Many interactions on mastodon are like:

Me: Wow, my microwaved popcorn was too hot and I burnt my tongue!

Responder A: You could maybe put the popcorn inside a bucket made of ice to quickly cool it.

Me: I don't want to do that and I also don't have any buckets made of ice.

Responder B: A bucket of ice can be made by putting water between an inner form and an outer form and freezing it.

Me: Ok, but I don't want to do that and it would also take many hours to freeze the water. I am eating popcorn right now.

Responder C: Liquid nitrogen will freeze water in as little as a few seconds and can be purchased at many welding-gas suppliers

@NatalyaD@disabled.social Certain irony to people not listening to advice about assistive listening systems...

how come hackers never do anything cool like erase debt or steal from the ultra wealthy or completely obliterate the credit reporting agencies

.. domestic EU biomethane, from waste and residues, can be produced for less than that. Production level is now around 5 bcm (billion m³) per year, production capacity has reached 8 bcm/year, and the sustainable potential is at least ten times that.

"Signal has resolved a critical-severity vulnerability that could allow a malicious caller to keep audio and video tracks enabled even after the user hung up.

The security defect is tracked as CVE-2026-113380 (CVSS score of 9.3) and impacts RingRTC, the open source library Signal uses for voice and video calls, which is based on WebRTC.

Due to the issue, a remote peer could flood the call’s Finite State Machine (FSM) event queue with junk, and the call would not terminate.

This happened because the hangup was not treated as a kill switch, but as an event added to the FSM event queue; there was no rate limit on peer-originated events; and the hangup event had no priority.

“Flood the queue with junk and the hang-up waits behind attacker noise forever, so the call (microphone, possibly camera) is never torn down,” a GitHub write-up by a researcher reads.

By exploiting the vulnerability, an attacker could keep the audio and video tracks flowing from a target device while the victim believes they ended the call.

The security defect was resolved in RingRTC version 2.72.0, which was released on September 4.

Details on the flaw, however, were published on Tuesday, along with a conceptual proof-of-concept (PoC). NIST added the CVE to the NVD database on Tuesday.

Signal resolved the issue by ensuring that call termination requests do not remain blocked in FSM’s event queue and are detected independently.

Users should update their Signal applications as soon as possible. Otherwise, they should check the call indicator to make sure the call indeed ended."
https://www.securityweek.com/signal-vulnerability-lets-malicious-callers-block-hang-ups/

@quixoticgeek Yeah, exactly! Not considering small businesses with this new PPWR regulation has had absolutely disastrous consequences already (lots of small shops having had stop shipping to other member states or closing down completely). Don't know if you've seen my previous post[1] about the mess of a situation, but it's now taken ~60 days to have parliament and council to finally acknowledge and act on the problems this week, and hopefully fix/update legislation ASAP...

[1] https://mastodon.thi.ng/@toxi/117474912086293098

The Wonders of Space Sparkle in the 2026 Astrophotography Prize https://petapixel.com/2026/10/23/the-wonders-of-space-sparkle-in-the-2026-astrophotography-prize/ #Spotlight #Space

holy crap he's literally in Nebraska!

https://www.theregister.com/software/2021/10/19/why-your-app-or-gadget-may-stop-working-sunday-a-gpsd-bug/1500621

Losing my mind over the official 2026 class photo of the Swiss Federal Council including the conditions of its own production.

This guy should probably be doing this full time and have a globally distributed team of paid helpers working under him. Instead, he's got a Patreon.

https://www.patreon.com/cw/oerdnj

#php

I hate when some dude (and it's always a dude) needs to tell everyone why a specific programming language is "bad" or "unusable" or whatever.

Maybe the person who hacked together their personal site is proud that they got it to work. Maybe that small business with an insecure site couldn't afford anything better. Maybe the employees in that company knew about the issues, but their dickhead manager didn't approve the budget.

If you are such an expert, try and make the world a better place.

OK, it had to be done

Heuro Train to run Amsterdam - Paris trains in 2030

Complete 🐂 💩

Bullshit meter with an explainer👇
https://jonworth.eu/bullshit-meter-heuro-to-run-paris-amsterdam-trains-in-2030/

PPWR update from the EU Council:

Simplification: Council agrees negotiating stance to cut red tape for small packaging producers
https://www.consilium.europa.eu/de/press/press-releases/2026/10/21/simplification-council-agrees-negotiating-stance-to-cut-red-tape-for-small-packaging-producers/

tl;dr The Council agrees with the urgent need for simplification and removing the EPR duties, albeit with different conditions than what parliament voted for a day prior (instead of max. company size and annual turnover, the Council proposes to use packaging volume as limit — fair enough and no difference to most micro biz).

The Council's position is: "[...]that producers of packaging and packaging of packaged products established in the EU may be exempted from the obligation to appoint an authorised representative in another member state if they make available on the market of that member state a quantity of packaging below 1 tonne per calendar year. The mandate also contains a safeguard clause in case a producer is found in breach with EPR obligations."

Although great news, I'm not sure about the timeline for next steps towards an actual change of law. The press release only states:

"The presidency will enter negotiations with the European Parliament on this file as soon as possible with a view to reaching a quick agreement."

"[...]the objective of concluding work on all simplification packages by the end of 2027."

I'm very much hoping that the EPR parts will be dealt with on a much shorter time horizon — most of the impacted businesses will likely NOT survive another 14 months (until end of next year)...

Still, one small win at a time! 🙌

#PPWR #EU #Regulation

We believe that the public has the right to know the consequences of this policy change. So if NHS England won’t publish the full assessment, we will.

https://transactual.org.uk/blog/2026/10/22/nhs-england-knows-that-new-guidance-on-single-sex-accommodation-will-harm-patients/

There are only 10 days left until the end of October. If we can’t pay the remaining school fees for Osama and Yousef this month, they may be expelled from school. 💔

We only have $160 left to raise!

With your help, you can save them from losing their places at school and the heartbreak they would feel if they were forced to leave.

Please, help us raise the remaining amount before it’s too late. 🙏

https://chuffed.org/project/help-sara-and-her-children

Yesterday my physio had me doing weighted squats again. Did 4 sets of 8 starting with 20kg Building up to a set of 8 with 25kg. DOMS isn't as bad as when I started straight at 20kg a couple of weeks ago. But I'm definitely noticing some muscle soreness today.

@ChrisMayLA6

Interesting to compare legislated minimum wage with real living wage. In the UK the figures are £13.45 versus £14.10 per hour, a difference of £0.65 or 4.8%. London figures are £14.10 versus £15.45, a difference of £1.35 or 9.6%.

Interesting, too, that in the report Sam in Manchester has the word "Executive" in his job title, but apparently only receives the Real Living Wage.

FWIW, Canada has 14 different minimum wage rates as it's legislated by province, plus a national rate that applies only to employers under federal jurisdiction. In Ontario, the minimum wage is $17.95 per hour, but the living wage ranges from $21.05 (the other London) to $27.20 (Toronto). The difference thus ranges from 17.3% to a whopping 51.5%

Fellow Americans: when you go to the polls here’s a number to have in your pocket in case you witness any shenanigans: 866-OUR-VOTE Knowing that the treasonous rapist relies on a slow court system to get away with his crimes, there are legal groups that have been prepping documents and they’re crouched at the starting line ready to file as soon as reports come in. https://866ourvote.org/

An email from a company I bought a small item from: How did we do?!?!

You successfully put an item in an envelope and put it in a postbox. What do you want, a lolly?

Not quite sure if there is enough of a hive mind on here, but can anyone recommend a simple secure platform where a group (of say 20 known people) can share multiple documents - i.e. like a Google Drive folder, but ideally something less connected to US mega corporations. Has to be private (to a decent level, but not anything super sensitive) and can come with a cost. Suggestions that involve me setting up servers or the like are not 'simple' in my world. Thanks!