Près de 20 % des 1 000 sites d'info les plus mis en avant par l'algorithme Discover de recommandation de contenus de Google, et 33 % des 120 sites les plus recommandés par Google News, à la rubrique Technologie, sont générés par IA. #Thread /1

next.ink/198619/18-des-…

C'est vrai ça, c'est de gauche ? cestvraica.substack.com/p/cest-vrai-ca…

Notez au passage qu'on est dans un pays où un préfet prend sans trembler un arrêté d'interdiction de porter des équipements de protection.

Sommés d’intervenir auprès de lycéens en garde à vue et de veiller à l'application des sanctions éducatives, les éducateurs de la protection judiciaire de la jeunesse s’agacent de consignes qui s'apparentent à du travail policier. Ils dénoncent une dérive sécuritaire qui menace leur mission et la scolarité des mineurs. Educ’ ou indic’ ?
l.lecanardenchaine.fr/06

A group of hackers published classified data on Russian soldiers killed in the war, from Russia's statistics agency Rosstat. In late August, the total was 450,100 (around 100k per year). It is in line with other independent estimates. There is also a regional breakdown.

"C'est difficile sur le plan psychique, c'est difficile humainement": @Youss_Badr témoigne des difficultés d'exercer au Tribunal judiciaire de Bobigny

"Juge rouge", "membre du Hamas", proximité avec les Frères musulmans: @Youss_Badr revient sur la campagne de cyberharcèlement dont il a été victime après avoir rendu son jugement contre le patron du média Frontières. Il critique notamment la "remise en cause de l'impartialité".

When I think of highly effective autonomous attacks, I don't think of anything from the AI era. I think of Emotet. I'd argue it was the pinnacle of sophistication for at-scale financially-motivated malware operations.

The malware lands on a corporate endpoint, immediately s SMTP (email) credentials, as well as their email inbox. Their inbox gets sent to the threat actor's backend processing pipeline, which scrapes the victim's inbox for email threads where the last reply was by someone other than the victim.

The pipeline then crafts a reply to the email thread containing a backdoored Microsoft Office document, which is usually presented as an invoice or something time-sensitive that the target is likely to open. The emails were then farmed out to the infected systems, and sent using legitimate stolen SMTP credentials.

The use of legit credentials + corporate systems as spam bots bypassed SPF / DKIM, and IP based spam blocklists, ensuring the email was highly likely to land in the target's inbox, not get blocked or sent to spam.

The recipient receives an email from a party they know, trust, have had previous communications with, and is in reply to an existing email exchange between the target and victim. Basically email worm meets extremely effective spearphishing at scale.

They say you don't gotta hand it to them, but you kinda do. The engineering that went into this botnet's infrastructure was incredible. The pipeline had a polymorphic engine that would rewrite the malware's code every time antivirus vendors tried to add detections for it. It put plenty of state-sponsored malware operations to shame.

The malware was so effective that 8 different countries banded together to stop it. They hacked into the command-and-control infrastructure, then used the malware's self-update command to push out code that removed the malware from the system and then deletes itself.

It set precedent for governments being able to, in extreme circumstances, mass-hack victim systems and deploy code designed to disinfect said systems. Previously, there was only law enforcement precedent for triggering the malware's built in remove command, displaying warning messages, or simply just seizing / hijacking the control infrastructure.

The botnet had been running for about 12 years when it was taken out in 2021. They just don't make malware like they used to. Everything from the post AI-era is borderline slop and I'm bored out of my mind analyzing it.

The below image is what the Microsoft Office documents the target received would look like. Clicking the "Enable Content" button runs the malware.

As heavy rain & cold hit #Gaza, families and their #children are facing devastating conditions in makeshift tents with little protection.

@UNICEF is doing what we can to support but much more needs to be done.

Access for all aid & more funding is vital. Children cannot wait.

méprisant, infecte, Bordélique, bref UN TROLL DE 55KG tout mouillé qui masque son ignorance des sujets par un comportement de gamin capricieux

OPINION. « 929 milliards de pertes de recettes annuelles cumulées entre 2018 et 2025 »
➡️ l.latribune.fr/aL2

Selon @RSF_inter, au moins 40 journalistes entravés par les forces de l'ordre dans la couverture des mobilisations en France, dont 21 victimes de violences physiques (coups de matraque, tirs de LBD, canon à eau) ! Les journalistes doivent pouvoir faire leur travail !

Avec sa douce voix et sa cabane dans les bois, Léo Commune prône une écologie radicale. L’influenceur anti-tech, qui n’est pas à une contradiction près, a des positions sur la santé ou le féminisme qui frôlent le réac’ et inquiètent à gauche.

streetpress.com/1793699740-der…

Lyon : le policier qui a frappé une femme en fauteuil roulant porte plainte pour « outrage et violence ». Il l'accuse de lui avoir foncé dessus avec son fauteuil

lyonmag.com/article/154785…

É a primeira vez que eu vejo uma música eletrônica analógica

What actual f*ck @DarioAmodei / @Boris / @TheAmolAvasare

Let me get this straight - I get this email telling me:

1. A cybersecurity "research" company gets into your internal systems while... *checks notes*

"conducting a security testing exercise on its own initiative and on"

2. You "cannot confirm whether any particular person’s information was viewed," then in the same email say "we have no reason to believe you are at heightened risk."

3. You also try to reassure by saying "the cybersecurity firm has certified in writing that it has deleted the accessed data and will not use it."

Translation - they pinky promised they deleted everything they gained unauthorised access to.

I've been hacking companies for 15+ years, so let me spell it out.

Accessing systems without authorisation has a name -hacking. Calling it a "security testing exercise" doesn't change that.

Honestly, the access itself doesn't bother me much. The irony does.

I’ve spent over $50k on API credits in the last six months and contributing to CVP by accepting logging.

On top of that, I've reached out to your teams to collaborate on security research (actual research - not the kind that has you send out privacy notices to your customers) and heard nothing.

I'm getting deeply unserious security vibes and considering moving all my (and my clients) token spend to @OpenAI if I don't see material change here.

The story keeps getting crazier. To recap everything that has been reported so far:

- The US intelligence community discovered that Jensen Huang, the CEO of the largest company in the world, was sleeping with Alice Huang, a Chinese spy and an executive at Megaspeed. (FT)
- Multiple independent investigations have concluded that Megaspeed is likely a Chinese cutout, which helps Chinese companies access AI chips or circumvent export controls. (NYT and Bloomberg)
- The US intelligence community also concluded that Alice Huang’s goal was to convince Jensen to lobby the U.S. government to loosen export controls on advanced AI chips. (NYT)
- The intelligence community relayed this information to “a small group of top US government officials” earlier this year. (FT)
- Over the last year, Jensen Huang has repeatedly lobbied the U.S. government to loosen export controls on advanced chips. @BISgov has done so, not only by permitting the export of H200 chips to China, but also not enforcing export controls that would have required a license for exports of the most advanced Blackwell chips to Megaspeed and Southeast Asia.
- Although @CommerceGov leadership was presumably briefed on this information by the U.S. intelligence community, @BISgov has taken no actions to tighten controls on Megaspeed or Southeast Asia.
- Megaspeed remains a preferred cloud partner of Nvidia, and continues to receive Nvidia Blackwell chips despite employing a Chinese spy who reportedly is romantically engaged with the CEO of Nvidia.
- Tens of billions of dollars worth of AI chips have been exported to Southeast Asia this year alone, and Malaysia and Singapore are now two of the four largest importers of AI chips in the world.

What is going on here??? We need answers. The question of who gets the most advanced AI chips in the world is literally the defining strategic question of our time. And not only does it seem like the MSS may be directly influencing the debate on export controls in the United States, but also @CommerceGov is refusing to listen to the warnings of the IC on this issue. What is a POSSIBLE good explanation for why Megaspeed is still receiving chips? Why is there not a license requirement for AI chip shipments to all of Southeast Asia? This is beyond strange at this point.

The fallout from this story will be massive. Obviously, the motivations underpinning Nvidia’s policy views opposing export controls must now all be questioned. But also, how did @BISgov sit on this information and has still taken no actions? We need answers.

Les ordres de grandeur.
Pas assez de greffiers de proc de juges de salles d'audience...
Pas assez de places en détention de conseillers d'insertion de médecins coordonnateurs..
Notre justice n'est pas forgée pour supporter cette vague.

We launched Privacy portal to beta-testers.

It's a one place for decentralised privacy.

Please, play with it, break it, contribute, experiment. Lets build a Home for our digital privacy together.

portal.web3privacy.info

Contacté par Next, Google déréférence 9 des plus gros sites d’infos générés par IA qui polluent Discover.
Google pénalise en effet désormais les profils d’auteurs fictifs, et oblige aussi à «vérifier manuellement» les contenus générés par IA.
@nextinpact next.ink/263676/google-…

RT @DrLiz16: 🇺🇸 Coup de tonnerre à la Maison-Blanche ! Après la débâcle républicaine aux midterms, Trump écarte Susie Wiles et la remplace…