why the fuck would you hack the internet archive

are you actually fucking out of your mind

Mozilla Firefox exploited zero-day: Security Advisory 2024-51 Security Vulnerability fixed in Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1
CVE-2024-9680 (9.8 critical) Use-after-free in Animation timeline

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild.

See related @BleepingComputer reporting: Mozilla fixes Firefox zero-day actively exploited in attacks

The Canadian Centre for Cyber Security (CCCS) has a useless Mozilla security advisory (AV24-576) which doesn't indicate that this is an actively exploited zero-day. What's the point in an advisory when it doesn't provide the biz?

#zeroday #vulnerability #firefox #mozilla #cve #CVE_2024_9680

All you #Mastodon sysadmins who upgraded to Mastodon 4.3.0: Have you noticed that after you dutifully upgraded the #Yarn dependency to version 4, a message like this scrolled by:

$ yarn install --immutable<br>➤ YN0065: Yarn will periodically gather anonymous telemetry: https://yarnpkg.com/advanced/telemetry<br>➤ YN0065: Run yarn config set --home enableTelemetry 0 to disable<br>

yarn config set --home enableTelemetry 0<br>

#MastoAdmin #telemetry

When your #curl command line is rejected by the server but your browser still works, it might be because of TLS fingerprinting.

I blogged about this two years ago: daniel.haxx.se/blog/2022/09/02…

Are you overwhelmed with background windows demanding attention, or just the amount of color on your computer screen? Do you wish it was a bit easier to tell which window has (keyboard) focus?
Oh, and are you using GNOME?

Because I released my first extension for GNOME Shell, and it desaturates background windows. Get it on extensions.gnome.org. If you want.
Hope you enjoy!

#gnome #ui #focus #color

@GottaLaff
Announcing the Cartoonists for Kamala fund raiser! Many cartoonists have donated original art of their work (not just a print!) for the auction where all the funds will go directly to the Harris-Walz campaign.

Here's a link to get you started. More art will be added over the next couple of days as this kicks into gear.

ebay.com/sch/i.html?item=18671…

I'm a proponent of static websites. Most generators use a folder structure with Markdown files and other assets as the input.

However, not all users are confident editing Markdown and YAML front matter etc. by hand.

Are there any good web frontends for this kind of stuff?

It should feel like the authoring backend for WordPress or whatever random CMS, with a WYSIWYG editor, and the result are Markdown files & assets. Bonus points for Git support.

#WebDev #StaticWebsite #StaticSite #SSG

SHIFTphone 8

Es gibt nahezu unendliche Anwendungsmöglichkeiten für den Custom-Key, deswegen würden wir gerne von euch wissen, welche Funktionen ihr euch besonders wünscht.🙂

Vorschläge in die Kommentare!

#shift #shifthappens #shiftphone #shiftphone8

The Static Site Paradox

kristoff.it/blog/static-site-p…

I letos budeme mít stánek na @linuxdays, tak se za námi zastavte, rádi vás uvidíme!
Kromě toho si můžeme v sobotu v poledne poslechnout přednášku o #Fedora Asahi Remixu od @sesivany.

#linuxdays

Poznámka k @mastopivo - zatím to vypadá, že kromě základní nabídky hospůdky #dovětru bude v pátek zajištěné i občerstvení na úrovni večeře (nechci to zakřiknout, snad to dopadne). Předběžný odhad 20 účastníků by neškodilo upřesnit (včetně počtu případných nemasožravců)

#fedipivo #mastopivo

Just a little #AndroidAppRain at apt.izzysoft.de/fdroid today, with 17 updated and 1 added apps:

* MultiLocale: add (otherwise unsupported) languages to your device's locale

Enjoy your #free #Android #apps with the #IzzyOnDroid repo

HUGE thanks to @robb for writing a clear, easy-to-follow #guide on how to enable #Fediverse author attribution on blogs/websites - so that it will show up under the link card: rknight.me/blog/setting-up-mas…

#blog #journalism #mastodonupdate #webdev

As #DeníkN changed their podcast format and moved most of it behind paywall and I like to listen to it on my bike commute to work, I had to change the way I consume #podcasts and also updated the way I consume #RSS articles.

Here's what works for me for now 🧵

Some of my favorite `curl` tricks:

vpetersson.com/2018/10/03/trou…

Super handy for debugging HTTPS. Thanks @bagder.

What I most miss about Twitter when it wasn't evil is that I could publicly shame companies when they were stealing money from me.

#Ebay and one of their sellers have stolen £80 off me and it doesn't matter if I post it on here because nowhere now has the power and reach of old #Twitter

There is currently no way to damage the PR of a company unless you happen to go viral on TikTok or YT.

As a side note - NEVER buy from Ebay, there is no guarantee that your money is safe. None.

Nonbinary DJ called

Mx Tape

It is sad to note that the Zoom Conferencing client is becoming less and less easy to use.
It is becoming so bloated with features not necessarily associated with hosting meetings.
Even something as simple as scheduling a meeting does not work as easily as used to be the case.

A major JAWS script update is being worked on so as to hopefully make at least the process of scheduling meetings, and reviewing scheduled events, easier than is currently the case.
An accurate time as to when the update will be available cannot be given at present, but it is hoped it will be within the next two weeks.