Suche
Beiträge, die mit TECH getaggt sind
https://blog.codeminer42.com/codeminer42-dev-weekly-55/
#blog #codeminer42 #tech #news #weekly
"...Why has it taken a #Netflix show to focus minds and ignite interest in the serious consequences of social #media...?"
#SocialMedia #Health #Adolescents #Adolescence #Life #Tech #Technology
https://www.bmj.com/content/389/bmj.r658
Smartphone and social media harms: why we failed in our duty of care
The Netflix series Adolescence is hard to escape. One of the judges at our South Asia Awards in Delhi last weekend told me that his family were gripped by the drama about a teenage schoolboy in England who, influenced by the “manosphere,” murders a f…The BMJ
#sudotack #karaoke #tech #technology #review #blog
https://churapereviews.com/2025/04/04/unboxing-the-km300-a-hands-on-karaoke-experience/
New Ubuntu Linux Security Bypasses require manual Mitigations.Three security bypasses have been discovered in Ubuntu Linux’s unprivileged user namespace restrictions, which could be enable a local attacker to exploit vulnerabilities in kernel components.
http://blog.qualys.com/vulnerabilities-threat-research/2025/03/27/qualys-tru-discovers-three-bypasses-of-ubuntu-unprivileged-user-namespace-restrictions
#ubuntu #linux #bypasses #it #security #privacy #engineer #media #tech #news
![The three issues allow local unprivileged users to create user namespaces with full administrative capabilities and impact Ubuntu versions 23.10, where unprivileged user namespaces restrictions are enabled, and 24.04 which has them active by default. [Linux user namespaces allow users to act as root inside an isolated sandbox (namespace) without having the same privileges on the host.]
Researchers at cloud security and compliance company Qualys provides technical details for the three bypass methods.
<http://www.qualys.com/2025/three-bypasses-of-Ubuntu-unprivileged-user-namespace-restrictions.txt>
⚠️In a bulletin published on the official discussion forum [Ubuntu Discourse], the company shared the following hardening steps that administrators should consider:⚠️
• Enable kernel.apparmor_restrict_unprivileged_unconfined=1 to block aa-exec abuse. [not enabled by default]
• Disable broad AppArmor profiles for busybox & Nautilus, which allow namespace creation.
• Optionally apply a stricter bwrap AppArmor profile for applications like Nautilus that rely on user namespaces.
• Use aa-status to identify and disable other risky profiles.
<https://discourse.ubuntu.com/t/understanding-apparmor-user-namespace-restriction/58007>](https://nerdculture.de/system/media_attachments/files/114/274/188/479/177/019/original/eae1cffb25b5f853.jpeg "The three issues allow local unprivileged users to create user namespaces with full administrative capabilities and impact Ubuntu versions 23.10, where unprivileged user namespaces restrictions are enabled, and 24.04 which has them active by default. [Linux user namespaces allow users to act as root inside an isolated sandbox (namespace) without having the same privileges on the host.]
Researchers at cloud security and compliance company Qualys provides technical details for the three bypass methods.
<http://www.qualys.com/2025/three-bypasses-of-Ubuntu-unprivileged-user-namespace-restrictions.txt>
⚠️In a bulletin published on the official discussion forum [Ubuntu Discourse], the company shared the following hardening steps that administrators should consider:⚠️
• Enable kernel.apparmor_restrict_unprivileged_unconfined=1 to block aa-exec abuse. [not enabled by default]
• Disable broad AppArmor profiles for busybox & Nautilus, which allow namespace creation.
• Optionally apply a stricter bwrap AppArmor profile for applications like Nautilus that rely on user namespaces.
• Use aa-status to identify and disable other risky profiles.
<https://discourse.ubuntu.com/t/understanding-apparmor-user-namespace-restriction/58007>")
Qualys TRU Discovers Three Bypasses of Ubuntu Unprivileged User Namespace Restrictions | Qualys Security Blog
The Qualys Threat Research Unit (TRU) recently disclosed three security bypasses in Ubuntu’s unprivileged user namespace restrictions.Saeed Abbasi (Qualys, Inc.)
https://gomoot.com/josef-fares-dal-cinema-ai-videogiochi-unemozione-continua/
#blog #hazelightgames #joseffares #news #picks #tech #tecnologia
Josef Fares: dal cinema ai videogiochi, un’emozione continua
Dalla guerra civile libanese alla conquista dei Game Awards: la straordinaria parabola creativa di Josef Fares, un autore capace di fondere cinema e videogiochiGraziano (Gomoot : tecnologia e lifestyle)
#Vivaldi #Browsers #Tech #BigTech #LittleTech
A mountain of bits (links) awaits in exploration along with a message to remember to enjoy and be gracious to ourselves with intention.
https://www.adamsdesk.com/posts/little-bits-issue-23/
#blog #OpenSource #FreeSoftware #tech #news #LinkDump
I'm Florian 👨🏼💻, #IT/computer science student at #RWTHAachen 🇩🇪🎓 and #tech enthusiast.
I do lots of #selfhosting in my #homelab, develop apps with #Flutter 📲, but also websites 🌐 and other #software 💻.
I'm very passionate about emergency #medicine 🩺 and work as a #paramedic (Rettungssanitäter 🇩🇪) on the #ambulance 🚑 in #ems 🚨.
I love water sports, be it #sailing ⛵, #diving 🤿 or #swimming 🏊🏼♂️.
Mozilla warns Windows Users of critical Firefox Sandbox Escape Flaw.The vulnerability impacts the latest Firefox standard and extended support releases (ESR) designed for organizations that require extended support for mass deployments. Mozilla fixed the security flaw in Firefox 136.0.4 & Firefox ESR versions 115.21.1 + 128.8.1.
https://www.mozilla.org/en-US/security/advisories/mfsa2025-19/#CVE-2025-2857
#mozilla #firefox #update #it #security #privacy #engineer #media #tech #news
![Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser's sandbox on Windows systems. Tracked as CVE-2025-2857, this flaw is described as an "incorrect handle could lead to sandbox escapes" and was reported by Mozilla developer Andrew McCreight.
While Mozilla didn't share technical details regarding CVE-2025-2857, it said the vulnerability is similar to a Chrome zero-day exploited in attacks and patched by Google last week.
"Following the sanbdox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles into unpriviled [sic] child processes leading to a sandbox escape," Mozilla said in a advisory. "The original vulnerability was being exploited in the wild. This only affects Firefox on Windows. Other operating systems are unaffected."](https://nerdculture.de/system/media_attachments/files/114/262/693/596/163/774/original/3568705b6e1b7d76.jpeg "Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser's sandbox on Windows systems. Tracked as CVE-2025-2857, this flaw is described as an \"incorrect handle could lead to sandbox escapes\" and was reported by Mozilla developer Andrew McCreight.
While Mozilla didn't share technical details regarding CVE-2025-2857, it said the vulnerability is similar to a Chrome zero-day exploited in attacks and patched by Google last week.
\"Following the sanbdox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles into unpriviled [sic] child processes leading to a sandbox escape,\" Mozilla said in a advisory. \"The original vulnerability was being exploited in the wild. This only affects Firefox on Windows. Other operating systems are unaffected.\"")
zB #Google hält #Mozilla am leben und #Adobe, #Epic uva sponsern #Blender und so weiter. So existiert eine frei zugängliche angebliche #Konkurrenz und kann von sich weisen, dass man ein Monopolist sei. Abgesehen davon, dass damit auch noch unterschwellig seine #Dienste unter die Leute gebracht wird, so zu sagen als Gegenleistung.
(Editor’s Note: This article is part of the Just Security symposium “Thinking Beyond Risks: #Tech and Atrocity Prevention,” organized with the Programme on International Peace and Security at the Oxford Institute for #Ethics, Law and Armed Conflict. Readers can find here an introduction and other articles in the series as they are published.)
When #AI Fuels Atrocities — And How It Can Help Prevent Them
https://www.justsecurity.org/109612/ai-can-fuel-or-prevent-atrocities/ #artificialintelligence
When AI Fuels Atrocities -- And How It Can Help Prevent Them
Generative AI can fuel new forms of manipulation, but also holds promise for mitigating atrocities and enabling early detection.Brittan Heller (Just Security)
'Owned: How Tech Billionaires on the Right Bought the Loudest Voices on the Left, examines how new wealth has drawn some formerly progressive journalists. Owned looks at #MattTaibbi and #GlennGreenwald (who was always right wing libertarian with axes to grind that suited the left, as is snowden) once idealistic-sounding, left-leaning voices who shifted right'
https://accuracy.org/release/how-tech-billionaires-on-the-right-bought-the-loudest-voices-on-the-left/ #fakeleftists #proglibs
“How Tech Billionaires on the Right Bought the Loudest Voices on the Left” - accuracy.org
A new book, Owned: How Tech Billionaires on the Right Bought the Loudest Voices on the Left, examines how new wealth has drawn into its orbit some formerly progressive journalists.Institute for Public Accuracy
#korifi #cloudfoundry #blog #go #golang #kubernetes #Tech #technology
How to Connect to Korifi on KinD Using Go
Learn how to connect to Korifi on a KinD cluster using Go. This guide explains the differences in authentication between Cloud Foundry and Korifi, challenges faced, and step-by-step instructions with code examples.gciavarrini.github.io
The best space telescope you never heard of just shut down
An astronomer says goodbye to Gaia, the satellite that mapped the galaxy.The Conversation
https://grafa.com/asset/archer-exploration-ltd-5699-axe.asx?utm_source=asxmktsensitive&utm_medium=mastodon&utm_campaign=axe.asx
The “world’s worst digital dash”, a Nintendo Game Boy as a digital speedometer. Interfacing the handheld with the vehicle’s CAN bus system, this project has something to offer.
🖇️Check my Image Description’s🖇️
https://github.com/JohnSutley/Worlds-Worst-Digital-Dash
#diy #retro #gameboy #speedometer #car #canbus #system #it #engineer #artist #media #maker #tech #art #progamming #news
![Months of work have gone into decoding the Game Boy’s data bus and creating a schematic for the interface board. Tricking the Game Boy into thinking it was loading a game, while actually displaying incoming speed data. The screen’s low resolution and slow refresh rate rendered it barely readable in a moving vehicle. But [John]’s goal wasn’t practicality — it was just proving it could be done.](https://nerdculture.de/system/media_attachments/files/114/251/391/317/762/186/original/f1ea811e6cb4c4c3.jpeg "Months of work have gone into decoding the Game Boy’s data bus and creating a schematic for the interface board. Tricking the Game Boy into thinking it was loading a game, while actually displaying incoming speed data. The screen’s low resolution and slow refresh rate rendered it barely readable in a moving vehicle. But [John]’s goal wasn’t practicality — it was just proving it could be done.")
![[ImageSource: John Sutley]
Showing real-time vehicle speed on the Game Boy sounds like it should be relatively easy, but the iconic game system wasn’t exactly built for such a task. Its 2 MHz CPU and 160×144 pixel dot-matrix screen were every kid’s dream in 1989, but using it as a car dashboard is pushing it. To bridge that gap, [John] designed two custom circuit boards.
One interfaces with the Game Boy, intercepting its memory requests and feeding it data from a microcontroller. The other processes the CAN bus signals, translating speed information into a form the Game Boy can display. [John] used inexpensive tools and software to read the CAN bus data, and used GBDK-2020 to write the software in C.](https://nerdculture.de/system/media_attachments/files/114/251/392/340/955/496/original/f54a186d63357559.png "[ImageSource: John Sutley]
Showing real-time vehicle speed on the Game Boy sounds like it should be relatively easy, but the iconic game system wasn’t exactly built for such a task. Its 2 MHz CPU and 160×144 pixel dot-matrix screen were every kid’s dream in 1989, but using it as a car dashboard is pushing it. To bridge that gap, [John] designed two custom circuit boards.
One interfaces with the Game Boy, intercepting its memory requests and feeding it data from a microcontroller. The other processes the CAN bus signals, translating speed information into a form the Game Boy can display. [John] used inexpensive tools and software to read the CAN bus data, and used GBDK-2020 to write the software in C.")
GitHub - JohnSutley/Worlds-Worst-Digital-Dash
Contribute to JohnSutley/Worlds-Worst-Digital-Dash development by creating an account on GitHub.GitHub
jetzt noch bei X bleibt ist nicht mehr zu retten.
#leavex #musk #elonmusk #datenschutz #exploration #datamining #X #tech #socialmedia
https://blog.codeminer42.com/codeminer42-dev-weekly-54/
#blog #codeminer42 #tech #news #weekly
Codeminer42 Dev Weekly #54 - The Miners
The last and newest Dev Weekly of March is out! Check it out and share with your friends.Gabriel Quaresma (The Miners - Codeminer42's Engineering Blog)
#PeerTube: the Fediverse’s decentralized video platform (part 2: creator edition)
https://blog.elenarossini.com/peertube-the-fediverses-decentralized-video-platform-part-2-creator-edition/
My PeerTube account: @elena
mentioning @Framasoft @peertube @paige @srosset @MakerTube
#ActivityPub #tech #Fediverse #activism #BigTech #SocialMedia #FOSS #blog
PeerTube: the Fediverse’s decentralized video platform (part 2: creator edition)
What is it like to use PeerTube as a video creator? Spoiler alert: it's amazing!Elena Rossini
Despite the hype from Silicon Valley, my belief is the generative #AI and LLM bubble is nearing its bursting point.
Like with the dot com crash, Wall Street and Investors are getting impatient and want to see profitability.
Most AI startups aren't even close. And mass adoption of AI tools still hasn't become ubiquitous among the general public - and probably never will.
Most "features" are over-hyped and AIs can still "hallucinate" (lie) when providing information - a very big issue the tech industry is trying to downplay.
Startups are going to either shut down or be acquired by the bigger players.
Also, like the dot com bust, only the biggest, most deep-pocketed players are going to remain standing after the shakeout.
I think the AI landscape is going to start imploding as early as the end of this year.
AI will still play a role, but not be as revolutionary as the tech industry wants us to believe.
The creators and top execs of Meta do not allow their own children on it.
Think about that.
#carelesspeople #facebook #tech
https://grafa.com/news/technology-kyndryl-holdings-shares-plunge-after-short-seller-report-alleges-financial-manipulation-408027?utm_source=us_news_en&utm_medium=mastodon&utm_campaign=408027
https://gomoot.com/gemini-2-5-pro-il-modello-ia-di-google-che-pensa/
#blog #dataset #gemini #google #grok #llm #lmarena #modelloai #multimodale #news #openai #pensare #picks #tech #tecnologia #token
Gemini 2.5 Pro: il modello IA di Google che “pensa”
Gemini 2.5 Pro, il "modello più intelligente" di Google focalizzato sul ragionamento. Prestazioni top, multimodalità, contesto enorme e accesso via AI Studiocristina (Gomoot : tecnologia e lifestyle)
https://gomoot.com/gpt-4o-riceve-la-generazione-immagini-integrata-in-chatgpt
#ai #blog #gpt4o #ia #news #openai #picks #tech #tecnologia
GPT-4o riceve la generazione immagini integrata in ChatGPT
GPT-4o cambia il generatore di immagini DALL-E con un generatore di immagini nativo in grado di creare immagini dettagliate e coerenti con interazioni in chat.Graziano (Gomoot : tecnologia e lifestyle)
https://grafa.com/news/auto-and-cars-mobileye-shares-jump-as-volkswagen-deepens-collaboration-on-autonomous-driving-tech-405854?utm_source=us_news_en&utm_medium=mastodon&utm_campaign=405854
According to LayerX Labs, who have been tracking this campaign for more than a year, the phishing attack attempts to trick Mac users into thinking that their computers have been “locked” via a fake security warning that pops up while users are browsing the web.
https://layerxsecurity.com/blog/layerx-identifies-new-phishing-campaign-targeted-at-mac-users/
#apple #macos #it #security #privacy #engineer #media #tech #news
![[ImageSource: LayerX Labs]
The webpage then appears to be frozen which, like most phishing attempts, adds a sense of urgency and fear that something is wrong with your computer. The window that appears displays a warning that the computer has been subjected to a trojan virus and asks the user to enter in their Mac username and password.
The warning message [captured in a screenshot by LayerX Labs], contains some glaring errors that show it’s not legitimate: It does not conform to any of Apple’s styling either in color or general appearance and misspells macOS as “MacOS.”
It also provides a phone number to contact “support,” however, when [Macworld] called this number they only got a message playback that said the recipient was not available and to call back between 8am and 5pm – even though they were calling during that time frame. The number is obviously fake and will likely never be answered.
<https://www.macworld.com/article/2642938/new-mac-phishing-attack-causes-fake-freezes-to-nab-your-apple-id-password.html>](https://nerdculture.de/system/media_attachments/files/114/223/204/816/717/565/original/c3108acab7427601.jpeg "[ImageSource: LayerX Labs]
The webpage then appears to be frozen which, like most phishing attempts, adds a sense of urgency and fear that something is wrong with your computer. The window that appears displays a warning that the computer has been subjected to a trojan virus and asks the user to enter in their Mac username and password.
The warning message [captured in a screenshot by LayerX Labs], contains some glaring errors that show it’s not legitimate: It does not conform to any of Apple’s styling either in color or general appearance and misspells macOS as “MacOS.”
It also provides a phone number to contact “support,” however, when [Macworld] called this number they only got a message playback that said the recipient was not available and to call back between 8am and 5pm – even though they were calling during that time frame. The number is obviously fake and will likely never be answered.
<https://www.macworld.com/article/2642938/new-mac-phishing-attack-causes-fake-freezes-to-nab-your-apple-id-password.html>")
LayerX Labs Identifies New Phishing Campaign Targeted at Mac Users - LayerX
A new phishing attack campaign, targeting Mac users and identified by LayerX Labs, shows the trials and tribulations of combating online phishing, and how attacks morph and shift in response to adaptations by security tools.Or Eshed (LayerX)
https://grafa.com/news/health-kezar-life-sciences-reports-positive-results-for-zetomipzomib-and-2024-financials-405779?utm_source=us_news_en&utm_medium=mastodon&utm_campaign=405779
