Home | Notifications | New Note | Local | Federated | Search | Logout
Federated Timeline
Reply to @jschauma@mstdn.social
Cassandrich@dalias@hachyderm.io (2026-09-29 22:19:26)
@jschauma Because the kernel team is actively promoting the slopbros' agenda. 🤬
Reply to @dalias@hachyderm.io
Jan Schaumann@jschauma@mstdn.social (2026-09-29 22:18:16)
@dalias Yep. It's the kernel team's decision to assign a CVE ID to just about any change. Combined with the onslaught of AI findings, this gets us to thousands of CVEs, and trying to assess which, if any, are meaningful and affect your particular stack and configuration is, IMO, no longer possible.
kaiaskutes@kaiaskutes@fediffusion.art (2026-09-29 22:17:09)
vibing this Starbound-esque game in the background
---Attachments---
image: https://fediffusion.art/media/a8/6e/54/a86e54994b53feed02403de027d8d144eed7db570ac99122c770ad3c9fd4b810.webp
ganbold@ganbold@hiradai.space (2026-09-29 22:16:27)
what is that software used for the script, kinda seems like obsidian but I don't think so
source: airipan video explanation from amit seedoo
---Attachments---
image: https://hiradai.space/files/a73974d8-4cff-4e99-9c03-124d66739a13.webp
chjara ☭ :lesbian_mode_el: :true_progress_flag: :blobcat_3d_stretcher:@chjara@akko.tuxcrafting.xyz (2026-09-29 22:16:01)
Anyway, everything you do on this network is public, including direct messages, within the margins of bugs or malicious software.
Reply to @dalias@hachyderm.io
Cassandrich@dalias@hachyderm.io (2026-09-29 22:14:41)
@jschauma As an example, I pulled out a random CVE number from the giant list and looked at it:
https://www.cve.org/CVERecord?id=CVE-2026-97990
There is nothing in the report to indicate anything resembling a vulnerability. Maybe it is, but the report is just a normal bug fix for incorrect interpretation of an error return value.
It may be that this leads to OOB accesses later, but that is not established. Nonetheless, a CVE was assigned. 🤬
知空 (shia-nya) :neobot_upside_down:@shia@pika.moe (2026-09-29 22:14:16)
Little sister energy
知空 (shia-nya) :neobot_upside_down:@shia@pika.moe (2026-09-29 22:09:11)
I keep using it as a gender-neutlar pronoun instead of they...
Mitsu@Mitsu@outerheaven.club (2026-09-29 22:08:55)
If yes, I want to know :cat_starebrow:
Reply to @jschauma@mstdn.social
Cassandrich@dalias@hachyderm.io (2026-09-29 22:07:29)
@jschauma That isn't an option either. By accepting automatic/frequent updates, you are just adding more new vulns, and more of them are real vulns not fake ones like the stuff they're reporting.
The "1313 CVEs" are a lie. The hard problem is finding the 10-20 that are actually vulns and the 1-5 that are actually relevant to you amid the slopbros' DDoS attack on our attention. 🤬
The only solution is to close off all of the attack surface. Disable module loading entirely or switch to allow list model to block all of the "IPsec shit nobody asked for". Disable io_uring and other optional niche syscalls. Don't give out user accounts, and don't assume running network-facing junk daemons is safe just because they're running as nobody or chrooted. Etc.
Reply to @rdnmz@sharkey.world
underproofed ganbold@ganbold (2026-09-29 22:06:05)
> I wanted a fully dynamic website to so I can surface and display relationships between my content.
this is technically doable in static site generator. for example quartz that able to display relationships between content.
I know that using wordpress seems like removing the headache upfront, but actually its just delaying and moving the headache to third party.
in the age of AI, where most SNS platforms are driven by engagement, and contents has questionable authenticity, it's the right time to run personal blog/website.
Reply to @yonle@fedinet.waltuh.cyou
ivy@ivy@misskey.id (2026-09-29 22:05:23)
@yonle@fedinet.waltuh.cyou
symbian
Jan Schaumann@jschauma@mstdn.social (2026-09-29 22:02:37)
Lol, nice.
Debian linux security update DSA 6528-1:
"Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks."
"Several", as in... 1,313 CVEs.
Enjoy! ✌️
https://lists.debian.org/debian-security-announce/2026/msg00441.html
(I've said it before: you can't track CVEs any longer. Only option is regular, frequent, automated updates and reboots.)
Reply to @StarkRG@myside-yourside.net
p@p@hj.9fs.net (2026-09-29 22:01:35)
maybe it already happened!
meeeeeeco@meeeeeeco@misskey.io (2026-09-29 22:00:38)
:blobcat_modoki_01:
---Attachments---
image: https://media.misskeyusercontent.com/io/d8a05fcd-9de3-4fcc-9420-efc6cc3aeea7.png
Reply to @io@donotsta.re
p@p@hj.9fs.net (2026-09-29 22:00:31)
❤️ sephora is the best
ivy@ivy@misskey.id boosted:
@maruu@misskey.io (2026-09-29 21:14:31)
こんやはふぃーばーだんすたいむにゃんぷっぷー:blobcat_fever:
#にゃんぷっぷー #blobcat #にゃんぷっぷーアート #この人よく見るな…フォローするか…祭
---Attachments---
image: https://media.misskeyusercontent.com/io/15fc307b-f6f1-4848-afcf-32729f2424cf.webp
Reply to @koakuma@uwu.social
underproofed ganbold@ganbold (2026-09-29 21:59:07)
joss!
Reply to @thedaemon@snac.9front.club
p@p@hj.9fs.net (2026-09-29 21:58:53)
From Betelgeuse ?!!
Reply to @Paradox@raru.re
Sun Microdevil Pte Ltd@koakuma@uwu.social (2026-09-29 21:56:14)
@Paradox That I dunno
Tho, I thought road network planners would already build their networks assuming LHS or RHS driving?
mhoye@mhoye@cosocial.ca (2026-09-29 21:56:07)
https://lists.debian.org/debian-security-announce/2026/msg00441.html
---Attachments---
image: https://m.f-h.co/cosocial-ca/media_attachments/files/117/354/431/625/819/387/original/ecf551e35b24a788.png
Reply to @p@hj.9fs.net
io(1)@io@donotsta.re (2026-09-29 21:55:37)
@p ohh yeah!! i need sephora sale picks i'm broke af and so is my gf
Sun Microdevil Pte Ltd@koakuma@uwu.social (2026-09-29 21:50:30)
Nihongo Joss!
Reply to @p@hj.9fs.net
thedæmon (Clay Ayers) [he / him]@thedaemon@snac.9front.club (2026-09-29 21:49:29)
Lydia Deets!
:rainbowCrow:@cR0w@infosec.exchange (2026-09-29 21:47:13)
RE: https://mastodon.bsd.cafe/@stefano/117354014226641780
Sure glad I moved my main workstation to Debian. :brdAngry:
Edit because I screwed something up in the copy / paste:
CVE-2024-52560
CVE-2024-58094
CVE-2024-58095
CVE-2025-21817
CVE-2025-22104
CVE-2025-22108
CVE-2025-22127
CVE-2025-38203
CVE-2025-38205
CVE-2025-38206
CVE-2025-38237
CVE-2025-38621
CVE-2025-39833
CVE-2025-39925
CVE-2025-40064
CVE-2025-40102
CVE-2025-40139
CVE-2025-40168
CVE-2026-100070
CVE-2026-100071
CVE-2026-100075
CVE-2026-100078
CVE-2026-100079
CVE-2026-23137
CVE-2026-43198
CVE-2026-43344
CVE-2026-45963
CVE-2026-52944
CVE-2026-53010
CVE-2026-53089
CVE-2026-53102
CVE-2026-53113
CVE-2026-53250
CVE-2026-53313
CVE-2026-64058
CVE-2026-64070
CVE-2026-64082
CVE-2026-64210
CVE-2026-68286
CVE-2026-68287
CVE-2026-68288
CVE-2026-68289
CVE-2026-68303
CVE-2026-68337
CVE-2026-72334
CVE-2026-72402
CVE-2026-72413
CVE-2026-72438
CVE-2026-72485
CVE-2026-72496
CVE-2026-74258
CVE-2026-74268
CVE-2026-74289
CVE-2026-74291
CVE-2026-74294
CVE-2026-74334
CVE-2026-74496
CVE-2026-74521
CVE-2026-74735
CVE-2026-74753
CVE-2026-80521
CVE-2026-80671
CVE-2026-80755
CVE-2026-80762
CVE-2026-80766
CVE-2026-80768
CVE-2026-80774
CVE-2026-80780
CVE-2026-80783
CVE-2026-80796
CVE-2026-80806
CVE-2026-80807
CVE-2026-80824
CVE-2026-80825
CVE-2026-80826
CVE-2026-80827
CVE-2026-80828
CVE-2026-80829
CVE-2026-80830
CVE-2026-80831
CVE-2026-80832
CVE-2026-80833
CVE-2026-80834
CVE-2026-80835
CVE-2026-80836
CVE-2026-80837
CVE-2026-80838
CVE-2026-80839
CVE-2026-80840
CVE-2026-80841
CVE-2026-80842
CVE-2026-80843
CVE-2026-80844
CVE-2026-80845
CVE-2026-80846
CVE-2026-80847
CVE-2026-80848
CVE-2026-80849
CVE-2026-80850
CVE-2026-80851
CVE-2026-80852
CVE-2026-80854
CVE-2026-80855
CVE-2026-80856
CVE-2026-80860
CVE-2026-80861
CVE-2026-80862
CVE-2026-80863
CVE-2026-80864
CVE-2026-80878
CVE-2026-80914
CVE-2026-80921
CVE-2026-80922
CVE-2026-80923
CVE-2026-80925
CVE-2026-80926
CVE-2026-80928
CVE-2026-80930
CVE-2026-80931
CVE-2026-80932
CVE-2026-80933
C
Yonle@yonle@fedinet.waltuh.cyou (2026-09-29 21:46:07)
linux
StarkRG@StarkRG@myside-yourside.net (2026-09-29 21:46:05)
Here's an interesting thought, some day, in the far future, the last remaining lawyer in the Universe will win their last case.
ivy@ivy@misskey.id boosted:
@rdnmz@sharkey.world (2026-09-29 20:55:13)
Kuat-kuat pemilik blog/website pribadi 🙌👊
https://winnielim.org/journal/running-a-personal-website-is-not-fun-anymore/
#blog
Gombang@gombang@social.nancengka.com boosted:
@aral@mastodon.ar.al (2026-09-29 21:40:37)
“One interviewee describes targeting people who are running toward a food distribution site. Another guesses that his body count numbers in the thousands … Yuval Abraham, who conducted the interviews and co-directed the movie with Rachel Szor, asks one of the subjects if he realized that he was taking part in a genocide. This interviewee has already said that he found the work to be fun, because staying up late with your buddies, working toward a common goal, is fun. Now he agrees calmly, indeed casually, that yes, he has been taking part in a genocide.”
https://www.nytimes.com/2026/09/28/opinion/naza-film-gaza-israel.html?unlocked_article_code=1.E1E.nIJr.owvCsewKgSX9&smid=nytcore-ios-share
Via @JapanProf
#israel #NAZA #genocide #ethnicCleansing #apartheid #settlerColonialism #Gaza #Palestine #StopIsrael #StopTheGenocide #BDS #FreePalestine
Gombang@gombang@social.nancengka.com boosted:
@JapanProf@mastodon.social (2026-09-29 21:23:36)
M. Gessen discusses NAZA and another Israeli film, Check Out. Israelis take great pleasure in annihilating Palestinians. There's no limit to their desire to kill. Germans and Japanese committed horric acts, and the postwar world tried to learn a lesson. We built the new international structure of law and norms to prevent another genocide and seizure of territories by force.
The US and Israel have undone it all. We will all suffer as a result.
#gaza #genocide #naza
https://www.nytimes.com/2026/09/28/opinion/naza-film-gaza-israel.html?unlocked_article_code=1.E1E.nIJr.owvCsewKgSX9&smid=nytcore-ios-share
Older Notes