The fediverse is nice people and great tech, with a marketing problem.

⚠️ #SW_ISAC_ADVISORY

Service providers operating PHP-based platforms please take note of PHP critical vulnerabilities, both rated CVSS v4.0 9.2

Major government and ecommerce services have shut down pending the patch. Exploits are already circulating.

Shut your service down now, and ensure it doesn't have Internet access on restart.

A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC

0100 AEDT
2300 JST
1600 CST
1500 BST
1000 EST
0700 PST

https://cert.europa.eu/publications/security-advisories/2026-018/

@mdhughes Betamax?

Crossposted from https://fedia.io/m/updates@kbin.melroy.org/t/4475005

As you all might know it, Mbin is a rather small project with a small team. In fact the current size of the team is 1.5 developers (0.5 for the ones which only have partially time). While our active devs do what they can in their free time, this leads to slow feature and security updates, sometimes slow support and increasing stress for the remaining devs.

That's why I ask everyone who likes this project, has time of their own to donate and knows how to program with PHP (or is willing to learn it) to consider helping this project move forward.
You can start with simpler features and submit them as PRs or even just help review existing PRs if full commitment to maintaining the codebase is currently too much. We are aware that parts of our codebase contains more spagett than some Italian restaurants, but we will help every newcomer to find their way through the sources.
Every bit of support helps, as it also shows that we have a passionate userbase which does not want Mbin to wither away.

Well ... as I'm not very good at writing motivational texts, just comment anything which comes to mind for this issue 😁 If you have ideas how to improve the chances that this post reach the right people, I would also love to hear it.

---

At the same time I want to bring up another topic, as transparency is important for any public project.

Some of our devs use AI assistants for generating code for PRs and also to assist with PR reviews. Simply because without it, they would not have time to continue contributing to Mbin (which would bring our devs down to 1, making it impossible to merge new PRs). On thing here is important to know: I will not call it slop nor vibe-coding, as they are a competent developer capable of understanding and managing the outputs of the agents. Still, I am very aware of the issues of AI and the general opinion on it in the Fediverse. That is why I would like to know your constructive opinions on this matter.
Also, I guarantee you that every PR is reviewed by at least one human pair of eyes.

PHP is actually short for Party Hard Project btw

“Sovereign doesn’t mean alone” cool demo of NATO, France, Sweden, and Germany separate #Matrix installations and operations exchanging fully secure messages. #MatrixConf - this was the demo I’ve been most excited to check out! Great team effort.

One of the recent Hexed promos has this gag in it. Normally this type of thing is a bugged render for us (pipeline didn't export the skin or exported it in the wrong place, or visibility flag was broken), but for Hexed, we got to put it in the movie!

@Jetengineweasel Where can I submit please? 🤣

"Open Climate Fix (OCF) is a non-profit company, focused on building AI tools for a greener grid"

twitches

wut

@prcutler Amazing!

muting that thread don't feel like reading shit from overnight

@_elena @RosannaSibora @Gina
It is disgraceful this was voted down. It seems there are too many bigots in the fediverse