Lorenzo Ancora 🇪🇺🇮🇹 :verified:

Founder of the Free Software Database
#developer · #webmaster · #sysadmin

I'm a friendly geek committed to user freedom and computer literacy.
I support Libre and Open Source software.

⸻

#it #foss #free #freesoftware #opensource #software #fedi22 #activism #hacking #programming #italian #linux

Personal Website: https://www.lorenzoancora.info
Dyne:bolics Libre OS: https://git.devuan.org/LorenzoAncora
Free Software Database (FSWDB): https://fswdb.com/staff
Show just my posts:: Lorenzo Ancora 🇪🇺🇮🇹 :verified: (npub1ad8…ar0x)">https://justmytoots.com/Lorenzo Ancora 🇪🇺🇮🇹 :verified: (npub1ad8…ar0x)

Public Key

npub1ad82pp64fh9ylx5xslp69utcaedwz4zep4n7pfh9cp7mewav6qjq0var0x

NIP-05 Address

[email protected]

Profile Code

nprofile1qqswkn4qsa25mjj0n2rg0saz79uwukhp23vs6elq5mjuqlduhwkdqfqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds3v2mx9

Publishing to

offchain.pub

relay.damus.io

nos.lol

Author Public Key

npub1ad82pp64fh9ylx5xslp69utcaedwz4zep4n7pfh9cp7mewav6qjq0var0x

Show more details

Published at

2026-07-26T07:05:23Z

Kind type

0 Metadata

Event JSON

{ "id": "df1755d2e62e6faef242f3edff53a674bdb4c3a78bc30c5eb7952b347b78ac00", "pubkey": "eb4ea087554dca4f9a8687c3a2f178ee5ae154590d67e0a6e5c07dbcbbacd024", "created_at": 1785049523, "kind": 0, "tags": [ [ "emoji", "verified", "https://ftp.ieji.de/custom_emojis/images/000/008/817/original/7c13a41aa4ff65a3.png" ], [ "t", "linux" ], [ "t", "opensource" ], [ "t", "sysadmin" ], [ "t", "free" ], [ "t", "foss" ], [ "t", "programming" ], [ "t", "software" ], [ "t", "freesoftware" ], [ "t", "activism" ], [ "t", "hacking" ], [ "t", "it" ], [ "t", "developer" ], [ "t", "italian" ], [ "t", "webmaster" ], [ "t", "fedi22" ], [ "proxy", "https://ieji.de/users/LorenzoAncora", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://ieji.de/users/LorenzoAncora", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Lorenzo Ancora 🇪🇺🇮🇹 :verified:\",\"about\":\"Founder of the Free Software Database\\n#developer · #webmaster · #sysadmin\\n\\nI'm a friendly geek committed to user freedom and computer literacy.\\nI support Libre and Open Source software.\\n\\n⸻\\n\\n#it #foss #free #freesoftware #opensource #software #fedi22 #activism #hacking #programming #italian #linux\\n\\nPersonal Website: https://www.lorenzoancora.info\\nDyne:bolics Libre OS: https://git.devuan.org/LorenzoAncora\\nFree Software Database (FSWDB): https://fswdb.com/staff\\nShow just my posts:: https://justmytoots.com/nostr:npub1ad82pp64fh9ylx5xslp69utcaedwz4zep4n7pfh9cp7mewav6qjq0var0x\\n\",\"website\":\"https://ieji.de/@LorenzoAncora\",\"picture\":\"https://ftp.ieji.de/accounts/avatars/112/348/745/819/144/980/original/7c662e9380588cbc.gif\",\"banner\":\"https://ftp.ieji.de/accounts/headers/112/348/745/819/144/980/original/f4c4ac0be7a42818.png\",\"nip05\":\"[email protected]\"}", "sig": "8891e2714dbd97fdf37963a74e74ccdf7b978b06f49ec52ebe41513190d674bb08c664a375ca586008b80da2269d3d15e8c5908abc744b3f9f0bff5e9e773430" }

Last Notes

2026-02-02 16:03:22 GMT

Notepad++'s update servers have been compromised by Chinese hackers and all users had been exposed to malware. The developer estimated the overall compromise period spanned from June through December 2, 2025.
Users should update to version 8.9.1 (or superior) immediately.
Source: https://notepad-plus-plus.org/news/hijacked-incident-info-update/
#security #vulnerability #windows #text #editor #notepad #foss #freesoftware #software
https://ftp.ieji.de/media_attachments/files/116/001/864/232/839/104/original/460c3e5b436ab9f5.png

2025-12-02 14:21:16 GMT

Ireland started a Pause Before You Post Awareness Campaign: sharing photos and videos of children online can lead to unintended oversharing of personal data, which, in the wrong hands, can have serious consequences. Wise initiative!
#socialmedia #video #photography #privacy #children #child #kids #safety #ireland
https://ftp.ieji.de/media_attachments/files/115/650/403/645/353/350/original/bd62273c09f5be87.mp4

2025-09-22 12:24:54 GMT

𝗪𝗵𝗮𝘁 𝗮𝗿𝗲 𝗙𝗢𝗦𝗦 𝗵𝗮𝗰𝗸𝗲𝗿𝘀?
Mass media often associates the term hacker with cybercrime. However, in the Free and Open Source Software communities, the term is always honorific and indicates volunteer programmers specialized in the correction and improvement of public codebases.
FOSS hackers thrive in community-driven projects like Linux, Apache, and Wikipedia, where they collaborate for the common good.
#software #foss #libre #freesoftware #opensource #coding #development #hacking #computing

2025-09-09 12:26:06 GMT

- reply

public APIs existed for many websites, but were disabled years ago due to widespread (and extremely harmful) abuse by humans and bots alike.
Online banking apps are compulsory in the European Union, because hard-to-predict 2FA algorithms and system analysis are required by law. The standalone hardware key generators were banned years ago.
Online banking APIs exist, but are not public and reserved to corporate customers.
@npub1lte…nuyv [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1lrj…6wd6 @npub1da4…hflj @npub1326…gzqx

2025-09-09 12:02:04 GMT

- reply

maybe they have more users, more traffic, more services. You can't know.
Before judging a system you need to know what is does and what is runs. Only their staff knows that. 🙂
Regardless, you need more experience and in-depth study before getting reliable deductions from your technical observations.
Emacs can't replace your online banking, and its a local application, subject to different rules and mechanics than websites. 😆
@npub1lte…nuyv [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1lrj…6wd6 @npub1da4…hflj

2025-09-09 11:48:50 GMT

- reply

or your computer got older and thus less compatible. Technology advances too fast, us geeks have a hard time accepting obsolescence. 🙂
@npub1lte…nuyv [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1lrj…6wd6 @npub1da4…hflj

2025-09-09 11:36:54 GMT

- reply

most banks are forced to use JS in order to enforce certain verifications and security policies.
Online banking used it for the last decades, in a form or another. You just started to pay more attention to it, like most of us. 😉
@npub1lte…nuyv [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1lrj…6wd6 @npub1da4…hflj

2025-09-09 10:58:50 GMT

- reply

the exploits you can see and that are published are only a small fraction of the total. Most exploits are sold and then kept secret. 🙂
[@tennoseremel](https://lor.sh/@tennoseremel ) @npub1da4…hflj @npub1326…gzqx

2025-09-09 10:57:14 GMT

- reply

I don't want political discussions in my profile and I don't want to be involved in old ideologies. 😅
Let's focus on tech. Thank you in advance.
@npub1lte…nuyv [@tennoseremel](https://lor.sh/@tennoseremel )

2025-09-09 10:51:42 GMT

- reply

no, proof-of-work captchas and algorithms purpose isn't to block individual AIs: they are scripts, which impose to calculate a specific proof of work (work=computation) in the web browser before the correct webpage is served.
The computation required becomes more time-expensive when server load is higher.
This prevents server overload caused by AI continuously scraping the web without the webmaster consent.
@npub1lte…nuyv [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1da4…hflj

2025-08-11 12:38:47 GMT

- reply

sometimes the behaviours you listed are linked to mental issues like ASPD or psychopathy, but this requires diagnosis by a professional. They can be treated (only by a qualified psychologist) if necessary.
Regardless, a healthy environment is always prerequisite for any cure and to prevent mental issues.
@npub1xw7…r9m5

2025-08-11 12:21:28 GMT

- reply

it isn't entitlmenet, but a mental issue: the pandemic of loneliness can erode some people's self-control and the only solution is reestablishing a rich, serene social life. She needs to live in a better environment to get back healthy.
Do you feel miserable very often?

2025-08-11 11:39:43 GMT

- reply

good reaction, people is made so inflexible and judgemental by stress and unhappiness. 🥲

2025-03-10 20:12:33 GMT

- reply

modern webmasters don't "shift" the computing costs, they use client-side processing and caching to avoid transferring redundant data which the user may not really need and that would only hog the service back-end. Here, JavaScript is used to guarantee a fast and smooth service for everyone. 😉
Websites change frequently, so amateur automations can be dangerous and unreliable. If the webmaster wants to allow automation, then the website will offer public APIs.
CC: @npub1hr7…e0xz @npub1lrj…6wd6

2025-03-07 04:50:37 GMT

- reply

the reason webmasters can't implement graceful degradation is that, with the rise of AI, JS will be indispensable to discern humans through proof-of-work captchas and algorithms, in order to prevent service abuse and to respect GDPR & NATO policies on privacy and ecology (less requests -> less pollution and less MitM attack occasions). Obviously, client-side JavaScript will no longer be an optional dependency. Sad but true.
𝗧𝗵𝗲 𝗯𝗮𝘁𝘁𝗹𝗲 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗝𝗦 𝗶𝘀 𝗽𝘆𝗿𝗿𝗵𝗶𝗰.
CC: @npub1da4…hflj @npub1hr7…e0xz

2025-03-07 04:34:33 GMT

- reply

the JS-less approach works well until the number of web requests grows. It works fine for amateur apps and small websites, but popular ones are forced to use it in order to keep the user experience smooth and keep out the bots and AI through PoW captchas.
Modern e-learning requires interactive excercises, flash cards, interrogations with supervision, cloud integration with file hosting and so on. Those things only scale well with JavaScript.
CC: @npub1hr7…e0xz @npub1lrj…6wd6 @npub1da4…hflj

2025-03-07 02:31:23 GMT

- reply

web apps for real-time collaboration, social media, video conferencing, online banking, trading, e-learning, auctions, e-commerce and so on, all need client-side JavaScript. It's just a *necessity* to meet the minimum quality standards.😉
Internet offers endless variety: if you don't trust a website, the best thing you can do is not visiting it.
Alex, my social feed stays always open for you, hoping for pleasant conversations in future. Take care. 👋
CC: @npub1lrj…6wd6 @npub1lte…nuyv @npub1hr7…e0xz

2025-03-07 02:31:15 GMT

- reply

unless the website is yours, you will never be in total control. The website owner will always be able to decide what each visitor sees and what each user can do on the company's domains. JavaScript is only an improvement to the user experience, its absence would make our life harder, its presence is almost always helpful has a very marginal effect on our freedom.
Tip for GNUs: focus on improving yourself rather than bashing others. Choose self-improvement over hate.
CC: @npub1hr7…e0xz

2025-03-07 02:27:43 GMT

- reply

no, I only use open protocols and FOSS apps to access my stuff. 😉
FOSS is just a term to indicate "Free and Open Source Software", nothing more. My usage of proprietary apps is minimum, all software I use is at least open source. I don't focus on anyone's interests, I just serve higher ideals.
If your nation asks you to use a website to save the planet and reduce bureaucracy, this is a moral obligation. Here at least JavaScript saves you two car trips! 🤣
CC: @npub1hr7…e0xz

2025-03-05 14:58:11 GMT

- reply

many trade-offs around in IT security, which requires a layered approach, as servers and clients have much different security requisites.
JavaScript security is in constant improvement because Web 2.0 needs it, used to much easily publish interactive content, facilitating self-expression, self-hosting and collaboration.
Note: I'm ignoring your rhetoric techniques, but mind that insults and ad hominem attacks aren't ok. I'm polite, so at least treat people with respect.
CC: @npub1hr7…e0xz

2025-03-05 14:58:09 GMT

- reply

no Alexander, even saints met opposition.
When you don't see much opposition, it only means nobody else thought sharing their informed opinions and discuss honestly with you was worth their time. In other words, that nobody else believed in your ability to think rationally, understand different perspectives and thus improve.
CC: @npub1lrj…6wd6 @npub1lte…nuyv @npub1hr7…e0xz

2025-03-05 14:57:53 GMT

- reply

I own many digital goods and ownership is generally tied to purchase.
Understand the scope of the free software movement accurately: FOSS is about the rights of software developers and users to modify and distribute desktop and mobile software.
Never conflate the concept of software freedom with website ownership. Users can choose to visit or avoid a website based on their own free will, regardless of the licensing terms of the JavaScript used on that site.
CC: @npub1hr7…e0xz

2025-03-05 14:57:16 GMT

- reply

iFrames are discouraged by most web dev guidelines, as they can embed malicious remote content, allowing criminals to inject malware, steal information, or conduct fraud, whereas client-side JavaScript is sandboxed within the isolated context of the webpage with same-origin policy restrictions.
Client-side processing grants improved responsiveness, better privacy and faster loadings, also reducing the carbon footprint by avoiding unnecessary web requests.
CC: [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1da4…hflj

2025-03-04 17:12:51 GMT

- reply

Alexandre, I will be the one biting faces if you start a religion/politics thread here! 🐺
Take all security reports seriously but try not to be obsessed about it, you'll just end up reaching uninformed conclusions. Trust the pros, take the mitigation steps and be productive.
Trust is always optional. But if you're feeling threatened by 98% of websites, its time to reassess your habits: better friends, less work, healthier food, touching grass more often, all helps.
CC: @npub1hr7…e0xz

2025-03-04 17:12:44 GMT

- reply

HTML5 alone cannot replace JavaScript because it lacks the capability to handle events, manipulate the DOM in real-time, or perform asynchronous operations, which are essential for creating dynamic, accessible and interactive pages.
FastCGI, executing server-side, is computationally more expensive because it requires multiple web requests and can be more vulnerable to remote code execution and misconfigurations than client-side JavaScript.
CC: [@tennoseremel](https://lor.sh/@tennoseremel ) @npub1da4…hflj

2025-03-04 17:12:31 GMT

- reply

unless the website owner publishes the JavaScript code under a FOSS license, full performance optimization is in the visitor's interest and you can't expect to find comments or readability aids.
In all cases, code quality and security are the webmaster's responsibility, not yours.
CC: @npub1hr7…e0xz

2025-03-04 00:01:52 GMT

- reply

I understand your concerns, but MITRE and CISA's oversight ensures CVE.org's security and integrity. Regular audits, bug reporting programs and frequent updates help mitigate future risks.
Alexandre, living in irrational fear of interactive webpages isn't healthy. We live only once, mate! 🙂
I'm currently satisfied and use their services with gratitude. If I had anything to say about their ethics, I would tell them personally.
I advise you do the same.
CC: @npub1lte…nuyv @npub1hr7…e0xz

2025-03-03 15:42:44 GMT

- reply

hi, minification and compression are distinct processes.
Minification removes unnecessary white space while compression reduces file size. They work together in HTTP to improve page load times. Minification helps reduce the file size, making it more efficient for compression to take effect, and ultimately, for the browser to download and render the page. They only improve performance and reduce carbon footprint. Minification cannot hinder experts auditing. 😉
CC: @npub1lte…nuyv

2025-03-03 15:30:25 GMT

- reply

you're welcome. If you need the screenshot of something else just ask, I'll gladly use the latest build of Mozilla Firefox on my up-to-date Linux to take a screenshot for you.
CVE.org is supported by the Cybersecurity and Infrastructure Security Agency (CISA) and by MITRE, a 65 years old corporation specialized in national defense, financial systems and cybersecurity.
Its staff has 25 years of experience. If this website isn't safe, we're all doomed. 🙂
CC: @npub1lte…nuyv , @npub1hr7…e0xz

2025-03-03 13:00:03 GMT

- reply

the scripts do not appear to contain malware:
https://www.virustotal.com/gui/url/0e7795408fa7cc6e918cbb0526bc804fece03f7b7685bebdc971670910088fea
https://www.virustotal.com/gui/url/b698d39b69b283657a4120248b211baeeb6be9b9f46a0bf873bfbcb5cbf622ac
All JavaScript files you've linked to are minified (compressed), not obfuscated. Almost all websites use compression to improve loading times. You can simply use the auto-format of your text editor to read minified scripts with minimal effort.

2025-03-03 12:23:14 GMT

- reply

cve.org is popular and safe to use. JavaScript is a web standard that helps ensure compliance with EU safety regulations and accessibility requirements. It is implemented by 97.69% of web browsers and utilized by 98.3% of all public websites. Therefore, its presence on the CVE site is standard practice for modern web functionality.
Please see: https://ieji.de/@LorenzoAncora/114098428234129692

2025-02-28 13:43:33 GMT

GNU Emacs: new critical remote shell injection vulnerability.
Red Hat discovered a command injection flaw in the text editor Emacs. It allows a remote, unauthenticated attacker to execute any command on your computer. The vulnerability is activated when you visit a malicious website or link.
https://www.cve.org/CVERecord?id=CVE-2025-1244
---
#news #software #gnu #emacs #security #hacking #terminal #linux #cve #opensource #freesoftware
---
Mitigation: uninstall/update immediately.

2024-10-09 19:24:01 GMT

𝗪𝗵𝗮𝘁 𝗶𝘀 𝗙𝗿𝗲𝗲 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗮𝗰𝘁𝗶𝘃𝗶𝘀𝗺?
Free software #activism is a type of social movement that advocates for the development, use, and promotion of free and open-source software (#FOSS). Activists may not necessarily be involved in #politics or see their activism as a form of political engagement. Instead, most view their work as a way to promote #freedom , autonomy, and community in the digital sphere.