Someone is DDOSing the internet archive, so we've been down for hours. According to their twitter, they're doing it just to do it. Just because they can. No statement, no idea, no demands.
Meanwhile, we literally rescued 400,000 dissertations from being pulped.
I like our side.
Reminder to anyone in the path of #Milton
When speaking to your insurance, do NOT use the word "flood". No matter what your claim is, do NOT say that word. Use the following words ONLY:
- hurricane
- wind-driven rain
Your insurance will try to trick you into turning it into a flood claim, so they can then categorically deny it. Don't fall for it.
Mozilla Firefox exploited zero-day: Security Advisory 2024-51 Security Vulnerability fixed in Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1
CVE-2024-9680 (9.8 critical) Use-after-free in Animation timeline
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild.
See related @BleepingComputer reporting: Mozilla fixes Firefox zero-day actively exploited in attacks
The Canadian Centre for Cyber Security (CCCS) has a useless Mozilla security advisory (AV24-576) which doesn't indicate that this is an actively exploited zero-day. What's the point in an advisory when it doesn't provide the biz?
#zeroday #vulnerability #firefox #mozilla #cve #CVE_2024_9680
All you #Mastodon sysadmins who upgraded to Mastodon 4.3.0: Have you noticed that after you dutifully upgraded the #Yarn dependency to version 4, a message like this scrolled by:
$ yarn install --immutable<br>➤ YN0065: Yarn will periodically gather anonymous telemetry: https://yarnpkg.com/advanced/telemetry<br>➤ YN0065: Run yarn config set --home enableTelemetry 0 to disable<br>I for one almost missed this. You may want to do what I did (as user mastodon in
/home/mastodon/live):yarn config set --home enableTelemetry 0<br>I'm sure the Yarn people think their telemetry is perfectly harmless, but I hope we all agree that telemetry should not be used in the fediverse.
When your #curl command line is rejected by the server but your browser still works, it might be because of TLS fingerprinting.
I blogged about this two years ago: daniel.haxx.se/blog/2022/09/02…
“Let us come back to this topic in a few years and see where it went.”
It is exactly a few years 😀
So where has the topic gone?
Are you overwhelmed with background windows demanding attention, or just the amount of color on your computer screen? Do you wish it was a bit easier to tell which window has (keyboard) focus?
Oh, and are you using GNOME?
Because I released my first extension for GNOME Shell, and it desaturates background windows. Get it on extensions.gnome.org. If you want.
Hope you enjoy!
Oh GPT. You have a lot to learn, even though you've learned knowledge of much of the internet and scraped humanity of its dignity to rights since. Yet here we are. And why people should not rely on it for fullproof #A11y knowledge.
@GottaLaff
Announcing the Cartoonists for Kamala fund raiser! Many cartoonists have donated original art of their work (not just a print!) for the auction where all the funds will go directly to the Harris-Walz campaign.
Here's a link to get you started. More art will be added over the next couple of days as this kicks into gear.
Telling that Postmedia (owned by the Chatham hedge fund) bought Saltwire (former owners of the Halifax Chronicle Herald) this past July.
Their muzzling of political debate continues.
I'm a proponent of static websites. Most generators use a folder structure with Markdown files and other assets as the input.
However, not all users are confident editing Markdown and YAML front matter etc. by hand.
Are there any good web frontends for this kind of stuff?
It should feel like the authoring backend for WordPress or whatever random CMS, with a WYSIWYG editor, and the result are Markdown files & assets. Bonus points for Git support.
reshared this
SHIFTphone 8
Es gibt nahezu unendliche Anwendungsmöglichkeiten für den Custom-Key, deswegen würden wir gerne von euch wissen, welche Funktionen ihr euch besonders wünscht.🙂
Vorschläge in die Kommentare!
1) verschiedene Möglichkeiten parallel: A) bei antippen, B) bei doppel-/dreifach-tap, C) bei gedrückt halten
2) schon erwähnt: selbst etwas zusammenstellen würde auch "Exotisches" ermöglichen. Als vorkonfigurierte Optionen:
* Personal-Panik-Funktion (Nachricht an vorkonfigurierte Kontakte mit aktuellem Standort etc)
* Device-Panik: Lock, deaktivieren biometrischen Unlocks
* Not-Löschung: Factory-Reset, wenn nicht binnen 15s "Abbruch-PIN" eingegeben wurde
wo konfiguriert man den?
Klingt gut. Bis auf die Notlöschung, weil das in der Hosentasche zu leicht posieren kann. :)
Just a little #AndroidAppRain at apt.izzysoft.de/fdroid today, with 17 updated and 1 added apps:
* MultiLocale: add (otherwise unsupported) languages to your device's locale
Enjoy your #free #Android #apps with the #IzzyOnDroid repo 
HUGE thanks to @robb for writing a clear, easy-to-follow #guide on how to enable #Fediverse author attribution on blogs/websites - so that it will show up under the link card: rknight.me/blog/setting-up-mas…
▶️ 
I replaced #TTRSS by #FreshRSS. The reasons are:
👍 more features
👍 bigger client support
👍 bigger development activity
👍 better look.
I use this to consume #rss in form of links to content:
📰 new articles on my favourite media
📰 update news of several softwares
📰 read city hall info desk
📰 discover new youtube videos on my favourite channels
📰 discover new episodes of my favourite TV shows on iVysílání (sadly not natively, but using rss bridge)
And now back to podcasts. I was quite surprised, that all these apps are really bad in consuming podcasts. Especially when I want to add more episodes to queue and remember where I stopped last session.
So I installed separate #RSS stack for podcasts only.
🧩
I installed #NextCloud extension gPodder Sync. This does just job, it provides gPodder api. That's it. I like apps that do one thing and do it right.
This api can be used by client apps to synchornize
🔄 list of subscrubed feeds
🔄 listening state of each episode
🧩
Then there is another Next Cloud extension: #RePod .
It is a web client to the gPodder api, so I can list, subscribe and listen to all the episodes in the nextcloud web interface. That works nice.
The last piece of the puzzle is the android podcast client. Here the #AntennaPod does a really nice job.
It has all I need:
🎙️synchronizes everything with gPodder api
🎙️predownloads new episodes
🎙️has queue of episodes
Some of my favorite `curl` tricks:
vpetersson.com/2018/10/03/trou…
Super handy for debugging HTTPS. Thanks @bagder.
What I most miss about Twitter when it wasn't evil is that I could publicly shame companies when they were stealing money from me.
#Ebay and one of their sellers have stolen £80 off me and it doesn't matter if I post it on here because nowhere now has the power and reach of old #Twitter
There is currently no way to damage the PR of a company unless you happen to go viral on TikTok or YT.
As a side note - NEVER buy from Ebay, there is no guarantee that your money is safe. None.
Tamas G reshared this.
#chiptune #vgm @cordova5029 @FreakyFwoof @arfy @musicalman
It is sad to note that the Zoom Conferencing client is becoming less and less easy to use.
It is becoming so bloated with features not necessarily associated with hosting meetings.
Even something as simple as scheduling a meeting does not work as easily as used to be the case.
A major JAWS script update is being worked on so as to hopefully make at least the process of scheduling meetings, and reviewing scheduled events, easier than is currently the case.
An accurate time as to when the update will be available cannot be given at present, but it is hoped it will be within the next two weeks.
I've been using the #Tusky app but I'm running into an annoying issue where if I switch out of the app while writing a post and switch back on, I lose my post and everything I typed up until that point.
I do use the native web app interface also so I'll probably just back to using that full time.
zephred
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to zephred • • •Oliver Schönrock
in reply to daniel:// stenberg:// • • •Nice
replaced by strlcpy?
daniel:// stenberg://
in reply to daniel:// stenberg:// • • •as I have mentioned elsewhere I have worked fiercely on reducing memory calls and memory copies in curl code over the last few years, and I have come to realize that strncpy is often a marker for questionable code decisions, so I have worked on removing those questionable code paths.
As I have reduced the amount already before, the remaining few uses were not hard to just fix with better conditions and improved logic
daniel:// stenberg://
in reply to daniel:// stenberg:// • • •Daniel Marks
in reply to daniel:// stenberg:// • • •synlogic
in reply to daniel:// stenberg:// • • •yeah I have a fondness for K&R C but looking back many of its standard lib functions were a Bad Idea that at best only made sense for some brief "Garden of Eden" period in the world's software ecosystem
before any user could be a determined (and well-resourced) adversary or a mind bogglingly careless idiot. haha
Andreas Schneider
in reply to daniel:// stenberg:// • • •while I understand that C was always ever meant as a relatively light abstraction, I still don't understand why native string handling was never incorporated. Dealing with strings is relevant in _so_ many use cases, that not having a sane and safe abstraction for it is just asking for trouble.
I think that's one of the first things Borland improved on in their derivates of Pascal.