Jose manuel de arce

@Albiol_XG @sanchezcastejon @Badalona_GUB Un estado que no es capaz de proteger a sus ciudadanos es un estado fallido

🚨 Rapid7 Labs has discovered an authentication bypass vuln. affecting #Cisco Catalyst SD-WAN Controller (FKA vSmart). CVE-2026-20182 has a Critical CVSSv3.1 score of 10.0 and allows a remote unauth. attacker to perform privileged operations. Read on: r-7.co/4uLxSlR

Vulnerabilidad crítica de MongoDB permite ejecutar código arbitrario blog.elhacker.net/2026/05/vulner…

Today @rapid7 and Cisco are disclosing CVE-2026-20182, a critical (CVSS 10.0) auth bypass affecting Cisco Catalyst SD-WAN Controller, found by @_CryptoCat and I when we were researching CVE-2026-20127 last Feb. An unauth attacker can become the vmanage-admin and issue arbitrary NETCONF commands. Cisco has also disclosed that the new CVE is already EITW as of this month. Read our blog here with full technical details: rapid7.com/blog/post/ve-c…

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out: github.com/DepthFirstDisc…

Okay folks, this qualifies as BREAKING NEWS! Harold “Sonny” White, the warp drive pioneer behind NASA’s EagleWorks Lab, just stepped out of stealth with Casimir Inc. to unveil MicroSPARC: the first battery free chip to harvest continuous electrical power straight from the quantum vacuum via the Casimir force. The 5 mm × 5 mm device uses millions of custom microscale Casimir cavities fabricated on a substrate. Inside each cavity, two fixed conductive walls create a region of negative vacuum pressure (the well known Casimir effect). Stationary micropillars anchored in the middle act as antennas. Electrons from the cavity walls then quantum tunnel to the pillars because the interior is a lower energy “quieter” zone — and the probability of tunneling back is orders of magnitude lower. This one way “quantum ratchet” flow generates a measurable DC current with no external power source or moving parts. Prototypes already fabricated at university nanofab facilities (Texas A&M AggieFab, MIT.nano) have been tested in RF-shielded, low noise chambers for weeks. The team reports outputs ranging from millivolts to volts at picoamp to microamp levels using precision electrometers and Kelvin Probe Force Microscopy. Target performance for the first commercial chip: ~1.5 V at 25 µA (≈40 µW continuous). Stacking and scaling could reach milliwatts or even watts per device. Initial applications are ultra low power: always on IoT sensors, wearables, and medical implants. Longer term roadmap includes trickle charging phones, powering small electronics, and eventually grid independent homes or EVs. Commercialization is targeted for 2028, starting at ~$100/W before dropping toward $10/W. White ties the work directly to his earlier theoretical paper on emergent quantization from a dynamic vacuum and sees it as a practical power source for the deep-space missions he’s long championed. Extraordinary claims require extraordinary evidence, and independent scientists have so far declined public comment. But if the engineering scales as hoped, MicroSPARC would represent a genuine paradigm shift: continuous, maintenance free power drawn from the fabric of spacetime itself. A bold leap from warp-drive theory into real hardware. Progress (and vacuum-powered chips) marches on. Photo: MicroSPARC | Casimir Inc. Source: thedebrief.org/free-energy-fr…

@carlosotermin Por estas cosas pago tuiter. Gracias por compartir @carlosotermin y por escribirlo @XMihura

And now... 6 CVEs in dnsmasq lists.thekelleys.org.uk/pipermail/dnsm… - What a time to be alive.

El vídeo es histórico, pero los comentarios son legendarios.

Wonder what @dieworkwear would think of the combination

💥 Introducing "Dirty Frag" A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail. No race, no panic on failure, fully deterministic. ~9 years latent. Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more. Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation. Details: dirtyfrag.io

I nearly fell off my chair when I found out that Gibraltar HAS NEVER HAD A SEWAGE PLANT and therefore ALL ITS RAW, UNTREATED SEWAGE (from a mere 40,000 people and their businesses) is dumped straight into the MEDITERRANEAN Sea. Great work, guys. theguardian.com/world/2026/may…

Never underestimate how much time and effort you can waste by trying to automate a process you do not understand manually.

He publicado en Github la demo práctica que realizo en mis clases sobre Bitcoin, donde enseñar paso a paso: - cómo instalar y configurar un nodo de bitcoin - crear una testnet con dos nodos locales - realizar transacciones, minar bloques... en dos modos distintos (standalone y full), para aprender distintos escenarios (e.g. cómo los nodos sincronizan con la cadena "más larga" automáticamente) - visualizar la información en tiempo real en un dashboard web (creado con Claude; el prompt está incluído en el repositorio) Todo mediante scripts diseñados para aprender. Está disponible libremente (licencia MIT) para quien quiera utilizarlo, y abierto a que cualquier pueda realizar aportaciones vía PR. cc @javierbitcoin @bit2me @jabravo

In the Blockchain Analytics module of the AFI's Master in Data Science & AI, I guide students through one of the most hands-on exercises you can do to truly understand how Bitcoin works: spinning up two real Bitcoin Core nodes in regtest mode (a private, local blockchain you control entirely) and watching them talk to each other in real time. I show my students how to create wallets, connect the nodes as peers, mine blocks, send transactions, and observe exactly what happens at each step: why a freshly mined coinbase isn't spendable yet, what "unconfirmed" really means, how a transaction travels from the mempool to a confirmed block... But this edition I've added something new: instead of just running CLI commands, students used Claude to build a full web dashboard from scratch. The result is a real-time block explorer that shows both nodes side by side, highlights new blocks as they're mined, lets you click into any transaction, and monitors the mempool. The prompt used to generate it is included in the repo. The whole thing runs locally with zero external dependencies. If you've ever wanted to understand how Bitcoin really works (blocks, transactions, mempool, peer propagation) there's no better way than running it yourself. Clone the repo, follow the step-by-step guide, and in less than 30 minutes you'll have your own private Bitcoin network running on your machine. 👉 github.com/joobid/bitcoin… No cloud. No testnet faucets. No waiting. Just Bitcoin, running locally, doing exactly what it does on mainnet.

Llevamos horas con esto: copy.fail Si no has parcheado, hazlo cuanto antes.

@tiangolo @FastAPI Wooooot!

IT'S HAPPENING!!! 💃 People have asked me for an official @FastAPI Conference for years. Here we go, let's meet in Amsterdam. ☕️

Elon Musk just described the most sophisticated theft operation in American history. Not a heist. A system. Your tax dollars leave Washington. They enter a non-governmental organization. The government. With different letterhead. Musk: “Obviously if it’s a government-funded non-governmental organization, it’s just the government.” They cross a border. American law stops following them. They pass through three more entities in three more countries. They come home. Different pocket. Clean hands. Perfect crime. Musk: “The government can send money to an NGO that is then no longer governed by the laws of the United States.” Now run the math. Congressional salary. $200,000. Average net worth of a longtime member of Congress. North of $20 million. Musk: “There are a lot of strangely wealthy members of Congress. I just can’t connect the dots of how they got $20 million earning $200,000 a year. Nobody can explain that.” Nobody is supposed to. This machine ran untouched for decades for one reason. Human limitation. A forensic team cannot trace ten thousand wire transfers across fifty global jurisdictions at once. The corruption does not hide in darkness. It hides in volume. They built a labyrinth so deliberately complex that the sheer weight of it collapses every investigation before it starts. Paper buries paper. Bureaucracy absorbs inquiry. The entire architecture was engineered to exhaust you. Then artificial intelligence arrived. AI does not get tired. It cannot be bought. It does not lose the thread at wire transfer 4,000. You give it the entire global ledger. It maps every node, every transfer, every shell entity, every offshore NGO across every jurisdiction. Not in weeks. In hours. It finds the signal inside the noise. It flags the pattern. It traces a dollar from a D.C. appropriation to a Cayman shell to a congressional portfolio in the time it takes a human auditor to find his parking spot. The labyrinth was built to defeat human eyes. It is defenseless against a machine that reads the entire maze at once. This is why the establishment is not just annoyed by DOGE. They are terrified. Musk: “We’re going to try to figure it out and stop it.” He did not arrive in Washington to trim budgets. He arrived with supercomputing, AI audit systems, and a mandate to map the full financial architecture of the federal government. For the first time in history, the complexity that protected the corruption is the very thing that will expose it. Every shell entity is a signature. Every routing pattern is a fingerprint. Every congressman who walked in earning $200,000 and walked out worth $20 million is now a variable in an equation that will be solved. The swamp was never impenetrable. It was just too big for human hands. It was never built for this.

AWS finally shipped a dedicated private connection to other clouds!!! No more VPNs and no more public internet routing! 🎉 It's called AWS Interconnect! Google Cloud is the first supported provider, with Azure and Oracle Cloud coming later this year 💪

La revolusión siempre a las puertas: ietf.org/archive/id/dra… @weareDMNTRs que te gustan estas cosas