Mauve 👁💜

Amazing night to be doom scrolling the fedi 🤌

0
Mauve 👁💜 boosted
*
Jeff Fortin T. (風の庭園のNekohayo)

Got your fridges cool again?
OpenWRT routers patched up?

*Right now* is a good time to, uh, completely turn off any LAMP-style HTTP server / service (ex: NextCloud) that runs any version of PHP, until patches land in distros. Seriously.

There's an unauthenticated unconditional remote code execution exploit against anything running PHP 5/7/8: cert.europa.eu/publications/se

Of course it leaked, so it'll be exploited immediately.

#PHP #PHP2shell #infosec #security #sysadmin #infrastructures #NextCloud

1+
Mauve 👁💜 boosted
Miguel Afonso Caetano 🦾 🌹

"Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.

As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates. There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certificates, showing the compromised keys being used maliciously. The threat remains far from over, however, because it will be hard and time-consuming to update other key parts of the Internet, such as Linux distributions and embedded and Internet of Things devices.

The eight intermediate certificates belong to India-based certificate authority eMudhra Limited. An informal advisory published to emudhra.we-have-a-problem.com over on Tuesday posted the message “We have a problem here – Wayne.” The words were digitally signed using the private key of one of the eMudhra certificates. With proof that the reporting party had control of the key, defenders scrambled because the same key could be used to sign unauthorized certificates that would be trusted by millions of servers worldwide."

arstechnica.com/security/2026/

#CyberSecurity #TLS #Encryption #Cryptography #eMudhra

1+
Mauve 👁💜

neat vector database. github.com/qdrant/qdrant

it can be a server or be embedded locally.

0
Mauve 👁💜

So eepy. 6:30 am wakeup was nice for afternoon post work stuff, but I've got less energy for evening meetup stuff

0
Mauve 👁💜 boosted
Quin

Set up this little page on my website last night as a place to host all the useful little Windows utilities I've made, although it doesn't yet have every single one of them. It currently has Micstate, Taskmon, and uphide, with more to be added. quin.fyi/win/

1+
Mauve 👁💜

@esvrld LLMs are trained to be the most common denominator of redditor so it makes sense. My pal was complaining about a predictable failure of an "ai support bot" and it made sense when I framed it as "imagine you put every bullshit reddit post into your keyboard prediction thing and got it to try to solve a task."

0
Mauve 👁💜

I feel like the woker with how I already know (and have hands on experience) all the accessibility stuff we're being taught in this workshop. 🤪

0
Mauve 👁💜

@mariusor huh! For some reason I thought it was in Rust. What's the JS used for in this case? some sort of front end?

1
Mauve 👁💜 boosted
404 Media

Decompiled, cloned, and modified software is going viral and might slopify everything.

404media.co/reverse-engineer-a

1
Mauve 👁💜

@mariusor That's awesome. do you have a go based JS bundler too? Or are you using raw imports somehow?

1
Mauve 👁💜

Day one of doing so: I'm eepy.

Not allowing myself energy drinks either.

Show thread
1
Mauve 👁💜 boosted
*
Kevin Beaumont

This Google Cloud outage in Europe is huge. Almost every service offline, including Google SecOps (Chronicle), for almost 4 hours now.

1+
Mauve 👁💜

@mariusor Neat. What was your reason for making it? :o

1
Mauve 👁💜

re: my local llm tool 

@tahnok It's like searching on duckduckgo directly, not amazing but it gets the job done. I like the consistency with how I do search myself so I can get the LLM to behave more like I would.

0
Mauve 👁💜

my local llm tool 

Finally got a working search tool for my local LLM harness! SearXNG was kind of a pain in the ass to work with. :P Eventually I'll figure out getting an access token for marginalia search.

github.com/RangerMauve/mind-go

Show thread
1
Mauve 👁💜

Found this neat CLI for duckduckgo search. Currently figuring out how it works so I can add it to some other tools. seems they don't auto-flag nodejs and python scripts as bots but do for curl/wget.

github.com/jarun/ddgr

1
Mauve 👁💜

Proud of myself for saying "No thank you" instead of "I'd rather die" when asked to give my personal info for some points thing at the store

1
Mauve 👁💜 boosted
Florian

@modulux @WeirdWriter It's one of those interesting blind vs non-blind computer users things.
Having more stuff on screen makes sense to a degree: it means you don't have to menu dive as much to find features that may otherwise go undiscovered, you see it, you click it, you move on with your life.
Tricky bit for keyboard users and screen reader users is that we can't spatially access a screen like that, we either do it serially or have to use hotkeys and ignore the UI. So these two approaches are always at odds:

Either, you put as little as possible on the screen making it difficult to find anything on said screen and necessitating users to learn a bunch of menus or hotkeys, but making it easy to tab through it,
Or, you put as much as possible on the screen, everything you could ever want is now there, but tabbing takes forever so you're far less efficient.
Finding a balance everyody likes can be wickedly hard which is why it should be configurable

1+
Mauve 👁💜

The real solution is to force myself to get up before dawn like a normal person. 😭

Show thread
1
Show older
Mauvestodon

Escape ship from centralized social media run by Mauve.

Resources

Developers

What is Mastodon?

mastodon.mauve.moe

More…

v3.5.10 · Privacy policy