# ncc (blogs) — RSS Amplifier Recent posts from the 4 feeds in the RSS Amplifier directory that cover ncc. Page: Feed: --- ## [Summer 2026 Tick bite experience](https://blog.henryvandenbroek.com/tick-bite-experience/) _2026-08-07 · Henry van den Broek · Henry | Blog_ Took 6 weeks to figure what was hampering my performance, not lyme or anaplasmosis, but babesiosis. ## [Нова епизода од подкаст: Кога податоците се среќаваат со етиката: човечката страна на вештачката интелигенција](https://www.hpc.mk/index.php/2026/07/08/nova-epizoda-od-podkast-koga-podatocite-se-srekjavaat-so-etikata-chovechkata-strana-na-veshtachkata-inteligencija/) _2026-07-08 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ Во оваа епизода, Атија Кортес Мартинез од Barcelona Supercomputing Center зборува за одговорната вештачка интелигенција, пристрасноста во здравствените податоци и општественото влијание на ВИ. Таа ги обработува темите за правичноста, транспарентноста, Законот на ЕУ за вештачка интелигенција (EU AI Act), како и начинот на кој етичките пристапи, насочени кон човекот, можат да придонесат за развој на… ## [Rooting Home Assistant through MeshCore: XSS attacks with a LoRa node name](https://mxsasha.eu/posts/meshcore-xss-home-assistant/) _2026-06-03 · Sasha Romijn_ A crafted MeshCore node name could compromise any Home Assistant instance running meshcore-card as soon as someone viewed a dashboard with that card. MeshCore relays through repeaters, so the attacker did not need to be in radio range of the target itself, only of any node that could forward to it. ## [RIPE NCC session fixation: poaching logins with an Atlas probe](https://mxsasha.eu/posts/ripe-ncc-session-fixation/) _2026-05-28 · Sasha Romijn_ RIPE NCC’s single sign-on did not rotate session tokens on login, leaving 12000 Atlas probe hosts in a position to compromise other RIPE NCC users’ logins. A single link click planted a session token in a target’s browser. When that target next logged in to a RIPE NCC service, possibly much later, the attacker could access their account. An XSS variant did the same regardless of… ## [Gray Scott School 2026](https://www.hpc.mk/index.php/2026/05/20/gray-scott-school-2026-2/) _2026-05-20 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ Со задоволство објавуваме дека Северна Македонија ќе биде домаќин на сателитска локација на Gray Scott School 2026, меѓународен едукативен настан посветен на високоперформансно пресметување (High-Performance Computing – HPC). Gray Scott School ги обединува експертите, истражувачите, инженерите и развивачите на софтвер од цела Европа на деветдневна напредна практична обука која опфаќа теми како што… ## [25 Years of LinkaGoGo: Servers Under Desks, Domain Disasters, and a Billion Bookmarks](https://blog.henryvandenbroek.com/25-years-of-linkagogo-servers-under-desks-domain-disasters-and-a-billion-bookmarks/) _2026-05-17 · Henry van den Broek · Henry | Blog_ LinkaGoGo turns 25 this month. The web has changed beyond recognition since 2001, but the problem it solves hasn't: you find something worth keeping, and you want it to still be there when you need it. Here's the full story of how it survived — floods, ransom registrars, noise complaints, and all. ## [E-commerce Meetup: AI (Business) Speed Talks успешно се одржа во Скопје](https://www.hpc.mk/index.php/2026/05/08/e-commerce-meetup-ai-business-speed-talks-uspesno-se-odrza-vo-skopje/) _2026-05-08 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ На 6 мај 2026 година, во просториите на Innox, успешно се одржа E-commerce Meetup: AI (Business) Speed Talks — динамичен meetup настан посветен на практичната примена на вештачката интелигенција во современиот бизнис и e-commerce сектор. Настанот собра претставници од e-commerce компании, маркетинг професионалци, стартапи и ентузијасти кои имаа можност да слушнат две кратки, но исклучително… ## [1000 third parties could have stolen RIPE NCC session tokens - by design](https://mxsasha.eu/posts/ripe-ncc-sso-cookie-exposure/) _2026-05-06 · Sasha Romijn_ The RIPE NCC made its all-powerful single sign-on tokens available to over 1000 third parties. From a single link click, any logged-in RIPE NCC user would leak their session token. That token grants full access to the RPKI Dashboard, the RIPE Database, and the member portal. RPKI and the Database govern internet routing for Europe, the Middle East, and Central Asia. This access could be made… ## [Inside a 14-month responsible disclosure with the RIPE NCC](https://mxsasha.eu/posts/ripe-ncc-disclosure-retrospective/) _2026-04-29 · Sasha Romijn_ This post covers the disclosure process for the vulnerabilities described in my RPKI exploit chain , through RIPE NCC’s Responsible Disclosure Policy . Update 2026-06-10 : RIPE NCC published their own retrospective on this disclosure: What We Learned from a Multi-Service Vulnerability Disclosure , by their CISO Eleonora Petridou. What went well RIPE NCC engaged in good faith throughout. All… ## [Taking down a European network with a TLS certificate: my RIPE NCC RPKI exploit chain](https://mxsasha.eu/posts/ripe-ncc-rpki-exploit-chain/) _2026-04-29 · Sasha Romijn_ One click on a malicious, but not suspicious, link. That is all it could take for a network operator to get disconnected from the internet, through a chain of vulnerabilities I discovered. From that single click, I could fully control their routing authorisations in a RIPE NCC portal, telling the rest of the internet not to accept their routes. I could also hijack all their RIPE Database objects,… ## [Sync Bookmarks Everywhere (Sponsored)](https://crawlproof.com/a/3zxp4gsc9xzZ) _2026-04-28 · **Sponsored**_ Two-way sync keeps folders and toolbar intact across Chrome, Firefox, and Safari. ## [CX Nationals 2025 — Fayetteville, Arkansas](https://blog.henryvandenbroek.com/cx-nationals-2025-fayetteville-arkansas/) _2026-04-10 · Henry van den Broek · Henry | Blog_ The road trip, the course, the race, and the NE dinner. 📸 Snowy Mountain Photography ## [Rewriting LinkaGoGo - my 25 year old Online Bookmark Manager](https://blog.henryvandenbroek.com/rewrite-linkagogo-my-25-year-old-online-bookmark-manager/) _2026-04-04 · Henry van den Broek · Henry | Blog_ A year ago I wrote off AI coding. Then I rebuilt LinkaGoGo with It. ## [Пријави се за менторска програма (1 на 1) Youth in Business!](https://www.hpc.mk/index.php/2026/03/23/prijavi-se-za-mentorska-programa-1-na-1-youth-in-business/) _2026-03-23 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ Почитувани млади претприемачи, Со задоволство ве информираме дека во рамките на Програмата Млади во бизнис, ЕБОР и ПроКредит Банка ја отвораат бесплатната програма за поддршка на компании управувани од претприемачи до 35 години, која ќе ја спроведе БАУ. Програмата обезбедува развој на знаења, менторство и поддршка за пристап до финансирање. Пријавете се на програмата и дозволете раст и развој за… ## [Root from the parking lot: OpenWrt XSS through SSID scanning (CVE-2026-32721)](https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/) _2026-03-19 · Sasha Romijn_ Lately, I’ve been experimenting with unusual XSS vectors. XSS (cross-site scripting) allows an attacker to execute arbitrary javascript in another user’s browser session. Sometimes the result is merely entertaining, sometimes the result is: Dear Sasha, excellent (and terrible) find! A crafted wifi SSID could lead to an XSS in the OpenWrt admin interface, if an admin opened the nearby… ## [Cyclocross November 2025](https://blog.henryvandenbroek.com/cyclocross-november-2025/) _2026-03-05 · Henry van den Broek · Henry | Blog_ Races at Cycle-Smart Northampton and Shedd Park Cyclocross. Picture Cycle-Smart clinic for NOHO with coach Stephen Hyde. ## [Cyclocross October 2025](https://blog.henryvandenbroek.com/cyclocross-october-2025/) _2026-03-02 · Henry van den Broek · Henry | Blog_ Races at BOSSCROSS, Keene Pumpkin Cross, Tree House CX, and Really Rad Festival. 📸 Dixon Photo, Content Factory Racing ## [\[Castiel2-champ3\] СООПШТЕНИЕ: Европска иновативна презентација FFplus: Стратешка интеграција на вештачка интелигенција и високоперформансно пресметување](https://www.hpc.mk/index.php/2026/01/26/castiel2-champ3-announcement-ffplus-european-innovation-showcase-strategic-integration-of-ai-high-performance-computing/) _2026-01-26 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ ⚙️ 💻 Дали сте мало или средно претпријатие (МСП) што сака да ја зголеми својата иновативност, да го забрза развојот и да стекне вистинска конкурентска предност? Придружете ни се на ексклузивната серија вебинари #FFplus, каде што МСП ќе бидат во центарот на вниманието и ќе покажат како ги трансформирале иновациските студии во решенија релевантни за пазарот со користење на HPC (високоперформансно… ## [Одржано предавањето „How to Build an AI Agent with LLMs: From Idea to Production“, во ко-организација на EuroCC MK и GDG Skopje](https://www.hpc.mk/index.php/2025/12/18/odrzhano-predavanjeto-how-to-build-an-ai-agent-with-llms-from-idea-to-production-v/) _2025-12-18 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ На 02 декември 2025 година, во просториите на Base42, Скопје, се одржа предавање на тема „How to Build an AI Agent with LLMs: From Idea to Production“, ко-организирано од EuroCC MK – Националниот центар за компетенции за високо-перформансни пресметувања и Google Developers Group Skopje. Настанот привлече голем интерес кај академската и индустриската заедница, што ја истакнува актуелноста на… ## [Cyclocross September 2025](https://blog.henryvandenbroek.com/cyclocross-september-2025/) _2025-10-23 · Henry van den Broek · Henry | Blog_ Races at Deer Farm, West Hill, and Kilowatt. 📸 Content Factory Racing ## [Cyclocross August 2025](https://blog.henryvandenbroek.com/cyclocross-august-2025/) _2025-10-08 · Henry van den Broek · Henry | Blog_ New cyclocross season with races at Blunt park, and Hydra Cross. 📸 Joshua Bressem. ## [Trade Bitcoin & Ethereum (Sponsored)](https://crawlproof.com/a/D0ZTdeXKfMp4) _2025-10-08 · **Sponsored**_ Buy, sell and margin trade BTC & ETH with fiat currencies ## [BioExcel Workshop Balkan Edition took place on May 21–22, 2025](https://www.hpc.mk/index.php/2025/07/11/bioexcel-workshop-balkan-edition-took-place-on-may-21-22-2025/) _2025-07-11 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ The Balkan Edition of the BioExcel Workshops organized as part of the Ambassador programme took place on May 21–22, 2025 in hybrid format – with attendants on-site at the Faculty of Chemistry and Pharmacy, Sofia University, Sofia, Bulgaria and online. More than 40 participants from 10 countries enjoyed inspiring lectures from top BioExcel experts – Alexandre Bonvin, Alessandra Villa, Bert de Groot… ## [Use a Victron Energy Lynx Power In as a Distributor](https://blog.henryvandenbroek.com/convert-a-victron-energy-lynx-power-in-as-a-distributor/) _2025-06-09 · Henry van den Broek · Henry | Blog_ How to convert a Victron Energy Lynx Power IN into a Distributor by adding an extra set of bolts to install mega-fuses. ## [NCC Thursday Hilltown Gravel series: #5](https://blog.henryvandenbroek.com/ncc-thursday-hilltown-gravel-series-5/) _2025-06-09 · Henry van den Broek · Henry | Blog_ TL;DR: 10 riders: 21.17 miles, 2343ft of climbing, unpaved 31%. steepest grade 11.2% ## [NCC Thursday Hilltown Gravel series: #4](https://blog.henryvandenbroek.com/ncc-thursday-hilltown-gravel-series-4/) _2025-05-01 · Henry van den Broek · Henry | Blog_ 9 riders: 22.55 miles, 2169ft of climbing, unpaved 50%. steepest grade 12.8% ## [Stay warm in your Promaster; install an Eberspacher heater](https://blog.henryvandenbroek.com/stay-warm-in-your-promaster-install-an-eberspacher-heater/) _2025-04-28 · Henry van den Broek · Henry | Blog_ My experience installing a Eberspacher Airtronic Heater in a 2023 RAM Promaster. Step by step instructions, electrical harness explanation, troubleshooting, and fixing various issues. ## [NCC Thursday Hilltown Gravel series: #3](https://blog.henryvandenbroek.com/ncc-thursday-hilltown-gravel-series-3/) _2025-04-23 · Henry van den Broek · Henry | Blog_ 11 riders: 21.18 miles, 2034ft of climbing, unpaved 21%. steepest grade 9.9% route. ## [NCC Thursday Hilltown Gravel series: #2](https://blog.henryvandenbroek.com/ncc-thursday-hilltown-gravel-series-2/) _2025-04-12 · Henry van den Broek · Henry | Blog_ TL;DR: 7 riders: 20.3 miles, 2102ft of climbing, unpaved 51%. steepest grade 13.8% ## [NCC Thursday Hilltown Gravel series: #1](https://blog.henryvandenbroek.com/ncc-thursday-hilltown-gravel-series-1/) _2025-04-05 · Henry van den Broek · Henry | Blog_ TL;DR: 6 riders: 18.8 miles, 2497ft of climbing, unpaved 42%. steepest grade 13.7% route ## [HPC North Macedonia Launches Exciting New Series of Events, Workshops, and Podcasts](https://www.hpc.mk/index.php/2025/03/17/hpc-north-macedonia-launches-exciting-new-series-of-events-workshops-and-podcasts/) _2025-03-17 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ HPC North Macedonia, in collaboration with its partners, is excited to announce a brand-new series of events, workshops, and podcasts dedicated to exploring the latest advancements in technology and artificial intelligence. This initiative aims to bring together experts, researchers, and enthusiasts to share knowledge and foster innovation. The first event in this series will be a webinar on April… ## [Compute for Climate Fellowship 2025](https://www.hpc.mk/index.php/2025/03/14/compute-for-climate-fellowship-2025/) _2025-03-14 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ IRCAI and AWS are excited to announce that applications are now open for the 2025 Compute for Climate Fellowship a global program that funds proof of-concept (PoC) projects for startups using advanced cloud computing and AI to develop breakthrough climate solutions This global program, launched by the International Research Centre on Artificial Intelligence under the auspices of UNESCO (IRCAI) and… ## [Realtime AI Arbitrage Terminal (Sponsored)](https://crawlproof.com/a/CgCsfC6A2MQR) _2025-03-14 · **Sponsored**_ Realtime auto-trading across exchanges with scored setups, backtesting, and risk controls. ## [EuroCC4SEE @ IT IEEE Žabljak, Montenegro: Advancing HPC/AI Collaboration and Innovation across South East Region](https://www.hpc.mk/index.php/2025/03/06/eurocc4see-it-ieee-zabljak-montenegro-advancing-hpc-ai-collaboration-and-innovation-across-south-east-region/) _2025-03-06 · Aleksandar Gjorgiev · EuroCC@North Macedonia_ The EuroCC4SEE project was successfully showcased during the 29th IT IEEE Conference in Žabljak, Montenegro, bringing together national and regional HPC and AI experts. The conference fostered international networking, facilitated business-academia matchmaking, and aligned emerging HPC/AI trends, services, and innovations with the interests/needs of scholars, researchers, and industry… ## [Multiple Vulnerabilities in TCPDF](https://d3adend.org/blog/posts/tcpdf-multiple-vulnerabilities/) _2025-02-25 · dead && end_ Introduction I recently identified multiple vulnerabilities in TCPDF, which is a popular library used for PDF generation (this is a repost from the NCC Group research blog). These issues were addressed in version 6.8.0 of the library. Web applications and web services often utilize PDF generation libraries when generating PDFs based on user input in order to generate invoice documents or report…