The short story of curl CVE-2024-7264
dubek.space/posts/2024-08-04-c…
Excellent experience working with curl maintainers @bagder and @icing on the low severity vulnerability.
It started when Daniel Stenberg, the curl project maintainer, announced the curl 8.9.0 release: I was curious about CVE-2024-6197: it was a call to free(buf) where buf is a variable on the stack.dubek.space
A few weeks ago, @mekkaokereke was telling you of our love of the English language in #Nigeria, and how we're unafraid of being eloquent. Need proof? Check out these "pithy" placards from the demonstrations currently going on in the country.
"Reverse all anti-people, neoliberal policies of privatisation, deregulation and devaluation of the Naira!"
Rolls off the tongue.
Krásné dobré ráno mastodoňata! 🙋♀️🐈🐕
Pár poznatků po čtrnáctidenní dovolené:
Ano, do práce se mi nechce.
Ano, pravdu měl ten, kdo tady psal 'winter is coming'! 😱
V pět ráno je chladno, je šero, je syrový vzduch.
Ženský, pro pánajána, v čem se teď chodí do práce? 🤣🤣🤣
Nebuďte zmatení jako Káťa, dejte si snídani....a hlavně.....klid! 😊
Na fotce je náš večerní návštěvník.
System font stack CSS organized by typeface classification for every modern OS. The fastest fonts available. No downloading, no layout shifts, no flashes — just instant renders.modernfontstacks.com
I heard a discussion at #FOSSY24 regarding "FOSS outside of corporations," referring to the origin of the Free and #OpenSource software movement, beginning with hobbyists and foundations.
Thought I would also include the early contributions to FOSS from and through #HIgherEducation. Many foundational projects have their roots in #HigherEd.
So many people have worked on curbing climate change.
What have we got to show for it?
For starters: The projected warning has decreased by 0.9C. That's considering only actually implemented policies. Pledged emissions cuts go even deeper.
Is it enough?
No.
But we've gone from "It's all going to hell" to "We made good progress let's keep going, and faster."
Data from Climate Action Tracker.
reshared this
NVDA 2024.3 Beta 6 is now available! Since Beta 5 the main change is that we fixed a bug with Unicode character normalization - and we updated some more translations. Do please download and test it and keep letting us know of any issues! Read the full details on NVDA 2024.3 and the new beta here: nvaccess.org/post/nvda-2024-3b…
#NVDA #NVDAsr #ScreenReader #A11y #Accessibility #FOSS #Beta #Update #Prerelease #NewVersion
Beta6 of NVDA 2024.3 is now available for download and testing. For anyone who is interested in trying out what the next version of NVDA has to offer before it is officially released, we welcome yo…NV Access
David Goldfield reshared this.
New blog post! Debugging a rustc segfault using some very cool illumos debugging tools.
Really excited about this one, it is a bit long but there was so much to cover, from how the stack and the heap works to virtual address permissions :D
sunshowers.io/posts/rustc-segf…
Using `mdb` and `pmap` to find the cause of a crash.Debugging a rustc segfault on illumos
"Wir schätzen Ihre Privatsphäre" – jaaaa, gaaanz sicher! Und wir teilen sie…
* mit 1574 Partnern
* einschließlich genauer Standortinformationen
* um Ihnen gaaaanz private Werbung zu schicken
Man beachte: Es gibt nur "Alles akzeptieren" – nix anderes. Friss oder stirb!
Unter "Zwekce" geht's dann weiter: 683 Anbieter fordern Zustimmung an. Aha. Laut Taschenrechner wollen also 891 "einfach mal so ohne". Toll. Das schätzen WIR nicht!
#werbung #tracking #cookiebanner #privacy #privatsphäre
There's a project that has been going around today that uses an LLM to insult someone based on their GitHub profile. I admit I got caught up in the "fun" of this, and didn't think about how sad it is that we think it's cool to tear down each other or even ourselves.
Until I came across this contrasting project by @cadey, which instead uses an LLM to praise someone based on their GitHub profile: praise-me.fly.dev/
Use your GitHub profile as a way to get personalized messages of praise and encouragement.praise-me.fly.dev
Plagát č. 1:
- Attention
- Thanks for your attention
Plagát č. 2:
- Ľuďom chýba ľudskosť
New video!
So you're new to Linux, and you're wondering what the what is an ISO file? Or maybe you just don't know why you can't DD a CD?
Here's a video that explains a bit about ISO files, and how to create flash media from them.
tinkerbetter.tube/w/3839fbf0-5…
Linux boot media need not be tricky! In today's episode, I'll talk about four ways to flash an ISO from Windows (and other systems too). I know a lot of you are switching to Linux because of Micros...TinkerBetter
It's weird that this happens in computing discourse, because relying 100% on one thing always leads to tears eventually.
Even weirder when it happens in FOSS circles, as FOSS is supposed to be all about alternatives and freedom of choice. It's like a few people actively want there to be monopolies? (Assuming it's not people from a project shilling for themselves of course.)
#curl's 265th command line option is called --skip-existing. Lets you completely skip a download if there is a local file present already.
github.com/curl/curl/pull/1399…
With this option, the entire download is skipped if the selected target filename already exists when the operation is about to begin. Also works fine with "globs". code documentation test cases...GitHub
Direct click, direct swipes, and direct scroll functions are among the useful features included in the Jieshuo screen reader. In this post, let's talk aboutKareen Kiwan (Accessible Android)
Immer mehr Verbände reichen Klimaklagen ein. Aber setzen Parlamente und Regierungen die Urteile auch um? Jurist Remo Klinger erklärtDeutschlandfunk
Windows 11 comes with lots of handy touchpad gestures, and you can even customize them to do your bidding.Kim Fernandez (MakeUseOf)
reshared this
Priznajte sa, kto to bol?
aktuality.sk/clanok/BFS6UUa/po…
Jeden z cestujúcich sa v úseku medzi zastávkami Trnavské mýto a Česká dotýkal obnaženým údom cestujúcich, informovala hovorkyňa Krajského riaditeľstvaTASR (Aktuality.sk)
We are thrilled to announce that this year’s keynote speaker for WordPress Accessibility Day will be Lainey Feingold.Ryan Bracey (WordPress Accessibility Day 2024)
reshared this
IF YOU ARE EUROPEAN HOLY FUCK PLEASE SUPPORT THIS
eci.ec.europa.eu/045/public/#/…
This initiative calls to require publishers that sell or license videogames to consumers in the European Union (or related features and assets sold for videogames they operate) to leave said videogames in a functional (playable) state.
To be successful, a European citizens' initiative has to reach one million statements of support as well as minimum thresholds in at least 7 countries.
telegram link:
t.me/leonsmeme/6677
"The Open-Source AMD GPU Linux Kernel Graphics Driver Nears 5.8 Million Lines"
Insane is a word that comes to my mind.
That's about 33 times the size of curl - for a set of drivers.
phoronix.com/news/AMD-Kernel-G…
Last August I wrote an article about the open-source AMD GPU kernel driver crossing 5 million lines of code -- including their overzealous header files -- and following the recent Linux 6.www.phoronix.com
Máme už nejakú medailu? Ak keď nebudeme mať žiadnu, bude sa za to zodpovedať kpt. Danko?
edit: ah shit
Blind Information Technology Specialists FUNDRAISING With Terri Lynn
Our group is working to help blind and low vision people to achieve all they wish through the use of technology. You can help by purchasing these delicious nuts, snacks, & chocolates. Every purchase brings us one step closer to realizing our goal.
A portion of every product sold on this fundraising website benefits Blind Information Technology Specialists!
Starting now, #curl shows extended help for a given command line option if you write it after --h. Like "curl -h --location" or "curl -h -O"
Shipping in the pending curl 8.10.0 in mid September.
github.com/curl/curl/pull/1399…
First shot. The extracting of the help texts is still a little crude: because we typically have 270KB of text zlib compressed into a single blob, we have to scan for the text to show. As of now, I ...GitHub
If you want to find autistic characters in Film or TV, check out autisminthemedia.com
The IP address in the example is taken out of RFC 5737.GitHub
If you’re a feed reader developer/contributor and want to help thousands of sites with misconfigured server caching reduce their hosting costs:
Prý jako nový nebyl tak zlý.
Last-Modified headers.ETag headers.ttl element in feed markup.Seirdy reshared this.
Feeds are some of the most-requested pages on a lot of sites, and full-text feeds are often rather large. The feed-paging module helps but not everyone aggressively pages since client support is limited.
I like the idea of having one feed containing everything I’ve written, even if it isn’t the default feed. A single-file archive of my site optimized for feed readers. But if my default feed becomes paginated (the Brotli-compressed version is approaching 300kb; I’ll paginate it once it crosses 500kb), I’ll want my alternate unpaginated full-text feed to have very conservative refreshing.
I imagine a hypothetical future in which I host my site on a single-board computer on a home internet connection, and I build my site for that use-case.
Provided to YouTube by IIP-DDSCable Street · The Young'unsStrangers℗ The Young'unsReleased on: 2017-09-29Music Publisher: SGO Music Publishing LtdComposer, ...YouTube
reshared this
Explore accessibility challenges faced by screen reader users with AI chatbots.Michael Taylor (UsableNet Inc.)
David Njoku
in reply to David Njoku • • •In fact, in #Nigeria we had a politician who was a prototype Boris Johnson - a comedic bombast who spewed Latin phrases liberally without a care whether his listeners understood a word he was saying.
Unlike Britain tho, we (and he) knew he was a clown and we didn't make him Prime Minister.
youtu.be/I1bt-GyxiYI?si=ybXY-0…
Rivers crisis: These Issues Are Bringing Calamitous End For Nigeria - Obahiagbo PT1
YouTube