Nicolò Fornari
LightNews LightNews
banner
rationalpsyche.bsky.social
Nicolò Fornari
@rationalpsyche.bsky.social
22 followers 58 following 43 posts
Penetration Tester. Art passionate. Friends call me "grandpa".
Posts Replies Media Videos
Reposted by Nicolò Fornari
mastering-burp.agarri.fr
Burp now has a command palette (similar to the one in VS Code) 🥳

portswigger.net/cms/images/4...
Burp’s command palette
November 14, 2025 at 1:07 PM
Reposted by Nicolò Fornari
bgrueskin.bsky.social
Kyle Kingsbury is not a journalist. He is not an op-ed writer.

He is a computer safety researcher.

And he has written one of the most compelling, comprehensive accounts of the ongoing hell in Chicago that you could possibly imagine.

In under 1600 words.

aphyr.com/posts/397-i-...
I Want You to Understand Chicago Politics Chicago 2025-11-08 I want you to understand what it is like to live in Chicago during this time. Every day my phone buzzes. It is a neighborhood group: four people were kidnapped at the corner drugstore. A friend a mile away sends a Slack message: she was at the scene when masked men assaulted and abducted two people on the street. A plumber working on my pipes is distraught, and I find out that two of his employees were kidnapped that morning. A week later it happens again. An email arrives. Agents with guns have chased a teacher into the school where she works. They did not have a warrant. They dragged her away, ignoring her and her colleagues’ pleas to show proof of her documentation. That evening I stand a few feet from the parents of Rayito de Sol and listen to them describe, with anguish, how good Ms. Diana was to their children. What it is like to have strangers with guns traumatize your kids. For a teacher to hide a three-year-old child for fear they might be killed. How their relatives will no longer leave the house. I hear the pain and fury in their voices, and I wonder who will be next. Understand what it is to pray in Chicago. On September 19th, Reverend David Black, lead pastor at First Presbyterian Church of Chicago, was praying outside the ICE detention center in Broadview when a DHS agent shot him in the head with pepper balls. Pepper balls are never supposed to be fired at the head because they can seriously injure, or even kill. “We could hear them laughing as they were shooting us from the roof,” Black recalled. He is not the only member of the clergy ICE has assaulted. Methodist pastor Hannah Kardon was violently arrested on October 17th, and Baptist pastor Michael Woolf was shot with pepper balls on November 1st. Understand what it is to sleep in Chicago. On the night of September 30th, federal agents rappelled from a Black Hawk helicopter to execute a raid on an apartment building on the South Sho…
November 9, 2025 at 8:49 PM
Reposted by Nicolò Fornari
davekeating.substack.com
It's important for Europeans, and others from visa-waiver countries, to understand they don't have freedom of speech rights when visiting the United States.

The Trump regime is still deporting visitors for critical comments made online, because they can.
How My Reporting on the Columbia Protests Led to My Deportation
As an Australian who wrote about the demonstrations while on campus, I gave my phone a superficial clean before flying to the U.S. I underestimated what I was up against.
www.newyorker.com
November 5, 2025 at 8:05 AM
Reposted by Nicolò Fornari
kimzetter.bsky.social
Starting Monday LinkedIn will begin using data from your profiles/posts to train AI. If you live in EU/EEA/Switzerland/Canada/Hong Kong your data is subject to being used this way, but you can opt out. Go to Settings/Privacy/Data for Generative AI Improvement and toggle the switch to off
Update to our Terms and data use | LinkedIn Help
Update to our Terms and data use
www.linkedin.com
October 30, 2025 at 4:13 PM
rationalpsyche.bsky.social
Day to day: the user experience of getting a direct answer for simple things compared to scrolling a bloated blog post, with ads and cookie banners. It would be better to solve the state of the web but hey, it's a workaround.
mustafasuleymanai.bsky.social Mustafa Suleyman @mustafasuleymanai.bsky.social · 19d
here’s my litmus test: is AI improving your day to day life? Is it actually helping you to create, connect, feel joy, chase ambition?

If not - what’s the point?
October 30, 2025 at 10:41 PM
Reposted by Nicolò Fornari
claushoumann.mastodon.social.ap.brid.gy
If you know who did this, or if you know how to set it back, the hotel kindly asks you to do so, respecting the fun achievement unlocked :)
https://infosec.exchange/@xme/115422139879568495
Xavier Mertens 🇧🇪 (@xme@infosec.exchange)
Attached: 1 image When you leave a coffee machine unprotected at a hacker conference… #hacklu2025
infosec.exchange
October 23, 2025 at 7:27 AM
rationalpsyche.bsky.social
Great work guys!!
compass-security.com Compass Security @compass-security.com · 24d
🎉Success. Our #Pwn2own team combined #zeroday bugs to #exploit @home-assistant.io green which earned them $20'000 and 4 pts. Congratz to @bcyrill.bsky.social Emanuele, Lukasz @muukong.bsky.social and @yvesbieri.bsky.social.

Respect to @stephenfewer.bsky.social and the Summoning Team for the wins.
October 22, 2025 at 6:55 PM
Reposted by Nicolò Fornari
compass-security.com
#Pentest of gRPC-Web apps is tricky due to the binary format. We are releasing bRPC-Web, a @portswigger.net @burpsuite.bsky.social extension developed by our @muukong.bsky.social that helps manipulate #gRPC-Web traffic, even in absence of #protobuf schemas. blog.compass-security.com/2025/10/brpc...
October 21, 2025 at 11:38 AM
Reposted by Nicolò Fornari
pagedout.bsky.social
pagedout.institute ← we've just released Paged Out! zine Issue #7
pagedout.institute/download/Pag... ← direct link
lulu.com/search?page=... ← prints for zine collectors
pagedout.institute/download/Pag... ← issue wallpaper
Enjoy!

Please please please share to spread the news - thank you!
October 4, 2025 at 10:39 AM
Reposted by Nicolò Fornari
meshed.cloud
The @EUCommission would like to hear your views on the governance and sustainability of critical open source software. The survey closes October 5th.

https://ec.europa.eu/eusurvey/runner/FOSSEPS_Governance_and_Sustainability_Survey

#OpenSource #governance #sustainability
Study of the European Commission: Survey on the Governance and Sustainability of Critical Open Source Software
ec.europa.eu
September 30, 2025 at 2:24 PM
Reposted by Nicolò Fornari
buherator.bsky.social
"Employees are using AI tools to create low-effort, passable looking work that ends up creating more work for their coworkers.[...] it shifts the burden of the work downstream, requiring the receiver to interpret, correct, or redo the work. In other words, it transfers the effort
1/2
September 23, 2025 at 11:10 AM
Reposted by Nicolò Fornari
davelevitan.bsky.social
It is representative of a *profound* failure of a country that this group of people are up there talking about medicine and science at all
White House press conference with Trump, RFK Jr, Marty Makary, and Dr. Oz, for fuck's sake
September 22, 2025 at 9:13 PM
rationalpsyche.bsky.social
Beyond the message of the talk, the insights on the parliamentary monitoring system are super interesting!
September 22, 2025 at 5:24 PM
Reposted by Nicolò Fornari
vonderleyen.ec.europa.eu
Europe stands with Estonia in the face of Russia’s latest violation of our airspace.

We will respond to every provocation with determination while investing in a stronger Eastern flank.
September 19, 2025 at 3:19 PM
Reposted by Nicolò Fornari
dirkjanm.io
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-gl...
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise ...
dirkjanm.io
September 17, 2025 at 1:20 PM
rationalpsyche.bsky.social
Deterministic LLMs are possible.
thinkingmachines.ai/blog/defeati...
Defeating Nondeterminism in LLM Inference
Reproducibility is a bedrock of scientific progress. However, it’s remarkably difficult to get reproducible results out of large language models. For example, you might observe that asking ChatGPT the...
thinkingmachines.ai
September 15, 2025 at 3:51 PM
Reposted by Nicolò Fornari
compass-security.com
We use @jameskettle.com Burp extension Collaborator Everywhere daily. Now our upgrades are in v2: customizable payloads, storage, visibility. Perfect for OOB bugs like SSRF.

Find out more here: blog.compass-security.com/2025/09/coll...

#AppSec #BurpSuite #Pentesting
September 9, 2025 at 11:54 AM
Reposted by Nicolò Fornari
sandertordoir.bsky.social
This is a fascinating move

www.reuters.com/world/europe...
Exclusive: ASML becomes Mistral AI’s top shareholder after leading latest funding round, sources say
The round will make Mistral the most valuable AI company in Europe with a 10-billion-euro pre-money valuation in its latest Series C funding round, sources said.
www.reuters.com
September 7, 2025 at 7:41 PM
Reposted by Nicolò Fornari
mattburgess1.bsky.social
Wow

"Flashlights from the bow swept over the water. Fearing that they had been spotted, the SEALs opened fire. Within seconds, everyone on the North Korean boat was dead."
How a Top Secret SEAL Team 6 Mission Into North Korea Fell Apart
www.nytimes.com
September 5, 2025 at 10:57 AM
Reposted by Nicolò Fornari
cscsch.bsky.social
EPFL, ETH Zurich, and CSCS released Apertus, Switzerland's first large-scale, multilingual language model (LLM). As a fully open LLM, it serves as a building block for developers and organizations to create their own applications: www.cscs.ch/science/comp... @ethz.ch #AI #Apertus #AIforGood
September 2, 2025 at 8:14 AM
Reposted by Nicolò Fornari
simonwillison.net
ChatGPT just shipped the exact memory feature I've always wanted - automatic memory that's scoped to a specific project simonwillison.net/2025/Aug/22/...
ChatGPT release notes: Project-only memory
The feature I've most wanted from ChatGPT's memory feature (the newer version of memory that automatically includes relevant details from summarized prior conversations) just landed: With project-only...
simonwillison.net
August 22, 2025 at 10:44 PM
Reposted by Nicolò Fornari
buherator.bsky.social
In a somewhat better world this ChatGPT suicide case should at minimum trigger resignations from OpenAI top brass. This won't happen of course, showing what kind of people we are dealing with there.

And yes, this case is different from finding similar information via search
1/2
August 27, 2025 at 10:04 AM
Reposted by Nicolò Fornari
tjmcintyre.com
Still more evidence that the US under Trump is an enemy of Europe.
August 27, 2025 at 8:51 AM
rationalpsyche.bsky.social
This is a magnificent read.

"Every warning about AGI danger is also a pitch deck for more funding"

"The future is already here. You just have to stop looking for it in the wrong place."
raptor.infosec.exchange.ap.brid.gy Marco Ivaldi @raptor.infosec.exchange.ap.brid.gy · Aug 12
“Boring is the highest compliment I can give technology. Boring means it works. Boring means you stop thinking about how and start thinking about what.”

A Hitchhiker's Guide to the #ai Bubble
https://fluxus.io/article/a-hitchhikers-guide-to-the-ai-bubble
August 12, 2025 at 6:03 PM
rationalpsyche.bsky.social
I never managed to do any meaningful work on the train, I need a comfortable setup for it. With chatpgt I can (let it) work on small side projects I never allocated time for.
August 9, 2025 at 7:33 AM