Hello, we heard everyone has been having a great time with security releases so we're doing one as well. Here's v0.22.3 of #GoToSocial aka Shrubbiest Sloth Ever:

https://codeberg.org/superseriousbusiness/gotosocial/releases/tag/v0.22.3

Release highlights

• Bump required Go build version to v1.26.10 to mitigate CVE-2026-111943 by distrusting select intermediary authorities so server admins (and docker users) don't have to update ca-certificates themselves (see https://github.com/golang/go/issues/82348).
• Fix an issue in the dereferencer where remote accounts could masquerade as other remote accounts with sneaky URL shenanigans. Thanks to @elise for reporting this.

⚠️⚠️ We recommend everyone running GoToSocial update to this release at their earliest convenience. ⚠️⚠️

For everyone already on v0.22.x it's a simple update with no migrations or config changes. For everyone below v0.22.x, see the release notes for migration instructions.

Thanks! Sorry! Thanks!

A New Mexico judge ordered #Meta to pay $25 billion after a jury found 43 million #consumerprotection violations from misleading statements. The penalty, reduced from over $219 billion, follows claims about #CambridgeAnalytica data access. https://www.reuters.com/business/meta-ordered-pay-25-billion-new-mexico-after-jury-finds-company-misled-consumers-2026-10-21/?eicker.news #tech #news #ainews

@GFD i like the background highlight mastodon uses better than i like colroed icons, but colored icons are better than nothing.

your feedback is important to us, please place your microphone as close to your speaker as possible

A few weeks ago, we started noticing a number of applications on pixelfed.ca, where the user would say that they needed to register for a course. I don’t have full confirmation, but I’m fairly certain that this is a legitimate wave of signups from students at a Canadian university.

I’m sharing this post for a few reasons:

1. I thought it was neat

Personally, I’m excited that people are trying out Pixelfed and using it in coursework like this. If you are one of the students, now seeing this post, welcome! :) I hope that the project goes well, and that you have a pleasant experience on the platform. Feel free to share any and all feedback.

2. Some of the posts may look like spam at first

You might be seeing similar looking posts from different accounts on your feed. My guess is that the course has specific requirements and example templates. However, there’s also plenty of real content (ex. artwork, photography, etc.), so I don’t think it’s going to be disruptive

3. Please report anything that seems off

As always, you can report inappropriate content through the UI. For urgent issues, please email us at support@pixelfed.ca. You can also DM admin@lemmy.ca as there is overlap with our Pixelfed and Lemmy team members.

Now that the updates are out, and I can finally show the article for php2shell

https://heise.de/-11494897

This has been long in the making, as I was part of the disclosure process and helped with liaising to (amongst others) CERT-Bund.

I'm glad this is out, even though it leaked a day ahead of time.

Now, it's time to watch the web burn, I'm afraid.

This is a good day to mention that static site generators are awesome.

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/

#meta #security

The internet is having a very bad cybersecurity day https://techcrunch.com/2026/10/21/the-internet-is-having-a-very-bad-cybersecurity-day/

Thanks for bringing this up. I think in general we need to work on optimisation of Activitypub and Threadiverse implementations of it.

@justine @bloor now I’m hungry. Thank you.

@JimMadge the last two years (maybe more and I didn't go to U building) it was partitioned off with wooden facade. @RosannaSibora @Gina @_elena

Come again? 🤔 https://www.comicsands.com/vance-mandatory-english-proficiency?utm_source=mastodon&utm_medium=infeed&utm_campaign=linkprogram