Mastodon 4.2.1 is here! 🥳 github.com/mastodon/mastodon/r…

I have two fixes in there, including the #MastoAdmin retention dashboard not working for anyone who lives in the western hemisphere 🌐

I had another one that adds Elasticsearch storage size to the admin dashboard, that didn't make it in here, but it's on main so it'll make its way to you eventually. 🤷

Release v4.2.1 · mastodon/mastodon

This is a bugfix release for the 4.2.0 version, if you're installing from an earlier version, please check the 4.2.0 release notes as they contain important information on how to update. ⚠️ We rec...

^GitHub

We're back with another great update to our elegant Internet radio app – Triode. Ever listen to Internet radio and wonder what track is playing? Triode now has the answer thanks to Shazam! Version 2.1 also offers new tools to manage your data and keep your favorite stations backed up and safe.

Learn more about the Internet radio app that keeps getting better and better - blog.iconfactory.com/2023/10/t…

#TriodeApp #iOS17 #InternetRadio #Music

I made a post on my (rarely used) blog thinking about my pursuit of higher mathematics and about how/where to apply for grad schools. I would love some advice from those who have pursued their love for Mathematics and it's application in other fields in grad school! I have some concerns and I feel very stuck.

freddy.us/thoughts/2023/10/06/…

#Math #Mathematics #Mathstodon #Physics #ComputerScience #GradSchool #PhD #Theory #GetFediHired

Re: my last boost, I'm trying to figure out what I as a sysadmin running nginx should do about this new HTTP/2 Rapid Reset Attack vulnerability. I found this blog post from the nginx company: nginx.com/blog/http-2-rapid-re…

Two of the suggested mitigations, keeping the keepalive_requests and http2_max_concurrent_streams settings at their defaults, are simple. The other two suggestions, adding limit_conn and limit_req directives, are more vague, and I'm afraid I'll mess something up if I react hastily.

HTTP/2 Rapid Reset Attack Impacting NGINX Products - NGINX

Update your NGINX configuration to mitigate a possible denial-of-service attack implemented on the server-side portion of the HTTP/2 specification.

^{Danielle Jones (NGINX, Inc.)}

"Most usage of #curl is as a command-line utility"

I would not have put it that way...

theregister.com/2023/10/10/cur…

Fresh curl tomorrow will patch 'worst' security flaw in ages

It’s bad, folks. Pair of CVEs incoming on October 11

^{Richard Speed (The Register)}

For #PortfolioDay I am sharing one of my favourite collections called "Neglected Elegance"

These #lostplaces have now become a time capsule, capturing the essence of decades passed. Art Nouveau casinos and Art Deco theatres hidden behind closed doors. Forgotten Neo-Classical styled Italian villas with beautiful frescoed ceilings lay waiting to be discovered again. French chateaus, shrouded in dust.

Full #portfolio - obsidianurbexphotography.com/p…

#photography #abandoned #history #architecture

There's an important vulnerability being disclosed today that allows attackers to massively increase the size of DDoS attacks.

The flaw is being tracked as CVE-2023-44487, a.k.a. "HTTP/2 Rapid Reset Attack." According to Damian Menscher at Google, the attack "works by sending a request and then immediately cancelling it (a feature of HTTP/2). This lets attackers skip waiting for responses, resulting in a more efficient attack."

More info:

cloud.google.com/blog/products…

aws.amazon.com/blogs/security/…

aws.amazon.com/security/securi…

cloudflare.com/press-releases/…

Tomorrow I'll be doing a presentation about the #ActivityPub API at the O'Reilly Media event "APIs: Possibilities and Pitfalls". I'm excited!

oreilly.com/live-events/apis-p…

APIs: Possibilities and Pitfalls

Following up on the themes explored during our API Day event in the early spring, APIs: Possibilities and Pitfalls now takes exploring APIs to the next step, with future-thinking insights on important and innovative APIs and techniques for API-dri...

^{www.oreilly.com}

I'm beginning to think this is Google pulling a Microsoft/DR-DOS. It seems YouTube does not detect that I disabled the adblocker until I go through the "show me how to disable my adblocker and then reload" sequence.

I bet this does not happen with Chrome.

Quand il s'agissait de poser une bombe chez Reflets...

Deux salariés d'#Amesys / #Nexa ont évoqué ce projet après une filature. Depuis, l'un d'entre eux a été embauché à l'#ANSSI. Récit.

→ reflets.info/articles/quand-il…

I wrote something about the project to enable Fedora Asahi to run x86_64 games in microVMs.

It also includes instructions for trying out an early snapshot of the changes. 😉

sinrega.org/2023-10-06-using-m…

Using microVMs for Gaming on Fedora Asahi

It’s been almost a year since I transitioned from the Virtualization to the Automotive team at Red Hat with the goal of ensuring RHIVOS ships with a powerful Virtualization stack.

^{Sergio López (Sergio López's Blog)}