Finalmente Plico è pronta 🎉 Con Plico (plico.cc) potete compilare e poi firmare con la CIE i vostri documenti PDF, direttamente sul vostro smartphone, senza che i documenti lascino mai il vostro smartphone. Un progetto a cui io e @massi.pippi.im abbiamo lavorato perché davvero stufi dei vari SaaS.

Plico | Firma documenti PDF con CIE in modo semplice

Plico: app iOS e Android per firmare PDF localmente sul dispositivo.

plico.cc

i didn’t think it was physically possible, but there’s finally something worse than `curl | sh`

(sono in vena di thread, potrei riaprire il blog, non lo so, spero non vi diano fastidio) Al fondo trovate il link con il thread facile da leggere Partendo da questo articolo www.ilpost.it/2026/08/02/t... e ricordando i miei anni a guidare ambulanze, prima dell'avvento del TomTom, alcuni consigli

Un comune in Veneto ha troppe vie con lo stesso nome

A Setteville, in provincia di Belluno, i casi di omonimia tra le strade sono molti, e recentemente c'è stata anche una conseguenza tragica

ilpost.it

ECMAScript excitement 😉 Congrats to my coworker @ashley-c.bsky.social at TechAtBloomberg on advancing Await Dictionary to Stage 3 at TC39 🎉 Promise.all returns positional results as an array. Promise.allKeyed allows named results inside an object 👍 github.com/tc39/proposa...

My on-site training in Roma doesn't have many registrations yet and *may* be cancelled. So, if you are interesting in attending this session, do book your seat NOW! romhack.io/training/202...

RE: https://infosec.exchange/@hnsec/116923239649243702 My #Semgrep C/C++ ruleset is ready for prime time again! Grab it before our new robot overlords take over the field of #VulnerabilityResearch entirely 🤖

HN Security@hnsec.infosec.exchange.ap.brid.gy · 3w ago

Our Technical Director @raptor just shipped v2.0.0 of his #Semgrep C/C++ ruleset — now officially included in the @semgrep registry. Marco built this ruleset back in 2022 to speed up C/C++ #VulnerabilityResearch, and it's since become a go-to reference, featured in several guides and toolkits […]

People are going to blame the kids for the damage that academic institutions, amoral tech billionaires, and corrupt politicians have done and I hate it. futurism.com/future-socie...

Bosses Horrified as "AI Native" College Graduates Hit the Workplace

"AI native" college graduates are hitting the workplace -- and, as experts warned, bosses are finding their performance disappointing.

futurism.com

With @ostifofficial.bsky.social and @sovereign.tech we audited @symfony.com YAML, the library bundled in that PHP framework that all your friends probably run somewhere in their stack. If that's true, please update and read the attached blogpost to find out if you're affected! Links ⏬

I miss when corporations used to go above and beyond to hide misconduct and deceive the public.

Ketan Joshi@ketanjoshi.co · last mo.

NEW BLOG FOR YOU Google's energy consumption numbers in their new climate report are mind-blowing. 2 years ago they flipped from linear to exponential growth, and their climate impact is blowing out, too. A WILD testament to the obscene bloat and waste of GenAI: ketanjoshi.co/2026/07/01/g...

Ondata di calore all’apice. Sabato la storica ondata di calore che da circa due settimane tiene in ostaggio gran parte d’Europa raggiungerà l’apice. Sarà una delle giornate più calde mai registrate nel nostro continente; da ovest a est le temperature massime raggiungeranno valori estremi…1/6

we have known for a long time what was to come

Abbey@abbeyarletto.bsky.social · last mo.

When reality surpasses fiction! Top: fictional forecast for August 2050, broadcast by French TV in 2014 to warn about the consequences of global warming. Bottom: Real French forecast for yesterday, June 22, 2026.

In a new privacy policy, Anthropic says Claude will soon require you to upload your driver's license or passport for a variety of reasons. The ID checker is Persona, a firm funded by Trump ally Peter Thiel. As a U.S. company, Persona is also subject to gov't demands for people's verification data. 👀

Anthropic says Claude may want to see your ID | TechCrunch

Claude's chatbot may ask to verify your age and identity "in certain circumstances," such as with a passport or driver's license, according to a privacy policy change.

techcrunch.com

There are only two file formats: disguised zips and renamed text files. JSON? Text. EPUB? Zip. CSV? Text. EXE? Zip. SVG? Text. DOCX? Zip. ICS? Text. APK? Zip.

Just published a blog post about the Kdenlive RCE we found If you’re into FFmpeg arguments and reading docs, you won’t want to miss it! codeanlabs.com/2026/06/cve-...

CVE-2026-45184 - Popping calc on Kdenlive - Codean Labs

codeanlabs.com

i tamango hanno fatto uscire musica. è una cosa bella, com'è bello un venerdì di giugno dove il cielo è terso e la sera si sta bene con una felpina

NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner. Cleanest practical example I can think of for why over-indexing on first order "safety" is risky. 1/

Mythos AI is being used by National Security Agency in offensive cyber operations / cyberattacks. Anthropic has even embedded engineers inside the NSA to help deploy the model. Are frontier AI labs becoming active contractors in state cyber conflict? www.ft.com/content/d02d...

Una giornata molto triste per tutta l'informatica italiana, per il mondo del giornalismo serio e professionale. Se n'è andata Carola Frediani. www.guerredirete.it/addio-carola/

Addio Carola - Guerre di Rete

Oggi, 3 Giugno 2026, è venuta a mancare all'affetto della sua famiglia e dei suoi amici Carola Frediani. Carola è stata anima e linfa di Guerre di Rete e lascia un vuoto incolmabile in tutti coloro ch...

guerredirete.it

Hey, I wrote a thing about AI in astrophysics ergosphere.blog/posts/the-ma...

Lol, i guess

Jake Archibald@jakearchibald.com · 2mo ago

Watch out! Chrome has a huge bug with <input type="number"> which causes values to change unexpectedly. It's fixed in Chrome 150, but that won't land until the end of June.

Some more validation for hardenedjs.org: Mythos pen-testing in Firefox was frequently thwarted by frozen prototypes in the host process. hacks.mozilla.org/2026/05/behi...

Kate Sills@katelynsills.com · 3mo ago

Ooh, I just saw this part of the report. I can see my old coworker @kriskowal.com 's handiwork, plus I can guess at a few others involved. Nice work!

back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser

DOMPurify XSS via `selectedcontent` re-clone https://github.com/cure53/DOMPurify/security/advisories/GHSA-87xg-pxx2-7hvx This is one of the most interesting bypasses we have seen in a long time, and it feels that this new HTML element will cause lots of trouble in the future.

Big slay! maitai (@MaitaiThe) of Doyensec was able to exploit OpenAI Codex! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room for the deep dive. #Pwn2Own #P2OBerlin

How do commercial phone unlocking tools like Cellebrite actually work? In this technical overview, we explore the attack surfaces exposed by modern mobile devices, how those tools exploit them, and what can be done to better defend our privacy rights. osservatorionessuno.org/blog/2026/05...

Always nice to start the day with some good news 🫠 #EGU26

Willem Huiskamp@willemh.bsky.social · 3mo ago

The day is starting with Stefan's invited talk on the AMOC #EGU26 looking forward to the discussions

sharing here a cool resource for automating boring login process via Burp Extension: github.com/I-blank-I/CO... One of our folks in the office put some love and effort in this :)

GitHub - I-blank-I/COOOKIES: A powerful Burp Suite extension for automating complex authentication flows and managing session tokens across multiple user accounts

A powerful Burp Suite extension for automating complex authentication flows and managing session tokens across multiple user accounts - I-blank-I/COOOKIES

github.com

the process is part of the work. it’s not supposed to be easy. the effort creates good work. i can’t believe this needs to be explained to people who call themselves journalists.