Fellow Citizens, I found the perfect palindrome for today:

Rise to vote, Sir!

Yet mentions of Hardcover survived

RE: https://mastodon.gamedev.place/@frax/117552387862962945

Achievements, leaderboards, much better integration with WaveDash. Let your progression be more satisfying!

#gamedev #indiedev #mmo

@tante yep, me too. When I quit Spotify I still had a pile of old CDs lying around. Luckily only two of them had fallen victim to disc rot.
When I have the time to spare I also "rip" some of my vinyl records. Compared two just buying the file from Bandcamp/Qobuz it's not worth the hassle. But it',s still a fun and nerdy way to spend some time actively listening to music.

@vextaur I will look into this!

Gm America! 🇺🇸 Please make Elon Musk cry and crash out today ☀️😊

@apostolis I love that you think anyone is taking anyone else seriously on here 😂

@lacochran nice :)

Sup will be open source and fully self-hostable, with an official paid hosting service launching later in 2027.

We are working to make it easy to install and maintain, so you can host your own private Sup servers with ease.

Unfortunately, we did get rejected from NLnet for this, but thats okay, because Pixelfed is funding this!

https://getsup.net

More details soon. #Sup

I’ll check these out too, thanks.

I don’t think Bookwyrm has an API, so it’s impossible to integrate it into anything.

Maybe the protocol itself could be used as the API? Set up a local instance, similar to what Holos does, and pulls data only from instances reporting to be powered by BookWyrm (or NeoDB).

Update on the 9.8 CVSS TCP/IP RCE in the Linux kernel (CVE-2026-98432): we've detected what appears to be a threat actor activity scanning the entire internet for exposed affected systems. Our own scanning also suggests that the number of potential targets is high, therefore there is an increased likelihood of threat actors attempting to develop exploits for the vulnerability.

while CVE-2026-98432 is believed to require MPTCP to be enabled in the kernel, as well as a listening app/service which binds an MPTCP socket, which many have suggested should be rare, several kernels including Debian enable MPTCP by default.

Additionally, Go 1.24+ binds MPTCP sockets by default if the option is enabled in the kernel, so anything built on top of Go (including Caddy) will create the required MPTCP listener.

The mitigation of setting net.mptcp.enabled=0 disabled MPTCP, but does not apply to existing sockets, so any applications that have bound MPTCP sockets need to be restarted, otherwise the system remains exploitable.

You can check if your server is running any MPTCP listeners with the following command: sudo ss -Mlnp

On 2026-10-30 our preliminary internet-wide scan of port 443 confirmed that there are approximately 2,102,043 servers that are successfully reachable via an MPTCP connection. A deeper scan which attempts to connect to each endpoint on port 443 and negotiate a full TLS connection with MPTCP enabled returned about 762,774 systems.

Neither scan can confirm that these are unpatched kernels, just total exposure, but it's a lot more systems than expected. Since a valid HTTP connection is not required to exploit the vulnerability, the total attack surface is likely closer to the 2.1 million number than the 763k one.

As of today (2026-11-02), we've picked up several residential proxies and VPNs scanning the internet on port 443 using MPTCP-enabled connections. Since regular scanners do not negotiate MPTCP by default, and no data is being sent to the HTTP server over 443, we strongly suspect this activity is scanning for CVE-2026-98432 specifically. The use of residential proxies and RU-based VPN servers suggests that this is likely threat actor scanning, rather than security researchers.

Currently there are no known publicly available remote code execution exploits, but there are several denial of service proof-of-concepts floating around. This code gives threat actors a starting point to begin attempting to weaponize the vulnerability. Building exploits for the vulnerability is reported to be extremely difficult, but several state-sponsored threat actors likely have the resources required to succeed.

@Auster@thebrainbin.org Bookwyrm and NeoDB are both awesome alternatives to GoodReads, with NeoDB offering far more than just books.

The only downside is that Kindle directly integrates with GoodReads, I'm not sure there's been any independent efforts to integrate alternatives into e-readers.

RE: https://mamot.fr/@pluralistic/117551162529996305

Damn. The old rule is still valid: if anyone offers you something for free like money or romance, its a scam. That's teh rule. You have to remember it all time.

@dansup It's removing a defensive measure for which there has been a demonstrated need. It's outright hostile.

mind bending atmospheric first-person party game

As everyone knows, the best Halloween content publishes two days after the holiday.

https://tedium.co/2026/11/02/cryptids-halloween-ephemera/

new @tedium by David Buck