Since #Rust 1.100 (released 2026-11-12), cargo supports #dependency #cooldowns!
When resolving dependencies, Cargo ignores versions published more recently than the configured minimum age, unless they are already in Cargo.lock. Set it globally in ~/.cargo/config.toml or with the CARGO_REGISTRY_GLOBAL_MIN_PUBLISH_AGE environment variable.
The news that there's an oversupply of Nvidia GPUs convinced me that the AI bubble is bursting and it'll burst *hard*. So here's a thread where I go over the financial, technological and hardware implications of this. Strap in because this is going to be long and probably a bit rambling too. 🧵 1/
Every single company in the tech space has negative cash flow. That is they're spending more money than they're making. A lot of it. So how they'll answer the margin call? If this is starting to sound a lot like the subprime mortgage crisis it's because it very much is, but with datacenters instead of houses. 7/
585 To migrés en 32 heures : comment 65 universités suisses ont basculé sur Nextcloud en un week-end
585 téraoctets de données et 39 500 chercheurs migrés en moins de 32 heures : les universités suisses tournent le dos à Microsoft et Google pour basculer sur Nextcloud ! Les coulisses de l'opération.https://goodtech.info/universites-suisses-switch-drive-migration-nextcloud-cloud-souverain/
How’s your “we don’t need a DR for M365 as it is not going to fail” strategy going?
@jpmens I'm sure you can get a status report on their own usenet server!
Remarkable how 90% of email being received by my servers today is from spammers who, clearly, don't use M365 as their distribution service …
(the remaining 10% are people who either have their own mail server or are in a "cloud" which has not failed yet)
No, connecting lots of stand-alone servers running an OS which is completely oblivious to other servers, and layering protocols over it to make them “work together”, is _not_ a distributed system.
For others having to deal with the M365 outage but with a hybrid infrastructure (i.e. you have sensible mail relays before delivering to MS): the connectors are now all failing as of about 05:00 UTC claiming IP ACLs / Certificate issues.
said: 550 5.7.51
TenantInboundAttribution; Rejecting. Recipient has a partner connector with
RestrictDomainsToIPAddresses or RestrictDomainsToCertificate set.
Hacker russo attento ancora fischia il vento
I was discussing with a friend the VOODOO macros that I used to put in my #Solaris #exploits to automatically calculate offsets. For instance in https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintname_sparc2.c.
In retrospect, this is a terrible way to solve this specific problem. In my defense, my prefrontal cortex wasn’t fully developed yet. And the research behind it was fun. 🤷♂️
LOL™… “log in with a 256 char password as root”?
Hold my beer says Microsoft:
:flan_molotov:
The trillion dollar monsters are all focusing on *finding* issues at high speed in large volumes. Hardly any of them care about *fixing* these problems with any sense of quality.
Hi Mastodon! 👋 #introduction
I’m Edgar, and I built Terra Tempora: a free globe where you can scroll through history and watch borders, empires and events change over time.
Pick a country, press play and travel through the centuries, or search for a battle or treaty.
It’s open source, with no ads and no tracking, and it’s available in English, French and Spanish.
🌍 https://terra-tempora.com/?ref=mastodon
Feedback and missing events are very welcome!
Does any #OpenBSD arm64 wizard know how to let simplefb know to use the higher resolution on a Lenovo ThinkPad T14S G6 (Snapdragon X1E) with the 2880 x 1800 option?
My eyes would be most grateful…
:flan_piteous:
@cynicalsecurity these things exist for a reason https://apps.microsoft.com/detail/9nt5qd0nc145?hl=en-US&gl=IT
Nobody realises that cats have been hacking Alpine systems by just walking long enough on the keyboard.
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.
https://openssh.com/releasenotes.html#10.6p2
If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.
This vulnerability does not exist on non-Linux systems, Linux/glibc systems and Linux systems that use PAM for password authentication.
We consider the root cause of this bug to be outside OpenSSH itself, but we're in a good position to deliver a mitigation quickly.
We are making this release as fast as possible (we learned of the problem yesterday) because we have recently observed multiple cases of rapid bug rediscovery by AI agents, sometimes within hours, and so now consider long embargo periods to be a dangerous practice that primarily benefits attackers.
Thanks for Özgün Kültekin of Wakefield (wakefield.co) for reporting this problem to us and for the Alpine Linux developers for making an updated release available at very short notice.
8 days 'til my birthday.. just sayin' :flan_umbrella:
Ori Bernstein (ori@) has sent a follow-up mail about his experimental #GEFS port to #OpenBSD tech@, including a updated diff with newfs_gefs(8) utility, and more error handling. :flan_hacker:
[...]
First off, thanks to Martijn, and everyone else who tried it out and sent patches.Everything is updated and rebased, and the diff has been regenerated with all of the lastest.
I've gone through a the error handling code. In theory the filesystem will handle errors mostly correctly. There are probably still places where theory diverges from reality. I've also forward ported most of the important bugfixes from 9front.
[..]
Some userspace tools have been done (you can now mkfs on openbsd!), but snapshot control hasn't.