Along with WiFi we were able to enable full BLE support!

If you know me, we'll be partying in no time!

Apple wouldn't allow @rfparty into the app store... that's ok we fucking PWNed the shit out of iPhones so we can party on the data.

lmao.

#PWNie #iPhone11

Track #4 on the upcoming album. Support by pre-ordering:
🎵👉 https://neon.lukhash.com

gargron: the mastodon team does not use AI.

me: I heckin knew it, that’s exactly what I’d expect an AI to say. he’s been a bot all along. obvious really.

I baked a big choc chip cookie even though I don't want food. I wanted the house to smell like love. See, Julie? You live in a house with love in it. You are loved.

I baked a big choc chip cookie even though I don't want food. I wanted the house to smell like love. See, Julie? You live in a house with love in it. You are loved.

due to a critical security advisory about the PHP language (which we depend on), many Wikimedia services are going to be affected. We are hoping to avoid downtime to the wikis, but some supporting tools and services are unfortunately going to be impacted. This is a complex operation on short notice and we are still figuring out the details

so it begins

Every security conversation I have ...

"There's a vulnerability"
"Upstream will fix it eventually, they always do"
"But perhaps we could at least read the details and check?"
"..."

due to a critical security advisory about the PHP language (which we depend on), many Wikimedia services are going to be affected. We are hoping to avoid downtime to the wikis, but some supporting tools and services are unfortunately going to be impacted. This is a complex operation on short notice and we are still figuring out the details

so it begins

A company trusted with ensuring that the communications on the internet are secure, eMudhra, was tasked with using unguessable 384-bit private keys for a NIST P-384 elliptic curve.

eMudhra:
How about 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004? That's 384 bits, right?

On the upside, I guess this means that we'll be able to MITM devices that we wouldn't otherwise be able to see the traffic from. (Think non-computers like TVs and the like that'll never see updates)

The coolest record store in Green Bay needs your help!

https://www.gofundme.com/f/save-gbufo-keep-our-punk-community-in-orbit

What makes them cool? First of all shirts like this...

i ain't no computer toucher or nothin' but (adjusts invisible suspenders) seems to me a 384 bit private key oughta be a bigger number than 4

I shared a link from NPR Tiny Desk but there was no image preview or video embed. After investigating this I learned that when you do that, each instance picks up the link and individually retrieves the link preview nearly simultaneously. For gargantuan sites like YT or Reddit, this is a trivial amount of traffic and not a problem, but for smaller sites like NPR this results in a sort of botnet DDOS attack on the site’s servers. More here. Another example here . For that reason, NPR has blocked Fediverse servers like Mastodon.

I have experienced this on my personal server as well (DDOS), but at the time didn’t know why, exactly.

This isn’t the end of the world, but certainly is not great and hurts engagement with the content. Is there a solution for this? Perhaps using some sort of webtorrent service like PeerTube where they just fetch the information from another fediverse server instead of the source server? Maybe fetching embeds client-side? At least that would stagger the requests.

If it’s really AI slop (and it looks like it) I wouldn’t do it. Not because AI is generally bad but vibed projects are bad. They are bad because they are often not really maintained. The people behind it can’t fix the bugs cause they don’t understand what the AI was doing and the AI can’t do it neither. So these vibed project usually don’t get bug or security fixes. And I don’t have to tell you how bad that is, do I?