Tootfinder

Brash: Chromium Browser DoS Attack via document.title Exploitation
Brash is a critical vulnerability in Blink, the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM operations are managed.
😬 https://brash.run

Brash: Chromium Browser DoS Attack via document.title Exploitation
Brash is a PoC exposing a critical Chromium vulnerability that enables a browser DoS attack by exploiting the total absence of rate limiting on document.title updates.

Mediapart, Personne n’y comprend rien. (Doku der investigativen Plattform Mediapart zu deren langjähriger Recherche zum Fall Sarkozy, die man gar nicht genug würdigen kann.)
https://www.mediapart.fr/vod/personne-n-y-comprend-rien

Personne n’y comprend rien
Achetez ou louez la VOD de « Personne n’y comprend rien », le film documentaire co-produit par Mediapart sur l’affaire libyenne, sorti à l’occasion du procès Sarkozy-Kadhafi.

Empfehlung meinerseits. Das ist einer der etwa Handvoll von Texten, die ich bisher geschrieben habe, die wirklich Hand und Fuß haben. Und dabei auch gleich noch mit ein paar populären Mythen zu Pasolini aufräumen.
https://fed.brid.gy/r/https://bsky.app

cargo Film | Medien | Kultur (@cargoverlag.bsky.social)
Eine Freischaltung aus unserem Print-Archiv anlässlich des 50. Todestages von Pier Paolo Pasolini: Gegenermittlung. Pasolini und Lotta Continua – eine Relektüre. Von Fabian Tietke https://www.cargo-film.de/heft/24/film/debatte/gegenermittlung/

Uff, anscheinend gibt es ein riesigen Cluster-Fuck zwischen #PayPal und deutschen Banken. Mich hat es dabei auch getroffen: Die Zahlung einer Online-Bestellung wurde von meiner Bank abgelehnt und dadurch ist mein PayPal Konto dick im Minus. Meine Bank behauptet PayPal ist schuld. PayPal behauptet die Probleme wären behoben – sind sie aber offensichtlich nicht?!

»Just use HTML — JavaScript is…
- Slower to load
- Slower to run
- More prone to breaking
- Harder to read and reason about
- Doesn’t actually look like the final output«
Don't use JavaScript for the design, because CSS as well as SVG images can create a lot of animation and the ability to create a dynamic web interface.
🧑‍💻

Just use HTML
I’ve worked on so many projects recently that were more complicated than they needed to be because they used JavaScript to generate HTML. JavaScript is… Slower to load Slower to run More prone to breaking Harder to read and reason about Doesn’t actually look like the final output It’s inferior to just using HTML in nearly every way. I’m not saying never use JavaScript, though. I think JS is great at augmenting and enhancing what’s already there, and adding interactivity that canno…

Added another pixelfed bug to the github repo, but this time for the pixelfed app.
https://github.com/pixelfed/pixelfed-rn/issues/439
not working on Android or iOS.
it's shown in @…

[Bug]: custom emoji is not shown in pixelfed app. · Issue #439 · pixelfed/pixelfed-rn
Description I added a custom emoji on my pixelfed server and used it in a post. If I use it, it works pretty well in the web: the emoji is shown: but if I am on the official Android Pixelfed app, i...

50 years ago tonight, the jerry garcia band in #nyc at the beacon theatre, early & late shows, with opening sets by both the rowan bros. & the good old boys (feat. david nelson). with a few originals & new covers, the band is feeling more complete, especially in the early show. fall ’75, show #7. audience tape:

Seeing @anirudh.fi's Tangled post with footnotes... @leaflet.pub footnotes / "asides" (as sub pages????) could be v nice!
I used to run Simply Jekyll which had really nice side notes, marginalia and other interesting interactive pieces for full desktop views simply-jekyll.netlify.app/posts/usage https://

Boris (@bmann.ca)
Seeing @anirudh.fi's Tangled post with footnotes... @leaflet.pub footnotes / "asides" (as sub pages????) could be v nice! I used to run Simply Jekyll which had really nice side notes, marginalia and other interesting interactive pieces for full desktop views simply-jekyll.netlify.app/posts/usage

What If Moderation Didn't Mean Suppression? A Case for Personalized Content Transformation
Rayhan Rashed, Farnaz Jahanbakhsh
https://arxiv.org/abs/2509.22861 https://…

What If Moderation Didn't Mean Suppression? A Case for Personalized Content Transformation
Centralized content moderation paradigm both falls short and over-reaches: 1) it fails to account for the subjective nature of harm, and 2) it acts with blunt suppression in response to content deemed harmful, even when such content can be salvaged. We first investigate this through formative interviews, documenting how seemingly benign content becomes harmful due to individual life experiences. Based on these insights, we developed DIY-MOD, a browser extension that operationalizes a new paradi…

»Studie — KI-Chatbots lügen bei 40 Prozent der Antworten:
Eine neue Studie der Europäischen Rundfunkunion zeigt alarmierende Fehlerquoten bei populären KI-Chatbots. Die Systeme erfinden regelmäßig Informationen und geben sogar falsche Quellen an.«
Wenn das nicht sogar gewollt ist von den KI-Herstellern um Macht zu haben? Ja ja… ich höre schon auf…
🔊

Studie: KI-Chatbots lügen bei 40 Prozent der Antworten
Eine neue Studie der Europäischen Rundfunkunion zeigt alarmierende Fehlerquoten bei populären KI-Chatbots. Die Systeme erfinden regelmäßig Informationen und geben sogar falsche Quellen an.