A Milano - Scuola in Podcast - per scoprire i 51 podcast scolastici del premio nazionale Assipod e portare le tue domande sul podcasting, ascolta su: caffe20.it/play/play.php?num=3…
#podcast da Caffe20.it
#podcast da Caffe20.it
Un recente studio suggerisce che le turbolenze del mercato del lavoro a cui abbiamo assistito siano cominciate prima della diffusione di ChatGPT e della GenAI. Non è ancora referato: potrebbe contenere errori o avere limiti di validità, ma lo cito perché il volume di affermazioni apodittiche sull’effetto dell’intelligenza artificiale sul mercato del lavoro raggiunge ogni giorno livelli sempre più insopportabili. I dati che emergono, da confermare, tendono a smorzare o a confutare le affermazioni più allarmistiche o apocalittiche (come quelle sull’impatto sui giovani di cui discutevo qualche giorno fa)
Il post di @Alfonso Fuggetta
abassavoce.it/p/ai-e-mercato-d…
Quando si vuole usare AI per spiegare tutto
Un articolo LSE sul calo di assunzioni junior mostra che il riflesso “è l’AI” copre quasi sempre cause più prosaiche. Troppe volte viviamo di questi riflessi che rischiano di portarci fuori strada.Alfonso Fuggetta (A bassa voce)
reshared this
As of 2026, the world population is approximately 8.3 billionThe global dog population is estimated to be 700–900 million
That's a bullshit ratio.
reshared this
So tired of blacking out every full moon when I really want to stay up and help the townsfolk hunt for the werewolf
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
@xinicit
The media in this post is not displayed to visitors. To view it, please go to the original post.
-Russia greatly expands SORM surveillance requirements
-NIST is looking for new PQC algorithms
-ENSOC launches in Europe
-New PAN firewall bug exploited in the wild
-Gravity Bridge hacked for $5.4m
-DxSale hacked for $7.3m
-PostHog security breach
-Prison calling service leaks sensitive data
-California sues 23andMe over breach
-Composer will scan for malicious PHP packages
-Zig bans AI-generated code
-More AI layoffs
Newsletter: news.risky.biz/risky-bulletin-…
Podcast: risky.biz/RBNEWS571/
Russia greatly expands SORM surveillance requirements
In other news: NIST is looking for new PQC algorithms; ENSOC launches in Europe; new PAN firewall bug exploited in the wild.Catalin Cimpanu (Risky.Biz)
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
-Social media moderation is failing
-CNIL had a productive year
-PQC comes to Chrome 150
-Last[.]fm is now an independent company again
-Wikipedia is union-busting
-EU squeezes out US space tech
-China to issue IDs to humanoid robots
-More US Cyber Force movement
-US Tech Force fails to hire staff
-Japan to establish a national intelligence agency
-Member of 764 group charged
Catalin Cimpanu reshared this.
The media in this post is not displayed to visitors. To view it, please go to the original post.
-New DriveSurge group
-Infrastructure Destruction Squad fakes hacktivism to sell malware
-New ChatGPT abuse technique
-New MicrosoftSystem64 RAT
-New WordPress malware
-Mullvad patches fingerprinting vector
-Oracle releases first monthly updates
-More Nightmare Eclipse bugs coming
-Canon fixes printer export bug
-New CIFSwitch LPE
Having a particularly hard time today with the simultaneous death of the climate, software development and the rule of law. And especially cheesed off with the people riding these waves for profit.
reshared this
US healthcare still stupidly expensive, with pathetic outcomes, study finds
L: arstechnica.com/health/2026/05…
C: news.ycombinator.com/item?id=4…
posted on 2026.05.31 at 16:41:10 (c=3, p=7)
L: arstechnica.com/health/2026/05…
C: news.ycombinator.com/item?id=4…
posted on 2026.05.31 at 16:41:10 (c=3, p=7)
US healthcare still stupidly expensive, with pathetic outcomes, study finds
There are strategies to improve healthcare, but US isn't trying them.Beth Mole (Ars Technica)
reshared this
Japanese lawmakers have passed a law to establish a national intelligence agency.
While several intelligence bureaus exist under several ministries, Japan has operated without a central intelligence agency since 1952
reshared this
The Composer PHP package manager will scan all new libraries for malware to avoid future supply chain attacks: blog.packagist.com/composer-2-…
Packagist also intends to enable MFA by default for all Composer packages in the near future: blog.packagist.com/an-update-o…
An Update on Composer & Packagist Supply Chain Security
The last months, and even more so the last weeks, saw an increasing amount of software supply chain attacks targeting open-source ecosystems.Nils Adermann (Private Packagist)
reshared this
Canon has released firmware updates for more than 200 enterprise printer models to fix a bug that let you dump configs with plaintext domain/network passwords
praetorian.com/blog/canon-prin…
When Encryption Isn't Really Encryption
One printer, default creds, full domain compromise. Canon's config export enforces encryption client-side. CVE-2026-1789 hits 200+ models.Michelle Rhodes (Praetorian)
reshared this
Russia's FSTEC military technical agency has published a guide to help local companies mitigate DDoS attacks
fstec.ru/dokumenty/vse-dokumen…
Рекомендации по повышению защищенности информационной инфраструктуры от угроз безопасности информации, связанных с атаками типа "отказ в обслуживании" - ФСТЭК России
Федеральная служба по техническому и экспортному контролюФСТЭК России
reshared this
Uff, their TLS cert is invalid and I get a ".bin" file when I download their PDF. Thank god I trust them, otherwise, I might have been nervous opening their PDF...
Tech Force set out to hire 1,000 technologists last year — it’s onboarded 10 so far
😂
nextgov.com/people/2026/05/tec…
Tech Force set out to hire 1,000 technologists last year — it’s onboarded 10 so far
The effort is meant to infuse the government with young engineers, cyber and data workers. It follows the loss of almost 20,000 technology workers through the Trump administration’s efforts to downsize the workforce last year.Natalie Alms (Nextgov.com)
reshared this
The Zig programming language has updated its code of conduct to ban LLM-generated code, vulnerability research, text-generation, and about anything AI at all
businessinsider.com/zig-progra…
Zig president says AI coding contributions are 'invariably garbage,' so he banned them
Zig, an open-source programming language bans contributors from using AI. Its president said that the these submissions have "no value whatsoever."Henry Chandonnet (Business Insider)
gmc likes this.
reshared this
This got me curious, so I looked at GCC and clang. GCC is still working on it:
gcc.gnu.org/wiki/working-group…
LLVM allows slop, which disappointed me, even if they include language which suggests that the contributor should be accountable for the code:
llvm.org/docs/AIToolPolicy.htm…
I wonder how the complete lack of clarity around slop contributions is acceptable to the projects.
France's privacy watchdog issued and collected €487 million from 83 fines last year
Most came from just two fines, against Google (€325m) and Shein (€150m), which accounted for 97% of the collected funds
cnil.fr/fr/rapport-annuel-2025
Rapport annuel : le bilan et les actions marquantes de la CNIL en 2025
Chaque année, la CNIL publie son rapport d'activité pour faire le point sur ses actions autour de ses quatre grandes missions : informer et protéger le grand public, accompagner et conseiller les professionnels et les pouvoirs publics, anticiper et i…www.cnil.fr
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
PostHog says it's currently experiencing a security incident. The analytics company said it's "rotating keys after a security research team was able to confirm an exploit in one of our AWS environments," referring to Amazon Web Services.
Incident page: posthogstatus.com/incidents/01…
reshared this
Some infosec conference talks
SANS AI Cybersecurity Summit 2026 videos: youtube.com/playlist?list=PLtg…
SISAP 2026 videos: youtube.com/playlist?list=PLfj…
RWC 2026 videos: youtube.com/playlist?list=PLee…
RWC 2026
RWC 2026 took place in Taipei, Taiwan on March 9-11, 2026. See https://rwc.iacr.org/2026 for more information about the conference, including links to slides.IACR (YouTube)
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
There's open-source traffic distribution systems now? Ha?!?
silentpush.com/blog/drivesurge…
Meet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites
Silent Push observed several drive-by attack clusters using ClickFix and FakeUpdates campaigns. We named the primary driver DriveSurge.Peggy Kelly (Silent Push)
reshared this
The Chinese government will assign unique digital IDs to humanoid-shaped robots.
The IDs will be assigned through a new website named the Humanoid Full Lifecycle Management Service Platform.
The IDs will be used to track robots from production to sale and recycling
scmp.com/tech/policy/article/3…
Every humanoid robot in China set to receive personal identification number
The national initiative will give every bipedal humanoid a unique code, like a national ID but for robots.Ben Jiang (South China Morning Post)
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
robots will form gangs #gang of four
Questa voce è stata modificata (1 giorno fa)
There's another branded Linux LPE bug, this one named CIFSwitch
This was also found with AI, but it's not universal as it only affects a handful of distros and under certain conditions.
Unlike all the other Linux LPEs, this one received a patch ahead of release
CIFSwitch: a non-universal Linux local root vulnerability
Harnessing LLMs into composing complex, multihop vulnerability chainsAsim Viladi Oglu Manizada (Hey, it's Asim)
reshared this
NIST is looking for a new round of PQC algorithms in case the first 3 selected ones get cracked and to provide better performance alternatives
csrc.nist.gov/Projects/pqc-dig…
Post-Quantum Cryptography: Additional Digital Signature Schemes | CSRC
Official comments on the Third Round Candidates should be submitted using the 'Submit Comment' link for the appropriate algorithm. Comments from the pqc-forum Google group subscribers will also be forwarded to the pqc-forum Google group list.csrc.nist.gov
reshared this
A Drake and JayZ beef is exactly what I needed on this boring Sunday
reshared this
CommsRisk shuts down 😑
reshared this
The Linux Foundation launched DNS-AID, a new open-source project to enable AI agents to use the DNS infrastructure to discover and talk to each other
reshared this
uuuuuh ... it's not like things don't already go wrong with DNS during the best of days.
interesting, I wonder how many people actually read this before going "OMG, this is the end of DNS".
Oracle's first monthly security updates are out
Company recently switched from a quarterly to a monthly update scheme
reshared this
Cybersecurity agencies from eight EU countries have launched a shared Security Operations Center (named ENSOC)
linkedin.com/feed/update/urn:l…
#ensoc #cybersecurity #socs #digitalecosystem #digitaleurope #innovation #collaboration #efficiency #cybersecuritynetwork #eccc | ENSOC
🌐 The official ENSOC website is now live 🔗 To see all future longform materials, ongoing progress, and news about our project, make sure to visit the official ENSOC website through the following link: ensoc.ENSOC (LinkedIn)
reshared this
The amount of fuckery going on when you put something online is absolutely mindboggling to me.
Internet, truly, is a rather hostile place.
reshared this
So... they're gonna tank their whole economy?
Ha?
Questa voce è stata modificata (1 giorno fa)
reshared this
Well, aren't they already doing a pretty good job of flushing the economy down a gold-plated toilet?
oh tourism is so strong, visitors flooding the US.
Something must be done to prevent tourists from entering the US. /s
Or did I get it wrong?
Something must be done to prevent tourists from entering the US. /s
Or did I get it wrong?
One reason that Microsoft might be issuing such harshly worded language here to describe the researcher may be that, according to Nightmare Eclipse, they until recently worked as a security researcher at Microsoft.
Scroll back far enough through their Xitter account (to June 2020) and you will see they claimed CVE-2019-1385 was theirs.
On July 1, 2021, Nightmare Eclipse complained that Microsoft failed to fix one of the weaknesses they reported in CVE-2021-24084. Microsoft credits both of these flaws to the same researcher, whose LinkedIn account says they are in Germany and worked full time at Microsoft from Sept. 2022 to June 2025.
For the record, I think @GossiTheDog called it that this person was a former MS employee.
x.com/ChaoticEclipse0/with_rep…
After a security researcher published a series of unpatched bugs in Microsoft products, along with code to exploit them,
the company is now threatening to take legal action and call the cops on them.Microsoft’s threat reignites a long-running argument over what responsibility, if any, security researchers have to disclose vulnerabilities affecting large and wealthy tech giants.
On Wednesday, Microsoft published a blog post criticizing the researcher, who goes by the handle
“Nightmare Eclipse,”
for publicly disclosing a series of bugs, including BlueHammer, RedSun, UnDefend, and YellowKey.The flaws affected products such as the Windows built-in antivirus engine Defender and the disk-encryption tool BitLocker.
Katie Moussouris warned that the consequences of security researchers losing trust with Microsoft could result in a chilling effect of fewer people coming forward to report bugs,
“making it less safe for all of us.”Security researcher and former Microsoft employee Kevin Beaumont also called out Microsoft in a blog post,
describing the company’s position a “dumpster fire of its own making.”“Proof of concept exploit creation and distribution for zero days is ‘criminal activity’ now?”
wrote Beaumont.“Responsible disclosure quite often is framed to protect the product owner, not the customer
— using it to try to criminally prosecute people is a new low.”
techcrunch.com/2026/05/29/micr…Microsoft under fire for threatening security researcher with criminal investigation | TechCrunch
A public spat between Microsoft and an independent security researcher reopens a long-running debate over who is responsible for securing software.Lorenzo Franceschi-Bicchierai (TechCrunch)
reshared this
Going after the hacker who found the security hole sounds like oh such a wonderful way to secure their own code.
:/
This person has been a prolific bug finder for quite some time. Here's their public HackerOne profile: hackerone.com/halove23/hacktiv…
Reading their Xitter timeline over the years is pretty interesting. They went from working w/ a lot of these bug bounty programs and giving MS time to fix stuff beyond the usual 90-day window to increasing frustration in dealing w/ vendors. I wish that were less of a common experience than it still is today, but some dynamics in this industry never seem to change.
Also just noticed something interesting. Back in 2019, MS was including hyperlinks to researchers in their advisories. In this advisory, they actually link to the researcher's shitposting Facebook profile, which has posts up until this month.
Questa voce è stata modificata (1 giorno fa)
That's me preparing the newsletter
reshared this
Corporate America Is Starting to Ration AI as Cost Skyrockets
L: wsj.com/tech/ai/corporate-amer…
C: news.ycombinator.com/item?id=4…
posted on 2026.05.30 at 08:17:33 (c=1, p=5)
L: wsj.com/tech/ai/corporate-amer…
C: news.ycombinator.com/item?id=4…
posted on 2026.05.30 at 08:17:33 (c=1, p=5)
reshared this
This Week in Package Management: 30 May 2026
nesbitt.io/2026/05/30/this-wee…
This Week in Package Management: 30 May 2026
Releases, advisories, and articles from across the package management worldAndrew Nesbitt
reshared this
Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity doublepulsar.com/microsofts-st…
reshared this
SentinelOne's stock closes down 8% after the company announced plans to lay off 8% of its workforce and forecasted Q2 and FY revenue guidance below estimates (Samantha Subin/CNBC)
cnbc.com/2026/05/29/sentinelon…
techmeme.com/260529/p31#a26052…
SentinelOne stock drops 8% as cyber firm trims headcount to boost AI investments
SentinelOne reported earnings after the bell Thursday and issued lackluster guidance for the current quarter and full-year.Samantha Subin (CNBC)
reshared this
So, why? I mean all the other companies got boosts? Does this imply that a sec company laying off, to the investors who understand the product, know that less people makes it probably less functional?
Power bills more than 250 per cent higher near data centres
L: theglobeandmail.com/investing/…
C: news.ycombinator.com/item?id=4…
posted on 2026.05.26 at 23:26:25 (c=0, p=5)
L: theglobeandmail.com/investing/…
C: news.ycombinator.com/item?id=4…
posted on 2026.05.26 at 23:26:25 (c=0, p=5)
Market Factors: Power bills more than 250 per cent higher near data centres
Plus, a concern about the Anthropic and OpenAI IPOs expected later this yearScott Barlow (The Globe and Mail)
reshared this
Wikipedia went from "do not cite" to "the last trustworthy source on the internet" in the past 25 years and now it looks like they want to throw it all away because they want to break a union.
The largest community driven project in the world, relying directly on volunteers, and they still do not see the value of their own people.
I hate capitalism
Big Tech’s Anti-Labor Playbook Has Come for Wikipedia | by Jake Orlowitz | May, 2026 | Medium
medium.com/@jakeorlowitz/wikip…
Questa voce è stata modificata (5 giorni fa)
reshared this
This is similar to what is happening to Mozilla.
What we should learn from it, is that lawyers, finance and corporate people should always be kept in consulting roles only, but never be left near the helm.
The media in this post is not displayed to visitors. To view it, please go to the original post.
-Dutch police take down giant botnet of 17 million devices
-US military staff tracked with adtech location data
-Google engineer arrested for Polymarket bets
-Unpatched bugs in Gogs, Casdoor IAM
-SuperFortune hacked for $15m
-VentraIP hit by DDoS attack
-UK Visa Portal leak
-Amadeus gets massive GDPR fine
-EU fines Temu
-IBM announces Project Lightwell
-C# improves memory safety
-Sextortionist gets 33 years
Podcast: risky.biz/RBNEWS570/
Newsletter: news.risky.biz/risky-bulletin-…
Dutch police take down giant botnet of 17 million devices
In other news: US military staff tracked with adtech location data; Google engineer arrested for Polymarket bets; unpatched bugs in Gogs and Casdoor IAM.Catalin Cimpanu (Risky.Biz)
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
-CISA tells agencies to fix supply chain attack vectors
-Apple and Google demand Bill C-22 changes
-Fraudster gets 10 years
-Romanian IAB sentenced
-VenomRAT author extradited to France
-UK citizens lose £102 million to scams
-npm abused for adware campaigns
-Global smishing operation hits 19 countries
-BlackToad and JINX-0164 profiles
-New RatPressto phishing kit
-New SuperProxy botnet
The media in this post is not displayed to visitors. To view it, please go to the original post.
-New SolyxImmortal and EKZ infostealers
-A look at ASA's GRAT wiper
-GREYVIBE targets Ukraine
-New SymJack attack
-New Zapocalypse vulnerabilities
-New FROST fingerprinting technique
-Microsoft threatens Nightmare Eclipse
-OffensiveCon 2026 videos
📰 Risky Bulletin: Dutch police take down giant botnet of 17 million devices
risky.biz/risky-bulletin-dutch…
Risky Bulletin: Dutch police take down giant botnet of 17 million devices - Risky Business Media
Dutch authorities have conducted one of the largest-ever malware disruptions and took down a botnet that infected more than 17 million dev [Read More]risky.biz
reshared this
The media in this post is not displayed to visitors. To view it, please go to the original post.
#Meme #Humour
reshared this
If your job is to make sure people look at ads... maybe it's not the tech industry, but the ad industry?
petition to rename the ping command bonk 
reshared this
An app on SuperBOX streaming devices turns them into residential proxy nodes
reshared this
Lorenzo
in reply to Valentino Spataro • •