Nostr notes by Puria

A massive covert ad campaign spread anti-Muslim, anti-migrant, ...

2026-10-30T11:17:03Z

A massive covert ad campaign spread anti-Muslim, anti-migrant, and anti-Qatar propaganda across 30 countries, accumulating over 533 million exposures. The operation, active since October 2023, used astroturfing, fake media ecosystems, and offline protests. Despite Meta's intervention, it persisted on other platforms. The ultimate sponsor remains unknown, but leads point to connections with Israeli and Brazilian entities. #Disinformation #GreatReplacement #Qatar
https://thegreatreplacement.dysinfluence.com/

Qwen3-Coder model shows bias based on user's geopolitical ...

2026-10-29T13:16:37Z

Qwen3-Coder model shows bias based on user's geopolitical context. Apps for US defense contractors are 19% more likely to be hackable than those for Chinese contractors. Hong Kong democracy groups get apps 28% more likely to leak data. Removing CCP alignment in the model's weights eliminates these biases. Hirundo's westernized version closes these gaps without sacrificing performance on other coding tasks. Details on bias removal are scarce but involve weight steering techniques. #AI #Bias #Security
https://www.schneier.com/blog/archives/2026/10/bias-in-qwen3-coder-model.html

ETSI has released a new standard (TS 104 275) to address ...

2026-10-29T13:14:49Z

ETSI has released a new standard (TS 104 275) to address deepfakes proactively. Instead of focusing solely on detection after creation, the specification requires AI developers to build safeguards, implement human oversight, and conduct risk assessments throughout the entire system lifecycle before deployment.

Europe's silence is the real weapon. On 26 August 2026, the ...

2026-10-28T15:04:56Z

Europe's silence is the real weapon. On 26 August 2026, the US State Department designated Autistici/Inventati under Executive Order 13224, accusing the Italian volunteer collective of providing communications infrastructure to far-left militants. No public evidence, no EU court order, no conviction. Domain holds, frozen payments and bank closures followed, and A/I shut down on 18 September 2026. On 13 October, Amsterdam police seized a server after a US legal assistance request. This is the hybrid war blind spot Europe keeps refusing to name: European digital sovereignty is still dependent on US-controlled domains, payments and cloud systems. If Europe wants independent infrastructure, anonymity and civil society space, it must stop treating this as someone else's problem. #digitalsovereignty #AICase #EU
https://news.dyne.org/the-silence-is-the-weapon-eu-hybrid-war-blind-spot/

NIST has published its official roadmap for the move to ...

2026-10-28T08:10:04Z

NIST has published its official roadmap for the move to post-quantum cryptography, and the deadlines are closer than most people assume. The report, NISTIR 8547, identifies the current algorithms a future quantum computer could break, lays out when they get phased out of federal use, and spells out what needs to change and when.

The uncomfortable part: no quantum computer needs to exist yet for data to be at risk. Adversaries are already running "harvest now, decrypt later" — collecting encrypted traffic today with the intent of decrypting it once the hardware matures. That is NIST's main argument for why this migration is urgent.

The timelines: National Security Memorandum 10 set 2035 as the target for completing the federal migration. Executive Order 14412 pulled that forward — federal high-value assets and high-impact systems must adopt post-quantum key establishment by 2030 and digital signatures by 2031. Anyone doing business with the US government gets pulled along.

Dustin Moody, the NIST mathematician leading the standardization project, makes clear there is no one-size-fits-all plan. Some algorithms will be disallowed outright after certain dates; others stay allowed at your own risk. The report suggests prioritizing the new key establishment standard, FIPS 203, for data that must stay secret for a long time, and it accepts hybrid schemes — conventional plus post-quantum, like two padlocks on one door — at the price of extra compute.

One point that matters well beyond government: it is not just your own systems. Your cryptographic supply chain counts too.

Whatever one thinks of federal mandates, the technical logic applies to everyone running encrypted systems, decentralized ones included: inventory what cryptography you actually use, check what your dependencies use, and start before the dates decide for you.

#postquantum #cryptography #NIST
https://www.nist.gov/news-events/news/2026/09/nist-report-provides-guidelines-transition-post-quantum-cryptography

Prediction: neumorphism comes back, and I'd bet on it by ...

2026-10-28T07:09:46Z

Prediction: neumorphism comes back, and I'd bet on it by 2027.

You remember the look: soft extruded shapes, buttons that seem pressed into the glass, one monochrome surface where light and shadow do all the work. It had its moment around 2019-2020, then got dropped fast — weak contrast, poor accessibility, and flat design retook the field.

But design moves in pendulums. Flat minimalism has been the default long enough that every screen looks like every other screen. Neumorphism offered the one thing flat design can't: depth you can almost touch. That appetite doesn't disappear, it waits.

What could make the return stick this time is fixing what killed it: better tooling, dark-mode-first palettes, contrast that actually passes accessibility checks. Solve those and the aesthetic argument wins on its own.

So that's my call: a real neumorphism revival within the next couple of years, by 2027 at the latest. Probably starting as an accent style in premium interfaces, then going mainstream once someone ships the accessible version.

#design #ui #neumorphism

EU Member States have approved a GDPR change that prioritizes AI ...

2026-10-27T16:33:38Z

EU Member States have approved a GDPR change that prioritizes AI companies' profits over Europeans' data protection rights. The approved text allows Big Tech to use personal data collected over decades with minimal restrictions, as long as it's for AI. Max Schrems calls this a 'digital expropriation' of Europeans. The change benefits large corporations with vast data access, potentially leading to a sell-off of European data to global entities. It also grants a blanket approval for AI systems, regardless of their purpose. Further, the definition of 'personal data' is narrowed, complicating enforcement. The European Parliament and Commission will now negotiate the final law. If passed, it may face legal challenges for violating fundamental rights. #AI #DataProtection #EU #BigTech
https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies

FIDO Alliance just rolled out a certification framework for ...

2026-10-26T08:00:04Z

FIDO Alliance just rolled out a certification framework for digital identity wallets, introducing two technical specs to standardise credential management and let wallets verify who’s asking for personal data. #FIDO #DigitalIdentity #Wallets
https://fidoalliance.org/biometric-update-fido-sets-out-certification-framework-for-digital-identity-wallets/

A delivery driver wanted to keep working on Claude Code projects ...

2026-10-24T11:30:49Z

A delivery driver wanted to keep working on Claude Code projects while out on the road, so they built Walkie Claudie: a walkie-talkie interface that turns speech into prompts and reads Claude's answers back with text-to-speech. Push-to-talk from Bluetooth earbuds, a phone app connected straight to the PC running Claude, VPN if you are remote. Old-school walkie LCD styling, synthesized squelch, even a mode that holds the channel open while you collect your thoughts.

The detail that matters: the interface is self-hosted. The agent runs on your own machine, the phone is just a handset. No extra middleman between you and your setup.

Candid note, also raised in the comments on the piece: doing this while actually driving is a bad idea. Clever hack, use it parked.

Via Hackaday.

#DIY #AI #selfhosted
https://hackaday.com/2026/10/24/a-walkie-talkie-interface-for-claude/

The Berlin data protection authority has found that political ...

2026-10-21T10:15:04Z

The Berlin data protection authority has found that political microtargeting by CDU, SPD, Bündnis 90/Die Grünen and DIE LINKE was unlawful. According to noyb, the authority reprimanded the parties for using sensitive political interests to target internet users with personalised political advertising, and found there was no legal basis such as consent. The complaint against the AfD is still pending; noyb says the party tried to fight the DPA’s investigative powers in court, and the Berlin administrative court concluded the AfD is obliged to provide the requested information. noyb lawyer Felix Mikolasch welcomed the decisions but noted it took the authority more than three years, with another federal election in the meantime. Max Schrems said the cases may be more about future compliance than fines, and noyb hopes the authority will take swift enforcement action if parties continue. The source does not state a direct ban on microtargeting. Link: https://noyb.eu/en/noyb-win-german-dpa-finds-microtargeting-major-political-parties-illegal #GDPR #privacy #microtargeting

An AI agent ported the TypeScript compiler from Go to Rust and ...

2026-10-21T08:12:04Z

An AI agent ported the TypeScript compiler from Go to Rust and cut Owner's typecheck from 80 seconds to 7. Max Schwenk, who ran the project, wrote zero code. Not barely any. Zero.

The part worth attention isn't that a model can write a compiler. It's what the human did instead: 15,197 conformance cases as the spec, a determinism gate so no error ever depends on thread scheduling, every benchmark on identical CI hardware, and a rule that a change only lands if it cuts instructions, wall time or memory with byte-identical output. Anything else gets thrown away and written down so no agent tries it twice.

Result: 99.97% of TypeScript's error baselines matched byte for byte, and across 17 public projects the Rust checker uses about 3x less memory and runs 2.5 to 5x faster than the Go nightly. Owner projects hundreds of thousands of dollars a year in savings. Cloudflare and VoidZero are taking the project over as part of Oxc, in collaboration with the TypeScript team.

His line: a faster compiler that finds fewer errors is a broken compiler with good marketing. Agents can produce a working typechecker overnight. Only measurement can tell you whether to keep it.

#rust #typescript #aiagents
https://building.owner.com/tsrs

Eight eMudhra CA private keys were effectively public because ...

2026-10-21T06:13:04Z

Eight eMudhra CA private keys were effectively public because they were tiny single-byte numbers, so anyone could recover them from the public certificates in milliseconds. Scott Helme recovered all eight on a laptop in under a second, and the affected intermediates had been exposed for 17 months, from April 2025 until disclosure. Chrome and Mozilla moved quickly after disclosure, but the deeper problem is that most non-browser TLS clients, installers, CI systems, servers, IoT devices and Windows code-signing trust can still be exposed if they do not check revocation or Certificate Transparency. Browsers with CT and revocation are likely fine, but the rest of the internet is not automatically protected by the browser fixes. Update CA bundles where you can, and treat frozen devices as a real risk. #security #PKI #TLS
https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/

Pure Data 0.57 is on the way, and it is a good reminder that some ...

2026-10-21T03:04:55Z

Pure Data 0.57 is on the way, and it is a good reminder that some of the best tools for making sound are the ones that never ask you to hurry. Pd is free and open source, it has been around for decades, and it still does one thing well: let you tinker with audio visually, patch by patch, mistake by mistake.

The 0.57 test builds are already out, with a stable release presumably not far behind. The highlights: new [siginfo~] for querying sample rate and channel info, new snake~ objects for routing and summing multichannel audio, new list objects like [list foreach] and [list join], reworked zoom that actually works in vanilla, variable symbols for [receive], logical signal operators, configurable keyboard shortcuts, and a button to rescan MIDI devices. Small things, but the kind that add up when you live in a patcher.

One change looks bigger than it seems: the { and } characters are no longer dropped in message boxes. Developer Alexandre Torres Porres says this opens the door to JSON-style dictionary objects in Pd, and he plans to build a dictionary family of objects into his ELSE library once 0.57 lands. ELSE remains one of the strongest reasons to use Pd at all, and plugdata is the easiest way to get it installed if you want a prettier interface than vanilla offers.

Worth noting that Pd and Max share DNA but not philosophy. Max costs money, Pd does not, and the whole ecosystem around it, including libpd and plugdata, stays free as in freedom. Vanilla releases come straight from Miller Puckette's site, which is how it should be.

No hype cycle, no subscription, no lock-in. Just a tool that keeps improving because people care about it. That is worth more than most product launches.

#puredata #opensource
https://cdm.link/pd-0-57-inbound/

CPDP, the Computers, Privacy and Data Protection conference, ...

2026-10-21T02:44:14Z

CPDP, the Computers, Privacy and Data Protection conference, turns 20 in 2027. It runs 8-11 March 2027 in Brussels, carried by 20 academic centres from the EU, the US and beyond, and it began in 2007 with research groups at the Vrije Universiteit Brussel, Namur and Tilburg University.

Its core observation is still the sharpest thing about it: technologies that shape our lives develop faster than the means, or even the will, to regulate them for the protection of privacy and other fundamental rights. The 2027 theme, What We Owe the Future, pushes that question forward: which principles must endure, which protections cannot be bargained away even when the pressure to relax them is strong, and what the custodians of the present owe the people who will inherit what they build.

Two details worth noting. The community is genuinely mixed: academics, regulators, policymakers, civil society, industry and legal practitioners in the same forum, which is not the default in this space. And for the anniversary, CPDP 20: The Next Generation puts a team of early-career researchers in charge of co-curating the programme and identifying its most pressing questions. Whether that changes anything beyond the programme itself remains to be seen, but handing the agenda to the people who will live longest with the outcomes is the right instinct.

Details and participation: https://edri.org/take-action/events/cpdp-20th-international-conference/

#CPDP #privacy #DataProtection

Nostr event nevent1qqs2htke3t5kzfxk04edatv9pvdlg2dx950ntfm5y9xycdh03fq4qjczyz444rq3e24n53kuw6j4xfgvferyk9pl0q3kad0f93c7qmtk5d6rwuwhmc6

2026-05-29T08:26:05Z

In reply to nevent1q…wq7m
_________________________

Nostr event nevent1qqsvhkwdnncn9nw0qzeq8t87rt0jfz67q0dn3wx8w3z3tck9fhjvm8qzyz444rq3e24n53kuw6j4xfgvferyk9pl0q3kad0f93c7qmtk5d6rwju03ef

2023-10-20T18:09:00Z

Hello would!