@macandi@social.heise.de2026-04-09 10:04:00
@macandi@social.heise.de2026-04-09 10:04:00
@hanno@mastodon.social2026-03-08 11:10:00
Maybe this is interesting regarding AI-features, translations, Mozilla Firefox, AI hallucinations... https://bugzilla.mozilla.org/show_bug.cgi?id=2021766
@Techmeme@techhub.social2026-03-09 19:30:51
Anthropic debuts a Code Review feature for Claude Code, which uses agents working in teams to check pull requests for bugs, available in research preview (David Gewirtz/ZDNET)
https://www.zdnet.com/article/claude-code-review-ai-agents-pull-request-bug-d…
@metacurity@infosec.exchange2026-05-08 13:50:07
Cybersecurity is, as they say, moving at machine speed, so don't leave for the weekend until you check out today's Metacurity for the critical infosec developments you should know, including
--Canvas chaos: ShinyHunters breach throws schools into disarray
--Firefox bug fixes soar after using Mythos,
--Virginia man found guilty of destroying government databases,
--OpenAI rolls out GPT 5.5 to vetted cyber defenders,
--PCPJack steals cloud creds while remov…
@grahamperrin@bsd.cafe2026-03-08 09:13:02
@… any overlap with UEFI-specific boot bug 293663?
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293663>
@radioeinsmusicbot@mastodonapp.uk2026-04-09 05:06:29
🇺🇦 Auf radioeins läuft...
Fontaines D.C.:
🎵 Bug
#NowPlaying #FontainesDC
https://holdoholdoholdo.bandcamp.com/track/fontaines-d-c-bug-holdo-remix
https://open.spotify.com/track/0MXmiqd7zoXxv6Gqn9ahhQ
@aardrian@toot.cafe2026-04-07 20:38:41
Apple throwing some time into bugs today…
• 240961: `position: relative` doesn't work as expected on table row, 26 May 2022, https://bugs.webkit.org/show_bug.cgi?id=240961
• 305719: REGRESSION (iOS 26): Datalist options obscure text input, 18 January 2026,
@sauer_lauwarm@mastodon.social2026-04-07 17:15:02
'Sub Zero - Refractions'(The Bug / Ghost Dubs Remixes)
https://kevinrichardmartin.bandcamp.com/album/sub-zero-refractions-the-bug-ghost-dubs-remixes
@metacurity@infosec.exchange2026-04-08 14:08:38
Anthropic altered the course of how security vulnerabilities are discovered, with profound implications for the bug hunting industry.
But the implications go beyond bug bounties. In the words of Jeff Williams, founder of OWASP and CTO of Contrast Security, Anthropic's Project Glasswing "threatens the whole idea that security can remain a find-and-fix afterthought. The era of the security backlog is coming to a welcome end.”
Check out my latest CSO piece.
What Anthr…
@ErikJonker@mastodon.social2026-04-09 06:22:46
Good explanation what Mythos is and what it's not, it did impressive things like finding a 27 year old bug in Open BSD. So please don't say that AI/LLMs can only reproduce their training data....A myth that won't go away. On the other hand Mythos still has many of the characteristics that make AI/LLMs problematic, it still makes mistakes, is not AGI or self-improving.
@hanno@mastodon.social2026-03-08 11:10:00
Maybe this is interesting regarding AI-features, translations, Mozilla Firefox, AI hallucinations... https://bugzilla.mozilla.org/show_bug.cgi?id=2021766
@rasterweb@mastodon.social2026-03-09 21:28:00
I remember one of my jobs where we had a company building an internal system for us and I kept sending emails to the team telling them ways I could break their software...
And they got annoyed...
And my boss told me to cool it, and "give them a chance!"
But my thought was since they gave (some of) us a system to test, should they not be informed of all the ways it could break?
(And no, there was no bug reporting system.)
@penguin42@mastodon.org.uk2026-04-09 00:53:23
My memory usage bug of a few weeks ago is still interesting; I mentioned then I'd saved 1.8GB; it's now at about 3GB saved - down from ~5GB to ~2GB; which is great....except that's the small test. The big example is down from 185GB to 'only' 70GB. I mean that's a really nice saving; but 70GB is still at least 65 too many.
@catsalad@infosec.exchange2026-04-06 12:21:47
Orange cat vs stink bug
@fanf@mendeddrum.org2026-03-08 21:42:02
from my link log —
Understanding systemd-resolved, split DNS, and VPN configuration.
https://blogs.gnome.org/mcatanzaro/2020/12/17/understanding-systemd-resolved-split-dns-and-vpn-configuration/
saved 2020-1…
@keithp@fosstodon.org2026-03-08 03:38:31
A weekend of upstream bug fixing
First, gcc on arc believed that the 'fsrnd' instruction would be useful in implementing the C roundf function (hint, it's not). https://github.com/keith-packard/gcc/commit/152aa613852a2258062ecf7ac819e5eea263a5…
@EarthOrgUK@mastodon.energy2026-04-07 19:51:03
On Website Technicals (2026-04) - Tech updates: per-minute Eddi tweaks, winter energy unused, Time Machine bug, hysteresis, virtual plug-in solar... - https://www.earth.org.uk/note-on-site-technicals-107.html
@seeingwithsound@mas.to2026-04-08 15:11:51
The vOICe for Android 2.81 released https://play.google.com/store/apps/details?id=vOICe.vOICe Fix for view no longer tracking device orientation. Stereo sound now default enabled even w/o headphones because many modern phones feature stereo speakers. Minor bug fixes. App now r…
@heiseonline@social.heise.de2026-04-26 15:11:00
OpenAI startet Bug-Bounty-Programm für Bio-Sicherheit
OpenAI startet ein Bug-Bounty-Programm, um Schwachstellen in den Biosicherheits-Safeguards von ChatGPT 5.5 zu finden.
https://www.he…
@metacurity@infosec.exchange2026-04-08 13:42:21
Someday, I will send out a Metacurity email that doesn't get clipped by Gmail for having too much information, but that day is not today.
Check out today's intensely packed Metacurity that covers a host of critical infosec developments, including
--Iran-linked hackers target critical infrastructure controls, risking disruption and sabotage,
--Anthropic's Glasswing could upend bug discovery and fixes,
--GRU-linked hackers infiltrate routers to steal email a…
@Techmeme@techhub.social2026-05-08 00:50:49
Mozilla says Anthropic's Mythos Preview and other AI models helped it identify and ship 423 Firefox security bug fixes in April, compared to 31 a year earlier (Russell Brandom/TechCrunch)
https://techcrunch.com/2026/05/07/how-anth…
@shanmukhateja@social.linux.pizza2026-03-07 18:16:56
Not proud or satisfied about this bug fix as I had to use ChatGPT in the end.
https://github.com/shanmukhateja/gitraven/pull/1
The fix was computing `objFullPath` over each iteration and then use it when computing absolute path for a tree node.
@simon_brooke@mastodon.scot2026-05-07 13:32:53
OK, I have a horrible bug in `read`, which seems to be looping on the first character after a left parenthesis -- and I can't see why. But I got only four hours sleep last night and I am not taking enough care of my body, so it's time to stop work for the day, have a bath, and rest.
(Yes, I have voted).
#SelfCare
@macandi@social.heise.de2026-05-06 12:38:00
@curiouscat@fosstodon.org2026-05-07 23:02:17
Mozilla says 271 vulnerabilities found by Mythos have “almost no false positives”
https://arstechnica.com/information-technology/2026/05/mozilla-says-271-vulnerabilities-found-by-mythos-have-almost-no-fa…
@DamonHD@mastodon.social2026-04-07 10:49:20
I think that I have just programmed myself 25% of (the generation of) a virtual #plugInSolar system by tweaking ther power management of my off-grid system:
https://www.earth.org.uk/note-on-site-tech
@grumpybozo@toad.social2026-04-05 01:59:39
It’s been a long weekend…
working with a colleague to do some hardware refresh.
I despise hardware.
I’ve spent most of the last 4 hours fighting an anaconda (EL installer, not hot AI whatever) bug that is basically undebuggable. Alma 9.6 doesn’t work like Alma 9.5 did, but crashes instead when I try to do my ideal disk layout…
OK, I was going to be updating anyway, grab a 9.7 image.
NOPE, same bug.
getting 9.5 from the vault…
@grahamperrin@bsd.cafe2026-05-07 08:26:28
272902 – Security: allow passphrases for WPA-EAP to be saved without using clear text
<#FreeBSD
@servelan@newsie.social2026-04-30 22:55:28
No bugs. Duh.
Drivers help study road-trip mystery: what became of bug splats?
https://phys.org/news/2026-04-drivers-road-mystery-bug-splats.html
@zachleat@zachleat.com2026-03-30 13:47:11
@… bug buddies!! https://bugzilla.mozilla.org/show_bug.cgi?id=1438567
@beoz@det.social2026-02-25 09:19:35
Although we didn’t make it into the final article, we appreciate being referenced in the sources. The article of @… on #Y2k38 is well worth reading:
@gray17@mastodon.social2026-03-06 09:34:11
weird bug of the day. opening Steam's settings causes my bluetooth mouse to stop working. log messages seem to indicate the bluetooth driver gets into some state where it continually fails to process the mouse's messages, persists until I reboot. (aurora-dx linux, based on fedora 43). not going to bother diagnosing further
@hex@kolektiva.social2026-05-06 10:11:03
RE: https://mastodon.gamedev.place/@aeva/116526002579057799
First professional bug I ever found was an XML bomb. My first day, my manager is like, "oh yeah, so this is XML. We've been testing, you can hop on and throw some stuff at it. See what you can do."
I crashed the test environment with an XML bomb on a Friday evening.
@metacurity@infosec.exchange2026-05-08 12:27:35
Wow, this image from Firefox visually shows the power of Mythos's bug-sniffing capabilities.
https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/
@piger@mastodon.social2026-05-07 20:37:00
funny thought: if you run an immutable system, a villain with a kernel bug can do whatever the hell they want, but the admin can’t
@EarthOrgUK@mastodon.energy2026-04-06 19:51:02
On Website Technicals (2026-03) - Tech updates: EOM, Mastodon share button, bug fixes, low, RSS sadness, routing snafu. - https://www.earth.org.uk/note-on-site-technicals-106.html
@heiseonline@social.heise.de2026-04-26 16:00:34
@cdarwin@c.im2026-04-03 06:46:35
Steve Bourne is internationally known for his work on the UNIX operating system.
During his career he spent 20 years in senior engineering management positions at computer systems and networking companies.
These included Cisco Systems, Sun Microsystems, Digital Equipment and Silicon Graphics.
Since 2000 he has been Chief Technology Officer at El Dorado Ventures (now Rally Ventures) in Menlo Park, California
Upcoming
The Design of Unix Shell, Stephen R. Bourne
…
@BBC6MusicBot@mastodonapp.uk2026-03-09 04:39:00
🇺🇦 #NowPlaying on #BBC6Music's #TheBBCIntroducingMixtape
Wax Head:
🎵 Bug Doctor
#WaxHead
#newRelease 🆕 single
https://waxhead1.bandcamp.com/track/bug-doctor
https://open.spotify.com/track/50lVuRoIw1cmIQRRpFErRw
@Techmeme@techhub.social2026-05-01 17:55:53
A bug in popular cPanel, WHM, and WP Squared software has reportedly been exploited since Feb.; CISA it gives a 9.8 CVSS score, tells agencies to patch by May 3 (Jonathan Greig/The Record)
https://therecord.media/cisa-orders-federal-agencies-to-patch-cpanel-bug
@grahamperrin@bsd.cafe2026-03-07 16:22:46
@… thanks.
Not directly related, a review of <https://bugs.kde.org/show_bug.cgi?id=484259> may be timely:
― Auto login behaviour has X11 session s…
@kexpmusicbot@mastodonapp.uk2026-03-01 05:10:55
🇺🇦 #NowPlaying on KEXP's #Audioasis
Amy Beth and Thee Creeps:
🎵 I'm a Bug
#AmyBethandTheeCreeps
https://chaputarecords.bandcamp.com/track/im-a-bug-2
https://open.spotify.com/track/0S9VBQvt9yF3ielRxsERZP
@andres4ny@social.ridetrans.it2026-05-05 17:41:00
Oof. Time to shut down #apache on the one server I still run it on for a few hours until this gets updated.. #debian https://bugs.debian.org/1135737…
@newsie@darktundra.xyz2026-04-29 13:06:40
Apple Fixes Bug That Let FBI Extract Deleted Signal Messages After 404 Media Coverage https://www.404media.co/apple-fixes-bug-that-let-fbi-extract-deleted-signal-messages-after-404-media-coverage/
@cheeaun@mastodon.social2026-02-28 15:00:11
Why keyboard shortcuts so complicated 😅
Bug: https://github.com/cheeaun/phanpy/issues/1465
Possible fix on react-hotkeys-hook, but reverted because it causes bug for other keys:
@metacurity@infosec.exchange2026-05-06 11:05:33
Google Raises Top Android Bug Bounty to $1.5 Million to Combat AI-Era Threats
https://hothardware.com/news/google-android-bug-bounty-1-point-5-million-ai-era-threats
@adulau@infosec.exchange2026-02-18 21:09:39
We need id for vulnerabilities on online services. Documenting is critical.
#cybersecurity #vulnerability
@radioeinsmusicbot@mastodonapp.uk2026-04-04 15:34:14
🇺🇦 Auf radioeins läuft...
Fontaines D.C.:
🎵 Bug
#NowPlaying #FontainesDC
https://holdoholdoholdo.bandcamp.com/track/fontaines-d-c-bug-holdo-remix
https://open.spotify.com/track/0MXmiqd7zoXxv6Gqn9ahhQ
@metacurity@infosec.exchange2026-05-04 18:17:13
Hackers are still exploiting the cPanel bug to gain control of thousands of websites
https://techcrunch.com/2026/05/04/hackers-are-still-exploiting-the-cpanel-bug-to-gain-control-of-thousands-of-websites/
@grahamperrin@bsd.cafe2026-03-08 08:36:47
@… video group membership is certainly not required to start X.
#FreeBSD #documentation
@mgorny@social.treehouse.systems2026-04-04 16:21:45
1. Do random changes to cython-test-exception-raiser, and commit them as "initial code".
2. Move the extension module from the package directory into top-level "raiser.*.so", for no apparent reason.
3. Switch to CalVer, so that #Twisted newer upgrades to the new releases (it pins to <2).
4. I file a bug, because I'd like to finally remove the old version from #Gentoo.
#Python
@jorgecandeias@mastodon.social2026-05-03 15:21:45
Ugh!
Just noticed a bug in @… - when you put stuff in a list and activate the "hide members in home" toggle, you expect stuff to be hidden from the home feed. Yet, it's not. It's all displayed.
#mastodon
@publicvoit@graz.social2026-03-26 12:16:22
If you're using #gnupg with a keyserver for "gpg --refresh-keys" and you're running into the bug of getting aborted with "No data", this script is a good workaround for updating your keys of a single email domain using a (organization) key server:
@aral@mastodon.ar.al2026-02-27 17:54:46
🥳 New Kitten Release
This one fixes a bug that you would have encountered had you had an asynchronous component (component with asynchronous render method) nested more than one-level deep within synchronous components.
(Kitten’s html renderer transparently supports both synchronous and asynchronous render methods.)
So, this (taken from my unit test), for example, works correctly now:
```js
class AsynchronousOtherName extends KittenComponent {
async htm…
@grahamperrin@bsd.cafe2026-03-08 08:32:16
RE: https://mastodon.bsd.cafe/@grahamperrin/116155254526138460
FreeBSD-CURRENT testing with real hardware blocked by <
@tgpo@social.linux.pizza2026-03-03 22:25:36
@azonenberg@ioc.exchange2026-04-30 02:53:25
Fun bug of the day I need to chase once I finish some $dayjob stuff: same ngscopeclient binary, same scopesession decoding 100baseT1. Same Xeon 8362 so CPU feature flags are no factor.
On an nvidia 3070 in the lab it works flawlessly.
On the amd 9700 i just put in my office workstation the 100baseT1 scrambler consistently fails to lock and I get no decode, but the eye patterns look fine so it's not failing too badly.
If i run on live streaming data from the thunderscope…
@teledyn@mstdn.ca2026-03-09 15:55:25
New dilemma: Facebook Messenger has just added Meta AI and I have no need to bomb schools or hospitals, but my children and all the local musicians I play with flatly refuse to use another method. 😔
And yes, I checked. A bug is a feature you cannot turn off.
In the AI Apocalypse, no one cares if you scream. It's not unusual. Folks are screaming everywhere.
@kexpmusicbot@mastodonapp.uk2026-03-01 04:59:52
🇺🇦 #NowPlaying on KEXP's #Audioasis
Amy Beth and Thee Creeps:
🎵 I'm a Bug
#AmyBethandTheeCreeps
https://chaputarecords.bandcamp.com/track/im-a-bug-2
https://open.spotify.com/track/0S9VBQvt9yF3ielRxsERZP
Please 🔁 BOOST to share what you like
- your followers don't see if you ⭐ favourite a post
@adlerweb@social.adlerweb.info2026-03-01 06:02:30
Ich bin der Edge-Case… *bug report schreib*
@cyrevolt@mastodon.social2026-05-01 00:54:52
3am on a public holiday is a good time for posting bug reproducers...
https://github.com/kube-rs/envtest/issues/58
@thomasfuchs@hachyderm.io2026-04-27 13:56:45
Today's Mastodon bug, images don't load for me at all (not even my own) but I can upload images and other people see them fine.
@kubikpixel@chaos.social2026-03-21 10:25:08
Security — 15 comment bubble on white
Cryptographers engage in war of words over RustSec bug reports and subsequent ban
Rust security maintainers contend Nadim Kobeissi's vulnerability claims are too much
🦀 https://www.theregister.com/2026/03/20/cry
@simon_brooke@mastodon.scot2026-04-04 09:59:39
OK, Beowulf bug. Both EVAL and APPLY in Beowulf are straight transcriptions of the mexprs on pages 70 and 71 of the #Lisp 1.5 Porgammer's Manual.
CONC is the only FEXPR I have implemented so far (and one of only three FEXPRs in the manual).
The unit test for CONC fails, because EVLIS is called on the argument list by EVAL (line 20 on page 71) before it reaches APPLY, and therefore b…
@aardrian@toot.cafe2026-03-18 17:24:56
16-year-old Safari bug to ignore `text-transform` on text copy:
https://bugs.webkit.org/show_bug.cgi?id=43202
Today, there’s a PR to address it:
@cdarwin@c.im2026-04-23 03:18:51
Apple fixes bug that cops used to extract deleted chat messages from iPhones
Apple released a software update on Wednesday for iPhones and iPads fixing a bug that allowed law enforcement to extract messages that had been deleted or disappeared automatically from messaging apps.
This was because notifications that displayed the messages’ content were also cached on the device for up to a month.
In a security notice on its website, Apple said that the bug meant “notification…
@Techmeme@techhub.social2026-04-23 11:01:12
Apple fixes a bug that stored notifications for deleted messages on iPhone and iPad, following a report that police used it to extract deleted Signal messages (Lorenzo Franceschi-Bicchierai/TechCrunch)
https://techcrunch.com/2026/04/22/appl
@seeingwithsound@mas.to2026-04-30 18:02:56
{OT] One tiny exploit gives full Linux access: all kernels since 2017 are vulnerable https://cybernews.com/security/critical-linux-kernel-bug-grants-root-privileges/
@grahamperrin@bsd.cafe2026-05-06 18:04:54
@… you're not an idiot 🙂 I think you helped me to discover a bug:
<https://github.com/freebsd/pkg/issues/2671>
– and if that bug is invalid, then I'…
@BBC6MusicBot@mastodonapp.uk2026-04-09 20:06:38
🇺🇦 #NowPlaying on #BBC6Music's #RileyAndCoe
The Bug Club:
🎵 Yours (If You Want Me)
#TheBugClub
https://thebugclub.bandcamp.com/track/yours-if-you-want-me
https://open.spotify.com/track/2sCsGYw2166yuq80w1qRXq
@andres4ny@social.ridetrans.it2026-04-04 19:57:10
lol a conversation I just had w/ a friend
[here's that MR: https://salsa.debian.org/ddp-team/release-notes/-/merge_requests/268 ]
![T: "I turned off apt instaling recommends and also let it autoremove T: recommends I didn't ask for"
T: "kinda painful, but I want to explicitly know"
T: "anyway then upgraded server to [debian 13] and all sorts of stuff broken"
T: "#1 have to install systemd-cryptdisks"](https://mastodon-usw-cache.b-cdn.net/media_attachments/files/116/348/199/128/793/510/original/cfd8993e27602138.png)
![Me: "I got hit with the systemd-cryptdisks thing"
Me: "as a matter of fact, i filed a bug!"
T: "libvirt is also all sorts of broken, still figuring that out"
Me: [link to a merge request in debian]
T: "it is in the release notes at least" [link to debian's release notes]
Me: "yeah, i'm why it's in the release notes 🙂"
T: "oh because of you!"
T: "nice"
T: "thanks"
Me: "np"](https://mastodon-usw-cache.b-cdn.net/media_attachments/files/116/348/199/142/378/180/original/a970801dc1ba1942.png)
@mgorny@social.treehouse.systems2026-03-29 02:24:49
Finally a package where I can't suspect the author of vibecoding!
"""
Version: 2026.3.32
Fixed segfault.
Version: 2026.3.31
Fixed bug again.
Version: 2026.3.30
Fixed bug.
"""
https://github.com/mrabarnett/mrab-regex/blob/5d51c75da03116e08bb6fb537fae6d8c804cc92c/changelog.txt
(It's also a horribly bad package, with tons of unmaintainable code, heavily relying on CPython internals.)
@EarthOrgUK@mastodon.energy2026-05-02 19:51:04
On Website Technicals (2026-04) - Tech updates: per-minute Eddi tweaks, Time Machine bug, virtual plug-in solar, merit order, intensity forecast, USB power wrangling, greed, BibTeX URLs... - https://www.earth.org.uk/note-on-site-technicals-107.html
@ErikJonker@mastodon.social2026-04-02 07:11:38
"Something happened a month ago, and the world switched. Now we have real reports." It's not just Linux, he continued. "All open source projects have real reports that are made with AI, but they're good, and they're real."
https://www.theregister.com/2026/03/26/gre…
@newsie@darktundra.xyz2026-02-18 21:13:05
Fed agencies ordered to patch Dell bug by Saturday after exploitation warning https://therecord.media/fed-agencies-ordered-to-patch-dell-bug-after-exploitation-warning
@macandi@social.heise.de2026-02-27 13:32:00
Update 26.3.1 für visionOS behebt Fehler
Knapp zwei Wochen nach visionOS 26.3 legt Apple eine kleinere Aktualisierung vor. Sie behebt einen kürzlich ermittelten Bug, der recht speziell ist.
https://www.
@simon_brooke@mastodon.scot2026-03-29 16:37:54
Content warning: C program bug, help sought
Friends who speak C, help me with a bug that I just can't see.
Source is here:
https://git.journeyman.cc/simon/post-scarcity/src/branch/develop/src/c/memory/page.c
As you can see, <string.h> is included at line 13.
At…
@zachleat@zachleat.com2026-03-30 15:21:56
@… oh, then I misread: BUG ENEMIES 😅
@heiseonline@social.heise.de2026-03-12 05:13:00
#heiseshow: KI auf Bug-Suche, Kernkraft-Comeback, Homeoffice in der Energiekrise
In der #heiseshow: KI findet Firefox-Bugs schneller als Menschen, von der Leyen bereut den Atomausstieg und Homeoffice als Reaktion auf Energiekrisen.
@azonenberg@ioc.exchange2026-04-30 13:39:15
You know those bugs where you go look at the code and wonder "how the heck did this work in the first place"?
Yeah, this is one of them.
https://github.com/ngscopeclient/scopehal/commit/a5f616ae9535c15a9eda2c04840cf63580adfafe
@hex@kolektiva.social2026-05-02 07:23:18
"It places page cache pages in a writable scatterlist, separated from the legitimate write region by nothing more than an offset boundary. The design assumes every AEAD algorithm will confine its writes to the intended destination, but nothing in the API enforces this, and nothing documents it as a requirement.
Unfortunately, one AEAD algorithm breaks this silent invariant."
"No other standard AEAD algorithm in the kernel [uses memory that doesn't belong to it as a scratch pad]. GCM, CCM, and regular authenc all confine their writes to the legitimate output area. authencesn alone writes past the boundary."
I'm actually amazed that there's only one bug here. Somehow almost everyone just managed to do the right thing, despite no mechanism enforcing it and no documentation describing it. That's just amazing. It's a testament to the skill of those developers, despite an incredibly bad design.
#copyfail
@EarthOrgUK@mastodon.energy2026-03-02 03:23:04
On Website Technicals (2024-04) - Tech updates: ORCID, RSS work storage, podcast images, transcripts, Apache 2.4 ETag bug, 406 and more 429, less AMP, cacheing tweaks. - https://m.earth.org.uk/note-on-site-technicals-83.html
@metacurity@infosec.exchange2026-04-04 14:32:35
Happy Saturday! Metacurity is proud to offer our free and premium subscribers a weekly digest of the best long-form (and longish) infosec-related pieces we couldn't properly fit into our daily news crush.
This week's selection covers
--The college kid who discovered the Kimwolf botnet,
--US AI build-out is dependent on Chinese-made electrical equipment,
--AI agent traps are the next big security challenge,
--AI bug discovery tilts the field toward attacke…
@grahamperrin@bsd.cafe2026-05-03 03:02:08
@… this bug?
287569 – bsdinstall: restarting installation: Error: No disk(s) present to configure — <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=2…
@kexpmusicbot@mastodonapp.uk2026-04-05 19:28:02
🇺🇦 #NowPlaying on KEXP's #VarietyMix
A Tribe Called Quest:
🎵 Buggin’ Out
#ATribeCalledQuest
https://illvibe.bandcamp.com/track/buggin-out-a-tribe-called-quest
https://open.spotify.com/track/6GAemDMWAXa8wZOBkO1gar
@BBC6MusicBot@mastodonapp.uk2026-02-09 21:22:02
🇺🇦 #NowPlaying on #BBC6Music's #RileyAndCoe
Damaged Bug:
🎵 End Of The War
#DamagedBug
#newRelease 🆕 single
https://damagedbug.bandcamp.com/track/end-of-the-war
https://open.spotify.com/track/6d3tASd0yeKa22kyYNieDi
@Techmeme@techhub.social2026-02-26 01:51:02
Cisco warns of critical SD-WAN bug that was actively exploited in zero-day attacks since 2023, as CISA and international partners issue emergency directives (Lawrence Abrams/BleepingComputer)
https://www.bleepingcomputer.com/news/secu
@mgorny@social.treehouse.systems2026-03-03 16:46:29
1. Submit a pull request to #zlib that changes the library filename on #Windows.
2. Pull request gets merged, and you effectively break everything that linked dynamically to zlib.
3. Attack everyone who reported this as a bug.
#OpenSource
@metacurity@infosec.exchange2026-02-18 15:20:42
Microsoft says bug causes Copilot to summarize confidential emails
https://www.bleepingcomputer.com/news/microsoft/microsoft-says-bug-causes-copilot-to-summarize-confidential-emails/
@azonenberg@ioc.exchange2026-02-27 15:04:06
CDash experiments update: Provisioned a VM (not yet reachable from the outside world) to tinker with it since it's been 10 years since I last used the platform.
How it's going so far: ran into https://github.com/Kitware/CDash/issues/3122
They're using npm and a who…
@grahamperrin@bsd.cafe2026-04-04 08:47:59
@… privately
I didn't make you a cc recipient, but FYI:
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294221>
(I no…
@BBC6MusicBot@mastodonapp.uk2026-03-09 22:16:39
🇺🇦 #NowPlaying on #BBC6Music's #RileyAndCoe
Damaged Bug:
🎵 OVER-EXPOSED
#DamagedBug
#newRelease 🆕 single
https://damagedbug.bandcamp.com/track/over-exposed
https://open.spotify.com/track/07NP9mrUoNvXWKPIbY4Mld
@grahamperrin@bsd.cafe2026-03-01 14:12:01
@EarthOrgUK@mastodon.energy2026-03-29 03:23:05
On Website Technicals (2026-03) - Tech updates: EOM, Mastodon share button, bug fixes, low, RSS sadness, routing snafu... - https://www.earth.org.uk/note-on-site-technicals-106.html
@metacurity@infosec.exchange2026-04-22 14:53:50
To help defenders prioritize patches amid the coming onslaught of bug reports, Anthropic recommends that they rely on a vulnerability framework known as the Exploit Prediction Scoring System (EPSS).
Check out my latest CSO piece on how EPSS works.
Many thanks to Michael Roytman and Ed Bellis of Empirical Security, James Robinson of Netskope, Aaron Weismann of Main Line Health, and Ramy Houssaini of Cloudflare for their insight.
Anthropic bets on EPSS for the coming bug surg…
@Techmeme@techhub.social2026-04-14 14:50:49
Adobe patches a zero-day in Acrobat DC, Reader DC, and Acrobat 2024, which hackers have been actively exploiting for at least four months (Zack Whittaker/TechCrunch)
https://techcrunch.com/2026/04/14/adobe-fixes-pdf-zero-day-sec…
@grahamperrin@bsd.cafe2026-05-05 09:10:02
@… @…
<https://bugs.fr…
@Techmeme@techhub.social2026-02-18 15:05:55
Microsoft confirms a bug that let Microsoft 365 Copilot summarize confidential emails from Sent Items and Drafts folders, and deployed a fix in early February (Sergiu Gatlan/BleepingComputer)
https://www.bleepingcomputer.com/news/micr
@metacurity@infosec.exchange2026-02-19 14:28:58
Don't miss today's Metacurity which is jam-packed with a host of intense cybersecurity developments, including
--Texas AG sues TP-Link, saying it allowed the CCP to hack routers,
--A hacker gained access to a French national bank database with 1.2m accounts,
--Microsoft 365 Copilot bug summarized confidential emails,
--DEF CON bans Epstein's hacking associates,
--Deutsche Bahn operations disrupted by cyberattack,
--Polish army bans Chinese cars,…
