Microsoft.UI.Reactor: a C#-first way to build WinUI apps

Thew day ends in a Y, so Microsoft is launching a new way to build Windows applications. Get excited, Windows application developers!

If you caught our session at Microsoft Build 2026 or you’ve been watching the repo, you’ve seen this one taking shape in public for a while now, and a lot has changed since Build. Here’s th

https://www.osnews.com/story/146238/microsoft-ui-reactor-a-c-first-way-to-build-winui-apps/

#Windows

Updated my #bandcamp page (and #Mirlo as well) with a fairly new portrait of mine for the more human factor, you know. That's totally me (no kidding, it's from my "Ich und meine Fedies" music video)!

I expect flying hearts around me now wherever I go, no less!

@chris
Wab for PM.

@mcc well dang, i guess so. i think maybe gedit was replaced by Text Editor as the default in some or other gnome upgrade and they were similar enough i just rolled with it.

Another frustrating day trying to figure out how to pitch my employer to AI companies, so #GetFediHired:

Started an ISP, done codecs & 3d rendering & networked database internals, know a datum from a projection, worried about fractions of a microsecond. Showed that ONNX models should have been simple PCA derived linear systems.

My work has touched your life.

Interested in endeavors that involve thinking, around others who are thinking. LLM skeptic.

North SF Bay area, U.S.

#FediHired

@ansate Something that Sage and I did one year was to spend the evening of Halloween wandering around our neighborhood and knocking on neighbors' doors, telling them we just wanted to meet our neighbors, and chatting a bit. People seemed to like it since they were prepared for people knocking on their doors anyway.

@davatron5000 💚

@julian Okay. You are the first person in my "Mandala Effect" universe. Everybody else was replying "you mean gedit, right?"

@arstechnica

Canceled Spotify & deleted it ages ago for its support of Trump

@josephcox Fuckinh really? If I was in that situation, guess I'm losing my fucking job!!!

Just seen a bunch of kids, maybe 7 or 8 years old going to school alone on the Tokyo metro. I thought I was pretty independent walking to school alone at 8 but this is so much more impressive, lol

@stux I've notice some of the spam has petered off, but the nonsense AI bots have increased.

Niki doesn’t have to be fooled–these are likely just words.

She doesn’t have citizenship, her borther is in jail(?) for something like sexual assault, and I think her husband is a pedo.

Like so many surrounding Trump she is likely just waiting to get something out if the arrangement.

Not to say that she will…

Elvis Presley’s Music Owners Sue Anthropic for Copyright Infringement, Demand Nearly $50 Million in Damages

every day I am reminded that the enemy of my enemy is often also my enemy.

“you have stolen that which we have already rightfully stolen and we demand recompense.”

chuds to the left of me, asshats to the right, here I am, stuck in the middle of fools.

@mcc I don't know how many layers of jokes are flying over my head here, but "GNOME Text Editor" (the binary file name is literally gnome-text-editor) is a real software project: https://apps.gnome.org/TextEditor/

The "old" GNOME default text editor is a project named "gedit" which is also real but is seemingly not in active development anymore: https://gedit-text-editor.org

GNOME replaced its default text editor a year or so ago, for reasons I think I read about at the time but don't recall.

Hollo security updates: 0.8.17 and 0.9.25

If you run Hollo, update to 0.8.17 or 0.9.25 now. These releases fix GHSA-r48c-xx2h-fv4g, a DNS rebinding vulnerability in Fedify that could bypass Hollo's server-side request forgery (SSRF) protection and cause requests to reach internal services.

Fedify checked that a hostname resolved only to public addresses, then let the HTTP client resolve it again when connecting. An attacker controlling the hostname's DNS answers could return a public address for validation and a private or loopback address for the connection. Redirects and alternate-document links had the same gap.

The affected Fedify paths used by Hollo include remote document loading (authenticated or not), outbound activity delivery, and WebFinger lookups. On Node.js, which Hollo uses, the fix restricts connections to addresses that passed validation. Hollo's ALLOW_PRIVATE_ADDRESS=true option still permits private destinations; leave it unset for public federation. For full technical details, see the Fedify security announcement and the advisory linked above.

All releases on the supported Hollo 0.8.x and 0.9.x lines up to and including 0.8.16 and 0.9.24 are affected. 0.8.17 and 0.9.25 are the first fixed releases and the latest on those lines, incorporating Fedify 2.1.31 and 2.2.20 respectively. Hollo 0.7.x and earlier are no longer supported under the Hollo security policy; operators on those lines should move to a supported release.

For 0.8.x deployments, update to 0.8.17:

docker pull ghcr.io/fedify-dev/hollo:0.8.17

For 0.9.x deployments, update to 0.9.25:

docker pull ghcr.io/fedify-dev/hollo:0.9.25

After pulling the image, recreate your Hollo container using the new image. With Docker Compose, update the image tag in your Compose file and run docker compose up -d. For source deployments, check out the corresponding release tag, run pnpm install --frozen-lockfile using the pnpm version pinned in that tag's package.json, run pnpm run build, and restart the server.

If you have a large 0.9.x database and are upgrading from a release before 0.9.20, follow the 0.9.20 index preparation instructions before starting the new version to avoid blocking writes during the new version's automatic migration.

Thanks to @finalchild for reporting the DNS rebinding issue to the Fedify project.

If anything is unclear, ask below.

I am so happy I veer to the "Wants and seeks sensory overload" side rather than the "Has lots of sensory aversions and problems with intensity" side.

@arstechnica A friendly reminder that Musk's shitty AI called itself "MechaHitler" and went on antisemitic tirades.

@emaytch @QuaternionCats gedit is a different program and, in fact, both are installed on my system at once for some reason

also "kate". i don't remember inviting "kate"