𝕭𝖆𝖘𝖘𝖕𝖎𝖘𝖙𝖔𝖑 🎬

Today is the 24th of March 2026 and Trump's war of choice in Iran continues.

Watch our five minute tarot reading to investigate the causes and effects of this war, to find out where it will lead.

https://wordcloudtarot.com/readings/2026-03-24-wariniran/

La segunda charla del colectivo 'Hello Compost!' se sumerge en las infraestructura de internet para ensayar un diálogo tan complejo como necesario de la mano de juliana guerra como invitada.

¿Qué le dice la física del compost a la lógica de internet? Desde el principio, esta fue una de las preguntas que latió en este nuevo encuentro de ‘Hello Compost!’. Hablar de jardines digitales es también hablar de mundos inconmensurables que se dan la mano, que aprenden a hablar y a comunicarse entre sí.

En esta segunda sesión de los Encuentros Sintrópikos de ’Hello Compost!’ hemos traído a la conversación a alguien que conoce bien a fondo las ‘tripas’ de la red de redes, juliana guerra. Ella es una investigadora y activista colombiana que trabaja con la infraestructura de internet, y que conoce como pocas la manera en que la geopolítica del conocimiento imperial, la desigualdad de género, el liberalismo y el mercado se inscriben en los protocolos más básicos del Internet que usamos cada día. Su trabajo nos habla de qué le podría hacer el feminismo a esa infraestructura, y de cómo una mirada situada en el Sur global transforma algunas nociones básicas sobre el sentido de la intercomunicación digital, así como algunos de sus límites más acuciantes.

La conversación arrancó con una serie de comparaciones sugerentes entre el modelo casi carcelario de los centros de datos y la riqueza de diplomacias que se da en una pila de compost. El contrapunteo entre el control de los datos y las responsabilidades compartidas que nos traen las comunidades del compost de Donna Haraway nos llevó rápidamente a reflexionar sobre las herencias coloniales e imperiales de la historia de internet, así como sobre la necesidad de abrir la gobernanza de las infraestructuras críticas de esta a muchas más mujeres, personas racializadas y, en general, a perfiles más diversos, frente a la homogeneidad social y cultural que sigue dominando estos entornos. «El reto», nos decía, «no es tecnológico»; está en otro lado.

También hubo tiempo para pensar algunos puntos clave, no siempre evidentes, sobre cómo una perspectiva latinoamericana podría plantear el decrecimiento de internet, así como algunas de las discusiones clave sobre el papel de la academia y del pensamiento crítico en este proceso. ¿Pueden los sentires, los modos de lucha informal, la música y los gritos, las formas de comunicación que van de boca en boca, ayudarnos con todo esto? No tenemos certezas pero este encuentro nos ha permitido esbozar alguna que otra intuición.

Today is the 24th of March 2026 and Trump's war of choice in Iran continues.

Watch our five minute tarot reading to investigate the causes and effects of this war, to find out where it will lead.

https://wordcloudtarot.com/readings/2026-03-24-wariniran/

#worldpol #tarot #trump #iran #war

From IP spoofing to GRE and VXLAN abuse, learn how attackers can quietly tunnel into your network and break your incident response trail.

In this BSides Vancouver Island 2025 talk, Shu‑Hao Tung walks through practical red team networking techniques that turn “just misconfigurations” in GRE, VXLAN, and routing protocols into reliable initial access and stealthy lateral movement paths. This session is ideal for red teamers, penetration testers, blue team defenders, network engineers, and tool builders working with on‑prem, hybrid, or cloud-connected environments. You’ll see how intranet IP spoofing can hide attacker paths from IR, how unencrypted stateless tunnels (GRE/VXLAN) and Internet exchanges can be abused for initial access, and how routing protocol issues (like OSPF on the wrong interfaces) can escalate to full domain compromise.

This session was recorded live at BSides Vancouver Island 2025 at the Victoria Conference Centre in Victoria, BC.

Subscribe to BSides Vancouver Island for more talks from local and global security practitioners, and to stay connected with the Vancouver Island security community. Join our Slack to stay up to date: https://communityinviter.com/apps/visrs/visrs. Watch more talks from the BSides Vancouver Island playlist to keep leveling up your defensive and offensive playbooks.

BSides Vancouver Island returns to the Victoria Conference Centre in Victoria, BC on Friday, September 25, 2026. Stay tuned for sponsorship, speaker, attendance, and volunteering opportunities.

Roberto Innocenti dell'associazione di volontari Power Progress Community il 14 Marzo 2025 ha presentato il percorso dall'ideazione alla realizzazione di prototipi di una scheda madre Open Hardware notebook e desktop basata CPU PowerPC,e progettata per GNU/Linux, il tutto con pochi mezzi.

Update: Mielu91m, the SAF mod author, is working on a fix.

Attempt to temporarily fix the "main menu bug" that stops SAF animations from working correctly. Using the "saf stop" command instead of a melee hit to stop animations.

Unfortunately, the "saf stop" command did not fix the "main menu bug".

Installation used: https://video.4d2.org/w/5aXBsXbEJGWLzVrvF9RtXF

Épisode 2 : Dépeindre la mort 💀​

Nous demandons

Précédemment : Diffusion d'une lettre canular dans les boites aux lettres d'Huez, dénonçant le mépris du maire face aux voix qui s'élèvent, pour une approche résiliente et démocratique de la montagne.

Erlang/OTP is an open source programming language designed for the development of concurrent and distributed systems. Created 40 years ago and open sourced in 1998, Erlang is used by Ericsson, Cisco, WhatsApp, Discord, and Klarna for mission critical applications as well as loved by a broad community of open source developers. With the advent of the Cyber Resilience Act (CRA), the Erlang/OTP team, jointly with the Erlang Ecosystem Foundation (EEF), began to prepare the project to meet CRA requirements.   In this presentation, Kiko will describe and dive into the various supply chain best practices implemented by the Erlang/OTP project: the creation of Source Software Bill-of-Materials (Source SBOMs), automated vulnerability scanning of dependencies using OSV, creation of OpenVEX statements, vulnerability handling in collaboration with the EEF as CNA, and contributions to towards other open source projects [[1],[2],[3]] to improve the security posture of the ecosystem. Moreover, Kiko will provide an insight into the lessons learned from implementing these measures in an open source project.

speakers: 'Kiko Fernandez-Reyes'

link: 'https://fosdem.org/2026/schedule/event/JFJV3R-story-of-the-erlang-journey-towards-cra-compliance/'

The Cyber Resilience Act (CRA) is reshaping expectations around open source software, introducing new requirements for security, traceability, and documentation. While maintainers are responsible for technical compliance, community managers play a critical but often overlooked role in helping projects adapt. This session is designed for community managers, project maintainers, stewards, and open source contributors interested in practical CRA readiness. The focus is on practical enablement by Community Managers, exploring how they can support compliance without assuming legal liability.

We'll show how Community Managers can: - Communicate CRA-relevant processes to contributors, downstream adopters, and vendors - Structure documentation, governance pages, and onboarding materials for clarity and discoverability - Protect newcomers from unnecessary compliance burden, keeping contribution welcoming and accessible - Support maintainers, triaging non-technical questions, coordinating workflows, and preventing burnout Facilitate cross-project collaboration, shared tooling, and evidence collection practices - Manage vulnerability communication to maintain trust and transparency

The objective is for attendees to leave with practical strategies, templates, and examples that make CRA compliance manageable while keeping open source communities healthy and contributor-friendly. This session is ideal for community managers, project stewards, maintainers, and anyone interested in the human side of CRA readiness in FOSS projects. Attendees will leave with key takeaways: - Understand CRA's indirect impact on community management and a checklist of how tos - Learn concrete ways to keep projects welcoming despite increased compliance expectations - Explore templates and workflow ideas that reduce friction for contributors and maintainers alike - See examples of cross-project coordination and documentation practices that support CRA readiness

This session emphasizes practical, community-driven solutions focusing on doing and not debating legal strategy making CRA compliance achievable and sustainable for FOSS communities.

speakers: 'Cynthia Lo

link: 'https://fosdem.org/2026/schedule/event/PAU8DZ-building_cra-ready_open_source_communities_the_critical_role_of_community_manage/'

Tracing complex systems often requires insights from both the kernel and userspace. While tools like Linux's ftrace excel at kernel-level observability and LTTng provides low-overhead userspace tracing, unifying these disparate data sources for a holistic view remains a challenge: using LTTng for kernel tracing requires an out-of-tree kernel module, which can be a barrier for many users.

This talk introduces bt2-ftrace-to-ctf - a new open-source project designed to bridge this gap. Our solution processes a trace.dat file from ftrace (kernel part) and a LTTng UST for userspace, then aligns and rewrites the trace in the Common Trace Format (CTF), as used by LTTng. The resulting output is directly consumable by tools like Trace Compass, enabling comprehensive, synchronized analysis of system behavior across all layers without the need for custom kernel modules.

The project consists of two key components:

In the talk, we will give an overview on the tool and discuss challenges during its implementation.

Project: https://github.com/siemens/bt2-ftrace-to-ctf (MIT, LGPL-2.1-or-later)

speakers: 'Felix Moessbauer'

link: 'https://fosdem.org/2026/schedule/event/WJSJZZ-bt2-ftrace-to-ctf/'