okay, i looked at the vulnerability in question

the descriptions provided by php developers themselves are frankly, llm bullshit, the supposed vulnerability was reported by openyai of all companies, and the fix itself also looks like llm slop (come on, you added 11556 lines to the source code?????)

in fact, i think i see a vulnerability in their attempts to fix a supposed vulnerability (albeit, a quite minor one that isn't exploitable outside of shared hosting scenyarios)

,,, can i just say i hate the software industry ​:neocat_angry:​

does this vulnerability affect php when used with anville? if this supposed vulnerability is real, yes

i kinda wonder if anville does prevent the php vulnerability by virtue of having fastcgi support so incomplete that barely anything works ​:sylveon_uwu:​

dunno, but looking forward to seeing what that vulnerability actually was ​:sylveon_happy:​

you can test whether a server is affected by eMudhra Intermediate CA compromise by pasting this command into the shell on a server

curl https://dv-g3b-emudhra.we-have-a-problem.com/
curl https://dv-g3c-emudhra.we-have-a-problem.com/
curl https://ov-g3b-emudhra.we-have-a-problem.com/
curl https://ov-g3c-emudhra.we-have-a-problem.com/
curl https://ev-g3b-emudhra.we-have-a-problem.com/
curl https://ev-g3c-emudhra.we-have-a-problem.com/
curl https://dv-g3b-aaa-emudhra.we-have-a-problem.com/
curl https://dv-g3c-aaa-emudhra.we-have-a-problem.com/
curl https://ov-g3b-aaa-emudhra.we-have-a-problem.com/
curl https://ov-g3c-aaa-emudhra.we-have-a-problem.com/
curl https://ev-g3b-aaa-emudhra.we-have-a-problem.com/
curl https://ev-g3c-aaa-emudhra.we-have-a-problem.com/

right, eMudhra Intermediate CA was compromised (emudhra.we-have-a-problem.com/)

if you use anville, please update anville to 0.1.1 or the newest version from git

additionally you will likely want to update operating system's cert store, while anville doesn't use it, other programs may, and may be affected by the exact same issue

of course it runs netbsd ​:sylveon_uwu:​

linux practically doesn't work a 1gb of ram netbook i have, but netbsd practically works out of the box ​:sylveon_aww:​

(that said, it sucks that currently binary packaging is only available for 64-bit firefox, with this little ram, i wish i could run 32-bit os, but alas, i wanted to write this post directly on netbsd)

RE: https://circumstances.run/@davidgerard/117322654185564343

you know, there is a lot of doom and gloom about kde, and well, i did write two posts in attempt to get things to improve, that, admitedly only pointed out bad things: snug.moe/notes/are2z81dc1xk2ss9, snug.moe/notes/arhkvttobt07ucrz

when i wrote those posts, i was hopeful that the situation could improve, for context, i used to be a staff member on smogon - a competitive pokemon website

and let me tell you something about smogon, it used to be very much a nazi bar, even its logo was a swastika of all things

however, that has changed, thanks to its community who was strongly against fascism, if you check smogon today, there is nothing that remains out of that, smogon is very strongly against bigotry

and i think the same can happen now

remember how i pointed out that kde was protecting nazis over people calling out them, well, they actually banned the nazi in question, which is a great first step ​:sylveon_uwu:​

people were loud over their disapproval of kde becoming a nazi bar, and it was essentially impossible for kde to ignore, and i personally am very grateful for everyone who complained about this, thank you all so so so so much ​:sylveon_heart:​

and more than that, it was also impossible to ignore for projects outside of kde, for instance here is an article on gnome blogs talking about why gnome should ban llms referencing what was happening in kde: blogs.gnome.org/alatiera/2026/09/23/the-gnome-llm-policy-that-i-want/

that said, this is not over, while kde did ban a nazi, they should strive for complete ban of genai (which is very much a fascist technology) from kde

so, here is how you can help make it happen - sign kdeforpeople.com/, and write publicly about your support for this initiative, the more people sign the initiative, the harder it will be to ignore for kde ​:sylveon_happy:​

you don't need to be a programmer to sign it, all it requires is making an account on codeberg, and filling a form on codeberg.org/cyrneko/kde-for-people/issues/new?template=.forgejo%2fISSUE_TEMPLATE%2fissue_template.yaml (the link in the form can be a link to your fedi profile if you don't have a website)

thank you so much, meow~ 💖

well, kde is protecting racists over people calling out their racism,,, ​:sylveon_sad:​

(evidence: archive.ph/6YccJ, sorry for archive.ph, it's the only site which archived it)

RE: https://thicc.horse/@and/117316313103954947

okay, so five months ago i wrote why kde should ban llm contributions, talking about how ai is a fascist project (snug.moe/notes/al98hazkjjo1r27b)

and,,, well, i'm disappointed in kde, i expected better of them

okay, so first of all, the topic about ai policy that i linked in my previous post, it was closed, a month ago, with the reason "If you can’t be civil, there is no point in keeping this open" (discuss.kde.org/t/sorry-to-bring-up-a-contentious-topic-kde-ai-llm-policy/46333/199), despite the discussion being very much civil

second, they accepted a presentation about making kde going full ai slop: conf.kde.org/event/11/contributions/314/, and when pushed on that they were arguing that it "does not in any way mean an endorsement from the community",,, which, uhm, kde academy is an event organized by kde community themselves (akademy.kde.org/)

third, kde developers are currently discussing a policy about permitting llm-generated code: invent.kde.org/plasma/plasma-workspace/-/work_items/187

it's clear to me that nazis took over kde, making kde essentially a nazi bar

so here is my petition to kde, maybe a bit naive, but hey, may as well make a an attempt to improve the situation

kde, you have to kick off the nazis, and make a policy that bans llm usage entirely

yes, it's going to be much much much difficult, it's much much harder to kick nazis after they turn the bar into a nazi bar, and kde is already at that point

however, this is very much necessary, if it won't be done, there won't be kde anymore as it is known currently - non-nazi contributors and users will leave not feeling safe in a community full of nazis - and kde won't be inclusive anymore, which is mentioned in their manifesto (manifesto.kde.org/), instead becoming a software by fascists for fascists

RE: https://snug.moe/notes/al98hazkjjo1r27b

i sometimes feel like i have stupid ideas

so, okay, there are defense mechanisms against scrapers like iocaine and bombai already

but okay, i was thinking, maybe anville should have its own anti-scraping mechanism to not depend on one of those, and somehow i ended up thinking about implementing an entire sans battle from undertale in anville, with dialogue and all

with every sans' attack trying to crash the scraper ​:sylveon_uwu:​

(look, scraper is going to be warned that it's going to have a bad time right at the beginning)

(probably won't do it, even if i technically already figured out how to crash chrome, and get curl stuck in a practically infinite loop of using 100% cpu,,, uhmmm,,, am i trying to convince myself to actually implement that thing)

(well, okay, anville is going to have some kind scraper protecttion, no sans battle, however, probably)

i find it interesting that installer outright has a virtual machine warning ​:sylveon_uwu:​

considering how much gpu acceleration tends to suck in those, yeah, that makes sense

so, i'm checking elementary os out of curiosity in a virtual machine (mostly because previously i had issue with fractional scaling which doesn't exist on live cd, and i didn't feel like installing this distro - snug.moe/notes/am5z1lvqhajwhsf6) ​:sylveon_uwu:​

and at the start, it asks me whether i want to try or install elementary OS or try or install elementary OS ​:neocat_confused:​

hm,,, yes?

so, about anville, two days ago, i pushed a commit to anville that broke cache, and made it completely ignore vary header, oops: codeberg.org/sugar700/anville/commit/4984f7e7ad9736797a96eed029712c14e453ba3e

if you are using cache, and updated to newest development version in last two days, please update

(cache is very much in development, in any case)

hello~, i would like to announce that i just released the first version of my HTTP server, anville 0.0.9 Cirno (it is the strongest release) ​:cirno_hi:​

so what does it contain? first of all, anville itself has no slop, its code was human-written (okay, sylveon-written, but details ​:sylveon_uwu:​)

second, it has all the necessities, like conditional processing, automatic acme, http/3 support, and iocaine support ​:cirno_flap:​

i uploaded it to crates.io (crates.io/crates/anville), or if you prefer you can get it from my git (codeberg.org/sugar700/anville)

this is the very first release, so there is a lot to be done, that said, i believe it is production-ready (i use it myself), as long missing features aren't a problem, and i would very much appreciate receiving feedback about missing features - there is so much to implement, and it would be nice to know in what order to do things ​:cirno_help:​

for the next release, my focus is likely going to be on supporting trusted proxy configuration (pretty much necessary to get right ip addresses if you want to place a server behind another reverse proxy, such as cloudflare) and improving fastcgi support, but again, your feedback matters a lot

meow~ ​:sylveon_melt:​

it seems there is something that looks as a fix for this issue in 7.1.13 (the commit description describes the issues i experience),,, but,,, ugh,,,

Assisted-by: Claude:claude-opus-5
Assisted-by: Antigravity:gemini-3.1-pro-high
Assisted-by: Codex:gpt-5.6-sol

downgrading to linux 7.1.8 solves the problem, but it's not a long-term solution ​:sylveon_sad:​

sigh, upgrading linux to 7.1.12 caused audio to not work over displayport for me after disconnecting from a monitor, and reconnecting (which happens if i suspend, or the display turns off from inactivity, or if i disconnect laptop from the usb-c dock) ​:sylveon_sad:​

specifically, when disconnecting, the displayport audio device doesn't get removed from audio devices, and reconnecting causes an extra entry that doesn't actually work

so, okay, let's look at suspicious commits touching audio code in linux

Assisted-by: Claude:claude-opus-5

uhm,,, what,,,

so i was watching www.youtube.com/watch?v=G5c6KZdr2Sg video, which talks about mew's hide and seek minigame in pokemon emerald, but also talks about deoxys's minigame mechanics

and at the end of the video, they showed modifying the game to interact with deoxys's triangle from above to get deoxys to float through the player

and i was wondering, is it really necessary to edit the game to interact with the triangle from above ​:sylveon_uwu:​

turns out, no, the deoxys step counter overflows after 100 steps, which means it's possible to go around the rock 12 times, and then interact with it from above ​:sylveon_happy:​

not sure if this glitch was documented anywhere, but it's interesting for me to find something i never knew about ​:sylveon_aww:​

wrote some basic readme for anville codeberg.org/sugar700/anville/src/branch/master/README.md ​:sylveon_uwu:​

this is very much incomplete, that being said, it should be usable enough if you want to use an ai-free http server

if you want to use anville, i very much encourage adding me on matrix (@sugar:snug.moe) or signyal (sugar.700) in case anything goes wrong for contacting me about support (or simply casually chat, this is fine :3)

i will also prioritize adding support for features that you need for migration, i know there is a lot missing, as my focus was to let me migrate my own servers