Please be sure you don’t take your eye off the big node.js/brotli vulnerability while php2shell was sucking all the air from the room. https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497
Don’t get me wrong, 400GB is nothing compared to Mastodon but still, everything has to be thought out carefully otherwise mistakes take a long time to correct
I have truly a hate love relationship with databases..
Love ‘em cause they are brilliant and necessary but hate ‘em for their fragility
I’m so sorry about the downtime for gram.social and Pixey.org..
The server migration and merge should have taken max a few hours but this is the 3rd day and I’m still working on it
The ‘problem’ is that the sizes of these things nowadays are kinda huge and everything takes a long time
Currently at ~400GB SQL imported
Vote the fuckers out!
*may be generally applied
Hey, @EUCommission, fuck you too.
***
On Wednesday, EU Member States approved a change to the GDPR that would put the profit-making interests of OpenAI, Anthropic, Google, Meta and SpaceX over European's fundamental right to data protection. According to the approved text, processing personal data “in the context of AI” should automatically be lawful. In particular, Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens “in the context” of AI. Schrems: “Under the agreed text, the profits of AI companies would typically trump European’s fundamental right to privacy. This is nothing but a digital expropriation of Europeans.”
https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies
I'm bringing back greeting people in the streets. I have thus far good-morning'd 6 unsuspecting folk of my local community and have achieved a 100% hit rate. I cannot be stopped. I am the friendly neighbourhood....Goodmorning-Man. Goodmorning-Man, Goodmorning-Man. Does whatever a goodmorning can.
:nkoWave: Hello and a good meowing everyone! :blobcathearts: :blobcatsnuggle: Have a most wonderful #Caturday and stay safe ♥️😸
Gram and Pixey are still importing.. I’ll keep you all updated!
I was hoping the imports would finish today but it doesn’t seem like it.. it’s past 4 at night now so i gotta get some sleep, tomorrow I’ll finish the setup!♥️ :nkoSleep: :stux: :sleep:
Goodnight my dear friends :mastodon: :fediverse: :blobcathearts: :blobcatsnuggle:
More stable, new bottom menu and collections
Also notifications actually work well 👌
The new official #Mastodon app for iOS in beta seems already a lot better!
(You can get it via TestFlight)
A kind reader submitted the Rufus installer to any.run, a sandbox which walks through the installation of software to find malware that gets installed only *AFTER* the executable is clicked. You can see exactly all of the post-install prompts to download additional software that I also saw.
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: Had a conversation with the maintainer(s) of Rufus, who told me the malware alerts were almost certainly from Windows Defender scanning the files in the Linux ISO I was trying to burn, and not from the program itself. I'm willing to accept that may be the case here, but I also no longer have a way to check b/c I nuked the system after all the alerts, and the bios produced a warning when the system restarted.
“Collecting data on your users is cool”
No, it’s not
I thought I felt being watched :blobcatgiggle: @humanrightswatch
I think devs can earn more by charging customers to remember their login credentials compared to actual development :neocat_laugh_tears:
The amount of time spend on recovering basic auth credentials for clients is a lifetime!
And what really gets me is the word "quick" or "quickly"
In their eyes it's always a quick and easy fix that should be done right away for them but if you ask them how they are clueless
If you request something from a developer, STOP using the word "quick" because it's often not
It feels like massive disrespect
Years ago I also hosted and build a few websites for friends of theirs for a "friend price" aka bullshit
Ive stopped with that and requested them all to move to another host since they also refused to pay a normal amount
Somehow they rather pay 2K to a company then 500,- to me for example lol!
For me it's simple now, if you don't respect the work im not gonna do it anymore
If it's so easy and quick, just do it yourself ❤️
Currently I’m rebuilding their whole site from WordPress into a dedicated Laravel app for their needs
Since I lose money on hosting their sites I’m not gonna spend a lot of time updating them since they think that’s also free.. so every XX years they need something new
Back in the days I’ve spend a lot of time of free on their stuff but not anymore
I so much rather spend it on you all♥️
omg.. My parents have this vacation home that they rent out at sea and I made the website where people can book etc
Few days ago I moved their site to a new sever since PHP and now they need a new solution for email
They flat out refuse to pay a cent for email.. so I pointed them to Gmail :neofox_facepalm:
They ask 800 euros per week for that vacation home but a few euros per month for mail is too much haha
My parents are boomers who think everything is free on the internet and I hate it