Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
To mark a year of genocide in Gaza, we publish this powerful interview with two Israeli dissidents who took part in a Palestine Action siege of the Elbit HQ....
In todayโs show, weโll be exploring how Palestine Actionโs activities have struck another costly blow against the Israeli arms manufacturer, Elbit Systems.
BREAKING: Palestine Action Scotland destroyed the electricity supply to Leonardo's Edinburgh weapons factory, disrupting the production of laser targeting systems for Israel's F-35 fighter jets.
After an action and subsequent correspondence, Hinks Haulage will refuse to take work from Israel's biggest weapons producer and Howmet Aerospace, suppliers of F-35 fighter jet parts.
After their quick response to our campaign, they are now no longer a target.
Juries are a microcosm of democracy. Permitted to hear the evidence, they regularly acquit those who act to protect life. Oil and arms industry lobbyists are...
An IT security guy at a place I once worked said the executives were the biggest security vulnerability the company had because they wanted what they wanted and didn't care much about security. I think that's what tool Maersk down a few years ago - some exec installed malware that spread to the entire network.
"they normally put big all caps bold red warning if the person is a VIP, eg C suite, so they get VIP service - ie anything goes."
As tensions escalate between Israel and Iran, Iranian analyst Mohammad Marandi exposes how Western media โ even so-called progressive outlets like Democracy ...
SANAA, June 24 (YPA) - Head of the Sanaa negotiating delegation, Mohammed Abdul-Salam, praised the great stance and sacrifices made by Iran's leadership, people, and army during the 12-day war with the Israeli enemy.In a post on X, he emphasized that
UPDATE: NARA has taken this down/rescinded, and stated that it had "many inaccuracies."
This is NOT GOOD. #archives " Restricted-Access Federal Facility, Effective July 7, 2025 Effective July 7, 2025, the National Archives at College Park, MD, will become a restricted-access federal facility with access only for visitors with a legitimate business need. It will no longer be open to the general public." archives.gov/college-park
We hold permanent records created by Federal agencies that include: Textual records from civilian agencies Army unit records dating from WW1 Navy unit records dating from WW2 Still pictures Electronic records Cartographic and architectural holdings โฆ
People keep telling me that X11 doesnโt support DPI scaling, or fractional scaling, or multiple monitors, or something. Thereโs nothing you can do to make it work. I find this surprising. Why doesnโt it work? I figure the best way to find out is try the impossible and see how far we get.
Iโm just going to draw a two inch circle on the screen. This screen, that screen, any screen, the circle should always be two inches. Perhaps not the most exciting task, but I figure itโs isomorphic to any other scaling challenge. Just imagine itโs the letter o or a button we wish to draw at a certain size.
I have gathered around me a few screens of different sizes and resolutions. My laptop screen, and then a bit to the right a desktop monitor, and then somewhere over that way a nice big TV. Specifically:
$ xrandr | grep \ connected
eDP connected primary 2880x1800+0+0 (normal left inverted right x axis y axis) 302mm x 189mm
DisplayPort-0 connected 2560x1440+2880+0 (normal left inverted right x axis y axis) 590mm x 334mm
DisplayPort-1 connected 3840x2160+5440+0 (normal left inverted right x axis y axis) 1600mm x 900mm
I think I just spoiled the ending, but here we go anyway.
Iโm going to draw the circle with OpenGL, using a simple shader and OBT. Thereโs a bunch of not very exciting code to create a window and a GLX context, but eventually weโre going to be looking at the shader. This may not be the best way to draw a circle, but itโs my way. For reference, the full code is in circle.c.
I got a little carried away and made a pretty color wheel instead of a flat circle.
The key variable is radius which tells us how many pixels from the center the circle should be. But where does the shader get this from?
glUniform1f(0, radius);
Okay, but seriously. We listen for configure events. This is the X server telling us our window has been moved or resized. Something has changed, so we should figure out where we are and adjust accordingly.
Itโs somewhat annoying that physical width and virtual width are in different structures, and we have to put the puzzle back together, but there it is.
Some more code to handle expose events, the draw loop, etc., and thatโs it. A beautiful circle sized just right. Drag it over onto the next monitor, and it changes size. Or rather, it maintains its size. Send it over to the next monitor, and same as before.
Time for the visual proof. A nice pretty circle on my laptop. Another circle on my monitor. And despite the 4K resolution, a somewhat pixely circle on my TV. Turns out the hardest part of this adventure was trying to hold an uncooperative tape measure in place with one hand while trying to get a decent, or not, photo with the other.
We were so close to perfection. Somebody at the factory screwed up, and my TV is actually 66.5โ wide, not the claimed 63 inches. So if we learn anything today, itโs that you shouldnโt use a consumer LG TV for accurately measuring the scale of structural engineering diagrams, at least not without further calibration.
The good news is weโve done the impossible. Even better, I didnโt mention that I wasnโt actually running this program on my laptop. It was running on my router in another room, but everything worked as if by MIT-MAGIC-COOKIE-1. Alas, we are still no closer to understanding why people say this is impossible.
Anyway, I think the point is we should probably ignore the people who canโt do something when they tell us we canโt do it either. I woke up this morning not knowing precisely how to draw a scaled circle, having never done so before, but armed with a vague sense that surely it must be possible, because come on of course it is, I got it working. And now look at me, driven insane by the relentless stare of three unblinking eyes.
With my new knowledge, I also wrote an onscreen ruler using the shape extension. Somewhat tautological for measuring the two inch circle, but in the event anyone asks, I can now tell them my terminal line height is 1/8โ, and yes, I measured.
DragonForce Ransomware Cartel are claiming credit for attacks on Marks and Spencer, Co-op and Harrods and say more victim orgs are coming bloomberg.com/news/articles/20โฆ
@se I wonder... maybe the Palo Alto Global Protect firewalls are somehow related to the breach perhaps? That particular software product has had some well documented (CVE) vulnerabilities in the past year related to VPN, plus there's been some pretty serious PAN-OS RCE issues too. Hope everything was patched!
Attached: 1 image
Co-op Group have shut down some systems due to a cyber incident, however retail stores are still trading uninterrupted (which is core to their business).
Co-op Group have now admitted a significant amount of member (customer) information has been stolen by DragonForce Ransomware Cartel, saying they "accessed data relating to a significant number of our current and past members" - around 20 million people. The Membership database, basically. That includes home addresses and phone numbers etc.
Up until now Co-op hadn't even used the words cyber or threat actor, referring to an "IT issue" and "third party" in comms.
for someone who is unfamiliar with the UK retail market, do you happen to know if Co-op is at all related to the Swedish company Coop that suffered from a major ransomware attack a couple of years ago?
The individuals operating under the DragonForce banner and attacking UK high street retailers are using social engineering for entry. I think itโs in the public interest to break down what isโฆ
"Advanced Persistant Toerags", as Ian Levy would put it. Basics don't sell boxes, and when the narrative is controlled by the box-sellers, the basics get neglected.
Was reading your "Actions for Defenders", pt #1 - what are some good suggestions for IT/helpdesk to vet the legitimacy of an "employee" - when was the last time you called the helpdesk? who is your boss's boss? how many times have you worked from home/used VPN in the past month? like what else would be a surefire thing that ONLY a legit employee would know... that the helpdesk could look up that an intruder wouldn't be able to?
Regarding IOCs around the UK retailer activity - thereโs loads doing the rounds, and theyโre almost all not useful.
Eg hundreds of dynamic VPN IPs from 2022. If you google them youโll find them on vendor blogs from years ago for Scattered Spider - people are recycling in panic and passing around in panic.
Donโt hunt on random IOCs. IP addresses change. Strengthen foundational controls. Review sign in logs for abnormal activity etc.
UK cyber security at private firms tends to be very poor on average but social engineering remains the hacker's most effective tool.
Slack and Teams access in particular seems like a large attack vector. I believe the Twitter hack a few years back - when it was Twitter - was facillitated by superuser creds being pinned to a slack channel.
Rebuilding business is prioritised by importance. If the online shop is a small side hustle compared to the brick&mortar ones (or is much slower), then itโs lower priority.
Communicating the current status and expected progress is better, builds trust.
Wages usually are handled as lump payment, i.e. the same sum as last mont - and corrected later when the HR systems are back online.
The incidence response team should cover IT forensics, BCM and communication.
When I was in an M&S yesterday they had card payment working fine but they were having obvious fresh stock problems. While M&S online shopping is probably large for them, they also have a deal with Ocado to do M&S food deliveries, so I suspect that might still be partially going.
โa former chief executive at another firm and had to deal with a data breachโ is an awkward way to say โoverpaid jackass who was fired for his handling of a data breachโ
There's a report on ITV News that Co-op member data is available on the Dark Web(tm), but as far as I know this isn't accurate. DragonForce's portal hasn't been available for over a week.
Here's the ITV News report anyhoo, logline: "ITV News understands the the ongoing cyberattack faced by the supermarket has worsened since Friday, impacting the ordering system, drivers and warehouse staff."
I'm not sure people realise that "members" are mutual owners, but "customers" are anyone using co-op services, whether members or not. Not sure which are in the data breach - perhaps both? I think the members' db is probably separate.
Sunday Times has a piece looking into ransomware incident at Marks and Spencer. It's pretty good, goes into their contain and eradicate focus.
"By shutting down parts of the IT estate, Highamโs team had worked to prevent the attack from spreading, but had also stopped parts of its digital operations from functioning. This was considered a worthy trade-off."
One error in the article - lack of recovery doesn't mean no ransomware paid. Paying is not quick restoration.
Thereโs a piece in The Sunday Times today about the DragonForce ransomware incident at Marks and Spencer which caught my eye. Itโs a great piece, e.g. it looks at M&S containing the threat toโฆ
Sky News quote a source in M&S head office saying Marks and Spencer have no ransomware incident plan so they are making it up as they go along apparently, with staff sleeping in the office and communicating via WhatsApp.
M&S dispute this, saying they have robust business continuity plans.
One of the points of exploitation of large orgs is they usually outsource their Service Desk to somewhere cheap offshore who donโt know the org staff, and when you call and say your name, they normally put big all caps bold red warning if the person is a VIP, eg C suite, so they get VIP service - ie anything goes.
Co-op Group appear to be trying to course correct with their cyber incident comms.
Theyโre calling it a cyber incident now, and have put a statement on the front page of their website, along with an FAQ. They havenโt yet emailed members (they should). Edit: theyโve started emailing members.
It sounds like the situation at Co-op has got worse. Theyโve stopped taking card payments in some stores, itโs cash only. telegraph.co.uk/business/2025/โฆ
One thing for media covering the Co-op thing - attackers are not impersonating IT help desks to gain access. Theyโre impersonating *staff* calling in to the IT help desks - theyโre different things.
The Co-op is redirecting food and drink supplies to stores in rural and remote areas in a bid to protect isolated communities from shortages following a serious cyber attack.
I just did a Shodan Safari on Co-op - basically all their Windows and Linux systems in their core DCs at network boundary are down, it's not just EDI. It's been like that for just under a week, prior to that things were still online.
I feel really bad for them as it's a great org. Also their CEO is basically the only one who stood up like this for trans people.
If you're wondering about Marks and Spencer - I just did a Shodan Safari of their network boundary, Palo-Alto GlobalProtect VPN remote access access is still offline, 15 days later.
Online orders are still not working, and the store stock checker is disabled now.
Marks and Spencerโs online shopping is still offline 3 weeks later. It is thought they have lost around ยฃ63m so far, excluding IR, BCP and ransom payment costs. drapersonline.com/news/ms-onliโฆ
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
For anybody wondering what 'dial into the incident response bridge' means, it means they'll literally Teams call into cyber IR bridges as themselves and just extort you to your face. They'll also call CISOs etc. Bad Times at the El Royale.
Marks & Spencer bureau de change staff are being forced to use pen and paper to serve customers as a result of the cyber attack on the retailer and cannot accept card payment. thisismoney.co.uk/money/marketโฆ
M&S bureau de change staff are being forced to use pen and paper to serve customers. The travel money desks are also unable to accept card payments in some cases.
Co-op Group have provided some more detail about what itโs doing about remote lifeline stores (ones where theyโre the main/only retailer on an island):
โFrom Monday, 12 of the most remote lifeline stores will receive treble the volume of available product, and another 20 lifeline stores will get double the volume.โ bbc.com/news/articles/c071e7x8โฆ
Explore exciting job opportunities at M&S across various sectors: In-Store, Digital & Tech, Clothing, Food, Support, and Logistics. Be part of Britain's best-loved brand, championing sustainability, inclusion, and innovation.
I think Co-op may have stopped recruitment too, theyโre a big employer so usually have hundreds of open positions - currently they have 17, and most close today and the rest in a few days.
U.K. retailer the Co-op is still having trouble with keeping grocery shelves stocked as it continues to respond to an attempted cyberattack that forced it to shut down some systems two weeks ago.
Allianz supplies Marks and Spencer's cyber insurance, and will apparently suffer a full tower loss (i.e. it's going to be expensive) insuranceinsider.com/article/2โฆ
Co-op stores in Sheffield, Badenoch, Dunfermline and many other places are apparently running out of produce - it's not possible to keep up with the local media reports but they're basically bored reporters get sent out to photograph half empty fridges.
This ITV News report linking the Co-op and M&S breaches to SIM swapping is not accurate, no source given. itv.com/news/2025-05-12/sim-swโฆ
They also have a report today saying Co-op stores are restocked, which is also not accurate - that one is sourced from Co-op, but obviously doesnโt stack up to looking in Co-op stores.
If anybody is wondering, all of Marks and Spencer's Palo-Alto GlobalProtect VPN boxes are still offline, 3 weeks later. Pretty good containment method to keep attackers out.
Attached: 1 image
M&S use Palo-Alto GlobalProtect for VPN, they took all the endpoints offline days ago (usually first stage containment for ransomware/extortion groups).
M&S confirm my toot from 3 days ago that a significant amount of customer and staff data was stolen. Theyโve known for weeks but opted not to tell anybody. bbc.com/news/articles/c62v34zvโฆ
Re the Co-op Group breach, Co-op say home addresses of customers were exfiltrated (it was the membership database). This one dates back to my May 2nd toot upthread re home addresses - at the time, they didn't specify home addresses.
Co-op's AGM is this weekend, and M&S yearly results and investor contact are next week.
Gonna be awkward for different reasons, e.g. Co-op is member (customer) owned, so the people's data Co-op had stolen are effectively the shareholders and are invited.
The Channel Islands Coop, which is different to Co-op Group, has been able to restock shelves by moving away from Co-op Group for supply distribution and moving to local suppliers. bbc.co.uk/news/articles/c3d4xvโฆ
The Grocer reports Nisa and Costcutter are running out of fruit & veg, fresh meat and poultry, dairy products, chilled ready meals, snacks and desserts.
Nisa and Costcutter are supplied by Co-op Wholesale, which is dependent on Co-op Group.
โItโs really poor. I feel bad for them but what makes it worse is their hush-hush mentality about it. Thereโs no proper level of communication and we get random updates.โ
In communications sent to retailers, the symbolย groups listed products that were either โtemporarily unavailableโ or โout of stockโ as a result of supplier issues
Co-op Group have told their suppliers that "systemic-based orders will resume for ambient, fresh, and frozen products commencing Wednesday 14 May". They say forecasting system will still be impacted.
As the Co-op turns orders back online, it has warned suppliers that it is unable to provide โaccurate product forecasting ahead of Wednesdayโs ordersโ
Financial Times report Marks and Spencer expect to claim ยฃ100m on their cyber insurance, the maximum allowed, suggesting losses probably more. ft.com/content/723b6195-1ce7-4โฆ
If you want figures for your board to set expectations in big game ransomware incidents, Co-op containment just over 2 weeks, M&S just over 3 weeks so far - recovery comes after.
In terms of external assistance, Co-op have Microsoft Incident Response (DART), KPMG and crisis comms. M&S have CrowdStrike, Microsoft, Fenix and crisis comms.
The threat actor at Co-op says Co-op shut systems down, which appears to have really pissed off the threat actor. This was the right, and smart, thing to do.
While I was at Co-op we did a rehearsal of ransomware deployment on point of sale devices with the retail team, and the outcome was a business ending event due to the inability to take payments for a prolonged period of time. So early intervention with containment was the right thing to do, 100%.
Marks and Spencer say food distribution to their stores is returning to normal. It follows Co-op's announcement yesterday that food and drink distribution will begin to return to normal from the weekend. reuters.com/business/retail-coโฆ
The link in the article to Vectra Cognito AI has a Coop Sweden logo on it, and the Coop Sweden CISO is named. Coop Sweden is different company. Coop Sweden went on to have a ransomware attack that crippled the org, including point of sale, so I don't think it's a good sales point. Same with Silverfort.
Google AI has ingested the article and now uses it to claim Co-op Group use the tools.
The Times reports M&S were breached through a contractor and that human error is to blame. (Both M&S and Co-op use TCS for their IT Service Desk).
The threat actor went undetected for 52 hours. (I suspect detection was when their ESXi cluster got encrypted).
M&S have told the Times they had no โdirectโ communication with DragonForce, which is code for theyโre using a third party to negotiate - standard practice.
M&S looks to be moving to reposition their incident as a third party failure, which I imagine will help redirect some of the blame (they present their financial results during the week to investors): bbc.co.uk/news/articles/cpqe21โฆ
Both M&S and Co-op outsourced their IT, including their Service Desk (helpdesk), to TCS (Tata) around 2018, as part of cost savings.
There's nothing to suggest TCS itself have a breach btw.
Basically, if you go for the lowest cost helpdesk - you might want to follow the NCSC advice on authenticating password and MFA token resets.
I've put a 3 part deep dive blog series coming out probably next week called Living-Off-The-Company, which is about how teenagers have realised large orgs have outsourced to MSPs who follow the same format of SOP documentation, use of cloud services etc. Orgs have introduced commonality to surf.
The Office of the Privacy Commissioner for Personal Data (PCPD) has confirmed that Marks and Spencer (M&S) Hong Kong has not informed it of a recent customer data leak, nor responded to its enquiries. hongkongfp.com/2025/05/19/ms-hโฆ
The Office of the Privacy Commissioner for Personal Data says M&S Hong Kong has not informed it of a recent customer data leak, nor responded to its enquiries.
"Cyber analysts and retail executives said the company had been the victim of a ransomware attack, had refused to pay - following government advice - and was working to reinstall all of its computer systems."
Not sure who those analysts are, but since DragonForce haven't released any data and M&S won't comment other than to say they haven't had any "direct" contact with DragonForce, I wouldn't make that assumption.
There's also a line in the article from an cyber industry person saying "if it can happen to M&S, it can happen to anyone" - it's ridiculous and defeatist given Marks and Spencer haven't shared any technical information about how it happened, other than to tell The Sunday Times it was "human error"
The Air Safety version of cyber industry would be a plane crashing into 14 other planes, and industry air safety people going "Gosh, if that can happen to British Airways it could happen to anybody!"
I made this point a few weeks ago, but... outsourcing all your IT, Networks, Service Desk (helpdesk) and operational cybersecurity is a temporary cost saving and basically paints a ticking timebomb on the org, IMHO.
M&S say online ordering will be stopped until sometime in July, and it has taken a ยฃ300m hit, far higher than analysts had predicted. bbc.co.uk/news/articles/c93llkโฆ
The NCA has confirmed on the record that the investigation into the M&S and Co-op hack is focused on English teenagers. I could toot the names of the people I think theyโll pick up, but wonโt.
The CEO of M&S has declined to comment if they have paid a ransom. For the record: Iโve heard they have, in secret, via their insurance. reuters.com/business/retail-coโฆ
I guess it's low risk since the electronic displays are basically paper - Dumb eink displays that you update via RFID from a handheld. (The ones I saw in the local coop worked that way anyway.)
This stuff is brilliant. Based on e-paper and runs on Zigbee.
And they can raise the prices between you picking things off the shelf and going through the checkout and you'll have no proof that it was offered at a lower price.
e-paper price labels are apparently extremely common in mainland Europe. The UK is extremely slow to adopt things like this.
*In theory*, during an incident, the labels would remain as-is until they receive a new price. So TAs would specifically need to target the pricing database prior to wiping.
TCS has a security incident running around the M&S breach.
Interestingly the source claims TCS aren't involved in Co-op's IT - which is categorically false, they took over most of it while I worked there, including the helpdesk, and my team (SecOps) after I left.
While Co-op have restored every customer facing system and internal systems like recruitment and remote working, M&S still don't even have recruitment back.
I'm reliably told they paid the ransom, so they'll be target #1 basically forever with other ransomware groups now due to resiliency woes and willingness to pay.
Marks and Spencer's remuneration committee have opted not to dock the CEOs pay as expected and prior reported over the cyber incident, but instead increased it by ยฃ2m. bbc.co.uk/news/articles/c23mz5โฆ
Marks & Spencer is holding walk-in in-store recruitment open days to fill vacant roles while its online hiring system remains offline following its ransomware attack in April. thegrocer.co.uk/news/mands-stoโฆ
This Daily Mail piece about security leaders thinking work-from-home means they will be crippled is horseshit, I'm not linking it.
They've taken a survey about how security people think their businesses couldn't survive ransomware, and linked it to working from home. WFH isn't the problem: business IT and resilience being built on quicksand is the problem.
The 'WFH' allegations seem in especially bad faith given the suspected entry point for the M&S compromise: the outsourced helpdesk.
Those guys are even more compliant labor than work-not-from-home employees, so the Daily Heil isn't going to say anything; but lack even the (informal; but in practice often at least reasonably effective) "does the IT person you just poked recognize who is interrupting with a password question?" ID verification step with onsite workers and onsite IT.
I could draft an opposing headline about how ransomware and cyber threats will naturally proliferate faster and more easily within a physical network than it will in a distributed environment. It wouldn't be the whole story either, but it's just as true.
I WFH 100% of the time. I never connect to an office "network". The only way I could spread any form of malicious payload to my colleagues is through shared communications platforms which not only requires ME to fuck up so that my account is used to send that payload to others, but it then requires the recipients to ALSO screw up and make mistakes like open dodgy links or attachments. WFH provises an additional buffer to protect an organisation, in my opinion.
I think they did a great job. They do call it a "highly sophisticated attack", which, frankly.. isn't true and may come out in open court later if the suspects are ever caught.
6 weeks from containment to "near full" recovery, for statto nerds like me who track this stuff.
I'm sure the logic of 'work from home' being an existential threat while extensive exposure to outsourced managed services is just good sense must only baffle me because I'm not the sort of person who deserves a bonus that brings me up to ยฃ7 million for the year; not because it's questionable.
TCS have told shareholders their systems were not compromised in the hack of M&S.
As an explainer here (not in the article): TCS IT systems weren't compromised. Their helpdesk service (they're AD admins at M&S) was used to gain access to M&S. They manage M&S IT systems. reuters.com/business/media-telโฆ
M&S haven't been able to supply sales data - so the British Retail Consortium (BRC) - used by the UK government as as economic indicator - basically made up figures for M&S and didn't tell people they had done this.
Ultra spicy post claiming to be from UK retailer employee (M&S or Co-op) about their experience with TCS on their security incident. reddit.com/r/cybersecurity/comโฆ
I'd be very curious to know what the breakdown is between TCS dropping the ball and lying about it and M&S/Co-op not actually insisting on adequate procedure.
It's not terribly uncommon for people to only care about time-to-resolution with some lip service to user satisfaction when it comes to helpdesk metrics; and tacitly discourage things that are slow and unpleasant like hassling people for ID, at least until that becomes a visibly terrible idea.
as someone who has been subjected to Tata on multiple occasions going back over a decade?
This isn't nearly spicy enough. I don't even describe them as a 'body shop' because they'd gladly route you to a corpse and try to charge extra for '24x7 coverage.'
When one employer did a basic security audit of their helpdesk services, Tata failed so severely that the contract was pulled for cause before the audit was even completed. They moved it all back in-house.
The root problem here isn't that TCS are shockingly bad (they are, just about everyone knows that).
The root problem is that "management decisions" constantly overrule those that raise concerns about their service and tell any remaining internal IT and security staff to "deal with it as best you can."
I'm very much of the view that, yes, the outsourced provider can be the cause of an incident, they can provide a shockingly bad service, they can cost your business millions of pounds. But the decision to continue to use them when you already know this is a real possibility - that's a decision by senior management within the company. That's on you.
Interesting. I don't have the background on this specific attack, but I'm reminded of the Target credit card theft. An HVAC company near me was the point of entry for the attackers; they had high-access keys to Target's intranet because they install and maintain shopping-mall-grade HVAC and can remote-override it for maintenance and schedule reasons (nation-scale chain stores with giant footprints save not-inconsequential money on things like "Don't power up the HVAC to normal capacity on days nobody is here").
They had the keys on the same machine running their webserver.
(Meanwhile, Target actually did get an SEC slap-on-the-wrist for one specific thing: the HVAC intranet piece wasn't firewalled from the financial transactions and cash register source code pieces).
Iโm certainly no IT security expert, but if your system is getting popped by three kids, does that perhaps indicate that you may have missed a few opportunities for improvement in the past? ๐ค
If you ever doubted the link between Scattered Spider(tm) and LAPSUS$ - one of the people arrested today was a key part of the LAPSUS$ attacks a few years ago.
Authorities in the United Kingdom this week arrested four alleged members of "Scattered Spider," a prolific data theft and extortion group whose recent victims include multiple airlinesย and the U.K. retail chain Marks & Spencer.
Co-op finally admitted the entire membership database was stolen
I had this in the thread months ago, they originally tried to deny it entirely then tried to say โsomeโ data was accessed when they knew it was the whole thing.
Personally I think Co-op did a really good job getting out of that situation and minimising impact.
I definitely think if you have a LAPSUS$ style advanced persistent teenagers situation, tilt towards open and honest comms as those kids will use secrecy against ya. Itโs 2025, itโs okay to say you got hacked, people largely understand. Also, in IR, lawyers are usually stuck in 1980 advice - itโs just advice, they ainโt yo boss.
When GDPR was being introduced, I got to see *so much* bad advice being given to companies by their lawyers that it made me realise how many lawyers really are making it up in the spot as much as everyone else - and therefore bringing their own biases and misapplied experiences.
Itโs 2025, itโs okay to say you got hacked, people largely understand.
Probably the most damning indictment of the entire computing industry that I've seen for a long time.
I don't disagree at all. But this absolutely should not be the case and wouldn't be if we weren't still building core infrastructure around ideas that were known to be bad by the mid 1980s.
Four young people who were arrested for their suspected involvement in the damaging cyber attacks against Marks & Spencer, the Co-op and Harrods, have been bailed.
at this point I'm much more surprised when someone over 25 gets picked up for hacking stuff, I think some dude was helping gangs smuggle drugs into Rotterdam via hacking into the port logistical systems, they were like 41 with kids, that was way more unexpected to me lol
Europeโs commercial ports are top entry points for cocaine flooding in at record rates. The work of a Dutch hacker, who was hired by drug traffickers to penetrate port IT networks, reveals how this type of smuggling has become easier than ever.
The term 'user' in "no TCS systems or users compromised" could be more interesting to argue on in a civil liabilities case.
If a TCS staff member falls for social engineering (even if the action they take is within an assigned M&S tenant account...), is that not the same as a TCS user being compromised?
Anyway... I'm sure that statement won't at all be like rubbing salt in M&S's wounds.
I keep reminding people who mention this that M&S outsourced their IT services to the cheapest possible option. That immediately tells you how much they care about your data safety and security. Itโs so important to them that they phone it in. Absolute joke.
Still didnโt have any Percy Pigs at the last store I checked either. Staff told me they donโt know what theyโre going to receive one delivery to the next.
the daily mail publishing click bait headlines with sensationalist takes that fit the narrative the rich and powerful want to push? Who could have predicted that ahead of time?
I took that to mean that they (or more likely the analysts they hired) have concluded it's cheaper/quicker/safer to rebuild new systems from scratch than to continue any further recovery. So drawing a line in a financial & investigative sense, rather than saying that ยฃ300 million is just a scratch.
And rebuilding from the ground up would seem to tie in with their statement about online orders being unavailable until at least July and then "ramping up" after that.
unless maybe you outsource, but to a bunch of different providers, spreading risk? ie use local OpenLDAP as an organisation management tool (does not eerste a huge amount of resources, then set up mail with A, storage with B, web with C, etc. ?
when I got my business degree, one of my management profs said that the instant you outsource, you give up control. To the service provider, you move from income to liability on the balance sheet because you now are costing them money, and to eke out any profit they need to cut costs related to providing service to you.
They are still within the contract sla period for a response from the outsourced help desk. Sorry. But the contract sla only covers time to first response to the ticket not when the ticket will be done. Also orders for that many new machines exceeds the average % of requests and so is subject to delays from the equipment supplier
One of the big MSP's from India was adamant: 1. Personnel is not allowed to store passwords. 2. Must use unique passwords for every service. 3. Passwords must rotate every X days. 4. Only sanctioned apps are allowed. 5. No password manager is sanctioned or installed by default.
I have memories of those exercises ๐ (particularly logistics chiming in with 'erm, we'd need to kill all supplier orders asap' and the room going quiet ๐ณ) Just glad some of the lessons sank in....
the thieves could probably show up at the AGM and present themselves as a member, since they have access to all the information the Co-Op has on it's membership...number, address, etc.
Short of checking govt. ID or requiring a hard copy of the meeting invite that was mailed to their address. Even then, the thieves might've gotten away with that too.
I wonder if the M&S and Co-op PR departments are constantly waiting for the other to announce something so that they themselves can push out an announcement and hope theirs goes under the radar?
I can only hope this data breach is the kick up the arse needed to abolish the common practice of using date of birth as an (immutable!) security password. Once itโs public knowledge itโs beyond uselessโฆ itโs a liability. Especially in banks.
Today they apparently emailed all customers that have ever purchased items from their online store. I received two such emails, an apologetic one from Stuart (CEO), and a slightly more explanatory one from Jayne Wall (Customer Services).
I was on holidays in Brodick (Arran, Scotland) last sunday, I can confirm the Co-op was low on products, with only potatoes available as fresh vegetables ๐ฌ
I though it was because it was a sunday late afternoon, but reading your thread it was clearly linked to the cyber incident
I am hoping that the local Co-Ops might be able to bypass the Co-Op Group for some items if the problem persists. The Southern Co-Op shops sell local/regional items where a nearby "Manchester" Co-op (as I have heard some of the Southern staff refer to the Co-op Group) shop doesn't.
Not sure if it is related, but M&S shuttered a flag-ship store without notice and earlier than planned on May 7th.
๐ Marks and Spencer suddenly closes Aberdeenโs flagship St Nicholas branch after more than 80 years in city centre pressandjournal.co.uk/fp/news/โฆ
maybe by hybrid, they mean a workforce consisting of vastly overpaid & mostly useless execs, and grossly understaffed, underpaid, & unappreciated workers trying to keep the wheels from falling off?
you don't understand, I lost at least 700 million to the drugs I had to buy to help my paranoia because I can't watch my wageslaves Imean workers do their job
itโs a nice idea, but sheโs just saying sheโs ok with exploiting trans labour. โMassive business benefitโ is never to the benefit of the workers.
Ehm, they're doing both things. The easiest way to get physical access to most companies is to pretend being an employee of their it service contractor. They often just open all of the doors and show you the way right into the server room or ask you if they should log out before you take over (followed by if you'd like tea or coffee). At most what you as an attacker risk is getting also tasked with fixing the printer or copy machine "now that you're already here"...
Well, that's an easy one. Just say that you are calling regarding the reported problem with Outlook.
On the one hand you have a ~90% Chance, that the called person had.a Problem in the last Week, and on the other hand will hand you over the username as well as the password immediately.
I'm somewhat surprised, that this had not been tried earlier.
noticed the shelves in my local Co-op were not looking good this evening. Looks like they are struggling getting items ordered via their fallback methods.
Can also confirm, from several years ago, that sometimes there is also an Executive Assistant with a flag in some systems to โcall on behalf ofโ C-Suite/VPs.
Itโs like a privilege escalation on people exploit ๐คฃ๐
The cult of โitโs an exec!โ and thus able to bypass normal protocols has always made me cry - especially seeing as how theyโre the ones with access to the juicy stuff and (usually) have low IT literacy and awareness.
Often, when Iโve worked with an org to help strengthen the help desk, the push back has been from the service desk management (scared that theyโll been seen as impeding the exec in the course of Important Work). Usually asking the question โwould you rather be responsible for an extra 60 seconds on a call, or for the entire company being breached?โ helps them to see the light.
The other source of friction is from the admin assistants of the execs who seem even more entitled than the execs themselves. An appeal to vanity (โwe have to be extra careful when you call in because youโre in a very privileged positionโ) can work wonders.
Every time Iโve spoken directly with said execs and explained exactly why they are going to be asked to positively ID themselves for any interaction they have been 100% supportive.
This is basically the plan for most businesses in reality.
It's fine to talk about stuff being "widely known best practice," but when IT shows up with big expenses for backups and security, the MBA's always decide it's more important to rightsize the headcount and operate lean. Many IT departments report up through an MBA and not a technical person, and many IT people are terrible at communicating risk dramatically enough to get money.
The thing that gets me is that the two statements are probably true for the people who said them. The Security group may have wargamed and prepared for malware attacks, and done so in a way that no one else in the technical stack even noticed happening (beyond some new agent installs being requested). So when the attack comes, the Security plan swings into action and no one outside of Security knows what it is or has practiced it.
This is high visibility. Executives step in to make Declarations, complicating the response. This is an incident big enough to need sub-commands to track various workflows, reporting up to a rotating incident command. Everyone wants to help, the workflows aren't well defined yet, and people help on their own authority (thanks to Command not having a clear picture yet and guiding where help would be good) and maybe make things worse in a few spots.
In fairness, I don't think I've ever believed a ransomware incident response plan would *actually* be used in any meaningful circumstance beyond an ISO audit anyway.
@ollie_whitehouse Do egress filtering (esp. for servers) with alerting. If there is unknown communication, then you have either a misconfiguration or a problem.
Keep critical IT infrastructure (network, firewalls, SAN/NAS, virtualisation, backups) separated from Active Directory.
Do not couple internet-facing systems (including VPN and M365) with your local AD.
@ollie_whitehouse One Entra Conditional Access policy to block high risk logins, a second policy to block high risk users. You most likely want to do both, and need to do them in separate policies
I agree with most of your arguments. (In fact, the only one I take exception with is comparing ransomware with climate change. Ransomware is a much more real and urgent problem.) Those are pretty much arguments I've used myself when advising customers hit by ransomware not to pay.
But, ultimately, it's the company's decision. Even if the company makes the wrong decision, the government shouldn't be the one who decides for them.
The Ransomware-as-a-service (RaaS) model has not recovered from law enforcement disruption, and the entrance of novice actors along with non-Russian state-linked cybercriminals has led to uncertain outcomes for victims.
superb summary. Surprising it still hasn't been made mandatory to report incidents, and clearly payments to criminal groups should have been outlawed before now. You'd have thought that would easily have fallen foul of the existing anti-money laundering/anti corruption regs.
My thought after reading this is very old school. When the first indication appears, shut everything down. I have seen banks do this, and watched tellers calmly tell customers "I'm sorry, but the system is temporarily shut down" and start from there. If the breach is stopped quickly enough, you may have a chance. Also, what about off site storage, that would not be accessible to the attacker? Ultimately, the decision is a risk management decision, to evaluate as quickly as you can
I caught a typo similar to ones I make, hope this helps. "Travelex arenโt alone. When I covered the Capita ransomware, they paid quietly paid" maybe delete one of the "paid"s
it's good to make that known, i remember reading pieces about how professional the "commercial" side of these groups were and how companies found it so compeling to pay for the "service", that gave me an impression of a much better argument for doing so (with the downside that it does fund crime and rewards it).
it absolutely blows my mind that *anybody* pays ransomware attackers off, *ever.* Taking your lumps is better even WITHOUT the fact that you're literally funding them to continue attacking people, and that eventually (if not much, MUCH sooner) they're going to come right back to YOU again for another handout. Very likely, for the same damn attack you just paid them to keep quiet about in the first place.
Stuart Machin had been looking forward to a long weekend. It was Easter Saturday and the chief executive of Marks & Spencer had retired to his south London home for the evening, after a long day inspecting the aisles of his local M&S branch โ somethiโฆ
Multiple explosions were heard in the Iraqi capital, Baghdad, particularly at Camp Taji, a military installation used by Iraqi and the US-led coalition forces.
if you suspect that an enemy is about to make a move on you, what do you do? A. prepare defenses? B. attack first? C. do what the enemy wanted before they get a chance to do it?
Lets keep blaming it all on the Jews when Lucifarians set this shit up. All three of these pieces of shit worship Lucifer. Motherfuckers smell like sulphur.
Anarchism is the great liberator of man from the phantoms that have held him captive; it is the arbiter and pacifier of the two forces for individual and social harmony. -- Emma Goldman
Chinese President Xi Jinping will attend a gathering marking the 80th anniversary of the victory in the Chinese People's War of Resistance Against Japanese Aggression and the World Anti-Fascist War.
Al-Qassam Brigades, the military wing of the Islamic Resistance Movement (Hamas), announced on Tuesday that its fighters carried out a complex ambush targeting a Zionist force entrenched inside a house south of Khan Younis in the southern Gaza Strip.
Ahmed, a rail worker, told WSWS, โThe attack on Iran is totally unjustified, itโs also a total threat to democracyโฆ Before we know it, we wonโt be able to protest.โ
The ruling isn't a guarantee for how similar cases will proceed, but it lays the foundations for a precedent that would side with tech companies over creatives.
These Labour cuts will push 250,000 more people into poverty, including 50,000 children.
This isn't what anyone voted for.
The UK is a wealthy country, but that wealth is hoarded by a tiny few. The answer isn't to take more from the already struggling, it's to tax the rich.
QUE RETENIR DES 12 JOURS DE CONFRONTATION ENTRE LโIRAN ET ISRAรL ? Infos Brutes- 24/06/25
La confrontation inรฉdite entre lโIran et Israรซl aura durรฉ prรจs de deux semaines, marquant une rupture majeure dans la dynamique rรฉgionale. Le cessez-le-feu, initiรฉ par les รtats-Unis, tรฉmoigne de la volontรฉ israรฉlienne dโรฉviter une dรฉsavantageuse guerre d'usure. Cette initiative reflรจte en rรฉalitรฉ un signal d'essoufflement dโIsraรซl. Mais que nous enseignent rรฉellement ces douze jours dโรฉchanges de frappes ?
Sur le plan politique interne iranien
Lโattaque israรฉlienne, justifiรฉe par le prรฉtexte nuclรฉaire, nโa pas affaibli la Rรฉpublique islamique. Au contraire, elle a consolidรฉ la cohรฉsion nationale. Face ร lโagression, le peuple iranien a resserrรฉ les rangs autour du rรฉgime, dรฉmontrant que la capacitรฉ de rรฉsistance dโune Nation repose avant tout sur lโunitรฉ de son peuple.
Sur le plan technologique โ Iran
LโIran a pu tester grandeur nature ses missiles balistiques ร longue portรฉe. Au-delร de la dรฉmonstration de puissance, cโest une opportunitรฉ dโajustement technique. Lโexpรฉrience de terrain servira ร perfectionner ces armes, ร les rendre plus prรฉcises et potentiellement plus dissuasives ร lโavenir.
Sur le plan technologique โ Israรซl
La supรฉrioritรฉ technologique israรฉlienne, longtemps considรฉrรฉe comme un acquis, a รฉtรฉ sรฉrieusement mise ร rude รฉpreuve. Malgrรฉ la prรฉsence du Dรดme de Fer, des systรจmes avancรฉs de dรฉfense antimissile et la puissance de son aviation, les missiles iraniens ont percรฉ les ยซ rideaux de protection ยป et atteint des cibles stratรฉgiques, รฉbranlant la confiance dans ces boucliers.
Des dรฉcennies dโassassinats ciblรฉs de scientifiques iraniens nโauront pas empรชchรฉ lโIran de maรฎtriser la technologie nuclรฉaire. Les bombardements israรฉliens, en partie aveugles, nโont pas dรฉtruit les capacitรฉs et le savoir-faire nuclรฉaires de lโIran. La centrale nuclรฉaire de Bushehr n'a pas รฉtรฉ touchรฉe et l'incertitude demeure sur l'efficacitรฉ des frappes sur les infrastructures souterraines. Pire encore, le stock d'uranium hautement enrichi dissimulรฉ ne finira pas de hanter Tel-Aviv.
Lโimage dโinvincibilitรฉ dโIsraรซl en sort affaiblie. Pour la premiรจre fois, un รtat souverain a revendiquรฉ et exรฉcutรฉ des frappes en profondeur sur le territoire israรฉlien avec un lourd bilan humain et des dรฉgรขts considรฉrables. Cette brรจche stratรฉgique aura un impact durable sur la perception de la superpuissance militaire d'Israรซl.
Sur le plan tactique โ Iran
LโIran sโattellera dรฉsormais ร renforcer considรฉrablement ses systรจmes de dรฉfense aรฉrienne. Lโinvestissement dans des technologies hypersoniques et furtives deviendra une prioritรฉ, tout comme la dissimulation accrue des infrastructures militaires stratรฉgiques pour renforcer sa dissuasion et sa capacitรฉ de projection.
Sur le plan de la retenue iranienne
Malgrรฉ sa capacitรฉ ร infliger des dรฉgรขts considรฉrables, lโIran a fait preuve de retenue stratรฉgique. Il aurait pu viser la centrale nuclรฉaire de Dimona ou les installations de dessalement, provoquant une catastrophe humanitaire et รฉcologique. Ce choix dรฉlibรฉrรฉ de ne pas franchir certaines lignes rouges montre une volontรฉ de ne pas provoquer une guerre totale.
Bien que la Russie et la Chine aient ouvertement condamnรฉ les frappes israรฉliennes, leur soutien concret se veut plus discret. La prรฉsence de scientifiques russes sur certains sites iraniens suggรจre une collaboration รฉtroite dans le nuclรฉaire et le militaire. Les missiles iraniens devenus subitement performants prouvent l'efficacitรฉ de la coopรฉration militaire et technologique avec la Russie, la Chine, la Corรฉe du Nord et le Pakistan.
La situation ramรจne paradoxalement le dossier nuclรฉaire iranien ร son point de dรฉpart: la voie diplomatique. LโIran se retrouve en position de force pour relancer les nรฉgociations avec ses conditions ou, au contraire, accรฉlรฉrer discrรจtement sa transition vers le nuclรฉaire militaire, s'il est considรฉrรฉ par Tรฉhรฉran comme seule garantie de sรฉcuritรฉ face ร des menaces existentielles.
Sur le plan militaire israรฉlien
Habituรฉ ร affronter des groupes non รฉtatiques comme le Hezbollah ou le Hamas, Israรซl dรฉcouvre les limites de sa stratรฉgie face ร un รtat organisรฉ, disposant de moyens balistiques consรฉquents. Lโoption militaire perd de son attractivitรฉ stratรฉgique, et la confiance dans les systรจmes dโalerte prรฉcoce et de dรฉfense est sรฉrieusement entamรฉe.
Sur le plan des pertes humaines et matรฉrielles
Malgrรฉ une communication strictement contrรดlรฉe par Tel-Aviv, de nombreux observateurs remettent en question le bilan humain en raison de lโampleur des dรฉgรขts. L'รฉtendue des destructions ร Haรฏfa, Tel-Aviv ou Beersheba , associรฉe aux indemnisations civiles et au coรปt des interceptions, pรจsera lourdement sur l'รฉconomie israรฉlienne, mรชme avec le soutien amรฉricain.
Sur le plan de la politique intรฉrieure israรฉlienne
#Netanyahou a momentanรฉment renforcรฉ sa position en dรฉtournant lโattention de ses ennuis judiciaires et ร se maintenir au pouvoir. Mais lโopinion publique, dโabord favorable ร lโattaque, pourrait basculer face aux limites rรฉvรฉlรฉes par la riposte iranienne. La paix avec les voisins s'imposera dรฉsormais comme une option crรฉdible.
Sur le rapport de force rรฉgional
Cette confrontation aura des effets durables sur lโรฉquilibre rรฉgional. Les รtats arabes observeront avec attention la capacitรฉ dโun รtat comme lโIran ร tenir tรชte militairement ร Israรซl. Cela pourrait redessiner les alliances, refroidir certaines normalisations diplomatiques, et rรฉactiver des dynamiques de dissuasion nuclรฉaire au #Moyen-Orient.
Sur le plan du droit international
Lโagression israรฉlienne contre lโ #Iran, sans justification reconnue par le droit international, viole la Charte des Nations unies. Pourtant, les รtats occidentaux nโont ni condamnรฉ cette action ni rappelรฉ les principes de souverainetรฉ. En invoquant une ยซ guerre prรฉventive ยป โ non reconnue juridiquement โ pour justifier lโattaque, ils valident un double standard. Or selon leur propre dรฉfinition, les รtats qui ne respectent pas le droit international sont qualifiรฉs d'ยซรtats voyousยป.
Chaque message de Van der Leyen est une raison de quitter l'UE
Commentaire peu politiquement correct de Hal Turner, qui a postรฉ cette chose imprimรฉe par la Prรฉsidente (non รฉlue) de la C.E. : "La Gauleiter Ursula von der Fรผhrer annonce simultanรฉment que l'Iran ne doit jamais se doter de la bombe (mรชme s'il n'existe aucune preuve qu'il tente d'en fabriquer une), et affirme que le droit international doit รชtre respectรฉ et que l'Iran doit s'engager dans une solution diplomatique crรฉdible.
Ceci aprรจs que l'Iran a dรฉjร รฉtรฉ bombardรฉ sans dรฉclaration de guerre ร deux reprises au cours des dix derniers jours, sans mentionner toutes les frappes aรฉriennes qu'il a subies, ses hรดpitaux et ses ambulances dรฉlibรฉrรฉment ciblรฉs, et aprรจs avoir tentรฉ de nรฉgocier uniquement pour que les autres parties bombardent leurs diplomates et attaquent leur territoire pendant les nรฉgociations. C'est une chose pour von der Leyen d'รชtre un serpent nazi, une escroc corrompu et une menteuse congรฉnitale, mais ici, avec son message, nous atteignons de nouveaux sommets de schizophrรฉnie."
Isra(h)รซl(l) refuse de signer le traitรฉ de non prolifรฉration un lanceur d'alerte israรฉlien a fait 18 ans de prison et maintenant il lui est interdit de quitter le territoire ( voir sur investig'action) les mรฉdias main stream aux mains des milliardaires s'alignent sur Israรซl et les mรฉdias publics ne font pas mieux(il n'y a plus de distanciation comme le faisait Charles Anderlin), seuls quelques mรฉdias indรฉpendants et privรฉs (comme la dรฉpรชche par exemple) ont un autre regard
C'est juste.... Et quand les mรฉdias, la Hyรจne, Potichon et Mersatz, et autres affirment qu'"Israรซl a le droit de se dรฉfendre", รงa vรฉrifie encore une fois que "dans un monde rรฉellement renversรฉ, le vrai est un moment du faux", comme l'avait dรฉclarรฉ Guy Debord. La tautologie รฉvidente "Israรซl a le droit..." est l'once de vรฉritรฉ thรฉorique noyรฉ dans l'odieuse rรฉalitรฉ de l'aggression permanente, du gรฉnocide et de la dictature rรฉgionale que poursuit Israรซl, tous รฉvรฉnements dont les prรฉmisses ont pu รชtre perรงu en 1948. D'ailleurs, un lord anglais qui voulait s'assurer des faits et recadrer les israeliens tous neufs s'est fait assassiner.... Mais comme l'UE, les milliardaires serrent trop fort et toujours les mรชmes. Ils sont en train de scier les forces vives, les enthousiasmes, les dynamiques sociรฉtales dont ils se repassaissent, en vrais vampires qu'ils sont. Et รงa va les tuer, pour peu qu'on les aide un peu ร se pรฉter la gueule.
Il y a un รฉlรฉment qui nous รฉchappe; et qui tourne en notre faveur; c'est leur "trop-plein" de fric qui commence ร leur poser problรจme. Le fric finit par puer la mort. C'est des soucis. Bien sรปr il y a du pouvoir mais ce pouvoir rend malade... Il faut s'en rendre compte sinon on ne perรงoit pas notre victoire...
Israelis are flocking to Cyprus like it was promised to them in a 3,000 year old book. Cypriots are freaking out about the loss of sovereignty as Zionists buy up huge chunks of real estate, in case they lose occupied Palestine. It could be a matter of time until Cypriots are forced out of their homes into concentration camps and called "antisemites" for objecting. The world let Zionists get away with this once so don't doubt it would let it happen a second time.
Pรฉonia on X: La prophรฉtie de Todd sur la guerre en Ukraine: pourquoi la Russie a dรฉjร gagnรฉ et pourquoi l'Europe s'autodรฉtruit.
via Strategic Culture
๐Il y a des voix qui, dans le grand fracas de lโhistoire, murmurent des vรฉritรฉs que personne ne veut entendre. Et puis, il y a celle dโEmmanuel Todd. Historien, dรฉmographe, essayiste, Todd nโest pas un commentateur ordinaire. Cโest lโhomme qui, en analysant les taux de mortalitรฉ infantile et les structures familiales, a prรฉdit lโeffondrement de lโUnion soviรฉtique alors que tous la croyaient รฉternelle. Un ยซ dรฉtective de la dรฉmographie ยป capable de discerner les fissures profondes sous la surface des empires.
Aujourdโhui, cette voix sโexprime ร nouveau, avec une clartรฉ brutale qui รฉbranle nos certitudes. Dans une rรฉcente interview explosive accordรฉe ร la presse germanophone, Todd ne mรขche pas ses mots. Le sujet est la guerre en Ukraine, mais son analyse va bien au-delร du champ de bataille. Elle parle de nous. De notre avenir. Sa thรจse, simple et terrifiante, est la suivante : la Russie a gagnรฉ la guerre, et lโOccident, perdu dans un labyrinthe dโillusions, ne sโen est mรชme pas rendu compte. Il ne sโagit pas de lโopinion dโun ยซ idiot utile ยป du Kremlin, comme il sโattend lui-mรชme ร รชtre qualifiรฉ. Cโest le diagnostic implacable dโun mรฉdecin observant son patient โ lโEurope โ sโinfliger des blessures mortelles, persuadรฉ de lutter pour son salut. Cโest un voyage au cลur des tรฉnรจbres de notre รฉpoque, une analyse que nous devons avoir le courage dโรฉcouter.
๐Le choc de la normalitรฉ : un voyage ร Moscou
Pour comprendre le raisonnement de Todd, il faut commencer par lร : Moscou. Invitรฉ ร une sรฉrie de confรฉrences, lโintellectuel franรงais sโattendait ร trouver une capitale assiรฉgรฉe, รฉcrasรฉe par les sanctions et le poids dโune guerre totale. Au lieu de cela, il a vรฉcu ce quโil appelle un ยซ choc de normalitรฉ ยป.
Imaginez la scรจne. Les rues grouillent de vie, les regards rivรฉs sur les smartphones. Les magasins sont pleins, les paiements sโeffectuent par carte bancaire, les trottinettes รฉlectriques filent comme ร Paris. Todd relรจve un dรฉtail presque comique, mais rรฉvรฉlateur : ยซ La grande diffรฉrence, cโest que tous les escalators et ascenseurs fonctionnaient. ยป Ce nโest pas lโimage dโun rรฉgime au bord de lโeffondrement. Cโest celle dโun pays qui a absorbรฉ le choc, sโest rรฉorganisรฉ et continue de vivre. Cette ยซ normalitรฉ ยป nโest pas anecdotique, mais constitue le premier pilier de sa thรจse. Alors que lโUkraine mรจne une guerre existentielle pour sa survie, pour la Russie, il sโagit dโune opรฉration stratรฉgique qui, malgrรฉ un coรปt humain terrible, nโa pas dรฉstabilisรฉ le cลur du systรจme. Les sanctions, selon Todd, ont mรชme eu un effet paradoxal : elles ont contraint Poutine ร mettre en ลuvre des mesures dโautarcie รฉconomique et ร renforcer des liens commerciaux alternatifs, des politiques quโil nโaurait jamais pu imposer en temps de paix. La Russie sโest adaptรฉe.
๐LโOccident, en revanche, semble avoir perdu le contact avec la rรฉalitรฉ.
LโApocalypse comme rรฉvรฉlation : la dรฉfaite de lโAmรฉrique et le dรฉclin de lโOccident Quand Todd affirme que la Russie a gagnรฉ la guerre, il ne parle pas dโun dรฉfilรฉ triomphal ร Kiev. Son analyse est stratรฉgique. Lโobjectif premier des รtats-Unis, explique-t-il, รฉtait dโutiliser lโarmรฉe ukrainienne comme un intermรฉdiaire pour infliger une dรฉfaite stratรฉgique ร Moscou, lโaffaiblir et provoquer son effondrement. Ce plan a รฉchouรฉ. Consciente de lโimpossibilitรฉ de faire plier la Russie sur le terrain, lโAmรฉrique a changรฉ de cap et dรฉclarรฉ une guerre commerciale ouverte ร la Chine. Pour Todd, cโest lร le vรฉritable tournant. Cโest le dรฉbut de lโApocalypse, non pas au sens de la fin du monde, mais dans son acception biblique originelle : une ยซ rรฉvรฉlation ยป. La guerre en Ukraine a mis au jour une vรฉritรฉ cachรฉe : la puissance amรฉricaine nโest plus absolue.
Les arsenaux se vident, la capacitรฉ de production militaire est en difficultรฉ, et le contrรดle du systรจme financier mondial commence ร vaciller.
Dans ce grand jeu, lโEurope est la vรฉritable victime, la vรฉritable perdante. Ses dirigeants, de Macron ร Merz, sโagitent, promettent des armes, prononcent des discours enflammรฉs, mais nโont aucun poids dans la conduite de la guerre. ยซ Ils sont les marionnettes des Ukrainiens et des Amรฉricains ยป, assรจne Todd, ยซ mais ils nโont pas encore compris que la guerre est perdue. ยป Ils fournissent armes et argent, mais sont exclus des dรฉcisions importantes. Ils rรชvent de poursuivre une guerre que dโautres ont dรฉjร dรฉcidรฉ dโabandonner.
๐Lโenvie de suicide : le psychodrame dโune Europe ร la dรฉrive
Cโest ici que lโanalyse de Todd devient plus sombre et plus inquiรฉtante. Observant lโEurope de lโextรฉrieur, il perรงoit les signes dโune pathologie profonde, une sorte de folie collective quโil dรฉcrit par une expression glaรงante : ยซ une soif de suicide ยป (Sehnsucht nach Selbstmord). Il ne sโagit pas dโune exagรฉration, mais dโun diagnostic รฉtayรฉ par des dรฉcisions politiques qui semblent inexplicables, sinon comme des actes dโautomutilation :
โข Des sanctions contre la Russie qui ont portรฉ bien plus de prรฉjudice ร lโindustrie europรฉenne quโร lโindustrie russe.
โข La dรฉcision de lโAllemagne dโabandonner lโรฉnergie nuclรฉaire en pleine crise รฉnergรฉtique, qualifiรฉe dโยซ absurde ยป par Todd.
โข Le renoncement volontaire au gaz russe bon marchรฉ, pilier de la compรฉtitivitรฉ industrielle allemande, sans plan B durable.
Pour Todd, ce nโest pas de la politique. Cโest une ยซ maladie des classes dirigeantes ยป, une รฉlite qui a perdu tout sens des rรฉalitรฉs et des responsabilitรฉs, prisonniรจre dโun moralisme abstrait qui la pousse ร prendre des dรฉcisions contraires ร ses propres intรฉrรชts vitaux. Cโest un continent qui, sous couvert de dรฉfendre des valeurs pacifistes, prolonge une guerre sanglante. Un paradoxe rรฉvรฉlateur dโune profonde crise identitaire.
๐Lโombre de lโAllemagne : le danger que nous refusons de voir
Si lโEurope est la grande perdante, lโAllemagne en est le cลur problรฉmatique. Lโanalyse de Todd sur le rรดle de lโAllemagne est peut-รชtre la partie la plus originale et la plus alarmante de son entretien. Selon lui, lโAllemagne a perdu sa souverainetรฉ. Le silence assourdissant de ses institutions et de ses mรฉdias sur le sabotage de Nord Stream en est la preuve la plus flagrante. ยซ LโAllemagne est ร nouveau un pays occupรฉ ยป, affirme-t-il, ยซ et sa vรฉritable capitale est Ramstein ยป, la plus grande base aรฉrienne amรฉricaine en Europe.
Mais cโest lโavenir qui lโinquiรจte le plus. Lโidรฉe, portรฉe par le nouvel establishment politique allemand (incarnรฉ par Friedrich Merz), de construire ยซ lโarmรฉe la plus puissante dโEurope ยป est perรงue par Todd comme un acte dโยซ irresponsabilitรฉ historique ยป. Pourquoi ? Parce que, contrairement ร la France ou ร la Grande-Bretagne, lโAllemagne dispose dโun immense potentiel industriel. Si ce potentiel รฉtait mis au service dโun rรฉarmement massif, la perception de la menace en Europe changerait radicalement.
Todd rappelle un fait historique que lโOccident semble vouloir oublier : lโAllemagne est responsable de la mort de 25 millions de Russes pendant la Seconde Guerre mondiale. Que lโAllemagne, plus que quiconque, envisage aujourdโhui de se rรฉarmer contre la Russie est un fait qui ne passe pas inaperรงu ร Moscou. Face ร ce quโelle perรงoit comme une menace existentielle, la doctrine militaire russe prรฉvoit le recours ร des armes nuclรฉaires tactiques. Le scรฉnario cauchemardesque de Todd va encore plus loin. Il craint que, sous couvert dโun antifascisme de faรงade, lโAllemagne nโadopte des mรฉthodes illibรฉrales contre la dissidence interne, ร lโimage de lโAfD. Sa vision est terrifiante : une Europe oรน, bientรดt, les Franรงais et les Polonais pourraient redouter davantage les Allemands que les Russes. La fin de la mondialisation et le retour de lโhistoire. Tout cela โ la guerre, la crise europรฉenne, le rรฉarmement allemand โ ne sont pas des รฉvรฉnements isolรฉs. Ils sont les symptรดmes dโun processus bien plus vaste : la fin de la mondialisation. Le mythe dโun monde plat, sans frontiรจres, oรน les cultures sont interchangeables et oรน seul le marchรฉ compte, sโeffondre sous nos yeux.
Le Brexit, Trump et le succรจs des forces populistes en Europe ne sont pas des accidents, mais la preuve que les peuples veulent redevenir eux-mรชmes. ยซ Il sโavรฉrera que les gens sont trรจs diffรฉrents ยป, affirme Todd. ยซ Les Italiens sont italiens, et les Franรงais sont franรงais. ยป Cette ยซ implosion de la mondialisation ยป est la deuxiรจme Apocalypse, la deuxiรจme rรฉvรฉlation : le retour des nations, avec leurs identitรฉs, leurs intรฉrรชts et leurs peurs ancestrales. Et cela, prรฉvient-il, pourrait conduire ร lโeffondrement de lโUnion europรฉenne.
Quโest-ce que cela signifie pour lโavenir ? Cela signifie que la Russie ne fait plus confiance ร lโOccident et ne croit plus aux traitรฉs. Poutine, selon Todd, poursuivra ses objectifs stratรฉgiques : la conquรชte de toute lโUkraine orientale jusquโau Dniepr, y compris Odessa, pour sรฉcuriser la flotte russe, et la neutralisation complรจte de ce qui reste de lโรtat ukrainien. Les thรจses dโEmmanuel Todd sont dรฉrangeantes.
Provocatrices. Pour beaucoup, inacceptables. Mais la question nโest pas de savoir si elles nous plaisent. La question est : et sโil avait raison ? Et si, avec notre prรฉsomption morale et notre aveuglement stratรฉgique, nous รฉtions les artisans de notre propre ruine ? Ignorer son analyse est un luxe que nous ne pouvons peut-รชtre plus nous permettre.
Ci sono voci che, nel grande frastuono della storia, sussurrano veritร che nessuno vuole ascoltare. E poi cโรจ la voce di Emmanuel Todd. Storico, demografo,โฆ
Also abgesehen davon, dass niemand Bock auf Baustellen hat, hรคtte ich kein Problem mit einer Stromtrasse in der Nรคhe. Wรคre definitiv leiser und weniger geruchsintensiv als die Kuhwiese um die Ecke.
Un rapport publiรฉ par Harvard rรฉvรจle que d'aprรจs les donnรฉes fournies par Tsahal, environ 377โฏ000 Gazaouis auraient disparu entre octobre 2023 et juin 2025. Un chiffre glaรงant, qui confirme l'ampleur du gรฉnocide en cours ร Gaza.
Le trรจs regrettรฉ Bernard Stiegler explique dans cette vidรฉo que la prolรฉtarisation c'est le moment oรน le savoir est externalisรฉ dans des machines, et oรน l'opรฉrateur devient un prolรฉtaire asservi par le propriรฉtaire de la machine.
If you're making music that can even obliquely be considered "protest music," I'd love to help you get it out there by mixing and mastering for cheap (or even free, depending on your financial circumstances).
Art made by conscientious people is very good for the world.
I've already mixed and mastered one protest song from a mutual here on fedi. ๐ Allow me to help, if you need. Send me a DM or find my email from my website.
La Ville de Lyon va progressivement remplacer la suite Microsoft par des logiciels bureautiques libres, dont ยซ Only Office pour la bureautique, ainsi que Linux et PostgreSQL pour les systรจmes et bases de donnรฉes ยป.
La Ville de Lyon va progressivement remplacer la suite Microsoft par des logiciels bureautiques libres, dont ยซย Only Office pour la bureautique, ainsi que Linux et PostgreSQL pour les systรจmes et bases de donnรฉesย ยป.
@Emmanuel Florac Truth be known, I've only ever used Microsoft or any propriety software for only a brief four year period. Ever since then I've gone my own way, using free and open source software. I like to learn, so I'm not intimidated, nor frustrated when it's time to fix or make things work. Plus it gives one the perception of being in control. If there is such a thing, as being in control.
@Carter Braxton I've used Microsoft at work in the 90s, but already in 1996 I was interested in OS/2, then discovered Unix (IRIX then). I've installed my first Linux in 1997, and I ditched my last Windows gaming machine in 2003.
Russian Federation Council Speaker Konstantin Kosachev told RT that Iran has repeatedly stated its commitment to non-proliferation and there's still no proof Tehran is developing nuclear weapons despi...
i don't think enough people realize that when you make a phone call to someone else, the other phone literally stops what it is doing and makes a noise and shakes, it's very distracting, please do not make phone calls
@drchaos In fact, I keep my smartphone turned off unless I explicitly need it for a specific purpose. I check for important email, vm, etc. at intervals.
@nanook @ernestoDuracelli @lauren I cannot talk for the op, but I'm not buying a tablet because they are way too big for me.
Unfortunately my 7" tablet has a bad battery and is... ancient (for such a device, and slow, and actually an Intel device). The thing is that size is an issue. Phones are getting too big to put in my pockets, and tablets are too big. Maybe I'll convert an e-reader (or actually get a cheap phablet). Though a tablet would just be a "nice to have" now.
'At least 46 people waiting for aid have been killed by Israeli fire in two incidents in central and southern Gaza, according to rescuers and hospitals.
UN agencies have condemned the US and Israel-backed food distribution system, with one official calling it "an abomination" and "a death trap".'
okay, still kind of stuck on the iran israel war, bc fog of war and censorship and media bias makes it hard to fill in some of the blanks...
the palestine chronicle published this article with a photo that is allegedly a screen grab from a photo of the iranian attack on al-udeid air base in qatar.
from whati saw reportrd, no missiles landed in qatar, they were all destroyed in the air. Also, that is a distinctive skyline, maybe compare it with a search to verify where it was. I remember a drone strike landing in a former american base in iraq.....
@doublemonkeyfun thats definitely not iraq. both trump and qatar said one missile landed, the iranians claimed 6. so i think 1 hitting is fair to assume.
it might be somewhere outside the middle east if the skyline doesn't match qatar. Some people were posting images from the ukraine claiming it was iran.
they're usually good. it's a small entity. i don't think malice or disinformation is at play here, and literally all outlets have shared some type of crap in the past. that being said, always double check important information.
As Prime Minister, Rutte was known for forgetting things ('I do not have an active memory of that') and for deleting text messages from his phone ('It does not have enough memory').
There are people here defending Rutte, saying flattery is needed to keep Trump 'on our side'. For me, there are legal and moral limits to such tactics, and ignoring international law is one of those. Also, when you keep telling a bully he's the greatest, he'll take his bullying to the next level.
Blowing up NATO's foundation, right before its Summit:
"Trump refused to give a clear commitment to NATOโs Article 5 โ its collective defense clause โ as he departed for The Hague, raising fresh concerns about his stance on one of NATOโs core princiโฆ
Further making a fool of himself & NATO, and emboldening the bully, Rutte now called Trump 'daddy'...
Your daddy supports genocide, bombs Iran while negotiating, betrays Ukraine, holds razzias in the US, ignores Supreme Court rulings, kills climate action. Get a spine.
โข Subscribe to ITV News on YouTube: http://bit.ly/2lOHmNj โข Get breaking news and more stories at http://www.itv.com/newsFollow ITV News on TikTok https://ww...
Dutch media frame Rutte's shameful behavior towards Trump ("We really loved your bombs on Iran, daddy!") as successful. Because European NATO members agreed they'll spend "5%" of GDP on defense (let's wait and see) and Trump firmly recommitted to Article 5 (in your dreams).
I don't think many of former Trump employees or collaborators who did his dirty work can boast that he stood by them when their dirty hands landed them in trouble. So getting him on our side won't help us on the long term, probably not even in the short term.
this is absolutely insane. we absolutely must free ourselves of US protection, we cannot be dependent on sending that kind of narcissistic bait to a madman for survival.
this is clearly sarcasm that mocks the infantile American President, so explicitly that it would be obvious to an average person, but he will be too simple and too narcissistic to appreciate. Right?
The other option, Trump made up the message and Rutte didn't have the guts to tell the word Trump is a liar (that may break up NATO), could also be true.
Especially as we know Rutte has a hard time having 'active memories' of facts.
Stephen Miller, the influential Trump administration aide behind its hardline immigration policies, holds a substantial financial stake in Palantir Technologies โ a key tech contractor for U.S. Immigration and Customs Enforcement โ raising new ethics questions, according to a report published Tuesday by the Project on Government Oversight.
They donโt sell seeds. They donโt own tractors. They donโt run warehouses or ship grain. But BlackRock, Vanguard and State Street are among the most powerful actors in global agriculture. Together,โฆ
A suspected fed. agent is seen exiting a Dodge Charger @ an intersection & pointing his gun @ members of the public. Acc. to #Pasadena officials, the vehicle's license plate is a "cold plate," or untraceable, which is typically used by law enforcement in undercover criminal operations. "One question is this a law enforcement agent or someone pretending to be a law enforcement agent, & there is no good answer" (Mayor Gordo).
Local police have little or no insight into where the federal enforcement actions are taking place. In some cases, local cops have been mistaken for federal ...
Like I've been saying, and now elected officials are saying it, we can't tell that they're police officers? How do we know they're not faking it? And if we don't know if they are or not, are we not obligated to assume they aren't cops and stop it?
This really is the end of trust in law and order for what might be a sufficiently critical mass to start the process of abolition
Tucker Carlson's recent interview with Ted Cruz surprised many with his strong critique of the U.S.-Israeli alliance. But Carlson's "woke right" view has a long history in conservative politics and should not be mistaken for Palestine solidarity.
Tucker Carlsonโs recent interview with Ted Cruz surprised many with his strong critique of the U.S.-Israeli alliance. But Carlsonโs โwoke rightโ view has a long history in conservative politics and should not be mistaken for Palestine solidarity.
European countries have based their social stability on the low cost of energy and know it will all fall apart if oil/gas spikes and blows it all to pieces. Is so, Syria might look like a kids party compared to civil disorder in EU, with population density as it is.
Supertramp have such a unique sound and have created tons of amazing hits and we LOVE The Logical Song written and sung by the amazing Rodger Hodgson. We lea...
Attached: 1 image
NATO boss Rutte (fmr Dutch PM) sends app to Trump, who promptly publishes it.
"Wow, your bombing of Iran was great; it makes the world a safer place!"
Straight from The Hague, formerly known as the International City of Peace anโฆ
can we kick the Dutch out of Europe yet or do we need another ten years of them responding to any debate by saying that southern and eastern Europeans are lazy because we have inferior genes?
If youโve fallen victim to a fake investment platform and thought your money was gone for good, donโt give up just yet. I was in that exact position โ until I came across Mrs. Adelynn Richardson. Thanks to her expertise, I was able to rยฐeยฐcยฐoยฐvยฐeยฐr my lost funds. Sheโs helped many others too, and I highly rยฐeยฐcยฐoยฐmยฐmยฐeยฐnยฐd reaching out if you need support. Contact her on WยฐhยฐaยฐtยฐsยฐAยฐpยฐp at +1 (820) 201-7380.
#Smooth-Operator by @SadeSME performed by The #Graystones (4 min) March 14, 2025 #TheGraystones #music #video We love Sade... and Smooth Operator is such an iconic song. Her voice is so effortless and silky and the groove is great. We worked really hard on this song to get it right. We hope you enjoy it!
(We wanted to say that the audio in our live performances is overwhelmingly live and, on many videos, is 100% live. To some select songs, we may add layers of sound, such as harmonies or string parts. But the original live sound as the foundation for our videos, and then we might decide to add/replace some parts, if we feel it would help to bring the song even closer to the original that weโre honoring - but always in service of the art! With love, The Graystones)
We love Sade... and Smooth Operator is such an iconic song. Her voice is so effortless and silky and the groove is great. We worked really hard on this song ...
Rep. Al Green (D-Texas) filed an article of impeachment against President Trump on Tuesday, accusing the president of failing to notify or seek authorization from Congress before the U.S. launched strikes on three Iranian nuclear sites over the weekend.
The resolution alleges โabuse of presidential powers by disregarding the separation of powersโdevolving American democracy into authoritarianism by unconstitutionally usurping Congressโs power to declare war.โ
โPresident Trumpโs unilateral, unprovoked use of force without congressional authorization or notice constitutes an abuse of power when there was no imminent threat to the United States, which facilitates the devolution of American democracy into authoritarianism,โ Greenโs resolution reads.
Congress has the sole power to โdeclare warโ under the Article 1 of the U.S. Constitution. Presidents of both parties have struck adversaries without approval from the legislature.
Pretty easy to argue this comes under 'official duties' too. Surely there's a thousand other reasons he could be impeached that would stick.
I agree they'll never get the votes to pass anything, but they should keep doing it anyway. Flood the zone back at these arseholes and put them on the back foot.
relentless_eduardo
in reply to HighHorseStrong ๐ฉธ • • •they are not really concerned about Iranian sleeper cells
it is just another fear bomb they throw into society to destabilize it, the communist pathway to power