieri TPC, hanno beneficiato di una stretta collaborazione giudiziaria con il Tribunale di Costanza (Romania). Sul territorio estero, le operazioni sono state condotte grazie al canale di cooperazione internazionale attivo tra i Carabinieri TPC e il Servizio per la Protezione del Patrimonio Culturale Nazionale della Polizia Romena. Questa sinergia ha permesso non solo di identificare i responsabili del furto, ma anche di garantire il pieno recupero delle dieci preziose opere.

Per celebrare il successo dell'operazione, l'Ispettorato Generale della Polizia rumena, tramite la Direzione Investigativa Criminale, ha organizzato una cerimonia ufficiale di consegna dei dipinti ai rappresentanti del Comando Carabinieri TPC. Alla cerimonia hanno partecipato esponenti dell'Ispettorato Generale della Polizia rumena, della Procura estera, del Comando Carabinieri TPC, dell'Ufficio dell'Addetto agli Affari Interni presso l'Ambasciata d'Italia in Romania e del Museo del Comune di Bucarest.

Le indagini sono state avviate sulla base di informazioni investigative che indicavano la presenza delle opere rubate in Romania. Fondamentale si è rivelata la consultazione tempestiva della "Banca Dati dei Beni Culturali illecitamente sottratti", un sofisticato archivio digitale di esclusiva proprietà dei Carabinieri TPC, utilizzato per la ricerca e il confronto delle immagini delle opere da localizzare. I riscontri investigativi effettuati in Romania hanno confermato l'identità dei dipinti trafugati nel 2024 in Italia.

La cooperazione tra le autorità italiane e rumene è avvenuta attraverso i canali ufficiali di giustizia e polizia, con uno scambio sicuro di informazioni effettuato tramite gli strumenti condivisi di Europol. Il recupero e la restituzione di questi beni culturali dimostrano l'efficacia della collaborazione internazionale nella lotta alla criminalità transfrontaliera legata al traffico illecito di opere d'arte, confermando l'impegno del Comando Carabinieri TPC nella tutela del patrimonio e nel rafforzamento delle partnership internazionali.

@news

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

🚨 nuova rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #DragonForce
🧬 SITAV Società Italiana Treni Alta Velocità S.P.A. | Milano
🎯 settore: H - Trasporti
🔗 sitav.eu
🗓️ 14 luglio 2026

📄 sample: -
▪️ dati esfiltrati dichiarati: 409.80GB
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: 21 luglio 2026

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Trump afferma di aver rinunciato all'idea di un risarcimento del 20% per il passaggio delle navi attraverso lo Stretto di Hormuz, preferendo accordi commerciali e di investimento con i vari Paesi del Golfo

Fibrous Muscles for Humanoid Robotics


The media in this post is not displayed to visitors. To view it, please log in.

At the current rate of robotics development, you might assume that we’re close to Skynet taking over. However, while we likely wouldn’t do well in a physical fight against a robot, we can at least keep the bragging rights of having the cooler actuators. Or at least, that was the case before a new actuator came into town — introducing “Electrofluidic Fiber Muscles”.

Traditional robotic actuators use motors of some kind with a variety of gearboxes or linkages to turn rotational movement into usable movement. This isn’t always the most effective way to run some robotics movements, especially when modeling humans. This is why many have turned to pressurized modes of actuation. Though most don’t show quite the promise of the new player.

Electrofluidic Fiber Muscles use pressure to shorten muscle strands, similar to past actuators. However, these are a tad different, taking advantage of electrofluidic pressure. A small current under high voltage is able to drive a pressure gradient in a long tube. This tube can then be connected to both an extensor and flexor portion of an actuating circuit, similar to a biological mechanical system. Better yet, this driving pressure pump can be spun around the fibers themselves, making a tight package.

Unfortunately, it will probably be a bit till we see this inside a hobbyist robot. Until then, make sure to check out some other actuator feats!

youtube.com/embed/8h4UEZTyres?…


hackaday.com/2026/07/14/fibrou…

Cybersecurity & cyberwarfare ha ricondiviso questo.

NEW: The Iranian government abused well-known flaws in the global telecoms infrastructure — specifically SS7 — to locate U.S. military personnel in the Middle East at the beginning of the war.

techcrunch.com/2026/07/14/iran…

reshared this

in reply to Lorenzo Franceschi-Bicchierai

Back in 2003, the Italian authorities exposed a group of CIA operatives who kidnapped a Muslim cleric off the street. They did this by tracking cell phones in the area, and finding them heading back to the local CIA station.

In 2013, China used similar methods to roll up all CIA case officers (and agents) in the country.

You'd think someone would have learned about cellphone opsec by now...

UDP Broadcasting and the Joys of IPv4 Subnetting


The media in this post is not displayed to visitors. To view it, please log in.

In the previous installment on UDP broadcasting and service discovery, the basics of both were explored, including an implementation in the form of NyanSD and its protocol. Contained in the comment section was a very good demonstration of why one of the most exciting aspects of software development is the opportunity to share your latest creations with other people. This being the ability to get solid feedback on all the points – including any potential boneheaded omissions – that you really should address, whether intentional or accidental.

The most pertinent point raised was definitely that of broadcast addresses and IPv4 subnets, with the latter topic especially being something that the sysadmins at the office would talk about all the time, but which us software developers were always happy to ignore as something that didn’t concern us. Turns out the joke was on me and everyone else – like our esteemed readers – who thought that they could escape the fascinating world of subnets, as today we’ll take an in-depth look at what subnets are and how they are relevant to the world of UDP network discovery.

I somewhat alluded in the first article to the topic of ‘which broadcast address to use’ as being somewhat of a rough topic to figure out, which is clearly why I just stuck to a blatantly ‘works for me’ /24 subnet that usually will work on networks, until it does not.

Subnet And Conquer

Basic subnetting concept. (Credit: Michel Bakni, Wikimedia)Basic subnetting concept. (Credit: Michel Bakni, Wikimedia)
The short version of ‘what is a subnet’ is to point at the subnet mask that we have been mostly mindlessly mashing into networking configuration dialogs along with the IPv4 address for many decades now. Usually this takes the form of 255.255.255.0, which is just the human-readable version of the actual bitmask. Here the loopback interface already tends to use 255.0.0.0 as its netmask, which is a detail that tends to be easy to gloss over as this is just one of those local OS things.

Putting netmasks in the crudest and simplest terms, they are a bitmask that is used to identify how an IPv4 pool of addresses is split up by defining which bits of the 32-bit IPv4 address identify a subnet. Normally we call the trailing part of an IPv4 address (the .123) the host identifier, with the preceding section the network identifier.

By masking part of this host ID and using it to create a subnet identifier, we can then use this for additional routing, just at the cost of a reduced number of possible host IDs within that subnet.

As an example, the common 255.255.255.0 mask identifies the first 24 bits (3 bytes) of the 32-bit (4-byte) IPv4 address, hence the mask being referred to as /24. With this mask, the remaining host ID bits allow for 256 hosts, of which two are not used for hosts: the first (e.g. 192.168.0.0) and last (e.g. 192.168.0.255) in the range. The last host ID in the range forms the broadcast address for that subnet.

This is why, for a /24 subnet, you can generally get away with just slapping a .255 on the end of an interface’s address, but also why for other subnet configurations it’s likely to explode violently.

To get briefly back to the loopback’s /8 style netmask, this means a single subnet with a maximum of 16,777,214 hosts, which ought to be sufficient for local system networking shenanigans. Its opposite extreme would be the /31 style netmask, which with just two potential host IDs is practically useless.

IPv6 subnetting is similar, but due to the much larger address pool and differences in the protocol this is a whole other kettle of fish that is as likely to send a network administrator’s heart racing in excitement as it is to make the average software developer run away screaming. This can be a fun topic for another day, perhaps.

This overview of IPv4 subnetting also skips over details like the different classes of IPv4 subnets beyond the Class A type here, but those are happily left to sysadmins and kin for now.

Sub-casting


In order to thus obtain the broadcast address for a given network interface you need to know two things: the IPv4 address and its associated netmask. From this you can then tell three things: the subnet ID, the broadcast address in that subnet, and the current host ID. Of these we only really care about the the second item.

Although you can obtain the broadcast address yourself by applying the netmask to the address, the OS’s APIs tend to happily give you the precomputed broadcast address. If that’s not your style or not an option, a manual procedure is to:

  1. Determine the number of host ID bits using the netmask.
  2. Set all bits to 1 in these bits to get the highest possible host ID.
  3. Use this value along with the original masked (i.e. network ID) bits to obtain the broadcast address.

If we thus start with a 192.168.0.0/24 network, we end up with 192.168.0.255, while for a 192.168.0.0/26 network with just six bits available the maximum value is 64, ergo we get 192.168.0.63, since we start counting at 0.

With this we can now broadcast UDP packets on any interface without any (major) worries.

Local Broadcast Address


A small glitch in the whole above story is that there’s actually another broadcast address, one which is always the same for each interface and can be considered to make the whole preceding explanation completely irrelevant. This being the local, or limited, broadcast address, which is either the best thing since sliced bread or the worst sin ever committed in the history of IP networking, depending on whom you ask.

This cheat code takes the form of the address 255.255.255.255 and if you send a packet on a UDP socket to it, you’ll get happy UDP responses from any service that is listening on the specified port. This raises the point of why you’d not just use this broadcast address on all interface, rather than bother with all the earlier described nonsense.

The only major difference between this local broadcast address and the earlier described directed broadcast address is that the latter can also used to target a foreign network, instead of just the local network. This makes it a very attractive option if you just want to query the local network with UDP broadcast packets.

As for why you’d not want to use a local broadcast address, I couldn’t really find any references or citations on why this would be the case. Both would appear to be perfectly valid approaches to broadcasting, each with its own pros and cons.

Bugs


One final topic was my mistaken hardcoding of a /24 style broadcast address in NyanSD. Here reader ziew helpfully pointed me towards the Poco::Net::NetworkInterface::broadcastAddress() function, which seemed perfect. Unfortunately Poco’s implementation at least on Windows 10 appears to be rather broken.

After getting only 0.0.0.0 as broadcast address from this function, I had a bit of a look at what was happening, including checking what I got as subnet mask both for the default index parameter and for the next index. Across two different Windows 10 installations and both GCC in MSYS2 as well as MSVC 2017/2022 with various versions of Poco the returned values were… interesting enough to file a bug report on the Poco issue tracker.

Clearly this isn’t going to be fixed just yet, but on the bright side the horrific atrocity that I committed by hardcoding a /24 broadcast address will still work on basically every home LAN out there that NymphCast is likely to be used on.

Maybe I could just switch to a local broadcast address and that’d be even better. Feel free to torch down this idea in the comments, just be sure to provide solid reasoning and cite your sources.

A Complex Topic


Writing out the above pretty much clarifies I think why past me got a bit overwhelmed when trying to ‘just do a UDP broadcast thing’. Even just scratching the surface of IPv4 subnets and not even venturing into IPv6 territory makes one already feel a bit antsy.

Certainly, one could totally argue that anything other than a /24 network is unlikely to be encountered outside of certain government and business networks with either very specific needs, very enthusiastic sysadmins, or both, but it’s always better to design software with such real-life scenarios in mind.


hackaday.com/2026/07/14/udp-br…

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

La Russia alle prese con la sovranità tecnologica robotica. L’80% dei robot sono di produzione estera

📌 Link all'articolo : redhotcyber.com/post/la-russia…

A cura di Chiara Nardini

#redhotcyber #news #roboticaindustriale #importazionerussia #aziendecinesi #russia #technologia

Cybersecurity & cyberwarfare ha ricondiviso questo.

YouTube blocca un video critico per il controllo della chat nell'UE

Un episodio di un podcast finlandese che aveva osato affrontare le preoccupazioni relative alla sorveglianza di massa delle conversazioni online dei cittadini dell'UE è stato rimosso dal colosso tecnologico per gli utenti residenti nell'Unione Europea.

europeanconservative.com/artic…

@privacypride

in reply to Luca Sironi

@luca @kenobit @mario @_elena @simone @DigiDavidex Grazie non lo sapevo. In definitiva mi pare di poter dire che PT soffra più o meno degli stessi problemi di altre piattaforme del fediverso: i limiti di spazio e banda sui server, la continuità di servizio. Beh, c'è ancora spazio per miglioramenti credo.
in reply to Luca Sironi

Vero. Per questo sto pensamdo di andare su peertube.uno: per avere un backup e un posto libero dove pubblicare (che è tantissimo eh), ma forse fare da backup non dovrebbe essere l'aspirazione principale di peertube.

@kenobit @mario @_elena @gazzettadelcadavere @DigiDavidex @informapirata @privacypride

informapirata ⁂ reshared this.

Cybersecurity & cyberwarfare ha ricondiviso questo.

Setting up Gerrit on exe.dev with X-ExeDev-Email auth took 60s!

However, that doesn't make git work. I hacked together a little proxy that does a tiny amount of OAuth2, exchanging exe.dev auth in the browser for a token that works with git-credential-oauth.

github.com/filippo-claude/gerr…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Contos #7 – Balla Sardigna, quando la tradizione sarda parla ai giovani

Al festival Sciampitta 2026 di Quartu Sant’Elena, un gruppo di giovani musicisti ha dimostrato che il folk sardo può ancora emozionare — e conquistare nuove generazioni. C’è un momento, durante ogni edizione di Sciampitta, in cui il palco di piazza Mercato smette di essere solo un palco e diventa una macchina sucontu.wordpress.com/2026/07/…

#7

Open Book Touch Makes Crowd Funding Debut


The media in this post is not displayed to visitors. To view it, please log in.

If you have even the slightest interest in open hardware e-readers, you’ve certainly heard of [Joey Castillo]’s Open Book project. We’ve covered his efforts to develop an affordable reader that delivers a Kindle-like experience without the Orwellian megacorp trappings for several years now, and watched with great interest as the core hardware has evolved.

So we were particularly excited over the weekend to see the Open Book Touch finally hit Crowd Supply, and judging by the fact that the campaign for the $149 device has already blown past 60% of its funding goal in just a few days, it seems like we weren’t the only ones.

As the name implies, this latest iteration of the e-reader does away with physical navigation buttons and introduces an intuitive touch-based interface. Those who like to enjoy their open source hardware under the covers will be glad to hear that not only does this new version of the Open Book finally include an illuminated display, but it even allows you to adjust the color temperature and brightness of the LEDs with the swipe of a finger.

While the hardware improvements over the previous Open Book are impressive, the software has really come a long way as well. The user interface lets you organize your books on virtual shelves and browse through their covers, providing the sort of slick experience that you’d expect from a modern e-reader. You can also look up the definitions of words, or dog-ear favorite pages so you can return to them later.

But what you won’t get is locked down with DRM — the Open Book Touch uses standard EPUB and TXT files loaded from a micro SD card, and thanks to the WiFi-enabled ESP32 at its heart, it offers up a web interface that lets you manage your collection over the network.

It’s been nearly a decade since the Open Book first graced our pages, and though we’re not in the habit of picking favorites here at Hackaday, this is one project where the stakes are so high that we can’t help but feel invested. Reading shouldn’t require a subscription fee, or depend on a proprietary piece of hardware that can get ejected from its own ecosystem once its maker decides you need a new one. Obviously the Open Book Touch won’t even make a dent in the market share that Amazon’s Kindle enjoys, at least there will be an option available for those who wish to keep reading on their own terms.

youtube.com/embed/Q9Q-Lu43DOc?…


hackaday.com/2026/07/14/open-b…

Cybersecurity & cyberwarfare ha ricondiviso questo.

L’UE ha in mente ben più di un blocco dei social per i minori. Ed è un’impresa titanica

C’è da studiare le 156 pagine del report sulla sicurezza dei bambini online che un gruppo di 67 esperti tra pediatri, psicologi, sociologi, ma anche associazioni, esperti di diritti e portavoce delle consulte giovanili dei 27 Stati europei ha elaborato in quattro mesi.

mediatrends.it/lue-ha-in-mente…

@informatica

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

⚠️ Lidl notifies customers after online shop breach

#Lidl warned online shop customers in Germany, Belgium and the Netherlands after a third-party service provider exposed personal data.

🔗 read more: securityaffairs.com/195270/data-...

#ransomNews #cybersecurity

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

#nerdystuff in pausa pranzo

#SecretFlixCodes sblocca 331 categorie nascoste di Netflix con codici numerici: basta un URL per uscire dall'algoritmo e finire dritti su "Cult & B-Movies".
Vecchio trucco, ancora perfettamente funzionante 🍿

🍿 secretflixcodes.com

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

Attacker Used #AI to Build Custom PowerShell Recon #Malware
securityaffairs.com/195321/hac…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

L’Europa ha sete di sovranità tecnologica: chip, cloud e AI per non dipendere più da USA e Asia

📌 Link all'articolo : redhotcyber.com/post/leuropa-h…

A cura di Carolina Vivianti

#redhotcyber #news #sovranitàtechnologica #ue #finanzamenti #progettiindustriali

Cybersecurity & cyberwarfare ha ricondiviso questo.

#Malware Hits #Japan's Largest #Taxi Company #Nihon #Kotsu, Services Temporarily Suspended
securityaffairs.com/195305/cyb…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Monitoraggio server Linux: le 10 metriche che contano davvero (e quelle che ingannano)
#tech
spcnet.it/monitoraggio-server-…
@informatica


Monitoraggio server Linux: le 10 metriche che contano davvero (e quelle che ingannano)


Un server Linux quasi sempre avvisa prima di guastarsi. Il problema è che la maggior parte dei sistemisti guarda i numeri sbagliati: il carico della CPU invece dell’iowait, la percentuale di RAM occupata invece dello swap attivo, lo spazio disco invece degli inode liberi. Il risultato è che i segnali d’allarme restano invisibili finché non si trasformano in un incidente in produzione.

Vediamo dieci metriche che vale davvero la pena monitorare su un’infrastruttura Linux, con i comandi per raccoglierle, le soglie di riferimento e — soprattutto — come metterle in relazione tra loro invece di guardarle isolate.

1. CPU: l’iowait conta più dell’utilizzo grezzo


La percentuale di utilizzo CPU complessiva è un punto di partenza, ma il segnale utile è nell’%iowait: indica quanto tempo le CPU passano ferme in attesa di I/O su disco invece di eseguire codice applicativo. Un server all’90% di CPU è occupato; un server al 40% di iowait è in sofferenza, anche se il carico “totale” sembra alto allo stesso modo.

mpstat -P ALL 1 5

Un iowait sostenuto sopra il 20-30% giustifica un’indagine sullo storage con iostat -xz 1 (vedi punto 5).

2. Load average rapportato ai core disponibili


Il load average è tra le metriche più fraintese in assoluto: un valore di 8.0 non significa nulla senza sapere quanti core ha la macchina. La regola empirica è che un load sostenuto sopra 1.0 per core indica una possibile saturazione, anche se il collo di bottiglia potrebbe essere CPU, I/O su disco o un altro sottosistema.

cat /proc/loadavg
nproc

Le tre medie (1, 5, 15 minuti) vanno lette come trend: se il valore a 15 minuti cresce costantemente, c’è qualcosa che si sta accumulando — un processo runaway, un thread leak, un collo di bottiglia I/O.

3. Memoria: non temere l’uso, temi lo swap attivo


Linux usa la RAM libera come page cache, quindi un server che mostra il 95% di memoria occupata non è necessariamente in difficoltà, se gran parte è cache riutilizzabile. Quello che conta davvero è quanta memoria è effettivamente disponibile e se il sistema sta attivamente paginando su swap.

free -h
grep -E "MemAvailable|SwapTotal|SwapFree" /proc/meminfo
vmstat 1 5

Un po’ di swap usato non è di per sé un problema: con un vm.swappiness ben tarato, il kernel può spostare pagine “fredde” su swap in modo proattivo senza impatti percepibili. Il segnale d’allarme reale sono le colonne si (swap-in) e so (swap-out) di vmstat: valori sostenuti e diversi da zero, o uno swap che cresce sotto carico, indicano pressione di memoria che degraderà le prestazioni.

4. Spazio disco e utilizzo degli inode


Finire lo spazio disco è evidente. Finire gli inode è il killer silenzioso che manda in crisi anche i sistemisti più esperti: si possono avere gigabyte liberi e non riuscire comunque a creare un nuovo file se gli inode sono esauriti.

df -h   # spazio disco
df -i   # utilizzo inode

L’esaurimento degli inode capita tipicamente in directory con milioni di file piccoli — code di mail, session store, directory temporanee. Impostate soglie di allerta all’80% sia per lo spazio sia per gli inode, non solo per lo spazio.

5. Latenza e throughput I/O del disco


Il throughput dice quanti dati si muovono; la latenza dice quanto tempo impiega ogni singola operazione. Un disco che serve scritture sequenziali può avere un throughput ottimo e al contempo una latenza pessima su letture casuali — esattamente il pattern che uccide le prestazioni di un database.

iostat -xz 1

Le colonne chiave da osservare sono await (tempo medio in ms per servire una richiesta I/O), %util (percentuale di tempo in cui il device è occupato) e r/s/w/s (operazioni al secondo). Un await sopra 20ms per HDD, o sopra 1-2ms per workload sensibili alla latenza su SSD, merita un’indagine. Su HDD e SATA SSD un %util vicino al 100% indica saturazione; sugli NVMe questo indicatore è meno affidabile per via dell’architettura multi-queue, quindi in quel caso conviene fidarsi soprattutto dell’await.

6. Traffico di rete e tassi di errore


La banda utilizzata è la base. Quello che le dashboard spesso non mostrano sono i pacchetti persi, gli errori e le ritrasmissioni, che possono segnalare problemi alla scheda di rete, allo switch o una rete sotto flooding.

ip -s link show eth0
ss -s
netstat -s | grep -E "retransmit|error|drop"

Un contatore di errori sulla NIC che cresce nel tempo indica quasi sempre un problema hardware o di cablaggio. Un tasso di ritrasmissione TCP sopra l’1-2% segnala spesso congestione, perdita di pacchetti o altri problemi di connettività che stanno già impattando le applicazioni.

7. File descriptor aperti


Ogni file, socket e pipe aperti consuma un file descriptor. Applicazioni sotto carico — web server, database, sistemi di messaggistica — possono esaurire il limite per processo o quello di sistema e iniziare a restituire errori “too many open files” che si propagano a cascata.

# Uso corrente a livello di sistema
cat /proc/sys/fs/file-nr
# Massimo di sistema
cat /proc/sys/fs/file-max
# Per processo
ls /proc/<PID>/fd | wc -l
cat /proc/<PID>/limits | grep "open files"

Se l’utilizzo corrente supera stabilmente il 70-80% del massimo di sistema, è il momento di indagare. Se un processo specifico si avvicina al proprio ulimit, o ha un leak di descriptor (bug da correggere) oppure ha semplicemente bisogno di un limite più alto (tuning). Per capire quale processo trattiene quali file, lsof è lo strumento di riferimento.

8. Conteggio di processi e thread


Picchi improvvisi nel numero di processi possono indicare fork bomb, cron job impazziti o thread pool applicativi mal configurati. Su applicazioni fortemente multithread, una crescita illimitata del numero di thread è un classico sintomo di bug di concorrenza.

ps aux | wc -l
cat /proc/sys/kernel/threads-max
top -H -p <PID>   # thread di un processo specifico

Conoscere la propria baseline è essenziale: se un web server gira normalmente con 50 worker e improvvisamente se ne vedono 500, qualcosa nella configurazione del servizio o dell’applicazione non va.

9. Salute hardware: temperatura e SMART


È la metrica che più spesso manca negli stack di monitoraggio software, ed è un errore: le CPU riducono le prestazioni (thermal throttling) prima di spegnersi, quindi si osserva un degrado misterioso delle performance ben prima che compaia un errore esplicito.

# Richiede lm-sensors
sensors
# Stato dischi
smartctl -a /dev/sda
# IPMI su bare metal
ipmitool sdr type Temperature

Su macchine virtuali questi dati possono essere nascosti al guest OS; su server bare metal, temperatura e dati SMART/NVMe rappresentano un livello di preallarme che nessuna metrica software può sostituire. Temperature CPU stabilmente sopra 80°C, o dischi che riportano settori riallocati o errori non correggibili nei dati SMART/NVMe, richiedono intervento immediato.

10. Tasso di errore nei log di sistema


Le metriche dicono come sono i numeri; i log dicono perché. Tracciare il tasso di voci ERROR e CRITICAL nel tempo, invece di leggere i log riga per riga, offre un segnale d’allarme precoce prima che il problema diventi un’interruzione di servizio.

# systemd
journalctl -p err --since "1 hour ago"
journalctl -p err --since "1 hour ago" | wc -l

# syslog classico
grep -iEc "error|critical" /var/log/syslog

Un improvviso aumento del tasso di errore nei log, anche se il sistema sembra funzionare normalmente, spesso precede un guasto di minuti o ore. Anche qui, definire una baseline dei tassi di errore “normali” rende evidenti le anomalie.

Mettere insieme i pezzi: le baseline battono le soglie fisse


Soglie statiche (ad esempio: allerta se la CPU supera l’80%) sono un buon punto di partenza, ma restano strumenti grezzi. La pratica più efficace di monitoraggio Linux è costruire baseline specifiche per il proprio carico di lavoro e allertare sulla deviazione dalla norma, non solo sui valori assoluti.

  • Correlate le metriche, non guardatele a compartimenti stagni: CPU alta combinata con iowait elevato e await del disco in crescita racconta una storia molto più chiara di ciascuna metrica da sola.
  • Allertate sui trend, non sugli scatti isolati: un load average in crescita costante nell’arco di 15 minuti è più utile di un singolo picco.
  • Tenete d’occhio il gap del monitoraggio: il tempo che passa tra il superamento di una soglia e l’intervento umano è dove gli incidenti crescono. Automatizzate tutto ciò che potete, ad esempio con Prometheus + node_exporter + Alertmanager per la raccolta e la notifica, o con Grafana per la visualizzazione delle baseline nel tempo.

Su una manciata di server, eseguire questi controlli manualmente da riga di comando funziona bene. Quando l’infrastruttura cresce a decine o centinaia di macchine, diventa poco pratico farlo a mano: è il momento di investire in una piattaforma di observability centralizzata che aggreghi queste metriche, applichi soglie dinamiche e correli gli eventi tra sistemi diversi.

Gli strumenti cambiano nel tempo — oggi iostat e vmstat, domani forse eBPF-based tooling come bpftrace — ma i fondamentali restano gli stessi: sapere cosa guardare, in che relazione, e con quale baseline confrontarlo.

Fonte: LinuxBlog.io


L’AI inventa un nuovo ransomware nel browser: il rischio vero è che riduce la soglia tecnica


@Informatica (Italy e non Italy)
La tipica allucinazione generativa, a una prima occhiata, si è invece trasformata in un'AI in grado di generare ransomware nel browser, collegando il rischio ipotetico dei browser a una tecnica di cifratura, classica da

The Seemingly Impossible Oscillator


The media in this post is not displayed to visitors. To view it, please log in.

Back in the days when an integrated circuit meant a simple but expensive device such as a 741 or a 555, most electronics enthusiasts made do with discrete transistor circuits. The common emitter amplifier and its variants are the most familiar, but the humble 3-legged device can do so much more. A particularly obtuse circuit is the subject of examination by [lcamtuf], the reverse avalanche oscillator. A 2N2222, a capacitor, an LED, and a resistor, the transistor is the wrong way round, and there’s nothing on its base. Yet the LED flashes, what on earth is up!

The answer lies in avalanche breakdown, the behavior of a reverse biased diode junction as the voltage across it increases. Eventually the electric field reaches the point at which an avalanche of electrons crosses the depletion layer, and the junction conducts. When connected across an RC circuit, the voltage in the capacitor slowly rises to the point at which avalanche breakdown occurs, and the capacitor abruptly discharges. As the voltage falls the avalanche conduction stops, and the cycle repeats itself. It’s a relaxation oscillator.

We’re treated to an explanation of why a transistor behaves this way and why a simple diode doesn’t, due to a “hump” in its I/V curve, and why the emitter-base junction has a lower breakdown voltage than the collector-base. It’s one of those circuits which looks as though it shouldn’t work, but never fails to oscillate.

Want to know more about transistors? Do we have the series for you!


hackaday.com/2026/07/14/the-se…

Cybersecurity & cyberwarfare ha ricondiviso questo.

☕ CYBERBRIEFING — Martedì 14 luglio 2026

👉 Leggi tutti gli aggiornamenti delle ultime 24 ore:
ilpuntocyber.rfeed.it/article.…

#newsletter #cybersecurity
@informatica

Cybersecurity & cyberwarfare ha ricondiviso questo.

#CrashStealer: New #macOS Infostealer Uses Signed Apps to Evade #Gatekeeper
securityaffairs.com/195278/mal…
#securityaffairs #hacking #malware
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

⚠️ Telegram t.me domain placed on ServerHold

The t.me domain briefly entered ServerHold status, raising concerns over Telegram link availability before normal service resumed.

🔗 read more: securityonline.info/telegram-tme...

#ransomNews #cybersecurity

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

Ma il cliente non aveva sempre ragione?
In questa ottica #Lidl, reduce da un #databreach in tre paesi europei, non pare aderire ai propri principi.

Ora, immaginiamo che questo cliente, non voglia lasciar perdere e porti avanti la sua campagna, che cosa pensate che succederà?

Un cosa enorme.

Christian ne parla qui: garantepiracy.it/blog/lidl/

Cybersecurity & cyberwarfare ha ricondiviso questo.

🚨 UPDATE rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #PayoutsKing
🧬 Casta Diva Group S.P.A. | Milano
🎯 settore: J - Editoria/Media
🔗 castadivagroup.com
🗓️ 13 luglio 2026

📄 sample: sì
▪️ dati esfiltrati dichiarati: 2.000GB
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: 20 luglio 2026

#ransomNews

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

370 – HANNO NASCOSTO UN COMANDO PER L’AI DENTRO UN ATTO DI TRIBUNALE camisanicalzolari.it/370-hanno…

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

E’ crisi di fiducia sulle AI Cloud! Grok Build caricava interi repository senza il consenso

📌 Link all'articolo : redhotcyber.com/post/e-crisi-d…

A cura di Luigi Zullo

#redhotcyber #news #spacexai #grokbuild #datipersonali #privacysorveglianza #intelligenzaartificiale