The Path To Be Just The Right Amount Of Paranoid (Cybersecurity Edition) - Denim Latić
#HackLu #LightningTalk @hack_lu
https://youtu.be/RAZXLXwHlVQ
XFEDI
ActivityPubFederated
HELLO, FEDIVERSE
Good conversations travel.
Public updates from xsukax and this corner of the network.
Sign In to your accountPublic posts known to this server, including selected instances.
@jan For me personally most of my understanding of sandboxes derive from what Chromium team has ever done starting from https://lwn.net/Articles/332974/. This was before seccomp filters :-) Chromium is a great source of information for this topic.
LWN.netSeccomp and sandboxingBack in 2005, Andrea Arcangeli, mostly known for memory management work in those days, wandered [...]
Transphobia uspol Show content
My heart goes out to trans kids first learning about trans people and cracking their eggs from hateful attack ads about trans people splattered all over the place. I'm sure we have thousands of little siblings who hadn't even heard you can be another gender before all this shit.
SNP call out BBC as Question Time 'to debate Scotland without Scottish voice'
https://www.thenational.scot/news/26661592.snp-pan-bbc-question-time-debating-scotland-without-scottish-voice/?ref=rss
The NationalSNP call out BBC as Question Time 'to debate Scotland without Scottish voice'THE SNP have hit out at the BBC ahead of a Question Time show which is due to debate Scottish oil and gas without any Scottish representation on the panel ...
Silence and Sponsorship
Why has a prestigious education title published nothing on the recent scrutiny of former Reform UK academic James Orr?
Byline TimesSilence and SponsorshipWhy has a prestigious education title published nothing on the recent scrutiny of former Reform UK academic James Orr? Samantha Asumadu reports
"European regulators are investigating whether Booking.com is doing enough to protect travelers from fraudsters who exploit hotel reservations, impersonate property owners, and trick customers into making fraudulent payments."
Bitdefender: Booking.com has a scam problem. The EU wants answers https://www.bitdefender.com/en-us/blog/hotforsecurity/eu-booking-com-phishing-scams-investigation #scam #infosec
Hot for SecurityEU investigates Booking.com over phishing scamsThe EU is investigating Booking.com over fake hotel listings, phishing scams and fraudulent payments. Here's what travelers should know.
Odpowiadając 🔗Eteryu
„Tymczasem oryginalne Zero Trust (stworzone przez Johna Kindervaga i sformalizowane przez NIST) to filozofia "Never trust, always verify" – czyli dokładnie to, o czym piszę na eteryu.space i distrust.pl. To postawa osobista: nie ufaj domyślnie, weryfikuj i świadomie zarządzaj ryzykiem."
„Never trust, always verify" – nigdy nie ufaj, zawsze weryfikuj.
To właśnie rzecz której szanowany Eteryu nie może zrozumieć.
Zero Trust - można odnieść do właśniej sieci, ponieważ możesz ją zweryfikować. Przykładowo korzystając z Tailscale, mając swój własny VPN.
Eteryu głosi Zero Trust wobec zewnętrznego, komercyjnego VPN-a: tego przecież zweryfikować nie możesz, możesz jedynie polegać na obietnicy dostawcy usługi.
Serio tego nie trybisz?
Jak już wcześniej tłumaczyłem, zresztą nie tylko ja, w nagraniu Privacy Guides zostało to głośno powiedziane, co więcej, kierowane bezpośrednio do autora: Eteryu. 🫢
Więcej: 🔗tutaj
EterYuu
...zero tust technologies like you're like...
~
Carney and Erdogan launch ‘strong and resilient’ Canada-Turkiye partnership https://www.aljazeera.com/news/2026/10/22/carney-and-erdogan-launch-strong-and-resilient-canada-turkiye-partnership?traffic_source=rss
Al JazeeraCarney and Erdogan launch ‘strong and resilient’ Canada-Turkiye partnershipOn trade, investment and innovation, leaders will work toward conclusion of a Canada-Turkiye Free Trade Agreement.
RE: https://mastodon.social/@keyboards/117481144756217757
Hot dang! 🥵😍
Mastodon.socialKeyboards (@[email protected])Attached: 1 image
Toi Suomen Yrittäjät on kyllä metka organisaatio. Kovasti väittävät olevansa yksityisen markkinatalouden puolella, mutta aina vaan yrittäjien saama julkinen tuki on liian pientä.
Mikään raha ei riitä, jos sen saa ilmaiseksi.
Yle UutisetHallitukselta esitys ammattidieselistä, Suomen Yrittäjät tyrmää tasonVeronpalautuksen olisi tarkoitus tulla voimaan, kun EU:n polttoaineen jakelun päästökauppa alkaa vuoden 2028 alussa.
TIP: Nevýhody elektrokol
V předchozím tipu jsme probrali výhody elektrokol, takže je čas řešit i nevýhody. Pochopitelně existují a vy sami musíte zvážit, jak s nim naložíte.
Kolotipy.czTIP: Nevýhody elektrokolV předchozím tipu jsme probrali výhody elektrokol, takže je čas řešit i nevýhody. Pochopitelně existují a vy sami musíte zvážit, jak s nim naložíte.
Nevýhody elektrokol
Budete potřebovat elektřinu. Což doma asi problém nebude, nabíječka je jako každé jiné nabíječky (občas trochu větší), al
Bluesky SocialAnne Applebaum (@anneapplebaum.wsocial.eu)"Realism" is an empty doctrine - and "realists" are just mimicking Moscow talking points, says @EdwardGLuce
https://giftarticle.ft.com/giftarticle/actions/redeem/8fb9bce2-7588-4aec-84ce-c7934c7ea972
RE: https://social.bau-ha.us/@maschinenraum/117484449446178000
I bet this would work on the local tweakers
We now provide pre-computed secure private keys for certificate authorities in need
[email protected](noch) maschinenraum (@[email protected])Attached: 1 image
We now provide pre-computed secure private keys for certificate authorities in need
🚀 qt-wasm-builder 6.12.0-alpine3.24.3-r1 is out!
This release upgrades Qt to 6.12, Emscripten to 5.0.5, and updates the Alpine base image to 3.24.3.
Happy building!
🔗 https://github.com/0x61nas/qt-wasm-builder/releases/tag/6.12.0-alpine3.24.3-r1
#Qt #WebAssembly #WASM #Emscripten #AlpineLinux #Cplusplus #OpenSource #Docker
🟠 HOCH · Oracle JD Edwards EnterpriseOne: mehrere Schwachstellen
NCSC-NL
https://alerts.neonotu.com/de/oracle-jd-edwards-enterpriseone-87b7e6aa/
neonotuOracle JD Edwards EnterpriseOne: mehrere Schwachstellen | neonotuNCSC-NL meldet mehrere Schwachstellen in Oracle JD Edwards EnterpriseOne mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen un…
Exclusivo Música
Desacelerar e contemplar: o convite da pianista Joana Gama
https://www.publico.pt/2026/10/22/culturaipsilon/noticia/desacelerar-contemplar-convite-pianista-joana-gama-2191899 #Ípsilon, #Cultura
🎼 ■ Los 40 music awardsLista completa con los nominados de la categoría Internacional de LOS40 Music Awards Santander 2026 ■
https://los40.com/2026/10/22/lista-completa-con-los-nominados-de-la-categoria-internacional-de-los40-music-awards-santander-2026/?int=MASTODON_WORLD
LOS40Lista completa con los nominados de la categoría Internacional de LOS40 Music Awards Santander 2026 | LOS40Olivia Dean parte como máxima nominada internacional de los premios musicales que se celebran en Barcelona (Cataluña)
If Tim Scott wants to play the unsubstantiated rumor game, maybe his family will explain the shrine to Pat Boone out in the garage.
Maybe Vibe Coding Should Be Called “Cuck Coding” Because You Just Sit in a Chair and Watch
“Meanwhile, everyone with a Claude subscription and a half-baked app idea fancies themselves a bona fide programmer, too.”
https://futurism.com/artificial-intelligence/vibe-coding-cuck-coding
FuturismMaybe Vibe Coding Should Be Called "Cuck Coding" Because You Just Sit in a Chair and WatchTechies, it might be time to abandon the term "vibe coding" since there's been quite a bit of a "vibe shift."
Em meio ao turbilhão do segundo turno das eleições, ponho-me a pensar em algo para tentar distrair a cabeça que dói continuadamente há alguns dias:
existe alguma conversa ou reflexão sobre questões éticas relacionadas ao uso de software como os do #artcraft?
TGIF
Our Technical Director Andrei Robachevsky will be in Sofia, Bulgaria next week for RIPE NCC's #RIPE93.
RIPE meetings bring together Internet service providers, network operators, and other interested parties from around the world to discuss Internet number resources and current technical and policy issues, including routing, domain security, and measurement.
On Tuesday, October 27th at 15:20 (UTC +0200), Andrei has a session on "Updating the MANRS Network Operators Baseline: Progress and Impact." He'll present the progress of the Mutually Agreed Norms for Routing Security (MANRS) Network Operators Program Review Working Group, which is developing an updated normative specification through an open, consensus-based process. It will cover the key areas that were under discussion – including Route Origin Validation (#ROV), registration in the #IRR and #RPKI, prefix filtering and anti-spoofing – and the reasoning behind decisions about what belongs in a base standard versus best current practices and implementation guidelines.
On Thursday, October 29th at 16:20 (UTC +0200), he'll also be in the "RIR Governance Document Update" session to help attendees understand how the proposed governance framework aims to support the stability, accountability, and self-governance of the Internet numbers registry system.
If you'll be in Sofia, reach out to us. We'd love to meet you!
https://ripe93.ripe.net/programme/meeting-plan/sessions/134/E7MZLT/
ripe93.ripe.netTalk details: Updating the MANRS Network Operators Baseline: Progress and Impact, Andrei Robachevsky - RIPE 93Talk details for 'Updating the MANRS Network Operators Baseline: Progress and Impact' by Andrei Robachevsky at RIPE 93
@jan This is a sign for useless sandbox driven by an uneducated developer: a list of kernel enforcement mechanisms that have been piled.
AI corp on my PERSONAL PHONE this morning trying to sell me an agent to do my job.
I am polite with informing these folks "I won't buy and don't use this number" on the first offense. I will be very direct if they try again. Grrr.
Virginia State Senator, 82, Charged With Running a Family Drug Enterprise in Explosive New Federal Indictment
https://www.theroot.com/virginia-state-senator-82-charged-with-running-a-fami-2000131819?utm_source=flipboard&utm_medium=activitypub
Posted into Latest. @latest-TheRoot
Palmeiras goalkeeper Carlos Miguel saved Nonato's penalty as Palmeiras beat Fluminense in a shootout to reach the Copa Libertadores final for a second year running.
#Football #Fluminense #palmeiras #footballnews2026
https://www.mondiaries.com/2026/10/palmeiras-beat-fluminense-on-penalties.html
Mon Diaries: A Daily ChroniclePalmeiras Beat Fluminense On Penalties To Reach Libertadores FinalPalmeiras seal Libertadores final spot after shootout win over Fluminense...
conda.orgSecurity updates for conda, Mamba, and Pixi | conda.orgUpdate conda, Mamba, Pixi, and CA packages after the eMudhra certificate compromise.
The internet is fine, y'all. The problem we have is one of expectations: like expecting it to be private or secure or useful towards a purpose
"How is primary care access changing? A retrospective, repeated cross-sectional study of patient-initiated demand at general practices in England using a modern access model, 2019–2022" analyzes 10M+ primary care requests in England. Digital access grew while multimodal triage supported patient-centered care. #DigitalHealth #Telemedicine #PrimaryCare https://bmjopen.bmj.com/content/13/8/e072944
BMJ OpenHow is primary care access changing? A retrospective, repeated cross-sectional study of patient-initiated demand at general practices in England using a modern access model, 2019–2Objectives To explore trends in patient-initiated requests for general practice services and the association between patient characteristics including demographics, preferences for care and clinical needs and modes of patient contact (online vs telephone), and care delivery (face-to-face vs remote) at practices using a modern access model.
Design Retrospective repeated cross-sectional study spann
#Freebie (PC, Epic)
• Sker Ritual
https://store.epicgames.com/p/sker-ritual-aac702