Francesco Politi (@sugobalugo) header
Francesco Politi (@sugobalugo) profile picture

System & Network Administrator, guitar player, cybersecurity hooligan, zawsz-zawsz

Pescara, Abruzzo
Joined October 2012
Francesco Politi retweeted
"Another visitor. Stay a while… stay forever!" The C64’s SID chip wasn’t designed for sampled audio. Impossible Mission (by Dennis Caswell for Epyx) worked around that by playing speech through volume-register modulation: the 4-bit volume control was rapidly varied to reconstruct the waveform. The result was surprisingly clear for the hardware and era. In 1984 it felt almost magical to hear actual spoken English coming out of a 64 KB home computer, and was in the realm of "holy crap is there anything the C64 can't do?" when you first heard it back in the day.
42
21
418
13,087
Francesco Politi retweeted
If you're an IT admin and you want quick & easy ways to find security misconfigurations in your Active Directory environment, do this. 1. Run ADeleginator 2. Look for anywhere "unsafe groups" have "dangerous permssions" (read below for what that is) 3. Fix those misconfigured permissions Unsafe Groups: Domain Users, Domain Computers, Authenticated Users, Everyone Dangerous Permissions: Full Control, Write/Modify, Change Permissions, Delete, Ownership, DCSync, Reset Password
5
22
202
9,611
Francesco Politi retweeted
Microsoft vuelve a mover ficha. Una pequeña herramienta de Python acaba de dispararse hasta lo más alto de las tendencias de GitHub. Más de 100.000 estrellas. Se llama MarkItDown. Y hace algo engañosamente simple: Convierte casi cualquier archivo en Markdown limpio. PDFs. Documentos de Word. Presentaciones de PowerPoint. Archivos de Excel. Imágenes. Subes un archivo. Obtienes Markdown estructurado. Parece algo pequeño. No lo es. Porque uno de los mayores cuellos de botella en los workflows de IA —especialmente en sistemas RAG— es convertir documentos reales y desordenados en un formato que los modelos puedan utilizar correctamente. Y los documentos del mundo real son brutales. Los PDFs son caóticos. Los documentos de Word están llenos de formato oculto innecesario. Los PowerPoints son desordenados y suelen contener muchas imágenes. Las hojas de cálculo pueden ser una pesadilla de procesar correctamente. Ahí es donde esto se vuelve interesante. MarkItDown elimina esa fricción y te entrega algo con lo que los pipelines de LLM pueden trabajar de verdad. En otras palabras: menos preprocesamiento, menos problemas, implementación de IA más rápida. Y lo mejor es que no se trata de un proyecto secundario cualquiera. Es una herramienta open source oficial de Microsoft. Gratis. Utilizable comercialmente. Práctica. La probé con un PDF de 200 páginas. Unos segundos después, tenía un Markdown sorprendentemente limpio. Y esto es lo que las grandes tecnológicas hacen mejor cuando aciertan: Toman un problema universal y molesto que todo el mundo estaba solucionando con parches… …y lo convierten en un estándar simple. Por eso importa. No es solo una herramienta de conversión de archivos. Es infraestructura para la próxima ola de aplicaciones de IA. Consíguelo aquí: github.com/microsoft/markitd…
36
322
20
1,796
157,035
Francesco Politi retweeted
GOOGLE MAPS SHOWS YOU STREETS. THIS WEBSITE SHOWS YOU THE MOVIE SCENES FILMED ON THEM. it's called Movie Scene Map → moviescenemap.com 15,716 real filming locations. 166 countries. one map. click any pin. see what was filmed there. search any movie. see every place it was shot. Game of Thrones castles in Croatia. Breaking Bad streets in Albuquerque. Lord of the Rings hills in New Zealand. the well from The Dark Knight Rises at Mehrangarh Fort in Jodhpur. the Woman in Red fountain from The Matrix in Sydney. the best part is how fast your brain starts using it wrong. you open it to search one movie. then you search your city. then your hometown. then the place you went on vacation. built by one anonymous guy who goes by Flightmussy. just a website that lets a normal person see where their favorite movies were actually made. open tab. search your city. see what movies got filmed near you.
316
4,354
649
38,724
11,563,138
Francesco Politi retweeted
Bir Kere Girince Saatlerce Çıkamayacağınız 50 Site 1.) 'zoom.earth' — Dünyayı canlı uydu görüntüsüyle izleme 2.) 'flightradar24.com' — Şu an gökyüzündeki her uçağı görme 3.) 'marinetraffic.com' — Denizdeki tüm gemileri anlık takip 4.) 'windy.com' — Rüzgar ve fırtınaların canlı haritası 5.) 'lightningmaps.org' — Dünyaya düşen yıldırımları anlık izleme 6.) 'earthquake.usgs.gov' — Son depremlerin canlı listesi 7.) 'submarinecablemap.com' — İnterneti taşıyan okyanus kabloları 8.) 'globalforestwatch.org' — Ormanların yok oluşunu uydudan izleme 9.) 'worldometers.info' — Dünyanın istatistikleri saniye saniye 10.) 'internetlivestats.com' — Şu an atılan tweet ve arama sayısı 11.) 'thetruesize.com' — Ülkelerin gerçek boyutlarını karşılaştırma 12.) 'oldmapsonline.org' — Yüzyıllar öncesinin haritaları 13.) 'davidrumsey.com' — 150 bin tarihi harita arşivi 14.) 'openstreetmap.org' — Gönüllülerin çizdiği dünya haritası 15.) 'window-swap.com' — Rastgele birinin penceresinden dünyaya bakma 16.) 'virtualvacation.us' — Şehirlerde sanal yürüyüş 17.) 'mapcrunch.com' — Dünyanın rastgele bir noktasına ışınlanma 18.) 'atlasobscura.com' — Dünyanın en tuhaf yerlerinin kataloğu 19.) 'neal.fun' — Etkileşimli bilgi deneyimleri 20.) 'htwins.net/scale2' — Atomdan evrene ölçek yolculuğu 21.) 'eyes.nasa.gov' — Güneş sistemini 3B gezme 22.) 'stellarium-web.org' — Tarayıcıda gerçek gökyüzü haritası 23.) 'apod.nasa.gov' — NASA'nın günün astronomi fotoğrafı 24.) 'images.nasa.gov' — NASA'nın tüm görsel arşivi ücretsiz 25.) 'pudding.cool' — Veriyle anlatılan görsel makaleler 26.) 'ourworldindata.org' — Dünyanın gerçek verilerle hali 27.) 'gapminder.org' — Dünya hakkındaki yanlış bildiklerimiz 28.) 'informationisbeautiful.net' — Karmaşık veriyi görselleştirme 29.) 'data.worldbank.org' — Dünya Bankası'nın açık verileri 30.) 'data.tuik.gov.tr' — Türkiye'nin resmi istatistik veritabanı 31.) 'archive.org' — Milyonlarca kitap, film ve yazılım arşivi 32.) 'gutenberg.org' — Telifi düşmüş 70 bin ücretsiz kitap 33.) 'openlibrary.org' — Dünyanın her kitabının kaydı 34.) 'loc.gov' — ABD Kongre Kütüphanesi dijital arşivi 35.) 'europeana.eu' — Avrupa'nın kültürel miras arşivi 36.) 'dp.la' — Amerika'nın dijital kütüphane koleksiyonu 37.) 'artsandculture.google.com' — Müzeleri evden gezme 38.) 'rijksmuseum.nl' — Sanat eserlerini yüksek çözünürlükte indirme 39.) 'wikiart.org' — 250 bin sanat eserinin arşivi 40.) 'publicdomainreview.org' — Tarihin unutulmuş görsel hazineleri 41.) 'openculture.com' — Ücretsiz kültür ve eğitim arşivi 42.) 'metmuseum.org' — Met Müzesi'nin açık koleksiyonu 43.) 'musicmap.info' — Müzik türlerinin soy ağacı 44.) 'radiooooo.com' — Ülke ve on yıl seçip o dönemi dinleme 45.) 'listen.hatnote.com' — Wikipedia düzenlemelerini sese çevirme 46.) 'wikipedia.org/wiki/Special:R…' — Rastgele bilgi kuyusu 47.) 'timeanddate.com' — Zaman, gündoğumu ve gökyüzü olayları 48.) 'sciencedaily.com' — Bilim haberlerinin güncel akışı 49.) 'arxiv.org' — Bilimsel makalelerin ücretsiz ön baskıları 50.) 'observablehq.com' — Veriyi canlı kodla görselleştirme İnternet, algoritmanın önünüze koyduğu o beş siteden ibaret değil.
404
19,657
586
61,010
4,055,856
Francesco Politi retweeted
Yesterday, Poland faced a cybersecurity incident of exceptional scale. The breach affected MyDr, a healthcare platform used by medical professionals across approximately 12,000 clinics. The incident may involve data relating to nearly 19 million people, with reports indicating that more than 2 TB of data was stolen. The full circumstances and technical causes of the incident are still being investigated. What is clear, however, is that a catastrophic incident of this magnitude should mobilize all of us. The key takeaway is that organizations must place greater emphasis on cybersecurity by investing more in penetration testing, strengthening security controls and system hardening, monitoring for threats, protecting identities and privileged access, preparing for incidents, providing regular employee training, and raising cybersecurity awareness among both employees and users. The threat landscape keeps evolving. Our response has to evolve with it - together. For individuals in Poland, @KGawkowski and @CYFRA_GOV_PL recommend restricting your PESEL where appropriate, using MFA, and remaining particularly vigilant against phishing and attempts to misuse personal information. 🔔 For organizations: now is a good moment to review your security posture, test your resilience and make sure your teams are prepared to respond when something goes wrong. If CQURE can support you in that process - from security assessments and penetration testing to detection, hardening and incident readiness - our team is here to help. One thing I always emphasize: a penetration test is only as good as the people behind it. Who is actually testing your environment? Do you know their level of expertise and experience, or was the provider simply the cheapest option? A pentest should never be a checkbox exercise. A weak assessment can miss critical vulnerabilities and, even worse, give an organization a false sense of security. So don’t just ask, “Have we done a pentest?” Ask: “Who performed it, how deep did they go, and did it genuinely improve our security?” In cybersecurity, quality matters. Be the one who pushes for quality, be concerned who touches your infra. 📨 Contact us for a confidential consultation: [email protected] #CyberSecurity #DataBreach #Poland #InfoSec #CQURE
1
1
1
3
815
Francesco Politi retweeted
🚨New podcast episode! Real life Active Directory attack paths, from real life internal pentests. We talk: - how to find them - how they can be abused - how to fix them offsec.blog/episode-186-real…
1
43
228
11,096
Francesco Politi retweeted
YUGE ACTIVE DIRECTORY KNOWLEDGE REPOSITORY I've been curating my Experts Exchange article on Active Directory and Group Policy for over 10 years now. It's very thorough though I catch some things I may have missed over the years and add them such as the "Rebuild the _msdcs.Domain.Com Forward Lookup Zone and _msdcs stub zone" section. experts-exchange.com/article… Active Directory Recycle Bin Group Policy Central Store Group Policy Objects (GPOs) and Organizational Units (OUs) Domain Time Authority Setup Adding Computers and Users Setting up Basic Security Settings Local Administrator Password Solution (LAPS) Deploying Printers Recovering from a Failed DC Check FSMO Role Holder Seize the FSMO Roles Directory Services Restore Mode (DSRM) Reinitialize FRS/DFS-R Replication via BurFlags Migrate AD Replication from FRS to DFS-R Re-establish Replication If a DC has been Tombstoned Rebuild the _msdcs.Domain.Com and _msdcs stub zone folders FSMO Role Guidance Active Directory Domain Services and USN Rollback Recover a User's Local Profile Active Directory Trusts DFS-N Ghost Folders Fix PING .@ExpertsExchange
6
58
3
335
26,307
"International Soccer", è un gioco di calcio realizzato nel 1983 da Andrew Spencer (all'epoca 23 anni) e pubblicato dalla Commodore per il suo 64. Il gioco, realizzato interamente in Assembly, è stato uno dei primi giochi di calcio disponibili per questo computer.
25
13
3
240
8,930
Do you feel the same?
9
669
16
8,179
70,740
Francesco Politi retweeted
CRTE Has Been Fully Revamped for 2026 Since its launch in 2018, CRTE has helped shape Red Team practices across the industry. As enterprise environments evolved, so did the course. The updated CRTE now features: • Fully patched Server 2025 labs with Forest Functional Level set to Server 2025 • Credential Guard enabled across all machines • Greater focus on OPSEC, EDR detections, and identity-based detections • No NTLM or RC4 usage anywhere in the lab environment • New techniques including COM object abuse, BadSuccessor, Cross-Forest RBCD, AD CS attacks, Active Directory Sites abuse, and updated Hybrid Identity attacks We have also removed content overlap with CRTP, making CRTE leaner and more focused on modern Red Team operations. Read the full update from Nikhil Mittal: alteredsecurity.com/post/crt… #CRTE #RedTeam #ActiveDirectory #OffensiveSecurity #CyberSecurity #EnterpriseSecurity #AlteredSecurity
2
28
1,337
Francesco Politi retweeted
Aprovecho para presumir a la juventud que Kylie Minogue hizo esto sin IA (nunca entenderemos cómo).
300
2,280
205
20,351
796,938
Francesco Politi retweeted
With the kids out of school for summer this mother found a really neat way to help the kids cool off and be creative at the same time. How cool is this?
248
4,171
184
39,806
7,779,650
Francesco Politi retweeted
I spent weeks on Blender just to make an animation nobody will see
280
1,454
47
14,372
308,910
Francesco Politi retweeted
this only makes sense if you were there
259
5,712
270
34,944
2,976,837
Francesco Politi retweeted
Are you from this generation? 😂
58
186
19
1,965
144,606
Francesco Politi retweeted
Now you know the way, no excuse 🤓😂
37
562
24
2,980
342,026
I've never sen anything more accurate
656
46,200
1,790
220,924
9,063,503
Grandpa’s just chillin’, showing his grandson how to ride a bike, when his muscle memory kicks in
16
105
4
4,102
176,501