Mario Zagaria

Threat Researcher & Incident Response Supervisor @TelsyGruppoTIM | Developer, reverser, security consultant | Part of @TEDxFoggia team | All tweets are my own.

[Mario Zagaria @mariozagaria]

Nuovi abissi da @LinkemSpa. 6/1: 14h di down dalle 9:32 alle 00:30 del giorno dopo. Ieri 10/1 2h40' di disservizio spalmati su ben 7 eventi. Oggi 11/1, down ininterrotto dalle 10:50 (siamo già a 7h). Servizio clienti inesistente (in attesa da 75').

[Matthew Prince 🌥 @eastdakota]

Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any sites a shadowy cabal of European media elites deemed against their interests. No judicial oversight. No due process. No appeal. No transparency. It required us to not just remove customers, but also censor our 1.1.1.1 DNS resolver meaning it risked blacking out any site on the Internet. And it required us not just to censor the content in Italy but globally. In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online.

That, of course, is DISGUSTING and even before yesterday’s fine we had multiple legal challenges pending against the underlying scheme. We, of course, will now fight the unjust fine. Not just because it’s wrong for us but because it is wrong for democratic values.

In addition, we are considering the following actions: 1) discontinuing the millions of dollars in pro bono cyber security services we are providing the upcoming Milano-Cortina Olympics; 2) discontinuing Cloudflare’s Free cyber security services for any Italy-based users; 3) removing all servers from Italian cities; and 4) terminating all plans to build an Italian Cloudflare office or make any investments in the country.

Play stupid games, win stupid prizes. While there are things I would handle differently than the current U.S. administration, I appreciate @JDVance taking a leadership role in recognizing this type of regulation is a fundamental unfair trade issue that also threatens democratic values. And in this case @ElonMusk is right: #FreeSpeech is critical and under attack from an out-of-touch cabal of very disturbed European policy makers.

I will be in DC first thing next week to discuss this with U.S. administration officials and I’ll be meeting with the IOC in Lausanne shortly after to outline the risk to the Olympic Games if @Cloudflare withdraws our cyber security protection.

In the meantime, we remain happy to discuss this with Italian government officials who, so far, have been unwilling to engage beyond issuing fines. We believe Italy, like all countries, has a right to regulate the content on networks inside its borders. But they must do so following the Rule of Law and principles of Due Process. And Italy certainly has no right to regulate what is and is not allowed on the Internet in the United States, the United Kingdom, Canada, China, Brazil, India or anywhere outside its borders.

THIS IS AN IMPORTANT FIGHT AND WE WILL WIN!!!

[Mario Zagaria @mariozagaria]

Nuovo record di disservizio da @LinkemSpa: mancato routing del traffico (100% packet loss anche in presenza di segnale portante) dalle 14:44 del 15/12 alle 17:43 del 19/12 (quasi 100 ore consecutive). Nel frattempo, zero supporto, zero notizie, call center indisponibile.

[Mario Zagaria @mariozagaria]

@LinkemSpa Lo dico sottovoce, non vorrei che ne risentisse la robustezza del servizio: dopo oltre 106 ore di down, dalle 6:19 del 13/9 alle 16:31 del 17/9, Linkem ritorna a funzionare.

[Mario Zagaria @mariozagaria]

Cara @LinkemSpa, io non so cosa fate di mestiere, ma di certo non l'operatore di connettività. Negli ultimi 35 giorni solari, nella mia zona ce ne sono stati 7 di down completo (vostro segnale assente, con antenna da esterni), il 20%.

[Mario Zagaria @mariozagaria]

@LinkemSpa @LinkemSpa quinto giorno consecutivo senza segnale. Il call center riconosce il disservizio ma non offre informazioni. Siamo sempre entro i termini di servizio? Avete battuto anche il vostro record di ~90h di down ad agosto, siamo a già a ~100h ininterrotte.

[Karsten Hahn @struppigel]

Wisdom of the crowd does not work with malware analysis and automatic systems suck.

These are the votes on a perfectly clean AutoIt executable.

[rebus @therebus]

"Cybersecurity, la Corte dei conti europea ha bocciato l'Italia"

Un giudizio severo sulla cybersecurity, che non lascia spazio a equivoci. Nella sua relazione annuale sull'esercizio finanziario 2023, pubblicata ufficialmente il 10 ottobre ma che Wired a… https://t.co/bJYClt8UBc

[Vess @VessOnSecurity]

"Testing a new encrypted messaging app's extraordinary claims":

https://t.co/DDg9BFYYcc

[badidea 🪐 @0xabad1dea]

so glad to be living in the future where AI keeps breaking out of every moral constraint we try due to the Waluigi Effect https://t.co/9cWZOQ2ntr

[Mario Zagaria @mariozagaria]

PaintdotNET and the resurrection of DLL hell https://t.co/KMD2UktgLx

[Casey Muratori @cmuratori]

Using their own example code, I made a simple demonstration of how horrible "Clean Code" ideas are for software performance:
https://t.co/dO3UyaNdf6

[Giorgio Bonfiglio @g_bonfiglio]

Great writeup by @stucchimax on Telecom Italia / TIM's outage a few weeks back.

Only thing I disagree with is the claim AS3269/AS16232 are not "multihomed":

https://t.co/CjZu1snmDr

[CyberTrends ITA @trends_cyber]

📌#13dicembre #ore10 Torna l'appuntamento #CERT #STAR 2022!
▶ Evento online in collaborazione con @TS_WAY_SRL dal tema: "Conosci il tuo nemico: la #CTI come ausilio alla difesa tecnico strategica dalle #minacce cibernetiche del conflitto russo-ucraino"

https://t.co/PkaOaqBidm

[Daniel Schell @danonit]

A write-up of my research into the Office VSTO format. You can build single document files that download and run .NET assemblies from the internet. 😱😱😱https://t.co/LYd4x8MHsr

[TEDxFoggia @tedxfoggia]

NEW:
il #2giugno uniamo le forze con altri 24 #TEDx in Italia per realizzare #DemocraziaDigitale.
Seguici per scoprire di più.

Credits video:
3D Artist & Motion Design: Alessandro Boncio
Sound Design: Guido Smider

#TEDxFoggiaSalon #ideasworthspreading #TEDxFoggia

[TS-WAY 🇮🇹 @TS_WAY_SRL]

A fronte dell'identificazione da parte del CNAIPIC dell'avversario #Glaaki, declassifichiamo report ed Indicatori di Compromissione provenienti dalla nostra soluzione informativa TS-Intelligence.

https://t.co/ZTMizlMsC3

[TS-WAY 🇮🇹 @TS_WAY_SRL]

Apprendiamo da notizie stampa l’identificazione dell’avversario #Glaaki da parte della Polizia Postale.

https://t.co/sOTVujUoda