The guide also mentions that there is no algorithm in your Mastodon timeline. The only posts you see are from accounts and hashtags you follow, or posts that are shared by accounts you follow.
Ok I debated making this but it cannot hurt. I hope all my fellow #Blind, #DeafBlind, and #VisuallyImpaired people, along with their family, friends, and others have had a great time at the #ACB and/or #NFB 2025 conventions. I am taking this time, and the increased activity on certain hashtags to do some shameless promotion of #OurBlind. OurBlind comprises the Discord, Lemmy, and Reddit communities operated by the staff of the r/Blind subreddit, as well as those who have joined since the creation of the Discord in 2022, and Lemmy in 2023. We have members from all over the world, and of all ages, hearing and vision levels, and are a safe space for Our LGBTQIA+ and neurodiverse friends. Our general community guidelines, and the links to reach our platforms can be found on our website.
Welcome to OurBlind Join Us Reddit Discord Lemmy Who We Are OurBlind is a community of blind and visually impaired people, their family and friends, and allies, from around the world.
# HTTP Request Smuggling Vulnerability Report - cURL
## Summary:
cURL does not explicitly reject HTTP requests that contain both Transfer-Encoding and Content-Length headers, which can lead to...
Mind if I borrow this one (incl. your statement "First, it is clearly visible as the report turns into this AI rubbish style with bullet point overload and MUCH too wordy and exaggerating every point.") for my deck about how AI complicates work on the receiving side of report/pull request?
If they canโt be bothered to put in a bit of punctuation and spacing themselves, then they clearly are very busy people with other priorities. So I certainly would not expect them to have checked the result for accuracy and readabilityโฆ making the report a pain in the behind for the reader.
this is the clearest example I've seen of the idea that LLMs can write things that *sound* correct, but they fundamentally don't understand what "correct" even means.
This has the shape of a vulnerability report. The fact pattern has many hallmarks of vulnerabilities. But it doesn't really understand what a "vulnerability in curl" is, and the result is neither "a vulnerability" nor "in curl."
I believe the reporter when they said: "AI assistance was used to help structure and format this vulnerability report". I have some amount of trust, and the way it reads and is formatted is similar to AI tools have seen. Is that the question you meant, or were you asking if AI was used ONLY to structure and format the report, and not to find the โvulnerabilityโ? For that, I donโt know. I wouldnโt have thought to test that, but then maybe Iโm not imaginative enough!
@hmallett the text was definitely AI. The thing to question is if there was ever any human intelligence involved in "the finding". It's not really possible to tell for sure.
@sycophantic Depends, I'd say. I've seen bug reports that were very hard to understand, even though English vocabulary was used, quite clearly a language barrier thing. I could see some use AI to better their document structure.
Mind you I'm not saying that is it in *this* case, but rather reacting on the notion that raw text is always better...
@levitte @sycophantic these days, using AI seems to literally imply getting a "word vomit". It is in my view often the number one reason NOT to use it. The actual point is drowned in well-phrased polite English.
The domain name putty.org is *NOT* run by the #PuTTY developers. It is run by somebody not associated with us, who uses the domain to interpose advertising for their unrelated commercial products. We do not endorse those products in any way, and we have never given any kind of agreement for PuTTY's name to be used in promoting them.
Please do not perpetuate the claim that putty.org is the PuTTY website. If anyone is linking to it on that basis, please change the link. The PuTTY website is chiark.greenend.org.uk/~sgtathโฆ and it always has been.
You can check this by downloading the source code, which cites that URL in many places (the README, the documentation, some strings in the actual code), or by using the "Visit Web Site" menu options in the official Windows binaries (the ones signed with my personal Authenticode certificate). The true PuTTY website is the one that PuTTY itself says it is.
Many search engines list putty.org above chiark. I don't know if this is due to active SEO on the part of the domain owner, or a heuristic in the rankings. Either way, don't believe them. It's not our site.
@miki Only because by this point everyone knows that search engines prioritize fraud and advertising over good results.
It used to be that Google (before they got taken over by doubleclick) were known for exceptionally good results. You could type putty and click "I'm feeling lucky" and be redirected directly to the correct website.
Jumping through their hoops is a futile project. Now it's domain names and certificates, a couple of years ago, it was AMP sites, next week it will be AI slop that gets your site at the top.
We've invested a lot in recent months to improve speed on your encrypted Tuta apps. While the decryption process requires time, we still want Tuta to load as quickly as any other email app. We're proud that all the hard work is paying off and that you can now enjoy the fastest Tuta clients ever. ๐
Yeah it used to be awful long loading times. I already migrated to somewhere else. Now I can choose the client I want to use be it mutt, Thunderbird or anything else.
A while ago I received an email with this question. I've been subscribed to your weekly newsletter for a while now, receiving your weekly updates every Friday. I'm writing because I admire your consistency, focus, and perseverance.
I use curl every single day, sometimes hundreds of calls. it's my database interface more than a "web" one because interestingly lots of database have nowadays an http interface. curl is embedded in my tests and checks to blackbox test my http-based API. I debug half of the infrastructure I'm responsible for with curl. (the other half is kubectl ๐)
basically my bash history is made of curl, jq, kubectl ;)
This is such a great blog post. This is so humanizing and approachable. Lots of bits in there that so many feel and go through themselves with their own "things" or projects. Have a great Sunday afternoon!
I obviously have the authority to speak on behalf of every inhabitant of planet Earth that uses a computer when I say "Thank You for curl." We all appreciate it, what it enables, what it is.
Even those people who don't know what curl is appreciate that stuff works because of the magic inside, and part of that is your magic.
Novรก verze Mastodonu dฤlรก z adresรกลe profilลฏ mnohem pouลพitelnฤjลกรญ zรกleลพitost, neลพ tomu bylo doposud.
Mรญsto neustรกlรฉho naฤรญtรกnรญ strรกnky s delลกรญm a delลกรญm krokem je nynรญ k dispozici postupnรฉ naฤรญtรกnรญ pลes moลพnost "Naฤรญst vรญce".
Pokud tedy nahoลe nastavรญte volby "Novฤ pลรญchozรญ" a "Pouze ze zpravobot.news", mลฏลพete pomฤrnฤ elegantnฤ projรญt celรฝ adresรกล a vybrat si, kterรฝ ze zprรกvobotรญkลฏ chcete sledovat.
Mike Saunders talks to Olivier Hallot, who coordinates LibreOffice's Documentation team. What makes good documentation? Why is it important? And what does th...
in order for it to be a podcast it needs to be available for podcatchers (podcast subscription and listening applications). Where can I find the RSS feed with the podcasting tags? I have searched for it on the Apple directory (the directory most of these applications use to search for podcast feeds) using my podcatcher, and couldn't find it.
I Should Be Able to Mute America
"There he was, pushing back against the American sensibilities that crawl their way into every last crevice of the internet, despite the platform, the users, and the algorithms insistence that he bend to them.
This update has a LOT of changes and fixes in it! I think I got in everything everyone who gave me feedback asked for (check the README file "Changelog" section for details). Lots of attention paid to making buttons, tabs, and drop-down appearance consistent, and lots of new CSS variables for customization plus a new option for customizing Bookface (more on that in a moment).
Bookface 1.8 has been tested with both the current stable 2024.12 and 2025.7 Release Candidate versions.
The most obvious change you'll probably notice is that the responses below posts and comments now look completely different:
And below an Event Post:
If multiple people engaged with the post in a certain way you no longer have to click the count to see the list, it's a popover that appears on hover (active on touch devices). This is a lot cleaner and more consistent with how these are displayed on other social media platforms.
You'll also notice that the Main Menu missing icons are in place. This is a change that's coming in the next Friendica release anyway, but Bookface lets you have it right now:
Someone specifically asked whether the main navigation buttons could have labels on them:
I didn't turn it on by default, but nav button labels are now coded into Bookface and if you're using CSS variable customization they're easy to turn on:
:root {
--show-navbar-labels: block;
}
The label text is also customizable. Until now the only way to implement such customizations was either for a server admin to manually put them into the header or footer sitewide or for individual users to put them in a user content stylesheet just for your web browser. That's why I'm also releasing a new Friendica addon called "Bookface Custom" that, if your server admin installs it, allows you to customized every one of the Bookface CSS variables to your heart's content.
Oh, and it's a little thing, but if you did bother to go the trouble of self-verifying your account I restyled the "verified checkmark" in the profile aside ๐:
Good work! I updated Bookface for Friendica.World.
One remark, when trying to write this comment, I tried clicking the 'comment' icon, moving the mouse from below. The new popup for the list of people that liked the post, blocked the comment button. I don't know if there's a solution for this..
Yes, I was concerned about that but couldn't come up with a decent solution to prevent it. I thought about using negative margins and padding to swap the positions of the Action Buttons and Responses, but making that work across all screen sizes and for both regular posts and event posts is tricky. The popup list would still be triggered by a mouseover but at least it wouldn't cover the Action Button. I'll keep playing with it and see if I can get it to work consistently. I can always revert it to the way it was in a future release if this turns out to be too much of a usability issue.
Main branch updated to 1.8.1 to fix "Notices" navbar label not using CSS variable. Not an issue for anyone who isn't using Navbar Labels, which are not enabled by default.
If you don't want to wait for the next release the Main branch should always be the most current as people point out things to me and I fix them on GitLab (which should automatically get mirrored to the GitHub repo).
@Random Penguin This theme's quite cool, really admire it. One thing however:
On my desktops, this double navigation takes way more space than in other themes. Would it be possible, for smaller displays, to somehow merge them into one menu line, or does that require more in-depth changes?
I agree that it does take up a lot of space, because I made the icons larger and added more white space for a cleaner, more modern look. Everything in Frio is too tiny and compact and cluttered. It doesn't help that Friendica just has a LOT of controls. Too many IMO. It's kind of overwhelming to new users.
For smaller displays when you get below 768 pixels wide it engages the mobile interface. There's some overlap between desktop and tablet landscape making it impossible to discern which it is, and for most tablets in portrait I chose to display a compact version of the desktop bars to keep the position of controls consistent if you change tablet orientation.
It is technically possible to merge the two bars into one (actually make them 50% screen width and positioned seamlessly side-by-side) for really wide screens, but there's just too much stuff there to do that for a smaller screen. And the sub-section words in the second toolbar can be really short in some languages or really long in others.
You could try zooming in until the mobile interface kicks in. Though it doesn't really save that much space as there are still two toolbars, they just aren't both at the top.
It's my birthday!! If you wanna support me today and help me have an awesome birthday the best thing you can do is make an order for some beadwork. Financial security during this move is the best gift I can ask for right now. Mvto!!!
Even if they go back on that, itโs proof enough that they can not be trusted. Not now, not ever. No critical piece of a system should rely on people who believe in the LLM illusion.
Sadly all of ./play.it infrastructure is currently relying on rsyslog for centralised logging management. If you use something else, and are happy with it, suggestions are welcome.
Right now our top candidates for a replacement are: - syslogd, the original one - syslog-ng (it seems powerful, but its documentation is awful)
Our needs are very basic, mostly we want to be able to tell the logging system to store logs in specific paths based on the process name, like sending rspamd logs to /var/log/mail/rspamd.log or unbound logs to /var/log/network/unbound.log.
Logs rotation is already handled by logrotate, so we do not need the syslog daemon to include the ability to handle that itself.
Being packaged in Debian is a non-negotiable requirement.
After 24 months of focused evaluation and careful experimentation, weโre excited to announce a major shift in the evolution of rsyslog: weโre going AI First.
Have a little free, hard-earned advice from someone who lived in West Texas for a great many years: yes, it is smart to carry water with you when you're out & about on hot days BUT no, that does not mean you have to look like some sort of boring square.
OpenSSL offers the following ML KEM hybrid algorithms.
P256_ML_KEM_768
P384_ML_KEM_1024
X25519_ML_KEM_768
These algorithms are already supported by WolfSSL, but are not available for use by Curl. T...
* If you don't have a changeover after midnight then that only counts as one travel day instead of 2 * but somehow this does not work on the last day of the pass? ("Note: you cannot use your Eurail Pass to take a night train on your last travel day as the validity period will expire at 23:59.")
The second part is oddly confusing to me right now. Can someone confirm/explain that?
I have no insight, but I think this definition of "travel day" only affects the Flexi Pass.
In order to use the trains, you must satisfy two conditions:
โข Today is a travel day; and โข Your card is valid.
The boundaries of a travel day are defined by local midnight, but extend to encompass a train ride started near the end of a travel day. (This means you don't get 'charged' two travel days for one train ride.) This does not affect your card's validity.
Let's say you buy "7 days in a month", that month ends at 23:59 the last day. E.g. July 13 --> August 12 23:59.
i.e. the #interrail pass is not valid anymore after that time. After 23:59 on August 12 it expires.
You have to be home before 23:59 (scheduled time) on the last day of validity period. Night trains are practically impossible on the last day of _validity_, regardless of how many _travel_days_ you have left.
If you take photos of ducks when the weather is too cold you can look at them when it is too hot, and vice versa, to try to trick yourself into feeling less hot/cold. It doesn't work, but you get to look at pictures of ducks.
Cees-Jan Kiewiet
in reply to daniel:// stenberg:// • • •Loren
in reply to daniel:// stenberg:// • • •John Faithfull ๐๐ช๐บ๐ด๓ ง๓ ข๓ ณ๓ ฃ๓ ด๓ ฟ๐งกโ๐ปโ๐ฟ
in reply to daniel:// stenberg:// • • •Jan Johannesson
in reply to daniel:// stenberg:// • • •Demian
in reply to daniel:// stenberg:// • • •