iiinova — where your digital self keeps evolving

Reposted by Davide Gullo

Paolo Barbolini @paolobarbolini.it · 09/06/2026

A few weeks ago I realized our websites accidentally disabled post-quantum key exchange because our haproxy had an old version of the modern ssl-config.mozilla.org config. Imagine how long it will take for everyone to realize this and fix their configs. This is not a scalable way of doing things...

ssl-config.mozilla.org

Mozilla SSL Configuration Generator

An easy-to-use secure configuration generator for web, database, and mail software. Simply select the software you are using and receive a configuration file that is both safe and compatible.

24812

Reposted by Davide Gullo

Erin Reed @erininthemorning.com · 27/02/2026

And it has happened: Hegseth and Trump declare Anthropic a supply chain risk. Every company that has government contracts will be barred from using Claude code. It is an attempt to outright destroy the company because they did not consent to mass surveillance of Americans and AI kill bots. Wow.

6:521
•ll 5G
99
Post
...
Secretary of War Pete Heg...
@SecWar
X.com
This week, Anthropic delivered a master class in arrogance and betrayal as well as a textbook case of how not to do business with the United States Government or the Pentagon.
Our position has never wavered and will never waver: the Department of War must have full, unrestricted access to Anthropic's models for every LAWFUL purpose in defense of the Republic.
Instead, @AnthropicAI and its CEO @DarioAmodei, have chosen duplicity. Cloaked in the sanctimonious rhetoric of "effective altruism," they have attempted to strong-arm the United States military into submission - a cowardly act of corporate virtue-signaling that places Silicon Valley ideology above American lives.
The Terms of Service of Anthropic's defective altruism will never outweigh the safety, the readiness or the lives nf American tranns on

altruism will never outweigh the safety, the readiness, or the lives of American troops on the battlefield.
Their true objective is unmistakable: to seize veto power over the operational decisions of the United States military. That is unacceptable.
As President Trump stated on Truth Social, the Commander-in-Chief and the American people alone will determine the destiny of our armed forces, not unelected tech executives.
Anthropic's stance is fundamentally incompatible with American principles. Their relationship with the United States Armed Forces and the Federal Government has therefore been permanently altered.
In conjunction with the President's directive for the Federal Government to cease all use of Anthropic's technology, I am directing the Department of War to designate Anthropic a Supply-Chain Risk to National Security.
Effective immediately, no contractor, supplier,

therefore been permanently altered.
...
In conjunction with the President's directive for
the Federal Government to cease all use of Anthropic's technology, I am directing the Department of War to designate Anthropic a Supply-Chain Risk to National Security.
Effective immediately, no contractor, supplier, or partner that does business with the United States military may conduct any commercial activity with Anthropic. Anthropic will continue to provide the Department of War its services for a period of no more than six months to allow for a seamless transition to a better and more patriotic service.
America's warfighters will never be held hostage by the ideological whims of Big Tech.

561149396

Reposted by Davide Gullo

Luca Casonato 🏳️‍🌈 @lcas.dev · 28/12/2025

A thread 🧵 of _terrible_ design decisions for the internal APIs of the two Italian high speed train operators, Italo and Trenitalia. Hardcoded passwords, terrible translations, spelling mistakes, xml in json (but utf8 encoded and transmitted as an array of numbers), it's all here. Enjoy!

1017731

Reposted by Davide Gullo

Steve Klabnik @steveklabnik.com · 13/11/2025

“We adopted #rustlang for its security and are seeing a 1000x reduction in memory safety vulnerability density ... with Rust changes having a 4x lower rollback rate and spending 25% less time in code review, the safer path is now also the faster one.” security.googleblog.com/2025/11/rust...

security.googleblog.com

Rust in Android: move fast and fix things

Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in ...

332290

Reposted by Davide Gullo

Paolo Barbolini @paolobarbolini.it · 22/10/2025

AI scrapers are ruining the web, so I have an idea that could help make the situation even worse for everyone: software that loads random .js, .png, and .pdf files it finds across the entire web for the purposes of speed testing. I just had to do this to debug weird networking issues and it works!

111