← Feed

Posts

• Post #4231938

  Wonder if this affects Mastodon, via oss-security earlier today: https://github.com/rails/rails/security/advisories/GHSA-xr9x-r78c-5hrm "In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment." "An application is affected if it meets all of these requirements: Uses libvips for Active Storage image processing. This is config.active_storage.varia...

• Post #3716988

  Trying to look up web comics from one of my old bookmarks collections... Most of them are offline. Wayback Machine coverage is extremely sketchy, often it's just the splash page, or empty navigation with no images... :flan_sad:

• Post #3694996

  Ah, so it's that day then after the latest Vivaldi update...

• Post #3618723

  I added a throttle for unauthenticated accesses to /tags on our public Mastodon instance. The rate limit of 50 in 10 minutes triggers quickly, and for the first time this year, our media cache usage has been slightly decreasing since. A toggle to completely disable unauthenticated access to hashtag search would curb the current wave of scrapers quite effectively. #mastoadmin

• Post #3352548

  Considering all of the GPL house of cards is built on the notion that copyright (copyleft) has legal value, I'm really astonished about all these "free software" organizations bending over so they don't appear hostile to code produced with AI contributions (which, according to current assumptions, is not copyrightable as such).

• Post #2488652

  There's Freeplane as a Flatpak, but I still wanted to use good old FreeMind instead, again... It doesn't run with Java 21 that Debian (LMDE) brings, and also doesn't do fractional scaling that's best on this display (I use 125% for everything else)... But I dropped in a download of the Amazon Coretto Java 11 LTS jre (pointing to its directory by setting JAVA_HOME accordingly in .freemind/freemindrc), and created a .desktop file that runs env GDK_SCALE=2 freemind...

• Post #2488650

  Ah well. I should probably install Signal after all? And when I do, it wouldn't be very useful to not use my actual mobile number, because no one would be able to find out I can be reached via Signal (did that a couple of years ago for a very limited number of contacts, and all it ended up doing was sucking up battery on my phone). Same goes for granting access to my address book, but I haven't cleaned that up even once since I started to keep phone numbers in a database. So li...

• Post #2488646

  #np: Georgia Knight - not bad at all https://georgiaknight.bandcamp.com/track/not-bad-at-all

• Post #2488641

  Wat, Stripe unterstützt Wero als Bezahloption? Und hier quängeln alle weil noch ein Bezahlding ja ach so kompliziert ist?

• Post #2488639

  Random idea to make followers-only posts on the Fediverse less terrible: Always turn replies from followers into DMs to the original sender. Immediately prevents all the problems with disparate followership and threads that are only partially visible to participants with very little effort.

• Post #2488638

  Finally managed to cancel the VM that had been running my Mastodon instance for a couple of years (everything was migrated off last year, but somehow I wasn't sure if there was some dependency on whatever that I might have forgotten about)... Oh well, it's powered off now, and will disappear in a month, so I guess I can still grab a couple of files in case anything turns up.

• Post #2386746

  Sigh, next round of blocking kernel modules... https://dirtyfrag.io https://www.openwall.com/lists/oss-security/2026/05/07/8 #linux

• Post #2154211

  Oh, I wasn't aware the Thunderbird people keep a collection of .ics files with regional holidays for importing into a local calendar: https://www.thunderbird.net/en-US/calendar/holidays/

• Post #1741647

  WTF? I notice that my secondary nameserver (running nsd) has .zone files from 2019 in /var/lib/nsd, complaining about syntax errors - which is why I even looked there in the first place... Still, when I ask via DNS, it returns the current SOA for those zones? Moved the old files out of the way and now it complains about them not existing (but they don't get recreated either).

• Post #1741646

  Me: Ugh, dist-upgrades of an OS on spinning rust sure are a drag, why didn't I drop in a cheap SSD as boot device yet? Also me: 🙄🤦‍♂️🙄

• Post #1741644

  I want to map a floating (public) IP to an Incus container for both inbound and outbound traffic. Inbound seems easy (incus network forward create ...), but there's nothing obvious for the other direction? I mean, I can always create nft snat rules manually, but I would prefer not to. What am I missing? #incus #networking

• Post #1741643

  The first thing I think when I see the news that "Firefox has integrated Brave's Adblock Engine" is - ah, so they want to get rid of Manifest V2 extensions after all? (The second is - WTF, why Brave? I mean, we know who's behind that?) Not that I'm surprised about any bad decision happening over at Mozilla.

• Post #1741642

  Underground parking, empty.

• Post #1741641

  Last time I powered on the OpenPandora (maybe a year ago), it had a bright spot in the center of the screen, and I thought the LCD was maybe failing? Today, it looks just fine (though the battery was completely flat, and charging statistics are confused)...

• Post #1741640

  The Atom mini-ITX board in my toolbox PC doesn't have USB3, and only two SATA ports, so that's not enough connectors to copy a TB between two disks and also have a boot device... So I ended up connecting the boot disk to an IDE-to-SATA adapter (the board does have an additional IDE port for CDROMs), and use the two SATA connectors to move the data...

• Post #1741639

  #np: Roxy Music - for your pleasure https://www.youtube.com/watch?v=XUhYAcgmTtU For your pleasure in our present state Part false, part true, like anything We present ourselves [..] The instrumental part reeks of desolation to me (fittingly, following "through every step, a change / you watch me walk away")...

• Post #1741637

  #np: Kap Bambino - forever https://www.youtube.com/watch?v=S5-Zgqo0w9Y