Frequently Asked Questions (August 2026)
Here are some of the questions we’re asked most often these days, we’ll try to answer point by point.
Can I access my email?
Yes: the webmail interface is accessible via https://www.inventati.org. POP/IMAP clients can also connect using the new connection parameters (which have been updated with new servers to use).
The autistici.org domain however is no longer reachable worldwide, after the recent events.
I have an @autistici.org email, can I receive and send email?
Now that the autistici.org domain has been completely blocked, it’s impossible to receive or send any new mail using an address on that domain (except from/to other A/I accounts).
We plan on soon providing a replacement alternative domain for these mailboxes. In the meantime, a quick solution is to create a new email alias on a different domain.
Your old email is of course still available in your mailbox.
I manage an @autistici.org mailing list, will it work?
As per the previous question, the answer unfortunately is no, not on that domain.
We have moved all @autistici.org mailing lists to the @inventati.org domain.
If you just use the new @inventati.org email address to post to your mailing list, it should work as usual.
Note: subscriber addresses have not been touched at all – there may be people subscribed to your mailing list with an @autistici.org address. They should still receive the list messages, as the delivery is internal.
I have an email on a different domain than autistici.org, is it still working?
Yes.
If you can’t connect to our servers, make sure you’ve updated the connection parameters of your client.
How can I use the webmail now?
The webmail interface is accessible at https://www.inventati.org. Just log in as normal to access the admin panel, then click through to the webmail.
I was using a hardware token for 2FA. What can I do?
Unfortunately, hardware tokens are bound to the authentication domain, which used to be accounts.autistici.org. As that domain is now gone (replaced by accounts.inventati.org), it is impossible to successfully authenticate using the hardware tokens you had previously registered.
Unless you can log in with an alternative 2FA mechanism (e.g. OTP), you should trigger the account recovery workflow by pretending you forgot your password. This should disable 2FA, and you’ll then be able to associate a new hardware token.
Was there unauthorized access to my email?
No.
Besides, if you changed your password in the last 6 years, the contents of your mailbox are encrypted with a key uniquely derived from your password, and aren’t readable to anyone else.
What happened to NoBlogs?
On 2026/8/28, someone managed to escalate to privileged access on the noblogs.org platform, leveraging a software vulnerability. We had to intervene to restore the site to safety.
We didn’t find any proof of data exfiltration, however it is impossible for us to exclude that the attacker might have had access to the Wordpress user database, which contains email addresses of NoBlogs users, along with their (hashed) passwords.
As soon as the noblogs.org platform is fully operative again, we strongly advise every user to change their password.
What precautions do you advise to keep my NoBlogs account safe?
Change your password as soon as possible, and set up two-factor authentication. We advise a hardware token if possible (and remember to generate backup codes).