#sourcehut

For 4,5 years anyone could add rogue JavaScript to build log page by submitting a builds.sr.ht job with OSC 8 escape codes. The attacker could submit build jobs on behalf of the victim viewing the build logs, up to even deploying rogue software on the flagship instance. Curious? Read about the whole journey here: https://blog.arusekk.pl/posts/srht-account-takeover/ #cve_2026_92973 #srht #sourcehut #xss #security #osc8 #ansiescape #ci #vulnerability

I've just finished rolling out one of the longest-awaited features on #SourceHut: navigating around projects on each service. A git repository, for instance, now has links back to the project page it belongs to, plus the related mailing lists and bug trackers, other git/hg repos, and so on. Check it out: https://git.sr.ht/~sircmpwn/hare

#sourcehut combined with emacs eww is such a lovely combo. In general websites can make for very lovely TUIs if you design your HTML for it.

@downey@floss.social I honestly think @radicle@toot.radicle.dev deserves an honourable mention alongside @Codeberg@social.anoxinon.de and SourceHut . I can agree that #Radicle might not be the best fit for all projects. But for many, this can be just as well a suitable project forge. Or be a secondary one along side #Codeberg or #SourceHut.

After about 3 hours, I'm finally done migrating all Catacomb projects over from GitHub to SourceHut: https://sr.ht/~undeadleech/catacomb I was surprised to realize that GitHub did not automatically subscribe me to many of my own projects, finding some open issues in the process. Didn't think it was going to take this long, but there's been a lot of projects piling up. If someone finds some old GitHub links, please let me know. #linuxmobile #catacomb #sourcehut

With all the people moving from #shithub to #codeberg I really get the feeling of "Lets jump from one Silo into another". Arguably a much better Silo, but a Silo still. It really is time for #forgejo to get federation abilities. Because the majority won't go to #sourcehut and (the proper) email based development scheme unfortunately. Or #radicle to succeeds. But I don't see this happen just yet unfortunately although it is really good already.