<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Security on Baldarn&#39;s</title>
    <link>https://lorenzo.farnararo.it/en/tags/security/</link>
    <description>Recent content in Security on Baldarn&#39;s</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Thu, 22 Oct 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://lorenzo.farnararo.it/en/tags/security/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>PHP and certificates: a couple of hectic days for cybersecurity</title>
      <link>https://lorenzo.farnararo.it/en/posts/php_certificati_sicurezza/</link>
      <pubDate>Thu, 22 Oct 2026 00:00:00 +0000</pubDate>
      <guid>https://lorenzo.farnararo.it/en/posts/php_certificati_sicurezza/</guid>
      <description>&lt;p&gt;A couple of hectic days: first PHP, then certificates.&lt;/p&gt;&#xA;&lt;div class=&#34;video-embed&#34;&gt;&#xA;  &lt;iframe src=&#34;https://www.youtube-nocookie.com/embed/xVKoTLJlQVk&#34; title=&#34;YouTube video&#34; loading=&#34;lazy&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allow=&#34;accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; allowfullscreen&gt;&lt;/iframe&gt;&#xA;&lt;/div&gt;&#xA;&#xA;&lt;h2 id=&#34;what-i-did&#34;&gt;What I did&lt;/h2&gt;&#xA;&lt;p&gt;I got the emails from the services I use, updated my servers and moved on.&lt;/p&gt;&#xA;&lt;p&gt;The PHP issue required an update. The certificate one is sneakier: it affects HTTPS, which is what guarantees we&amp;rsquo;re really on the site we think we&amp;rsquo;re on, and not on a fake one.&lt;/p&gt;&#xA;&lt;h2 id=&#34;no-panic&#34;&gt;No panic&lt;/h2&gt;&#xA;&lt;p&gt;Two serious security issues, sure. But they don&amp;rsquo;t strike me as a sign that something weird is happening because of AI.&lt;/p&gt;</description>
    </item>
    <item>
      <title>Cloned voice scams: a family password to protect yourself</title>
      <link>https://lorenzo.farnararo.it/en/posts/truffe_voce_clonata_parola_ordine/</link>
      <pubDate>Fri, 16 Oct 2026 00:00:00 +0000</pubDate>
      <guid>https://lorenzo.farnararo.it/en/posts/truffe_voce_clonata_parola_ordine/</guid>
      <description>&lt;p&gt;I got a message from a friend: he was at the dentist, couldn&amp;rsquo;t talk and needed 200 euros.&lt;/p&gt;&#xA;&lt;div class=&#34;video-embed&#34;&gt;&#xA;  &lt;iframe src=&#34;https://www.youtube-nocookie.com/embed/CI0256249xQ&#34; title=&#34;YouTube video&#34; loading=&#34;lazy&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allow=&#34;accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; allowfullscreen&gt;&lt;/iframe&gt;&#xA;&lt;/div&gt;&#xA;&#xA;&lt;h2 id=&#34;the-attempt&#34;&gt;The attempt&lt;/h2&gt;&#xA;&lt;p&gt;I asked to talk on the phone. It was a scam, and it ended there.&lt;/p&gt;&#xA;&lt;p&gt;But what if next time the voice really were his? With voice cloning, it takes very little material to reproduce someone&amp;rsquo;s voice. And fake videos are getting more and more convincing. Imagine a call with a family member&amp;rsquo;s voice asking you for help.&lt;/p&gt;</description>
    </item>
    <item>
      <title>Cybersecurity: plants grinding to a halt and damage in the physical world</title>
      <link>https://lorenzo.farnararo.it/en/posts/cybersecurity_danni_mondo_fisico/</link>
      <pubDate>Wed, 14 Oct 2026 00:00:00 +0000</pubDate>
      <guid>https://lorenzo.farnararo.it/en/posts/cybersecurity_danni_mondo_fisico/</guid>
      <description>&lt;p&gt;Standing in front of a Medici tower, which knows a thing or two about defense, I started thinking about cyber warfare. As an enthusiast, not an expert.&lt;/p&gt;&#xA;&lt;div class=&#34;video-embed&#34;&gt;&#xA;  &lt;iframe src=&#34;https://www.youtube-nocookie.com/embed/sOxj9oBYT-s&#34; title=&#34;YouTube video&#34; loading=&#34;lazy&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allow=&#34;accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; allowfullscreen&gt;&lt;/iframe&gt;&#xA;&lt;/div&gt;&#xA;&#xA;&lt;h2 id=&#34;compromised-plants&#34;&gt;Compromised plants&lt;/h2&gt;&#xA;&lt;p&gt;I start from a story I heard: compromised refrigeration plants. Not stolen data, but machines shutting down and real damage in the physical world.&lt;/p&gt;&#xA;&lt;p&gt;The problem is that security is often fragile. Default passwords, open access, the classic key under the doormat. And when we&amp;rsquo;re talking about infrastructure, the risk gets serious.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
