Ebrius Disputatios

A thing's not wrong because it's illegal, a thing is illegal because it's wrong.

These are excepts of the creator of Hubzilla, Streams, Friendica and a few other Fediverse platforms, Mike Macgirvin.

The streams repository is a fediverse server with a long history. It began in 2010 as a decentralised Facebook alternative called Mistpark. It has gone through a number of twists and turns in its long journey of providing federated communications. The fediverse servers Friendica and Hubzilla are early branches of this repository.

The first thing to be aware of when discussing the streams repository is that it has no brand or brand identity. None. The name is the name of a code repository. Hence “the streams repository”. It isn't a product. It's just a collection of code which implements a fediverse server that does some really cool stuff. There is no flagship instance. There is no mascot. In fact all brand information has been removed. You are free to release it under your own brand. Whatever you decide to call your instance of the software is the only brand you'll see. The software is in the public domain to the extent permissable by law. There is no license.

If you look for the streams repository in a list of popular fediverse servers, you won't find it. We're not big on tracking and other spyware. Nobody knows how many instances there are or how many Monthly Active Users there are. These things are probably important to corporations considering takeover targets. They aren't so important to people sharing things with friends and family.

Due to its origins as a Facebook alternative, the software has a completely different focus than those fediverse projects modelled after Twitter/X. Everything is built around the use of permissions and the resulting online safety that permissions-based systems provide. Comment controls are built-in. Uploaded media and document libraries are built-in and media access can be restricted with fine-grained permissions – as can your posts. Groups are built-in. “Circles” are built-in. Events are built-in. Search and search permissions? Yup. Built-in also. It's based on Opensearch. You can even search from your browser and find anything you have permission to search for. Spam is practically non-existent. Online harrassment and abuse are likewise almost non-existent. Moderation is a built-in capability. If you're not sure about a new contact, set them to moderated, and you'll have a chance to approve all of their comments to your posts before those comments are shared with your true friends and family. For many fediverse projects, the only way to control this kind of abusive behavior is through blocking individuals or entire websites. The streams repository offers this ability as well. You'll just find that you hardly ever need to use it.

Because federated social media is a different model of communications based on decentralization, cross-domain single sign-on is also built-in. All of the streams instances interact cooperatively to provide what looks like one huge instance to anybody using it – even though it consists of hundreds of instances of all sizes.

Nomadic identity is built-in. You can clone your identity to another instance and we will keep them in sync to the best of our ability. If one server goes down, no big deal. Use the other. If it comes back up again, you can go back. If it stays down forever, no big deal. All of your friends and all your content are available on any of your cloned instances. So are your photos and videos, and so are your permission settings. If you made a video of the kids to share with grandma (and nobody else), grandma can still see the video no matter what instance she accesses it from. Nobody else can.

Choose from our library of custom filters and algorithms if you need better control of the stuff that lands in your stream. By default, your conversations are restricted to your friends and are not public. You can change this if you want, but this is the most sensible default for a safe online experience.

There are no inherent limits to the length of posts or the number of photos/videos you can attach or really any limits at all. You can just share stuff without concerning yourself with any of these arbitrary limitations.

Need an app? Just visit a website running the streams repository code and and install it from your browser.

Nobody is trying to sell you this software or aggressively convince you to use it. What we're trying to do is show you through our own actions and example that there are more sensible ways to create federated social networks than what you've probably experienced.

You can find us at https://codeberg.org/streams/streams

A support group is provided at @Streams

Have a wonderful day.

There are a number of traditional Facebook alternatives in the fediverse... if that's what you seek. Don't expect the same level of commercial focus as the Twitter alternatives. The Facebook-based platforms are usually more focused on online safety, family-friendly spaces, and identity management/resilience.

https://codeberg.org/streams/streams https://framagit.com/hubzilla/core https://github.com/friendica/friendica https://github.com/grishka/smithereen https://codeberg.org/fortified/forte

Controversial Business Moves To Europe To Protect Itself From Sanctions.

From SecurityLab

Controversial Business indeed. One can tell much about a story just by the headline sometimes. As soon as we saw this one, the first thing we thought, was this is a business run by Jews. Which probably means that these stores selling these alleged spy techs, are probably fake and everything going on there is a scam and a con.

In late 2023, an Israeli cybersecurity researcher from Tel Aviv was recruited through LinkedIn for a high-paying job abroad. Representatives of the company assured that this is a legitimate organization in the field of offensive security (Offensive Security), which is just starting its activities in Barcelona. However, the recruitment process made the researcher suspicious.

In an interview with TechCrunch, the specialist said that communication was accompanied by strange secrecy. Some company employees refused to give their full names and did not disclose the location of the office or even the name of the company for a long time. The researcher noted that it appeared to be an attempt to hide potentially problematic activity.

The company was presented by Alexey Levin, a former developer of spyware manufacturer NSO Group. Levin said the company is called Palm Beach Networks and develops sophisticated spyware ranging from exploits to spyware.

Barcelona was not chosen for a startup by chance. Company employees explained that the city is attractive due to its comfortable climate, tax incentives and developed infrastructure for IT business. However, this choice is questionable given the recent scandals surrounding the use of spyware against politicians and activists in Spain.

Barcelona has become a hotspot for companies developing exploits and spyware in recent years. Among them are the startup Paradigm Shift, which emerged after the collapse of Variston, and the company Epsilon, founded by a former employee of the defense giant L3Harris. In addition, Israeli developers who previously worked in Singapore have also settled in this Catalan city, making it a European hub for similar organizations.

The reasons for companies moving from Israel to Barcelona lie not only in the climate and favorable taxes. After a series of scandals with NSO Group, Israeli authorities began to restrict the export of spy technology, which forced firms to look for more friendly jurisdictions in the EU.

However, Palm Beach Networks has already ceased to exist under this name. According to the documents, she changed several legal entities, including Defense Prime Inc. and Head and Tail, which continues to operate in Spain. Head and Tail representatives do not comment on their activities, but on their website the company states that it deals with cybersecurity issues, including threat analysis and incident response, but the employees have experience working for well-known spyware manufacturers.

The Israeli researcher refused an offer to work at Palm Beach Networks, fearing a repeat of the fate of NSO Group employees who faced blocking of their accounts on social networks and visa problems in the United States. According to the specialist, working in a company with such a closed structure is too much of a risk, despite the high salary.

It's just that in 2025, Redmond residents will spend $80 billion on data centers for AI.

From Overclockers.

Microsoft has notified Microsoft 365 users in six countries in the Asia-Pacific region that they will be significantly increasing their renewal prices. Australian users, faced with rising costs of living, reacted particularly strongly to this news. Online, many have accused Microsoft of price gouging, pointing out that a number of the AI ​​features offered in M365 are available for free from other providers.

The price increases affected Australia, New Zealand, Malaysia, Singapore, Taiwan and Thailand. The cost of an annual Microsoft 365 Family subscription in Australia, for example, will increase from 139 to 179 Australian dollars (from 85.5 to 110 US dollars) – an increase of almost 29%. The price of the M365 Personal will jump from AU$109 to AU$159 (US$67 to 98), an increase of almost 46%. The Microsoft Australia website lists the new prices at AU$159 and AU$179 for Personal and Family subscriptions respectively.

Microsoft attributes the price increases to increased Microsoft 365 functionality over the past 12 years, including improved protection with Microsoft Defender, creative tools such as Clipchamp, numerous enhancements to Word, Excel, PowerPoint, OneNote and Outlook, and new features such as Microsoft Copilot and Microsoft Designer. The company says users can choose a version of Microsoft 365 without Copilot, thereby avoiding the price increase. However, in practice this option is difficult to find: it only appears when you cancel your subscription. A search for the “classic” version of M365 that the Microsoft representative mentioned also turned up no results.

While Microsoft hasn't confirmed whether the price increase will be in other regions or whether it will affect volume licenses, the company said the goal of the changes is to “listen, learn and improve.” The choice of six countries in the Asia-Pacific region to test customer response is not accidental: these countries are characterized by high levels of prosperity and widespread adoption of the latest technologies. Perhaps the negative response will force Microsoft to reconsider its pricing policy. After all, someone will have to pay for the $80 billion Microsoft plans to spend on data centers in 2025, most of which will be used for AI.

Roskomnadzor stated that they do not know the reasons for the fall of the Internet.

From SecurityLab.Ru.

There was a major outage in the work of Russian telecommunications providers, affecting users in Moscow and the Moscow region, regardless of their service provider. Operator customers report problems with Internet access and mobile applications.

Users complain about failures in the operation of mobile applications and the Internet from mobile operators. In particular, the following sites do not work for Russian users: Google, Liveinternet, Wikipedia, Russian Railways and others. Sites for monitoring communication problems Sboy.rf and Downdetector do not open. Users also complain about problems when ordering a taxi or completing a car sharing trip.

The failure also affected banking applications, which do not work even when connected via mobile Internet. Problems are also observed with the Outlook email service.

At the same time, users located outside of Russia report that all pages and services load without interruption. Roskomnadzor told Mash that they do not know the reasons for the decline of the Internet in Russia.

“Failures are being recorded for all operators, and the cause of the failure is being established,” the RKN press service said.

Rostelecom, Beeline and T2 told RIA Novosti that their networks are operating normally, problems with Internet access occur due to reasons beyond their control.

Telegram channels report that the failure began at 17:05 Moscow time and was fixed at 18:05. During this period, total traffic in the country decreased from 5.6 Tbps to 3.6 Tbps, a drop of 35%. Despite the lack of regulations for such situations, this effectively means shutting down a third of the Internet throughout the country.

According to calculations on the NetBlocks platform, an hour of downtime is estimated at $16.8 million in damage to the Russian economy.

Upd: Roskomnadzor called the cause of the failure a short-term disruption of connectivity. According to the department, the operation of the network was promptly restored by the duty services of the Center for Monitoring and Control of the Public Communications Network.

According to the Caution Media source in the Ministry of Digital Development, the cause of the failure was the update of the Automatic Internet Security System (ASBI), which is responsible for the functioning of the “sovereign RuNet”. According to the source, Rostelecom PJSC, as part of the ASBI update, “incorrectly rolled out the update,” which led to errors and malfunctions in the operation of technical threat countermeasures (TCTC) throughout the country.

A new hardware breach could serve as an entry point for large-scale attacks.

From SecurityLab.ru
Researchers have discovered a way to hack the ACE3 USB-C controller used for charging and data transfer in Apple devices, including iPhones and Macs. This component is proprietary to the company and plays a key role in the functioning of the Apple ecosystem.

During the Chaos Communication Congress in Hamburg, hacker Thomas Roth demonstrated a controller hack. He reverse engineered ACE3, revealing the internal software and communication protocols. Roth then reprogrammed the controller, allowing it to bypass built-in security checks, inject malicious commands, and perform other unauthorized actions.

The cause of the vulnerability was insufficient protection in the controller firmware, which allows attackers to gain low-level access, imitate trusted accessories, and perform other actions. However, according to Roth, exploiting this vulnerability requires significant effort.

Roth notified Apple of the problem, but the company determined that the high level of sophistication of the attack made it an unlikely threat. The hacker agreed with this conclusion, noting that his work was exploratory in nature and aimed at identifying fundamental vulnerabilities.

Although Apple currently has no plans to fix the problem, experts agree that large companies need to pay more attention to hardware solutions to prevent similar attacks in the future.

VPN became a tool for hacking a British domain registrar.

From SecurityLab.ru
British domain registrar Nominet is investigating a possible hack of its network in which hackers exploited a zero-day vulnerability in Ivanti software.

The suspicious activity was discovered late last week through a bug in a third-party VPN service from Ivanti. The software is used by Nominet employees to remotely access systems. The attack vector was related to a zero-day vulnerability.

At this time, the company says there is no evidence of data leakage or theft. There were also no traces of backdoors or other forms of unauthorized access to the network. To enhance security, access to systems via VPN was limited. Domain registration and management systems continue to operate as normal.

Nominet, which manages more than 11 million .uk domains, as well as .wales, .pharmacy and .career domains, said the investigation was being carried out in conjunction with external experts and notifications had been issued to customers, members and relevant authorities including the UK National Cyber ​​Security Center (NCSC).

All signs point to Nominet being the first organization publicly identified as a victim of the ongoing exploitation of CVE-2025-0282 (CVSS Score: 9.0), a zero-day vulnerability affecting Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways. Ivanti and Mandiant confirmed that the attacks began in December, but the victims were not disclosed.

Mandiant discovered that this vulnerability was exploited by hackers associated with the Chinese group UNC5337. The attacks used the SPAWN malicious ecosystem, including previously unknown programs DRYHOOK and PHASEJAM. The main goals of cybercriminals are to steal credentials and install web shells to gain permanent access.

Ivanti has released patches for Connect Secure, but patches for Policy Secure and Neurons for ZTA will not be available until January 21st. The company came under fire last year for delaying updates, leaving thousands of organizations without protection. Nominet says it has already begun rolling out the fixes. Users of Ivanti products are encouraged to update their software as soon as possible.

After the Romanian Constitutional Court annulled the results of the first round of presidential elections shortly before the runoff, the date for a new presidential election has now been set.

Nach Annullierung der Wahlen Neue Präsidentschaftswahlen in Rumänien für Mai angesetzt

from Anti-Spiegel January 9, 2025 6:00 am

It was a rare impressive presentation of “Western democracy” when no explicitly US, NATO and EU-friendly candidate made it to the runoff in the first round of the presidential elections in Romania in November, because that was canceled just two days before the planned runoff Romania's Constitutional Court quickly announced the election results after the USA and the EU protested and spoke of Russian election interference on TikTok. The Romanian Constitutional Court obediently invoked this, but without providing any evidence of the alleged election interference.

Interestingly, even the FAZ reported on December 19th that there was no evidence of alleged election interference by Russia. The article said:

“Even if experts consider Russian authorship of the expensive campaign on social media such as Tiktok to be plausible: Since the Constitutional Court's decision two weeks ago, Bucharest has not yet provided any explanation as to who is behind the foreign interference. Now Johannis explained during a press conference on Wednesday evening in Brussels that at the diplomatic level it was “extremely complicated to point the finger and say: it was you.”

On December 20, an investigative Romanian portal reported that there had apparently actually been an election influence by a TikTok campaign. However, this was not financed by Russia, but ironically by the EU-friendly liberal-conservative party PNL, which is part of the EPP bloc in the EU Parliament. Apparently there was some trickery involved, as the winner of the first round of elections, Georgescu, benefited from the campaign.

And according to the report, this is how it happened: Accordingly, the campaign was actually intended to lure voters from the social democratic party PSD to the PNL. However, when George Simion from the nationalist party Alianța pentru Unirea Românilor (AUR) became dangerous to the PNL during the election campaign, Georgescu, who was also described as nationalist, was also supposed to be promoted – allegedly on the advice of the president – in order to weaken Simion.

Why the Romanian presidential elections are so important.

The reason for the panic in the West after the first round of elections in November was the powers of the Romanian president, because in Romania the government is led by the prime minister, but the president has some important powers. For example, the president has control over defense spending, which is currently the most important thing for the US government and the EU leadership in view of NATO's demands for even higher arms spending and the EU's demands to support Ukraine on its own if necessary after Trump's election victory topic is.

Romania is also strategically very important for the USA because the country shares a border with Ukraine and Moldova. Romania is also a country with important naval ports for NATO on the Black Sea and the largest NATO base in Eastern Europe is currently being built in Romania. And, very importantly, part of the so-called US missile defense in Europe is in Romania.

After the first round of voting, Prime Minister Ciolacu, the only politician who was clearly pro-USA, pro-EU and pro-NATO, was thrown out of the presidential election and the runoff election included a candidate whose positions are not completely clear and a candidate who is clear against supporting Ukraine and to protect Romanian interests.

No matter which of the two would have won the runoff, at these crucial times for Washington and Brussels there was a risk that Romania could become an uncertain candidate in the fight against Russia.

So something had to be done and that's why Washington and Brussels built up gigantic pressure in the days that followed, whereupon the Romanian Constitutional Court annulled the election results.

This is how western democracy works and we can be excited to see what we will have to offer in the new presidential elections.

A Muslim man was denied a job at Greater Stockholm Transport Authority (Stockholms Lokaltrafik, SL). The reason was that the man had made it clear that he put his Muslim faith before Swedish values ​​of equality. According to Muslims, women are inferior to men. For example, he refused to shake hands with women. But now the man is supported by Sweden's Equality Commissioner (DO), according to whom misogyny in the workplace is allowed – if religious reasons can be invoked.

A Muslim fundamentalist man applied for a job as a security guard at the Greater Stockholm Transport Authority and was scheduled for a job interview. But when she told the employer before the interview that she could not consider treating women as equals because of her religion, the interview was cancelled.

Defending misogyny The man felt that he had been discriminated against and filed a complaint with the equality commissioner, and the authority sided with the man.

In their statement, they criticize the company and say it was wrong not to let the man in for an interview. According to the Commissioner for Equality, Muslims' misogyny takes precedence over respect for Swedish values ​​of equality.

The man argued in his complaint that looking down on women for religious reasons should not be considered a problem. This was because he didn't think he needed to shake hands with women in his job.

Suur-Stockholm Liikenne disagreed and said that such situations can of course occur with a security guard and that it is a problem and against the company's neutrality policy to regard women as inferior beings in general. In light of #MeToo, they thought they had justice on their side.

Islam wins gender equality But refusing to greet women as a manifestation of misogyny is not a reason to deny anyone a job. “If misogyny can be connected to the religious beliefs of Muslims, it must be allowed,” says the Commissioner for Equality and justifies the special right in his decision as follows:

“Touching is something that is not comfortable for all people, and there is no reason to demand a handshake in particular, because there are other ways to greet respectfully that do not involve physical contact”

The information found on the equality commissioner's website does not indicate whether the company is obliged to pay compensation to the Muslim man.

Opposite decision in the previous case The decision marks a change of direction for the authority. In previous similar disputes, it has sided with the employer.

In 2016, the Equality Commissioner received a complaint in which a man felt that he had been discriminated against when he applied for a job as an integration counselor at an integration center for young immigrants, but he was denied a job. The man said that because of the Muslim view of women, he does not greet women by shaking hands, although he had no problem doing so with men.

The equality commissioner then said that it was not wrong to deny the man a job. The employer's requirement that employees be able to touch people of both sexes “is not unreasonable,” they said. In the decision given now, the same authority takes a completely opposite position.

Source: Samnytt

Yhdenvertaisuusvaltuutettu: Naisiin kohdistuva naisvihamielisyys työpaikalla sallittua – jos olet muslimi

According to reports, there are opposition paramilitary elements which are targeting the government of Chad. This is the same nation which has terminated the presence of French and American troops from their nation. In a state, which sounds like a threat, French President Macron said:

On Tuesday, French President Emmanuel Macron told a meeting of ambassadors that the former colonies in Africa forgot to thank Paris for its help against terrorists and separatists over the past decade.

“None of them would have a sovereign state if the French army had not deployed in this region,” the French president claimed. “I think that they forgot to thank us, but that’s ok, it will come in time.”

One doubts if the French are working alone. We are probably witnessing another NATO operation as coincidentally, the gunshots and presumable mayhem occurred while the Chinese foreign minister, Wang Yi, was on a visit to strengthen bilateral relations. A Coincidence indeed, for one can think of quite a few nations from the collective nations that would like to disrupt both Chad and China along with any mutual projects they may embark upon.

Sources:

An unexpected, but not unwelcomed result of the SMO, is that Russia's destruction of Ukraine's military has drained NATO's ability to supply the weapons and ammunition required to sustain combat operations in Ukraine. Ukraine has depleted NATO's supply of ATACMs and decimated NATO's stocks of tanks and armored personnel carriers. Unless the United States and NATO call a halt to providing military assistance to Ukraine, Russia will continue its offensive until the Ukrainian military implodes.

NATO, like the EU, is the parasite which kills the host. NATO is way past its expiration date. The organization was created to supposedly, keep the Soviet Union and the Warsaw Pact Nations in check. However over a generation later, with the ending to the USSR and the Warsaw Pact Bloc, NATO is still around and its causing troubles.

NATO invaded the former Yugoslavia murdered hundreds of thousands and divided that nation. NATO has stirred conflict and destruction and now could start another world war with nuclear weapons involved.

Larry Johnson former intelligence operative or analyst for the CIA and now currently analyst and writer of the blog Sonar21 and his article shedding light on this issue, can be found here.

What Does Russia Mean By “Demilitarize And Denazify?”