C'est vrai ça, c'est de gauche ? cestvraica.substack.com/p/cest-vrai-ca…

@jessyseonoob @eparody @abondance_com @AndellDam @SylvainDeaure @laura_NTE Je n'utilise pas l'IA générative, j'écris bien évidemment tout moi-même, minus les « citations » qui ne sont pas « pompées » mais mentionnées comme telles, et ne relèvent donc pas non plus du « duplicate content ».

Notez au passage qu'on est dans un pays où un préfet prend sans trembler un arrêté d'interdiction de porter des équipements de protection.

Sommés d’intervenir auprès de lycéens en garde à vue et de veiller à l'application des sanctions éducatives, les éducateurs de la protection judiciaire de la jeunesse s’agacent de consignes qui s'apparentent à du travail policier. Ils dénoncent une dérive sécuritaire qui menace leur mission et la scolarité des mineurs. Educ’ ou indic’ ?
l.lecanardenchaine.fr/06

@jessyseonoob @eparody @abondance_com lol : mon article a été publié à 16h01, celui d'abondance à 16h25... ce dernier étant lui-même une paraphrase du rapport que nous avait fourni 1492.vision, contrairement au mien, qui n'en cite que qq éléments, et qui avait été majoritairement écrit *avant* le strike

A group of hackers published classified data on Russian soldiers killed in the war, from Russia's statistics agency Rosstat. In late August, the total was 450,100 (around 100k per year). It is in line with other independent estimates. There is also a regional breakdown.

"C'est difficile sur le plan psychique, c'est difficile humainement": @Youss_Badr témoigne des difficultés d'exercer au Tribunal judiciaire de Bobigny

"Juge rouge", "membre du Hamas", proximité avec les Frères musulmans: @Youss_Badr revient sur la campagne de cyberharcèlement dont il a été victime après avoir rendu son jugement contre le patron du média Frontières. Il critique notamment la "remise en cause de l'impartialité".

When I think of highly effective autonomous attacks, I don't think of anything from the AI era. I think of Emotet. I'd argue it was the pinnacle of sophistication for at-scale financially-motivated malware operations.

The malware lands on a corporate endpoint, immediately s SMTP (email) credentials, as well as their email inbox. Their inbox gets sent to the threat actor's backend processing pipeline, which scrapes the victim's inbox for email threads where the last reply was by someone other than the victim.

The pipeline then crafts a reply to the email thread containing a backdoored Microsoft Office document, which is usually presented as an invoice or something time-sensitive that the target is likely to open. The emails were then farmed out to the infected systems, and sent using legitimate stolen SMTP credentials.

The use of legit credentials + corporate systems as spam bots bypassed SPF / DKIM, and IP based spam blocklists, ensuring the email was highly likely to land in the target's inbox, not get blocked or sent to spam.

The recipient receives an email from a party they know, trust, have had previous communications with, and is in reply to an existing email exchange between the target and victim. Basically email worm meets extremely effective spearphishing at scale.

They say you don't gotta hand it to them, but you kinda do. The engineering that went into this botnet's infrastructure was incredible. The pipeline had a polymorphic engine that would rewrite the malware's code every time antivirus vendors tried to add detections for it. It put plenty of state-sponsored malware operations to shame.

The malware was so effective that 8 different countries banded together to stop it. They hacked into the command-and-control infrastructure, then used the malware's self-update command to push out code that removed the malware from the system and then deletes itself.

It set precedent for governments being able to, in extreme circumstances, mass-hack victim systems and deploy code designed to disinfect said systems. Previously, there was only law enforcement precedent for triggering the malware's built in remove command, displaying warning messages, or simply just seizing / hijacking the control infrastructure.

The botnet had been running for about 12 years when it was taken out in 2021. They just don't make malware like they used to. Everything from the post AI-era is borderline slop and I'm bored out of my mind analyzing it.

The below image is what the Microsoft Office documents the target received would look like. Clicking the "Enable Content" button runs the malware.

As heavy rain & cold hit #Gaza, families and their #children are facing devastating conditions in makeshift tents with little protection.

@UNICEF is doing what we can to support but much more needs to be done.

Access for all aid & more funding is vital. Children cannot wait.

méprisant, infecte, Bordélique, bref UN TROLL DE 55KG tout mouillé qui masque son ignorance des sujets par un comportement de gamin capricieux

OPINION. « 929 milliards de pertes de recettes annuelles cumulées entre 2018 et 2025 »
➡️ l.latribune.fr/aL2

Selon @RSF_inter, au moins 40 journalistes entravés par les forces de l'ordre dans la couverture des mobilisations en France, dont 21 victimes de violences physiques (coups de matraque, tirs de LBD, canon à eau) ! Les journalistes doivent pouvoir faire leur travail !

@JeanAbbiateci Merci Jean, même si je me sens *un peu* seul à enquêter et documenter cette pollution, concurrence déloyale & escroquerie intellectuelle, & que je ne comprends pas pourquoi les autres médias n'en parlent pas
FYI, 150~200 autres médias GenAI sont encore recommandés par Discover FR

Avec sa douce voix et sa cabane dans les bois, Léo Commune prône une écologie radicale. L’influenceur anti-tech, qui n’est pas à une contradiction près, a des positions sur la santé ou le féminisme qui frôlent le réac’ et inquiètent à gauche.

streetpress.com/1793699740-der…

Lyon : le policier qui a frappé une femme en fauteuil roulant porte plainte pour « outrage et violence ». Il l'accuse de lui avoir foncé dessus avec son fauteuil

lyonmag.com/article/154785…

@JeanAbbiateci & SICESI, leur sous-traitant, ainsi que Reworld.
Google a en effet modifié ses règles de sorte de pénaliser les profils d’auteurs fictifs, d’obliger à « vérifier manuellement » les contenus générés par IA, et de privilégier le « travail humain ».
next.ink/263676/google-…

É a primeira vez que eu vejo uma música eletrônica analógica

@fabienr34 & voici les raisons pour lesquelles ils ont été pénalisés :
next.ink/263676/google-…

What actual f*ck @DarioAmodei / @boris / @TheAmolAvasare

Let me get this straight - I get this email telling me:

1. A cybersecurity "research" company gets into your internal systems while... *checks notes*

"conducting a security testing exercise on its own initiative and on"

2. You "cannot confirm whether any particular person’s information was viewed," then in the same email say "we have no reason to believe you are at heightened risk."

3. You also try to reassure by saying "the cybersecurity firm has certified in writing that it has deleted the accessed data and will not use it."

Translation - they pinky promised they deleted everything they gained unauthorised access to.

I've been hacking companies for 15+ years, so let me spell it out.

Accessing systems without authorisation has a name -hacking. Calling it a "security testing exercise" doesn't change that.

Honestly, the access itself doesn't bother me much. The irony does.

I’ve spent over $50k on API credits in the last six months and contributing to CVP by accepting logging.

On top of that, I've reached out to your teams to collaborate on security research (actual research - not the kind that has you send out privacy notices to your customers) and heard nothing.

I'm getting deeply unserious security vibes and considering moving all my (and my clients) token spend to @OpenAI if I don't see material change here.