Fedizen · Fedizen

Posts People

:petthex_javasparrow:しゅいろ:petthex_javasparrow:(本物) liked this activity

おさむ

@samunohito@mi.osamu-storage.info 11 min. ago

うむむ

:petthex_javasparrow:しゅいろ:petthex_javasparrow:(本物) liked this activity

ひらがな1〜10文字をノートするやつ

@n_moji_random_ba@misskey.io 42 min. ago

ぬも

randulo (Randy)

@randulo@mastodon.social 31 sec. ago

Oenanthe conioides ⁂ boosted

Ro🌱

@Recalcitrant@autonomous.zone 1 min. ago

Our blanket flower & showy daisy have put up new blooms! #bloomScrolling

2 media files

Small yellow and red sunflower type flower with a green stem on mulch

Purple flowers with yellow centers. The stems are green and there is mulch on the ground

Chris 🦑 boosted

Jannis Fedoruk-Betschki

@jannis@www.jannis.io 8 hr. ago

Rolled out self-sign data processing agreements on Magic Pages today.

I've been doing this process manually on request, now everybody can just do it with a couple of clicks.

Had to countersign about 10 of these today and I love it! A small sign that people care about how their members' data is used!

Posted in Political Memes

proudblond@lemmy.world liked this activity

Funkt4st1c@lemmy.world

@Funkt4st1c@lemmy.world 4 hr. ago

They want us to be dangerous pervs. We are unfortunately just women :3

Posted in Political Memes

proudblond@lemmy.world liked this activity

halcyoncmdr

@halcyoncmdr@piefed.social 3 hr. ago

Their only experience is themselves, and their friends. And they assume everyone is like them. The projection is real with right wingers.

Posted in Fediverse memes

hexabs@lemmy.world liked this activity

Holla

@waldfee@feddit.org 8 hr. ago

It is meant to be simple

AAAAAA

pbfcomics

Crazypedia won't Comply 🧿 liked this activity

cafuego 🔭🤦🏼‍♂️

@cafuego@misanthrope.social 5 hr. ago

4 Vesta

The rather cleaner version with a more consistent background.

258 x 60s with a on 22 October 2026, from inner city Melbourne.

#astrophotography #asteroid #space #seestar #astrodon

Oenanthe conioides ⁂ boosted

hex

@Hex@kolektiva.social 20 min. ago

But it's not "node2shell". It's a normal memory corruption that's blocked by ASLR. It's not easy to exploit. You should fix it, yes. But using the "blah2shell" terminology is misleading.

It's misleading because it tells people that it can be trivially exploited. It cannot, unless you disable ASLR and compile without PIE.

OpenAI and the other ghouls want you to think LLMs finding all kinds of critical bugs that are trivial to exploit. They want you to think there's no other way to find them.

That's just not true.

I looked at the code, and you know the first thing I noticed? A fuzzer. Google fuzzes their code. OpenAI wrote their press release very cleverly so that it could be misinterpreted as them finding the initial bug, as others have reported, but this could have been (and probably was) found by the existing fuzzer.

OpenAI post on X (I'm not linking to that shit)

During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.

The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server.

This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. — OpenAI post on X (I'm not linking to that shit) During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE.

:petthex_javasparrow:しゅいろ:petthex_javasparrow:(本物) liked this activity

おさむ

@samunohito@mi.osamu-storage.info 8 min. ago

ん

sknob :noai: boosted

Esmee Pumpkin Bitch

@Esmee@masto.bike 16 min. ago

Hier soir on a dit beaucoup de conneries mais aussi on a parlé de la gentillesse. Pas la gentillesse bête, la bonté, kindness en anglais le dit bien, l’attention aux autres, la volonté de ne pas nuire, le refus de la bassesse

La gentillesse c’est punk. La gentillesse c’est ce qui permet de s’organiser hors des cadres qui fonctionnent de moins en moins. La gentillesse ça va lentement mais j’en suis convaincue c’est contagieux

Zechy

@zechy@mamutovo.cz 6 hr. ago

A víte co, když už v téhle době žijeme...

Složil jsem s AI nejen seznam 30 adresátů z ústeckého kraje ze stran koalice, opozice, mediálního výboru a našeho znovuzvoleného senátora.

Ale i odpovídající varianty emailů, které jsem si poctivě pročetl a schválil, protože inspirativní vzor jsem zatím nenašel.

Jestli hodlají ohýbat veškerá pravidla, je na čase jim ukázat, že se hodně spletli.

pmjv s klapkami na očích

@pmjv@snac.lab8.cz 3 min. ago

vy kyberšikanujete andyho a jeho crew?! 😲 a co se stalo pls, chybí mi kontext.

clar fon

@clarfonthey@toot.cat 32 min. ago

honestly if fedi had better post visibility tools I'd probably just prefer merging accounts instead of separating them

most of it is just wanting to distinguish who can view private posts (allowing public-only followers) and having a mutuals only setting that also respects such a list (not considering people subscribed public-only, who I follow, as mutuals)

I know GTS has some of this but also it would need client support too