iiinova — where your digital self keeps evolving

Ruggero Tonelli @ruggero.bsky.social · 06/04/2026

The web is becoming a minefield for autonomous AI. 🕸️🤖 Google DeepMind paper introduces the first systematic framework for AI Agent Traps/adversarial content designed to manipulate, deceive, and exploit visiting agents... 1/2

110

Ruggero Tonelli @ruggero.bsky.social · 31/03/2026

A supply chain attack targeting the widely used HTTP client Axios has introduced a malicious dependency into specific npm releases, including axios@1.14.1 and axios@0.30.4. buff.ly/DGx0GMx #sbom #security 3npm #node

socket.dev

Supply Chain Attack on Axios Pulls Malicious Dependency from...

A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...

000

Ruggero Tonelli @ruggero.bsky.social · 23/03/2026

Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets socket.dev/blog/trivy-u... If you use(d) aquasecurity/trivy-action please take action. #security #sbom

buff.ly

Trivy Under Attack Again: Widespread GitHub Actions Tag Comp...

Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

000

Ruggero Tonelli @ruggero.bsky.social · 21/01/2026

Rust's standard library on the #GPU www.vectorware.com/blog/rust-st... [...] "We are cleaning up our changes and preparing to #opensource them" #rust #performance 🦀

010

Ruggero Tonelli @ruggero.bsky.social · 04/01/2026

Is #StackOverflow dead? 2y old question answered by data. It was killed by #llms, by SO own rules, or by users' democracy? An @hackernews thread worth reading news.ycombinator.com/item?id=4648...

000

Ruggero Tonelli @ruggero.bsky.social · 28/12/2025

We’re closing an incredible year for coding #GenAI but 'Correctness-Congruence Gap' in #LLM-generated Infrastructure as Code (#IaC) is still an issue: LLMs often produce syntactically correct code that not aligned with the intended architectural design and #security requirements

A robot scratching his head looking to AWS infra and Terraform / Pulumi code

100

Ruggero Tonelli @ruggero.bsky.social · 25/11/2025

A simple, yet brilliant idea. aikidosec/safe-chain "wraps around the npm cli, npx, yarn, pnpm, pnpx, bun, bunx, and pip to provide extra checks before installing new packages[...] preventing downloading or running the malware." Thank you @AikidoSecurity www.npmjs.com/package/@aik...

npmjs.com

010

Ruggero Tonelli @ruggero.bsky.social · 13/11/2025

Whisper Leak: a side-channel attack on Large Language Models arxiv.org/abs/2511.03675. #llm #ai #security

010

Ruggero Tonelli @ruggero.bsky.social · 12/11/2025

Trixter: A #Chaos Proxy for Simulating Network Faults biriukov.dev/posts/trixte...

000

Ruggero Tonelli @ruggero.bsky.social · 20/10/2025

Not an AWSome morning for the ones "living" in #AWS us-east-1 and the correlated regions. #awsdown #awsoutage

000

Ruggero Tonelli @ruggero.bsky.social · 18/10/2025

5 years since the last senior #SRE opening in our team. Lots of stuff have been archived since then but we still have some interesting challenges for #performance, #automation and #security motivated talents. And we're #AI friendly ...Are you in? buff.ly/h2IXb1i

010

Ruggero Tonelli @ruggero.bsky.social · 17/10/2025

Days ago @karpathy released #nanochat: "The best ChatGPT that $100 can buy." github.com/karpathy/nan... The real deal is not the price but the ~8000 lines of code: The entire pipeline from start to end with tokenization, pretraining, finetuning, evaluation, inference, and GUI. #ai

110

Ruggero Tonelli @ruggero.bsky.social · 14/10/2025

Apache Cloudberry (Incubating) [..] an advanced and mature #opensource Massively Parallel Processing (MPP) database, [..] built on [..] PostgreSQL kernel [..]. can serve as a #data warehouse and [..] large-scale analytics and AI/ML workloads. cloudberry.apache.org

cloudberry.apache.org

Apache Cloudberry (Incubating) | Apache Cloudberry (Incubating)

Apache Cloudberry ships with PostgreSQL 14.4 as the kernel. It is 100% open source and helps you leverage the value of your data.

010

Ruggero Tonelli @ruggero.bsky.social · 14/10/2025

Apache SeaTunnel: Multimodal, high-performance, distributed, massive #data integration tool [...] for Transaction DB, Cloud DB, SaaS, Binlog with SQL-like code or Drag & Drop. #performance #opensource buff.ly/cfZGPNn

seatunnel.apache.org

Apache SeaTunnel | Apache SeaTunnel

APache SeaTunnel Logo

010

Ruggero Tonelli @ruggero.bsky.social · 24/09/2025

The EU’s €2T budget overlooks a key tech pillar: #Opensource thenextweb.com/news/eu-budg...

ALL MODERN DIGITAL INFRASTRUCTURE / A PROJECT SOME RANDOM PERSON IN NEBRASKA HAS BEEN THANKLESSLY MAINTAINING SINCE 2003

000

Ruggero Tonelli @ruggero.bsky.social · 24/09/2025

OpenSSF warns that #opensource infrastructure doesn't run on thoughts and prayers. Foundations say billions of downloads rely on registries running on fumes – and someone's gotta pay the bills

theregister.com

OpenSSF to freeloaders: Open source infra isn't free

: Foundations say billions of downloads rely on registries running on fumes – and someone's gotta pay the bills

010

Ruggero Tonelli @ruggero.bsky.social · 08/04/2025

phoronix : PostgreSQL Turns To AVX-512 For CRC32 Computations: Up To 3x Faster (where supported) buff.ly/fSlCOAG [...] In addition to the recent optional IO_uring support for the #PostgreSQL database server on Linux and async I/O batch mode[...] #performance #opensource

030

Ruggero Tonelli @ruggero.bsky.social · 07/04/2025

GitHub - doxx/darkflare: DarkFlare Firewall Piercing (TCP over CDN) buff.ly/3DphmCR "A stealthy command line tool to create TCP-over-CDN(http) tunnels that keep your connections cozy and comfortable"

buff.ly

GitHub - doxx/darkflare: DarkFlare Firewall Piercing (TCP over CDN)

DarkFlare Firewall Piercing (TCP over CDN). Contribute to doxx/darkflare development by creating an account on GitHub.

010

Ruggero Tonelli @ruggero.bsky.social · 07/04/2025

CISA, FBI, nations warn of fast flux DNS threat • The Register buff.ly/y4JdM1s "Malicious cyber actors use #fastflux to obfuscate the locations of malicious servers " #cybersec

012

Reposted by Ruggero Tonelli

Orhun Parmaksız @orhun.dev · 22/02/2025

Breaking news for the crab people 🚨 🦀 Ring, a widely used Rust cryptography library, is now unmaintained. 🔐 Security advisory: rustsec.org/advisories/R... ➡️ Details: github.com/briansmith/r... #rustlang #opensource #library #security #cryptography

rustsec.org

RUSTSEC-2025-0007: ring: *ring* is unmaintained › RustSec Advisory Database

Security advisory database for Rust crates published through https://crates.io

1289

Ruggero Tonelli @ruggero.bsky.social · 20/12/2024

fn main() { println!("Hello World!"); }

020