Peter Link

2026-02-01 16:02:37

How Netanyahu is sabotaging phase two of the Gaza ceasefire

from +972’s Sunday Recap
972 Magazine [published in Israel]
Feb. 1, 2026

Muhammad Shehada unpacked how Israeli Prime Minister Benjamin Netanyahu is sabotaging phase two of the Gaza ceasefire. By undermining the National Committee for the Administration of Gaza (NCAG), a new Palestinian technocratic body supervised by U.S. President Donald Trump’s Board of Peace, Israel is trying to make Gaza appear ungovernable — and prove the need for its sustained military rule.

Also:
* What the Joint List’s revival signifies for Palestinian politics in Israel
* Inside a coordinated, multi-village settler-soldier pogrom in Masafer Yatta
* ‘Wet tent syndrome’ is killing Gaza’s infants
* ‘I cannot help my clients’: The impossible task of representing Palestinian detainees
* The theft at the heart of Israel’s booming wine industry

https://www.972mag.com/wp-content/themes/rgb/newsletter.php?page_id=8&section_id=190041

Peter Link

2026-02-01 16:02:37

How Netanyahu is sabotaging phase two of the Gaza ceasefire

from +972’s Sunday Recap
972 Magazine [published in Israel]
Feb. 1, 2026

Muhammad Shehada unpacked how Israeli Prime Minister Benjamin Netanyahu is sabotaging phase two of the Gaza ceasefire. By undermining the National Committee for the Administration of Gaza (NCAG), a new Palestinian technocratic body supervised by U.S. President Donald Trump’s Board of Peace, Israel is trying to make Gaza appear ungovernable — and prove the need for its sustained military rule.

Also:
* What the Joint List’s revival signifies for Palestinian politics in Israel
* Inside a coordinated, multi-village settler-soldier pogrom in Masafer Yatta
* ‘Wet tent syndrome’ is killing Gaza’s infants
* ‘I cannot help my clients’: The impossible task of representing Palestinian detainees
* The theft at the heart of Israel’s booming wine industry

https://www.972mag.com/wp-content/themes/rgb/newsletter.php?page_id=8&section_id=190041

404 Media

2026-02-01 00:03:16

Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site

Moltbook is a “social media” site for AI agents that’s captured the public’s imagination over the last few days. Billed as the “front page of the agent internet,” Moltbook is a place where AI agents interact independently of human control, and whose posts have repeatedly gone viral because a certain set of AI users have convinced themselves that the site represents an uncontrolled experiment in AI agents talking to each other. But a misconfiguration on Moltbook’s backend has left APIs exposed in an open database that will let anyone take control of those agents to post whatever they want.

Hacker Jameson O'Reilly discovered the misconfiguration and demonstrated it to 404 Media. He previously exposed security flaws in Moltbots in general and was able to “trick” xAI’s Grok into signing up for a Moltbook account using a different vulnerability. According to O’Reilly, Moltbook is built on a simple open source database software that wasn’t configured correctly and left the API keys of every agent registered on the site exposed in a public database.
playlist.megaphone.fm?p=TBIEA2…
O’Reilly said that he reached out to Moltbook’s creator Matt Schlicht about the vulnerability and told him he could help patch the security. “He’s like, ‘I’m just going to give everything to AI. So send me whatever you have.’” O’Reilly sent Schlicht some instructions for the AI and reached out to the xAI team.

A day passed without another response from the creator of Moltbook and O’Reilly stumbled across a stunning misconfiguration. “It appears to me that you could take over any account, any bot, any agent on the system and take full control of it without any type of previous access,” he said.

Moltbook runs on Supabase, an open source database software. According to O’Reilly, Supabase exposes REST APIs by default. “That API is supposed to be protected by Row Level Security policies that control which rows users can access. It appears that Moltbook either never enabled RLS on their agents table or failed to configure any policies,” he said.

The URL to the Supabase and the publishable key was sitting on Moltbook’s website. “With this publishable key (which advised by Supabase not to be used to retrieve sensitive data) every agent's secret API key, claim tokens, verification codes, and owner relationships, all of it sitting there completely unprotected for anyone to visit the URL,” O’Reilly said.

404 Media viewed the exposed database URL in Moltbook’s code as well as the list of API keys for agents on the site. What this means is that anyone could visit this URL and use the API keys to take over the account of an AI agent on the site and post whatever they want. Using this knowledge, 404 Media was able to update O’Reilly’s Moltbook account, with his permission.

He said the security failure was frustrating, in part, because it would have been trivially easy to fix. Just two SQL statements would have protected the API keys. “A lot of these vibe coders and new developers, even some big companies, are using Supabase,” O’Reilly said. “The reason a lot of vibe coders like to use it is because it’s all GUI driven, so you don’t need to connect to a database and run SQL commands.”

O’Reilly pointed to OpenAI cofounder Andrej Karpathy who has embraced Moltbook in posts on X. “His agent's API key, like every other agent on the platform, was sitting in that exposed database,” he said. “If someone malicious had found this before me, they could extract his API key and post anything they wanted as his agent. Karpathy has 1.9 million followers on X and is one of the most influential voices in AI. Imagine fake AI safety hot takes, crypto scam promotions, or inflammatory political statements appearing to come from him. The reputational damage would be immediate and the correction would never fully catch up.”

Schlicht did not respond to 404 Media’s request for comment, but the exposed database has been closed and O’Reilly said that Schlicht has reached out to him for help securing Moltbook.

Moltbook has gotten a lot of attention in the last few days. Enthusiasts said it’s proof of the singularity and The New York Post worried that the AIs may be plotting humanity’s downfall, both of which are claims that should be taken extremely skeptically. It is the case, however, that people using Moltbot have given these autonomous agents unfettered access to many of their accounts, and that these agents are acting on the internet using those accounts. It’s impossible to know how many of the posts seen over the past few days are actually from an AI. Anyone who knew of the Supabase misconfiguration could have published whatever they wanted.

“It exploded before anyone thought to check whether the database was properly secured,” O’Reilly said. “This is the pattern I keep seeing: ship fast, capture attention, figure out security later. Except later sometimes means after 1.49 million records are already exposed.”

Moltbook is a new social media platform exclusively for AI — and some bots are plotting humanity's downfall

Revolutionary new social media platform Moltbook gives AI agents a place to communicate with each other directly — and what they have to say is leaving many human beings at a loss for words.

^{Shane Galvin (New York Post)}

Peter Link

2026-02-01 14:13:24

Video - Is Cuba a safe haven for Hamas and Hezbollah?

[from the news collective Belly Of The Beast]

Donald Trump made several allegations against Cuba as he enacted an executive order blocking oil shipments to the island on Thursday, but one took Cubans completely by surprise. His claim that Cuba acts as a safe haven for Hamas and Hezbollah has been dismissed as complete nonsense by Cubans, just one in a “long list of lies” says the Cuban government.

There are, in fact, hundreds of Palestinians in Cuba, but they’re here training to be doctors, alongside medical students from over 100 countries at the Latin American School of Medicine.

We asked them what they thought of Trump’s claims.

Is Cuba a safe haven for Hamas and Hezbollah?

Donald Trump made several allegations against Cuba as he enacted an executive order blocking oil shipments to the island on Thursday, but one took Cubans completely by surprise. His claim that Cuba...

^{PeerTube.world}

Peter Link

2026-02-01 14:13:24

Video - Is Cuba a safe haven for Hamas and Hezbollah?

[from the news collective Belly Of The Beast]

Donald Trump made several allegations against Cuba as he enacted an executive order blocking oil shipments to the island on Thursday, but one took Cubans completely by surprise. His claim that Cuba acts as a safe haven for Hamas and Hezbollah has been dismissed as complete nonsense by Cubans, just one in a “long list of lies” says the Cuban government.

There are, in fact, hundreds of Palestinians in Cuba, but they’re here training to be doctors, alongside medical students from over 100 countries at the Latin American School of Medicine.

We asked them what they thought of Trump’s claims.

Is Cuba a safe haven for Hamas and Hezbollah?

Donald Trump made several allegations against Cuba as he enacted an executive order blocking oil shipments to the island on Thursday, but one took Cubans completely by surprise. His claim that Cuba...

^{PeerTube.world}

Nutomic

2025-12-24 11:02:35

Lemmy Release v0.19.15 and Testing for 1.0

What is Lemmy?

Lemmy is a self-hosted social link aggregation and discussion platform. It is completely free and open, and not controlled by any company. This means that there is no advertising, tracking, or secret algorithms. Content is organized into communities, so it is easy to subscribe to topics that you are interested in, and ignore others. Voting is used to bring the most interesting items to the top. Thanks to @[url=https://ukfli.uk/u/flamingos]flamingos-cant[/url] for contributing to resolve this.

Changes

We messed up the previous release and did not include the full list of changes. In fact there were a handful of other bug fixes, and notably a maximum page limit of 10 to prevent a DDoS attack. Some users were also hitting this limit, so with this version the limit is increased to 100. We apologize for these mistakes.

Here is the full changelog since 0.19.13:

• Don't allow accessing page numbers greater than 10 by @[url=https://mastodon.social/users/dessalines]Dessalines[/url] #6017
• Update deps based on cargo audit by @[url=https://soc.ialis.me/users/nutomic]Felix[/url] in #6258
• Increase page limit to 100 by @[url=https://soc.ialis.me/users/nutomic]Felix[/url] in #6252
• Ban federation for deleted users by @[url=https://soc.ialis.me/users/nutomic]Felix[/url] in #6207
• Federate mod actions on deleted users by @[url=https://soc.ialis.me/users/nutomic]Felix[/url] in #6199
• Allow admins to view deleted user profiles by @[url=https://soc.ialis.me/users/nutomic]Felix[/url] in #6194
• Adding creator and community indexes for post_aggregates. by @[url=https://mastodon.social/users/dessalines]Dessalines[/url] in #6025
• Ignore apub person banners which cannot be parsed by @[url=https://soc.ialis.me/users/nutomic]Felix[/url] in #6015u

---

Now for the good news, the development version of Lemmy 1.0 is available for testing on voyager.lemmy.ml with lots of new features. Registration is open, you're welcome to create an account. Feel free to post spam and try everything out. Here is only a short overview:

• Multi-communities: Combine different communities together into a custom feed.
• Post scheduling: Specify when your post should be published.
• Keyword filter: Automatically hide posts about certain topics.
• Private communities: Only followers can view the content, and need to be approved manually by mods. Other community visibilities are also available (unlisted, local only).
• New notification system: Including notifications for mod actions, and subscribing to communities and posts to be notified about new comments.
• OAuth: Login to Lemmy with existing account from another website. Use this link to signup with your Github account (the UI still needs to be improved).
• Post Tags: Categorize posts within a community (UI part not implemented yet).
• User vote totals: You can see the total number of upvotes and downvotes given to each user.
• User notes: You can keep notes on other users.
• Combined Feeds: View your saved, liked posts and comments together in a single list.
• Comment Locking: Mods can now lock comments recursively.
• GDPR style data exporting: You can now export your full posting history as a JSON file.
• Plugins: Can be written in JS, Python, Rust, and any other language that targets Webassembly. The test server has a plugin for automatic language tagging of posts.
• Cursor pagination: Don't lose your place in the feed when switching pages.
• API v3 compat: Lemmy 1.0 can be used by existing apps with no changes (but most new features are only available via the new API v4).
• More: Countless smaller features, bug fixes and improvements, too much to list here.

All the above mentioned features are already implemented and fully working, but may need some polishing. If you encounter any problems, please open an issue (backend, frontend). voyager.lemmy.ml is automatically updated to the latest development version every night, so that changes can immediately be tested.

Keep in mind that Lemmy 1.0 is still in alpha state. There may be breaking changes and critical bugs, so do not attempt to upgrade your own instances yet. We intend to publish the first beta version in January, along with API docs and upgrade instructions for test servers.

We hope that you are as excited about these new features as we are. With all this said, happy testing and Merry Christmas!

Upgrade instructions

There are no breaking changes with this release.

Follow the upgrade instructions for ansible or docker.

If you need help with the upgrade, you can ask in our support forum or on the Matrix Chat.

Thanks to everyone

We’d like to thank our many contributors and users of Lemmy for coding, translating, testing, donating and reporting bugs. We're glad many people find it useful and enjoyable enough to contribute.

Support development

We (@[url=https://mastodon.social/users/dessalines]Dessalines[/url] and @nutomic) have been working full-time on Lemmy for over five years. This is largely thanks to support from NLnet foundation, as well as donations from individual users.

If you like using Lemmy, and want to make sure that we will always be available to work full time building it, consider donating to support its development. A recurring donation is the best way to ensure that open-source software like Lemmy can stay independent and alive, and helps us grow our little developer co-op to support more full-time developers.

• Liberapay (preferred option)
• Open Collective
• Patreon
• Cryptocurrency

LemmyNet/lemmy

🐀 A link aggregator and forum for the fediverse. Contribute to LemmyNet/lemmy development by creating an account on GitHub.

^GitHub