Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

CVE-2026-2005: Public PoC Released for Critical 20-Year-Old PostgreSQL pgcrypto RCE Vulnerability
#CyberSecurity
securebulletin.com/cve-2026-20…
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

GitHub Confirms Internal Repository Breach via Malicious VS Code Extension — TeamPCP Claims 3,800 Repos Stolen
#CyberSecurity
securebulletin.com/github-conf…
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Kimsuky APT Runs Four Simultaneous Spear-Phishing Campaigns Targeting Recruiters, Crypto Users, and Defense Officials
#CyberSecurity
securebulletin.com/kimsuky-apt…
Cybersecurity & cyberwarfare ha ricondiviso questo.

A malicious VS code extension just breached #GitHub 's internal repositories
securityaffairs.com/192440/cyb…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

HO CREATO LA MIA DISTRO, è stato più semplice del previsto.

youtu.be/iT63QwewexQ

Stampa Romana: liberare Alessandro Mantovani (Fatto Quotidiano) e militanti Flotilla


Alessandro Mantovani, collega del Fatto Quotidiano, sia subito rilasciato con tutti gli attivisti della Global Sumud Flotilla sequestrati in acque internazionali dalle forze armate israeliane con un autentico atto di pirateria, per bloccare il soccorso umanitario della martoriata popolazione di Gaza e impedire il racconto dei crimini e delle violazioni dei diritti umani che lì, come in Cisgiordania e in Libano, continuano a essere perpetrati. Un obiettivo, quest’ultimo, perseguito con la mattanza dei cronisti sul campo, le intimidazioni, l’accesso negato all’informazione internazionale.

Stampa Romana esprime tutta la sua vicinanza ad Alessandro Mantovani e agli altri sequestrati, per le ragioni dell’umanità e del diritto di cronaca.

La Segreteria dell’ASR


dicorinto.it/associazionismo/s…

DecayDock Keeps Track of Spoilage


The media in this post is not displayed to visitors. To view it, please log in.

Many of us have suffered the common experience of buying a great deal of (now very expensive) food, only to have it go off before it can be consumed. [ptallthings93] has whipped up a simple device to try and tackle this problem.

The result is DecayDock, which lives on a fridge and tries to keep track of what’s going on inside. It achieves this with the use of an ESP32-CAM module, which combines the capable microcontroller with a camera for image detection work. With the aid of an Edge AI model, it’s able to detect common food items that are held in front of the camera, which are in turn added to an internal inventory. The items are tracked over time based on expected shelf lives, and the freshness of various items in the fridge is displayed on an attached LCD screen with a green/yellow/red color coding system.

The system is only making estimates—it’s not able to actually identify when the cheese has gone moldy or the milk has gone sour. Still, if you struggle to remember what you should be prioritizing to use in your fridge, it might be a handy aid.

Ultimately, we never really saw smart fridges dominate the market, even though the idea has long been a popular one in futurist circles. Perhaps none of them thought that nobody really wants to stand staring down at a screen on the fridge all day. In reality, some areas of the home are best left unsmartified.


hackaday.com/2026/05/20/decayd…

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Gli hacker stanno sfruttando Claude.ai per diffondere gli infostealer per Mac

📌 Link all'articolo : redhotcyber.com/post/gli-hacke…

A cura di Bajram Zeqiri

#redhotcyber #news #cybersecurity #hacking #malware #ransomware #sicurezzainformatica

Cybersecurity & cyberwarfare ha ricondiviso questo.

#DirtyDecrypt: PoC Released for yet another #Linux flaw
securityaffairs.com/192436/unc…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

315 – Attenzione a mostrare le dita nelle foto camisanicalzolari.it/315-atten…
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Chiude il sipario la RHC Conference 2026! Un grazie a chi ha costruito con noi due giorni indimenticabili

📌 Link all'articolo : redhotcyber.com/post/chiude-il…

A cura di Carolina Vivianti

#redhotcyber #news #cybersecurity #intelligenzaartificiale #trasformazionedigitale

Cybersecurity & cyberwarfare ha ricondiviso questo.

Alleged Huawei zero-day blamed for the 2025 Luxembourg telecom crash
securityaffairs.com/192431/hac…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

VECT 2.0: il ransomware che distrugge i dati anche dopo il pagamento

📌 Link all'articolo : redhotcyber.com/post/vect-2-0-…

A cura di Redazione RHC

#redhotcyber #news #cybersecurity #hacking #malware #ransomware #vect20 #wiper #raas

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Il BitLocker non è più una garanzia. Un ricercatore ha appena dimostrato che basta una chiavetta USB

📌 Link all'articolo : redhotcyber.com/post/il-bitloc…

A cura di Luca Stivali del gruppo DarkLab

#redhotcyber #news #cybersecurity #hacking #windows11 #bitlocker #vulnerabilita

Using 3D Printers To Make Circuit Boards


The media in this post is not displayed to visitors. To view it, please log in.

Two printed circuit boards made from 3D prints and copper foil. One white and one black substrate.

Custom printed circuit boards have become more and more accessible to the average hobbyist over the last decade. But one problem still remains: your circuits will take at least a couple days to make. But what if you needed some really rapid prototypes? [The Raccoon Lab] shows us how to do it with a 3D printer.

You start with the usual hobby PCB pipeline: take your idea, make a schematic, and then lay it out in KiCad. That’s where the changes start: to keep traces strong, they are made very thick. The PCB is then exported and opened in 3D CAD software, where the traces are extruded to be 2 mm tall. Off to the printer! The newly printed “circuit board” is made conductive by applying copper tape to it, and traces are cut out along their raised edges.

The result is a very quick and dirty PCB. Sure, it isn’t exactly production-ready, but for just about any simple microcontroller project it’ll do just fine, and it’s a whole lot more accessible than milling one using a CNC! We’ve seen a few variations on this approach recently, including some custom software designed to help along the process.

youtube.com/embed/O7aimMbIAvA?…


hackaday.com/2026/05/19/using-…

Building A Device To Map Magnetic Fields


The media in this post is not displayed to visitors. To view it, please log in.

Magnetic fields are all around us. We can’t really feel or see them ourselves, per se, but we can map them with the right hardware, like this device built by [edosari50].

The build uses an ESP32 microcontroller, which is built on to a board with an integrated 4.3″ touchscreen LCD. It’s paired with an Arduino Nano, which does the work of actually talking to a pair of EMS100 Fluxgate magnetic sensors. The slower, less capable Arduino handles the low-level chatter and then passes the readouts to the ESP32 over a UART connection. Power is courtesy of a pair of 18650 lithium-ion cells, and a XL4005 DC-DC converter. A lithium-ion charging module is on hand to keep the batteries topped off safely. Scan results are visualized on the device itself using a heatmap representation, and can also be exported to SD card for later analysis if so desired.

Unless you’re in the geological field or otherwise hunting for stuff underground, this probably isn’t a tool you’ll have a lot of use for. However, if you like finding magnetic anomalies and investigating them, it might be very much in your wheelhouse. We’ve featured other tools for magnetic visualization before, too. Video after the break.

youtube.com/embed/CHlLDAJMrik?…


hackaday.com/2026/05/19/buildi…

The 8-bit Web Server


The media in this post is not displayed to visitors. To view it, please log in.

Even [maurycyz] doesn’t think it is a good idea, but it is possible to use an AVR 8-bit CPU to serve web pages. Of course, it is a vastly simplified web server, but it does serve pages — OK, technically just one page — to the public Internet.

Working backward, it is fairly easy to get the microcontroller to note an HTTP request and then simply spit out a prerecorded HTTP response to provide the page. The hard part is connecting the little processor to the network. The server is dead simple, just a CPU and a scant number of components like filter caps and LEDs. The trick is to use SLIP, an ancient protocol used to connect dial-up modem terminals to the network.

Linux supports SLIP, so the MCU connects to a Linux computer via SLIP. Then the Linux computer uses WireGuard to network with the remote web server that serves [maurycyz’s] site. The SLIP implementation assumes that IP packets aren’t fragmented, which is normally true these days. TCP was a bit more complicated since you have to track the connection state and possibly re-transmit lost packets. Still, nothing the AVR with 8 K of RAM and 64 K of flash can’t handle.

Practical? No. Cool? Sort of. Funny that a disposable vape has more CPU power. Of course, something like an ESP32 is an obvious choice.


hackaday.com/2026/05/19/the-8-…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Ricercatori dell'università di Washington volevano che alcune insegnanti della scuola materna indossassero telecamere per addestrare l'intelligenza artificiale.

Le telecamere avrebbero registrato tutto ciò che vedevano in prima persona, compresi i bambini a cui insegnavano, per poi utilizzare quei filmati per sviluppare modelli di intelligenza artificiale.

404media.co/researchers-wanted…

@aitech


Researchers Wanted Preschool Teachers to Wear Cameras to Train AI


University of Washington researchers planned to have preschool teachers wear cameras that would record everything they saw from a first-person perspective, including the children they were teaching, then use that footage to develop AI models. One parent who spoke to 404 Media understood the program as opt-out, rather than opt-in. The university said classroom participation was contingent upon receiving parental permission for all of the children.

“With your permission, your child’s lead teacher may wear a small teacher-worn camera that captures the teacher's approximate first-person perspective, and/or we may place a fixed video camera in the classroom,” a document given to parents and later shared with 404 Media reads. “These videos simply capture the normal interactions between teachers and children during regular classroom activities. Recordings occur during morning program hours up to 150 minutes, up to 4 visits in one month. Your child will not be asked to do anything new or different. Their daily routine will stay exactly the same.”

💡
Do you know anything else about how researchers are using AI? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

This post is for subscribers only


Become a member to get access to all content
Subscribe now


reshared this

Ecco come Microsoft ha smantellato il gruppo Fox Tempest


@Informatica (Italy e non Italy)
Microsoft ha annunciato il takedown di Fox Tempest, gruppo di cyber criminali che offriva un servizio malware signing as a service capace di fare apparire come legittimi dei software malevoli
L'articolo Ecco come Microsoft ha smantellato il gruppo Fox Tempest proviene da Cyber Security 360.

#Cybersecurity360 è la testata del

Building a Pip Boy Themed Smartwatch


The media in this post is not displayed to visitors. To view it, please log in.

One of the problems with good science fiction is that it introduces us to all kinds of cool devices that we can’t actually have in real life. [Huy Vector] has tried to fix that a little with this fantastic smartwatch build inspired by everybody’s favorite wrist computer from the Fallout series.

The build is based around a Xiao ESP32-S3 board, which hosts the capable microcontroller and has all that useful wireless connectivity built in. It’s hooked up to a MAX30102 heart rate sensor to collect the wearer’s vital signs, as well as a 1.54″ LCD screen for displaying the fantastic Pip Boy themed interface. Power is courtesy of a small lithium-ion cell tucked in behind the display. A little copper tubing and brass hardware helps tie everything together, with the latter serving as capacitive touch points for controlling the device. A simple leather watch strap completes the build.

It’s a bit of a diversion from the classic Pip Boy design, in that it’s a small smartwatch instead of a chunky device that takes up most of the wearer’s forearm. However, this isn’t so bad in reality—it’s far more practical while still rocking those classic green-on-black graphics that we all love so much.

If you’re craving a more authentic Pip Boy recreation, we’ve featured a few of those, too.

youtube.com/embed/wQn11GyUdrk?…


hackaday.com/2026/05/19/buildi…

Cybersecurity & cyberwarfare ha ricondiviso questo.

#Drupal is rolling out an emergency security update on May 20. You cannot miss it
securityaffairs.com/192407/sec…
#securityaffairs #hacking

Recreating a Broken Laminated Wooden Furniture Part


The media in this post is not displayed to visitors. To view it, please log in.

Everyone loves those rather bouncy wooden lounge chairs that got popularized by a certain Swedish seller of furniture, but as tough as they are, the laminated wood can still break at some point. The chair that [John’s Furniture Repair] got in for repair had cracked right around where a bolt hole had been drilled, apparently creating a weak spot that over the years turned into a crack.

The way to fix this issue is to recreate the one piece of curved, laminated wood as demonstrated in the video. This starts with tracing the contours of the original part on a piece of MDF, which then gets doubled up by a second plate of MDF. After cutting out the contours this then creates the two halves of a mold for the laminated part.

Next is preparing the layers of wood that will become the new part, making sure to keep the same final thickness as the original. With everything glued up the layers are put into the mold, clamped down and the glue left to dry.

Finally, the part is freed from the mold, cut to its final size, and sanded down to prepare it for final treatment and installation on the lounge chair. Perhaps the only negative one can say about this kind of fix is that after you’re done, you really get that itch to sand down and re-lacquer all of the other parts as well so that they also look new and shiny.

youtube.com/embed/uTZIfsjwP9E?…


hackaday.com/2026/05/19/recrea…

Cybersecurity & cyberwarfare ha ricondiviso questo.

"La peggiore fuga di dati a cui abbia mai assistito": l'agenzia statunitense per la sicurezza informatica lascia le sue chiavi digitali pubblicamente su GitHub.

Le password venivano memorizzate in chiaro in un repository pubblico di GitHub.
Il problema è stato finalmente risolto durante il fine settimana

gizmodo.com/the-worst-leak-tha…

@informatica

Cybersecurity & cyberwarfare ha ricondiviso questo.

Un museo virtuale di sistemi operativi (e applicazioni standalone) in esecuzione tramite emulazione, implementato come macchina virtuale Linux

È disponibile un launcher personalizzato indipendente dall'emulatore, con tutti i sistemi operativi e gli emulatori preinstallati e preconfigurati.
Sono inclusi anche i programmi di installazione dell'hypervisor e i collegamenti per eseguire la macchina virtuale su Windows, macOS e Linux.

virtualosmuseum.org/

@informatica

reshared this

Cybersecurity & cyberwarfare ha ricondiviso questo.

L'Iran chiede alle grandi aziende tecnologiche di pagare delle tariffe per i cavi internet sottomarini nello Stretto di Hormuz.

La rivendicazione iraniana su un punto di strozzatura sottomarino spinge le aziende tecnologiche statunitensi a utilizzare la fibra ottica via terra.

arstechnica.com/tech-policy/20…

@politica

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Outsourcing your brain to corporations to stay competitive, then winding up a homeless, controlled cog... It's a rough cyberpunk reality, in my game, Neofeud 2! store.steampowered.com/app/461…
silverspook.itch.io/neofeud2
#gamedev #indiedev #visualnovel #art #artist #indiegame #cyberpunk #Noai #scifiart #humanmade

reshared this

in reply to Silver Spook Games

The media in this post is not displayed to visitors. To view it, please go to the original post.

"A storyline worthy of a William Gibson novel... If you like story driven pnc adventures and cyberpunk, then you will like this game," --Neofeud reviewer on Steam Neofeud store.steampowered.com/app/673… #indiegames #SteamDeck #noai #cyberpunk #steam #indiegame #scifi #scifiart #retrogame
Cybersecurity & cyberwarfare ha ricondiviso questo.

#Microsoft dismantled #malware-signing network #Fox #Tempest
securityaffairs.com/192391/cyb…
#securityaffairs #hacking
Cybersecurity & cyberwarfare ha ricondiviso questo.

Non esistono prove scientifiche a sostegno di un divieto generalizzato dei social media per i minori

Lo hanno affermato i ricercatori alla conferenza digitale re:publica. Persino molti sostenitori di tale divieto dubitano della sua efficacia. I primi dati provenienti dall'Australia suggeriscono perché questo scetticismo sia giustificato.

netzpolitik.org/2026/social-me…

@privacypride

How Pulse Oximetry Figures Out Your Blood Oxygen Levels


The media in this post is not displayed to visitors. To view it, please log in.

If you’ve ever had a medical team investigating cardiac issues, you’ve probably had a bunch of electrodes stuck all over your chest and been hooked up to an electrocardiogram. This is the gold standard when it comes to understanding electrical activity in the heart and can diagnose a great many conditions. However, sometimes doctors just need the basic information—your pulse rate, and whether or not there’s actually any oxygen in your blood.

Thankfully, there’s a cheap and simple device that can offer that exact information. It’s the pulse oximeter, and it’s a key piece of equipment that’s just about vital for monitoring vitals. Let’s learn how it works!

Pump It


If you’re unfamiliar with pulse oximeters, they’re that little plastic thing that clips on your finger at the doctor’s office. The device places two LEDs on one side of your finger, and a photodiode on the other. With just these simple components, it’s possible to determine the percentage of your blood’s hemoglobin that is currently carrying oxygen. It’s also possible to discern pulse rate, which also comes in handy when you’re trying to determine a patient’s current status at a glance.
A pulse oximeter is a small device typically worn on the finger. This example feeds a signal to a remote display, while some units will put the screen directly on the finger clamp itself. Credit: UusiAjaja, CC0
Pulse oximetery was the brainchild of Takuo Aoyagi, an electrical engineer at Nihon Kohden in Tokyo. In 1972 he was working on a non-invasive way to measure cardiac output using the dye dilution method, which involves injecting a tracer dye and watching how its concentration in the blood decays over time. He was reading that decay optically through an ear oximeter. These devices used red and infrared light passed through the ear tissue to determine blood oxygen levels, but required frustrating calibration to work properly and often required fussy steps like first squeezing blood out of the tissues prior to measurement. The problem was that early oximeters worked based on the total absorption of light, and were affected by things like the skin, tissue, and venous blood, when really the goal was to measure the oxygen levels in the arterial blood itself.

As Aoyagi worked with the device, he noted that the patient’s pulse kept showing up as an annoying ripple in the output. He spent some effort trying to cancel that ripple by balancing red and infrared signals against each other. Then he noticed that when a patient’s oxygen saturation dropped, the cancellation fell apart. This led to the realization that the ratio of how much red and infrared light was absorbed could be used to determine the oxygen saturation of the arterial blood.
Oxyhemoglobin and deoxyhemoglobin absorb red and infrared light at different rates. Measuring the ratio of each wavelength of light transmitted through the arterial blood allows the oxygen saturation to be calculated. Credit; Cmglee, CC BY SA 4.0
It all comes down to the nature of blood itself. Hemoglobin comes in two flavours relevant here: oxyhemoglobin, which is carrying an O₂ molecule, and deoxyhemoglobin, which isn’t. They are different colours, which is why arterial blood is bright red and venous blood is darker. They absorb light differently, to the point that it’s actually clinically useful. At a wavelength of 660 nm (red)—deoxyhemoglobin absorbs noticeably more light than its oxygenated cousin. At around 940 nm (near-infrared), oxyhemoglobin absorbs more. Almost every pulse oximeter uses these two wavelengths; both penetrate tissue quite easily, and it’s easy to find LEDs that spit out these wavelengths.

Reading the blood oxygen level is relatively straightforward. The device will typically alternate the two LEDs on and off, many times a second, also including a third phase with both off so the photodiode can subtract out ambient room light as well. The photodiode sees light that has passed through an entire finger, including the skin, bone, fat, as well as the venous and arterial blood. Most of that doesn’t change from second to second, but the arterial blood does, with every pump of the heart. Thus, when sampling light from the infrared and red LED pulses, the photodiode puts out a signal that’s mostly a continuous level from light passing through the finger, with a little wiggly bit on top that throbs at a human pulse rate. That’s due to the pulsing of the arterial blood, and the frequency can be used to measure pulse rate. Meanwhile, the continuous component is removed by subtracting the trough of both the infrared and red signals from the peak, which solely leaves the component of light absorption due to the fresh arterial blood itself.
The inside of a pulse oximeter sensor. Note the red LED and IR LED on one side, and the photodiode on the other. This design transmits light through the finger, though reflective approaches can also work. Credit: Eliran t, CC BY-SA 4.0
The level of oxygenation in the arterial blood itself can then be measured by comparing the ratio of red to infrared light picked up in this part of the signal. The light ratio is converted into an human-parseable number via a lookup table, based on the Beer-Lambert law of concentration of substances in a solution. The displayed number is flagged as “SpO₂.” The “p” stands for “peripheral,” to indicate it’s an optical measurement rather than determined directly with blood-gas measurement techniques. This distinction is important, as there are a range of conditions under which pulse oximetry readings can be inaccurate. At a very base level, pulse oximeters can get confused if a patient is moving while wearing the device, which makes the pulsatile signal itself less clear. The device also cannot tell carboxyhemoglobin from oxyhemoglobin, because they absorb light very similarly at 660 nm. Carboxyhemoglobin is the result of carbon monoxide entering the blood, so a smoke inhalation victim can display a high apparent SpO₂ figure while their blood is carrying very little oxygen. Nail polish and skin tone can impact the amount of light transmitted through the finger, impacting readings, while limited bloodflow to the fingers can also frustrate things.

It may not be perfect, but pulse oximetry is nevertheless very useful a lot of the time. It enables medical teams to get a near-instant look at a patient’s most vital signs in a completely non-invasive manner. The use of this technology has revolutionized both emergency care and surgery, where it has played a huge role in patient monitoring under anaesthesia. Plus, the simplicity of the device has made this critical medical insight accessible to anyone that can afford a $20 device with a few LEDs and a photodiode in it. It’s now even possible to track your oxygen saturation during sleep with an off-the-shelf smartwatch due to developments from this technology, helping aid in the diagnosis of complex conditions like sleep apnea. All because blood tends to pass light a little differently depending on how oxygenated it is. Sometimes you have to thank nature for those little conveniences.


hackaday.com/2026/05/19/how-pu…

Cybersecurity & cyberwarfare ha ricondiviso questo.

Paperweight è un'applicazione desktop open-source, pensata per l'utilizzo locale che analizza la tua casella di posta per mappare la tua impronta digitale e a riprendere il controllo e a eliminare i tuoi dati.

Cosa fa:
- Inventario degli account: mappa tutte le aziende che ti hanno mai contattato via email, con classificazione dei rischi e raccomandazioni sulle azioni da intraprendere.
- Annullamento iscrizione in blocco: trova e annulla l'iscrizione a tutte le liste di marketing e di distribuzione (automatico RFC 8058 ove supportato).
- Avvisi di violazione: ricevi notifiche quando un'azienda con cui sei stato in contatto subisce una violazione dei dati (tramite HaveIBeenPwned).
Richieste GDPR
- Genera richieste GDPR precompilate in diverse lingue

paperweight.email/

@privacypride

Cybersecurity & cyberwarfare ha ricondiviso questo.

Triple Lutz, In the Hands of an Angry Mob: il rumore prima della spiegazione

I Triple Lutz non sembrano interessati a rendere la rabbia presentabile.
Su IYEzine abbiamo recensito In the Hands of an Angry Mob, debutto della band punk di Portland in uscita il 26 giugno per SBÄM Records: otto brani brevi, nervosi, attraversati da hardcore, sarcasmo politico e tensione collettiva.
Dentro ci sono anche “Don’t Wake Daddy”, con un video ispirato a The Warriors, e “Slumlord Millionaire”: due anticipazioni di un disco che non prova a spiegare il rumore, ma a usarlo come forma del discorso.
Recensione completa su IYEzine.

iyezine.com/triple-lutz/

Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

The Ontario Police got a court authorization to use spyware (they call it “on‑device investigative tool” or ODIT) to investigate a car theft ring.

We need more of these cases to be public. Keeping the use of spyware secret is not doing authorities any favors. This is taxpayer's money at work, and being so invasive, there needs to be checks and balances, and a public discussion.

If we only see the abuses, which there have been many, we can't have a serious and fair debate about the use of spyware.

thestar.com/news/ontario/ontar…

Questa voce è stata modificata (3 settimane fa)
Cybersecurity & cyberwarfare ha ricondiviso questo.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Passkey in Microsoft Entra ID: perché l’enforcement con Conditional Access è fondamentale
#tech
spcnet.it/passkey-in-microsoft…
@informatica


Passkey in Microsoft Entra ID: perché l’enforcement con Conditional Access è fondamentale


Introduzione: le passkey non bastano da sole


Le passkey rappresentano uno dei passi più significativi nell’evoluzione dell’autenticazione moderna. Basate sullo standard FIDO2, eliminano le password tradizionali sostituendole con coppie di chiavi crittografiche legate al dispositivo e all’identità biometrica dell’utente. Su Microsoft Entra ID, abilitare le passkey è diventato relativamente semplice — il vero problema emerge subito dopo: abilitarle non significa renderle obbligatorie.

Molte organizzazioni configurano le passkey come metodo di autenticazione disponibile e si fermano lì, convinte di aver rafforzato significativamente la loro postura di sicurezza. In realtà, senza un enforcement esplicito tramite Conditional Access, l’utente può ancora scegliere di autenticarsi con password e SMS — esattamente come prima. Questo scenario introduce un rischio spesso sottovalutato: il downgrade attack.

Cos’è un downgrade attack nel contesto dell’autenticazione


Un downgrade attack, nell’ambito dell’autenticazione, non è un attacco sofisticato nel senso tradizionale del termine. È semplicemente la possibilità di utilizzare un metodo di autenticazione meno sicuro rispetto a quello ideale. Dal punto di vista dell’utente, si manifesta come il familiare link “Accedi in un altro modo” nella schermata di login di Microsoft.

Gli attaccanti dispongono di toolkit avanzati — come Evilginx2 o strumenti analoghi — capaci di rilevare automaticamente quali metodi di autenticazione sono disponibili per un determinato account. Se il sistema accetta password + SMS come alternativa alla passkey, l’attaccante sfrutterà il percorso più debole. La passkey registrata diventa di fatto irrilevante dal punto di vista della sicurezza pratica.

Il problema non è tecnico, è organizzativo: manca il tassello dell’enforcement. Ed è qui che entra in gioco Conditional Access insieme alle Authentication Strengths.

Authentication Strengths: il fondamento dell’enforcement


Microsoft Entra ID offre il concetto di Authentication Strength come meccanismo per specificare non solo che si richiede la MFA, ma quali specifici metodi sono accettati. Esistono tre Authentication Strengths predefinite:

  • Multifactor authentication — la più permissiva, accetta password + qualsiasi secondo fattore (incluso SMS)
  • Passwordless MFA — richiede metodi senza password, come Windows Hello o Microsoft Authenticator
  • Phishing-resistant MFA — la più restrittiva, accetta solo certificati, Windows Hello for Business, passkey FIDO2

Il problema è che la maggior parte delle organizzazioni usa ancora la prima categoria — quella meno restrittiva. Alcune sono migrate dalla vecchia grant control “Require MFA”, ma si sono fermate al livello base. Usare Phishing-resistant MFA come Authentication Strength è già un passo corretto, ma la vera potenza arriva con le Custom Authentication Strengths.

Custom Authentication Strengths: controllo granulare


Le Authentication Strengths personalizzate permettono di specificare esattamente quali metodi sono ammessi, incluso il vincolo a specifici tipi di passkey tramite gli AAGUID (Authenticator Attestation GUID). Ogni tipo di passkey certificata — YubiKey 5C NFC, Google Titan, Microsoft Authenticator su iOS — ha il proprio AAGUID. Limitare l’accesso a specifici AAGUID garantisce che solo i dispositivi approvati dall’organizzazione possano autenticarsi.

Questo livello di granularità è particolarmente importante per gli account amministrativi, dove il rischio di compromissione è massimo.

Configurare la policy Conditional Access di baseline


Il punto di partenza consigliato è una policy di Conditional Access che prenda di mira un gruppo pilota di utenti che hanno già registrato una passkey. La policy deve:

  1. Essere creata inizialmente in modalità report-only per monitorare l’impatto senza bloccare gli accessi
  2. Targetizzare un security group contenente gli utenti del pilota
  3. Usare la grant control “Require authentication strength” con l’Authentication Strength appropriata
  4. Essere attivata in produzione solo dopo aver verificato i log di accesso e confermato che tutti gli utenti del gruppo hanno una passkey funzionante

Man mano che più utenti registrano le passkey, il gruppo viene espanso. Questo approccio graduale riduce il rischio di lockout e costruisce fiducia nelle varie business unit.

Account amministrativi: requisiti più stringenti


Gli account privilegiati richiedono una policy separata e più restrittiva. Le considerazioni principali sono:

  • Creare una Custom Authentication Strength dedicata agli amministratori che accetti solo passkey specifiche (con AAGUID approvati)
  • La policy Conditional Access per gli admin deve targetizzare esclusivamente le identità amministrative
  • Aggiungere condizioni supplementari: accesso solo da reti trusted, dispositivi compliant o hybrid-joined
  • Mantenere policy separate per accessi admin e utenti standard: facilita il troubleshooting e riduce la complessità

Un pattern comune negli ambienti Entra è la mancanza di protezioni specifiche per gli account amministrativi. Spesso questi account non hanno policy Conditional Access dedicate, o le policy esistenti si basano su MFA generica anziché su metodi phishing-resistant. Gli account amministrativi sono il bersaglio primario degli attaccanti: una compromissione a questo livello equivale a una compromissione del tenant.

Come usare i Sign-in Logs per verificare l’efficacia


Una volta attivate le policy in report-only, i log di accesso di Entra ID mostrano il risultato teorico della policy per ogni accesso. Per ogni evento di login è possibile vedere quale Authentication Strength è stata valutata, se l’accesso avrebbe soddisfatto i requisiti e quale metodo è stato effettivamente utilizzato.

Filtrando per gli utenti del gruppo pilota è possibile identificare chi ancora non ha registrato una passkey o chi tenta di usare metodi alternativi. Questo permette un’azione proattiva prima di attivare la policy in enforcement completo.

Conclusione: l’enforcement è dove il valore si manifesta


Le passkey sono una tecnologia potente e in rapida evoluzione, soprattutto nell’ecosistema Microsoft. Ma la loro efficacia dipende interamente dall’enforcement. Distribuire passkey senza Conditional Access che ne imponga l’uso equivale a blindare la porta principale lasciando le finestre aperte.

La sequenza corretta è: abilitare le passkey → creare le Custom Authentication Strengths appropriate → configurare le Conditional Access policy in report-only → espandere gradualmente il gruppo → attivare l’enforcement. Gli account amministrativi richiedono attenzione immediata e policy separate con requisiti più stringenti, incluso il binding a AAGUID specifici.

In un contesto di minacce sempre più sofisticate — con phishing kit come Tycoon 2FA che aggirano la MFA tradizionale — i metodi phishing-resistant non sono più un’opzione premium: sono il requisito minimo per chi gestisce identità critiche nel cloud Microsoft.


Fonte: Passkeys Aren’t Enough: Why Enforcement Matters in Entra ID — Petri IT Knowledgebase, Brandon Colley (TrustedSec)


Cybersecurity & cyberwarfare ha ricondiviso questo.

NEW: Hackers have compromised dozens of open source packages in the latest salvo in a relentless and massive supply chain hacking campaign.

According to one cybersecurity firm, the hackers released over 630 malicious versions across 317 packages in about 20 minutes.

techcrunch.com/2026/05/19/hack…

Biofeedback Butterfly Beats With a Pulse


The media in this post is not displayed to visitors. To view it, please log in.

Biofeedback is the idea of making one conscious of a biological process or feature, and then using this to try and exert control over the very same. [Mariia Hruntes] demonstrates this ably with a fluttering build of her own design.

In this case, the biological process being made clear is that of the user’s heartbeat. This is tracked with a MAX30102 pulse oximetry sensor, which can be used to measure both heart rate and blood oxygen levels if so desired. It’s hooked up to an Arduino Uno, which polls for pulse rate data, and then actuates an SG90 micro servo in turn. This operates the wings of a 3D printed butterfly, such that they flap in pace with the wearer’s pulse. The goal is to observe this, and then try and calm one’s self to relax and slow the flapping through the power of the mind.

It’s a simple build, but one that clearly demonstrates the concepts of biofeedback in action. We’ve seen similar principles applied to everything from aiding sleep to improving the practice of mediation. If you’re working on your own neat biofeedback project, be sure to let us know on the tipsline.


hackaday.com/2026/05/19/biofee…

JobStealer colpisce macOS e Windows e ruba dati personali con falsi colloqui di lavoro online


@Informatica (Italy e non Italy)
È stata identificata una nuova campagna malware che sta prendendo di mira sia utenti macOS sia utenti Windows con il trojan JobStealer nascosto in piattaforme fraudolente che imitano servizi professionali utilizzati per

The media in this post is not displayed to visitors. To view it, please log in.

QLNX: il nuovo implant Linux silenzioso che saccheggia la supply chain del software


@Informatica (Italy e non Italy)
Trend Micro ha scoperto Quasar Linux RAT (QLNX), un sofisticato implant Linux mai documentato in precedenza che prende di mira sviluppatori e ambienti DevOps. Capace di esecuzione fileless, doppio rootkit LD_PRELOAD + eBPF e furto sistematico di


QLNX: il nuovo implant Linux silenzioso che saccheggia la supply chain del software


Si parla di:
Toggle

Un nuovo implant Linux mai documentato prima — denominato Quasar Linux RAT (QLNX) — sta prendendo di mira sviluppatori e ambienti DevOps con l’obiettivo di appropriarsi silenziosamente delle credenziali più preziose del ciclo di sviluppo software: token npm, PyPI, AWS, Kubernetes, GitHub e molto altro. La scoperta, opera dei ricercatori Aliakbar Zahravi e Ahmed Mohamed Ibrahim di Trend Micro, descrive uno strumento che non si limita ad essere un semplice trojan di accesso remoto, ma una piattaforma di spionaggio industriale progettata per persistere, nascondersi e colpire l’intera supply chain del software.

Cosa rende QLNX diverso dagli altri RAT Linux


A differenza di molti implant Linux che puntano sulla semplicità, QLNX è costruito come una piattaforma d’attacco coerente e modulare. Il suo punto di forza non sta in una singola tecnica innovativa, ma nell’integrazione armoniosa di più capacità offensive che si concatenano in un flusso d’attacco preciso: arriva, cancella le tracce dal disco, si radica con sei meccanismi ridondanti, si nasconde sia a livello userspace che kernel, e infine raccoglie sistematicamente le credenziali che contano davvero.

Il malware esegue filelessly dalla memoria, mascherandosi da thread del kernel attraverso nomi come kworker o ksoftirqd — nomi che ogni amministratore di sistema Linux incontra quotidianamente nei propri processi. Questo lo rende praticamente invisibile a una normale ispezione manuale. È inoltre in grado di profilare l’host per rilevare ambienti containerizzati, cancellare i log di sistema e stabilire persistenza attraverso non meno di sette metodi diversi, tra cui systemd, crontab e shell injection nel file .bashrc.

Un harvester di credenziali pensato per la supply chain


Il componente di furto credenziali di QLNX è ciò che lo rende particolarmente pericoloso per l’ecosistema open source. Il malware estrae sistematicamente segreti da un elenco preciso di file ad alto valore per uno sviluppatore:

File target di QLNX per il furto credenziali:

.npmrc              → Token di pubblicazione npm
.pypirc             → Credenziali PyPI
.git-credentials    → Credenziali Git
.aws/credentials    → Chiavi di accesso AWS
.kube/config        → Credenziali Kubernetes
.docker/config.json → Autenticazione Docker Registry
.vault-token        → Token HashiCorp Vault
.env                → Variabili d'ambiente con segreti
**/terraform.tfvars → Credenziali Terraform
GitHub CLI tokens   → Token di accesso GitHub

Il rischio non è solo per lo sviluppatore compromesso: un attore che ottiene accesso a uno di questi token può pubblicare pacchetti malevoli su npm o PyPI, accedere all’infrastruttura cloud o muoversi lateralmente attraverso pipeline CI/CD. È esattamente il meccanismo che ha consentito attacchi supply chain devastanti in passato, come l’operazione TeamPCP che ha colpito oltre 160 pacchetti npm e PyPI nelle scorse settimane.

Architettura rootkit a doppio livello: LD_PRELOAD + eBPF


L’aspetto più sofisticato di QLNX è la sua architettura rootkit a due livelli, che combina tecniche di occultamento a livello userspace e kernel.

Il primo strato è un rootkit userland deployato attraverso il meccanismo LD_PRELOAD del dynamic linker di Linux. Questo garantisce che tutti gli artefatti e i processi dell’implant rimangano nascosti agli strumenti di ispezione standard. Il secondo strato è un componente kernel-level basato su eBPF (Extended Berkeley Packet Filter) — il potente sottosistema Linux originariamente pensato per il networking e l’osservabilità dei sistemi. QLNX sfrutta eBPF per nascondere processi, file e porte di rete agli strumenti userland come ps, ls e netstat, su istruzione del server di comando e controllo (C2).

L’uso offensivo di eBPF per il rootkitting è una tendenza già documentata da altri ricercatori, ma la sua integrazione in un RAT con builder pipeline modulare indica una maturazione significativa di queste tecniche al di fuori di ambienti di ricerca accademica.

Backdoor PAM: furto di credenziali SSH in tempo reale


QLNX include anche un backdoor basato su PAM (Pluggable Authentication Module) che intercetta le credenziali in chiaro durante gli eventi di autenticazione SSH. Il componente PAM inline-hook registra i dati delle sessioni SSH in uscita e li trasmette al C2. È inoltre presente un secondo logger PAM che viene caricato automaticamente in ogni processo collegato dinamicamente, per estrarre nome del servizio, username e token di autenticazione.

Questa tecnica è particolarmente insidiosa perché i moduli PAM girano tipicamente con privilegi root e operano a un livello così basso nello stack di autenticazione che la maggior parte dei sistemi di monitoring tradizionali non riesce a intercettarli. Non a caso, negli ultimi mesi sono emersi altri strumenti simili — come PamDOORa, venduto su forum russi di cybercrime per 900 dollari — che sfruttano lo stesso vettore.

58 comandi C2 e un’infrastruttura operativa completa


QLNX supporta ben 58 comandi distinti che conferiscono agli operatori il controllo completo dell’host compromesso. Le capacità operative includono esecuzione di shell commands, gestione file, code injection nei processi, cattura di screenshot, keylogging, SOCKS proxy, TCP tunneling, esecuzione di Beacon Object Files (BOFs) — la stessa tecnica usata da Cobalt Strike — e gestione di una rete P2P mesh tra host compromessi.

La comunicazione con il C2 avviene su tre protocolli — TCP grezzo, HTTPS e HTTP — con un loop persistente che tenta continuamente di mantenere attiva la connessione. La vettore di infezione iniziale rimane ancora sconosciuto, ma una volta stabilito il foothold, QLNX cancella i propri artefatti dal disco e avvia la fase operativa principale.

Indicatori di compromissione e contromisure


QLNX evidenzia una tendenza preoccupante: la supply chain del software sta diventando il bersaglio privilegiato di attori sofisticati, perché compromettere un singolo sviluppatore con accesso ai registri npm o PyPI può avere effetti moltiplicatori su migliaia di utenti downstream. Per i team di sicurezza, alcune contromisure prioritarie:

  • Ruotare regolarmente tutti i token di pubblicazione per npm, PyPI, GitHub e altri registri, soprattutto dopo accessi da sistemi non familiari.
  • Monitorare processi Linux con nomi simili a thread del kernelkworker, ksoftirqd ecc. — che non corrispondono agli effettivi thread del kernel: strumenti come pstree con verifica del PPID possono rivelare anomalie.
  • Verificare l’integrità dei moduli PAM: controllare regolarmente che i file .so nei percorsi PAM non siano stati modificati rispetto alla versione del package manager.
  • Abilitare audit logging di eBPF per rilevare il caricamento di programmi eBPF non autorizzati: auditctl -a always,exit -F arch=b64 -S bpf.
  • Isolare i segreti CI/CD dall’ambiente di sviluppo locale, usando secret manager dedicati piuttosto che file in chiaro su disco.

Trend Micro ha pubblicato i dettagli tecnici completi nel proprio blog di ricerca. La natura fileless di QLNX e il suo doppio rootkit rendono il rilevamento basato su signature sostanzialmente inefficace: la difesa deve puntare su behavioral analytics e monitoraggio delle anomalie a livello di syscall, combinati con soluzioni EDR capaci di ispezionare la memoria dei processi.


Cybersecurity & cyberwarfare ha ricondiviso questo.

Domani alle 17.00 Claudio Paolucci (Università di Bologna) terrà la conferenza "Macchine dotate di linguaggio. Che cosa l’Intelligenza artificiale generativa ci dice dell’essere umano"

L'incontro si terrà IN PRESENZA e ONLINE.

SEDE FISICA dell'incontro: Centro Nexa su Internet e Società, Politecnico di Torino, Via Boggio 65/a, Torino (1° piano).
Per accedere alla sala si raccomanda di suonare al citofono Portineria e di seguire le indicazioni segnalate lungo il percorso.
QUI<nexa.polito.it/contatti> maggiori informazioni su come raggiungerci.

STANZA VIRTUALE dell'incontro: didattica.polito.it/VClass/Nex…

Maggiori informazioni alla pagina: nexa.polito.it/mercoledi-194

@Intelligenza Artificiale

Cybersecurity & cyberwarfare ha ricondiviso questo.

Scrivere note è sempre stato per me un delirio quando mi trovavo fuori.

Tra #app confusionarie, mille pubblicità e funzionalità non richieste, ci si riempie spesso di rumore di fondo anziché di sostanza.

Ecco perché nasce Flying Notes: la #web app single page application che ti risolve i problemi!

Una #tecnologia semplice quanto potente, che ti consente di scrivere "note volanti" con stile!

Tutto questo grazie all'implementazione del linguaggio #MarkDown che consente di formattare il testo come su una pagina web e di esportare il tutto in #PDF o in MD.

Chi ha detto che la tecnologia deve essere complicata? Scopri questo è molto altro ancora di FlyingNotes nel mio ultimo video!

youtu.be/uNqeYBQ2tz4?is=BEpIML…

@opensource

How Search Engines Enabled Finding Needles in a WWW-Sized Haystack


The media in this post is not displayed to visitors. To view it, please log in.

When the World Wide Web surged into existence during the 1990s, we were introduced to the problem of how to actually find something in this ever-ballooning construction zone that easily outpaced even the fastest post-WW2 urban sprawl. Although domain names provided a way to find servers using DNS rather than having to mash in IP addresses, you still somehow had to know the relevant URL.

A range of solutions were thought up over time, ranging from printed Yellow Pages type guides, to online curated lists of resources, as well as things like web rings where one website would link to a relevant similar website. This was the time when word-of-mouth was also very relevant, with people proudly announcing their own website on Geocities or other hosting service.

Search engines already existed long before the WWW became the hot new thing during the 1990s, but it was the WWW that would really push them to their limits. As anyone who used search engines for the WWW can attest, they had many issues. Often you’d end up using multiple search engines to find something, and despite fierce competition between web search engines to become the starting page for their browser, actually finding things on the WWW remained a tough problem.

Since a web search engine ‘just’ has to index the WWW and match a search query against the results, why was this such a hard problem that persisted until Google apparently cracked the code?

Unplanned Sprawl

URLs branching off from the main Wikipedia page in 2004. (Credit: Chris 73, Wikimedia)URLs branching off from the main Wikipedia page in 2004. (Credit: Chris 73, Wikimedia)
A nice thing about the WWW is that it was designed to be accessible to all, requiring only an Internet connection and thus opening up the possibility of setting up your own webserver. This unsurprisingly led to a very rapid growth of pages on the WWW, with content appearing, being modified and sometimes vanishing at an ever-increasing pace, making it extremely hard to keep up with.

This is however not how things started when the World Wide Web was created in 1989. Before its opening to the public in 1993 the pace of growth was slow enough that a manually maintained index was maintained. This was kept up until late 1992, with the last version of said index still online on the W3 website.

Over the course of a short few years, the WWW would change the face of the world forever alongside a surge of IBM-compatible PCs, exploding multimedia content, all the dot-com hype and perhaps best of all endless ‘free’ hosting services as long as you didn’t mind an advertising banner plastered above your personal homepage’s content.

Even internet service providers (ISPs) would often offer their own hosting service, along with endless n00b-friendly tools to make something resembling a website for whatever hobby you fancied. In addition to proving that one can absolutely argue about style and the prevalence of colorblindness, this would also serve to balloon the number of websites at an exponential rate.

Whether or not the WWW killing off the Gopher-based internet was a bad thing remains the topic of debate, though it’s beyond question that Gopher integrated search functionality into its protocol, mirroring a file system.

Infinite Library Indexing


Without any provisions in the HTTP protocol of the WWW, the only realistic way for search engines to create an index of the ever-expanding and changing WWW is to perform so-called web crawling. This means going through every known document, following any links found in them, and making sure to revisit any documents in case their contents got changed since the last visit.

The first complication here is that since the search engine’s database is the only real index for the web, initial discovery is purely organic, starting from a certain number of URL seeds in what is called the crawl frontier. This forms an integral part of a web crawler.
The Structure of Queues that Feed the URL Stream in the WebFountain Crawler (Credit: Edwards et al., 2001)The Structure of Queues that Feed the URL Stream in the WebFountain Crawler (Credit: Edwards et al., 2001)
Development of the algorithms and architecture behind these crawlers formed a major part of the early WWW, with IBM researchers on the WebFountain project in 2001 estimating a grand total of about 500 million pages, with – as they put it – web crawlers caught between the comfortable cushion of Moore’s Law and the hard place of the web’s exponential growth. Today this number is probably closer to forty billion pages.

Although the Google Search web crawler was already pretty good back in 2001, WebFountain improved on it by using a distributed system, with ‘ants’ working through their own list of URLs to crawl, as described in the development paper by Jenny Edwards et al.

Beyond the basic recursive following of links in a document there are many confounding factors, such as when to recrawl a URL, which very much depends on how often the content on it is expected to be updated. Here one dives into the territory of statistics, as depending on the type of site we can make an educated guess on how often it is expected to be updated. For example, a government’s historical news pages are unlikely to see frequent updates, whereas the front page of a news site can see updates practically every few minutes.

Inverted Indexing


As complex the topic of web crawling is, the fun part begins when you have pruned all duplicate documents and stripped all the irrelevant fluff that’s not text to be indexed. In order to make the resulting search index at all searchable before the heat death of the Universe you cannot simply do a full text search on every single document whenever someone enters a search query.

Instead an index is constructed whereby certain keywords are mapped to documents. This inverted index is generally implemented as a hash table or similar data structure where it provides a quick access into the full text documents, not unlike the keyword index in the back of a book, or the more elaborate concordance of yesteryear. These latter works also provide a keyword index, but add accompanying text to provide immediate context to further save time.

Creating an inverted index is a fairly labor-intensive process, with a new document often used for a forward index that decomposes the text into its keywords prior to updating (or creating) the inverted index. As with all of such text processing related tasks and data structures in general there are many ways to go about it, with some fun curveballs thrown into the mix such as parsing languages that do not separate words with spaces, like Japanese.

All of which is to say that implementing a search engine is easy, but making it performant, accurate and efficient at the same time is a minor nightmare. This is basically why search engines took so long to stop being so terrible, as the engineers behind them were trying to solve many rather complex problems, presumably with the C-suite and investors breathing down their necks during the dot-com days.

Search Battles


Over on the Wikipedia entry for ‘Search engine‘ we find a pretty good timeline of web search engines, along with their current status. Perhaps unsurprisingly none of the 1993-era ones made it, but 1994’s WebCrawler somehow crawled into the modern age, along with Lycos. Much like 1990’s Archie search engine and similar for the Gopher web, many of these early search engines simply couldn’t compete in the rapidly changing years leading up to the new millennium.

This was also the era in which some figured that the WWW simply needed to become more ‘3D’ with virtual environments using VRML, bringing it closer to sci-fi like that portrayed in Snow Crash or Tron. Perhaps unfortunately the WWW remained the domain of mostly text and images, although most recently the flood of JavaScript frameworks appear to want to turn once simple HTML documents into full-blown desktop-like applications, all probably to the delight of web crawler engineers.

Meanwhile some search engines figured that they could lift along on the hard work of others, with so-called meta search engines collating the results from multiple search engines to save people the trouble of querying them individually. Here 1996’s Dogpile is still going strong.

Some search engines are missing from the list, such as Marginalia, which boasts the use of open source software for its indexing and crawling, while focusing on non-commercial content. There is also the ever excellent Frog Find that provides a bridge between modern search engines and systems that really cannot run the latest web browser.

Today’s Survivors


The search engine landscape remains a brutal one today, with us having to recently say farewell to Jeeves, of Ask Jeeves fame, most recently seen carrying the Ask.com name. Personally I didn’t really Ask Jeeves much back in the day, instead mostly using AltaVista (RIP) and probably Lycos and a few others that I do not recall off the top of my head.

Having Google Search burst on the scene by 2000 was definitely quite the event, which was certainly when the web search game improved. Looking back it probably was less that Google Search was simply better, but more that it pushed hard just being a search engine, whereas the others were still very much stuck in that early WWW mindset of being a portal to the web.

To a certain extent this is understandable, as search engines aren’t a charity and running the associated hardware as well as the required bandwidth costs a lot of money. Despite this it would seem that we still have a rather thriving web search engine landscape, even if ChatGPT, Claude and kin are trying to become the very last ‘site’ you will ever need. This even as their little web crawlers are still doing the same crawling as has been done since the birth of the WWW.


hackaday.com/2026/05/19/how-se…