@Techmeme@techhub.socialThe curl project plans to end its HackerOne bug bounty program at the end of January, citing a surge in low-quality AI-generated vulnerability reports (Lawrence Abrams/BleepingComputer)
https://www.bleepingcomputer.com/news/securi…
@chpietsch@fedifreu.deTelnet is a remote login protocol that became obsolete in 1995 when SSH became available because SSH offers transport encryption while telnet does not.
Those who kept a telnetd running for whatever reason (and did not hide it behind a firewall) have had a root backdoor for the last ten years.
The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USE…
@toxi@mastodon.thi.ngThe official Epson Print Layout application is such an annoying piece of bad software, bug ridden and slowly turning out to be quite costly (when working with expensive fine art inks & paper, costing 2.50 EUR per page)...
Any recommendations for alternatives (which also support the P900 advanced ink settings?)
Just one example: I go through the effort to create a nice custom page layout in a certain orientation (e.g. A3 landscape). The app also shows the preview correctly, bu…
@malik@Mastodon.SocialTja. Zu spät. https://digitalcourage.social/@crits/115425254503456904
@metacurity@infosec.exchangeDon't miss today's packed Metacurity for the most critical infosec developments you need to know, including
--DOGE workers shared SSN data with outsiders, derailed DISA operations,
--UK launches national fraud reporting service,
--China blames Taiwan for cyberattacks,
--EU proposes freezing out Chinese tech suppliers,
--New Zealand launches Manage My Health breach probe,
--Curl ends its bug bounty program due to AI flood,
--Cloudflare fixes WAF…
@knurd42@social.linux.pizzaMartin Stransky highlights some recent major achievements for #Firefox on Linux: ""HDR video playback support, reworked rendering for fractionally scaled displays, and asynchronous rendering implementation. All this progress was enabled by advances in the Wayland compositor ecosystem, with new features implemented by Mutter and KWin.
[…]
And there are even more challenge…
@vyskocilm@witter.cz
@cdamian@rls.socialDNS strikes again
"Amazon reveals cause of AWS outage that took everything from banks to smart beds offline"
https://www.theguardian.com/technology/2025/oct/24/amazon-reveals-cause-of-aws-outage
@grahamperrin@bsd.cafeFreeBSD bug 290024 – FreeBSD Installer live system: pkg: POST-INSTALL script failed (files such as dconf, indexinfo, xmlcatmgr not found)
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290024>
Cc @…
@fortune@social.linux.pizza"I'm an idiot.. At least this one [bug] took about 5 minutes to find.."
(Linus Torvalds in response to a bug report.)
> I'm an idiot.. At least this [bug] took about 5 minutes to find..
Disquieting ...
(Gonzalo Tornaria in response to Linus Torvalds's mailing about a kernel bug.)
> I'm an idiot.. At least this [bug] took about 5 minutes to find..
We need to find some new terms to describe the rest of us mere mortals
then.
@Techmeme@techhub.socialSources: iOS 27 will be a Snow Leopard-style update focused on bug fixes and performance, plus new AI features; FT's retirement report on Tim Cook was premature (Mark Gurman/Bloomberg)
https://www.bloomberg.com/news/newsletters…
@usul@piaille.fr
@hynek@mastodon.socialyour bug report is very important to me; please stand by
@crell@phpc.socialI'm running into a really annoying render bug with the latest Kubuntu, which now uses Wayland. Anyone else seen this issue, and know how to fix it?
https://askubuntu.com/questions/1559959/chromium-apps-scaling-wrong-in-wayland-kubuntu-25-10
@aardrian@toot.cafeJeremy Keith found a `<datalist>` bug in iOS 26:
https://adactio.com/journal/22360
I confirmed it affects iPadOS 26.2:
https://
@neverpanic@chaos.socialOuch:
"I stumbled upon a bug in RNP that has been introduced when refactoring. Namely, session keys generated for PKESK are not randomized but always zero."
#RNP is #Thunderbird's implementation of #OpenPGP
@thomasfuchs@hachyderm.ioYay, Mastodon 4.5.1 (released last week) fixes the bug I reported! Really fast turnaround. Thanks ClearlyClaire! https://github.com/mastodon/mastodon/issues/36775
@x_cli@infosec.exchangeRaaaah, que c'est pénible de bosser avec des attributs WriteOnly dans Terraform !
Ces attributs ne sont présents que dans la config, et pas dans le plan, ce qui fait qu'on doit aller tirer la plupart des valeurs dans le plan et une fois de temps en temps "ah merde, c'est vrai que lŠ, c'est un attribut WriteOnly, donc faut aller consulter la config"... et si t'oublies, tu as juste une valeur nil et tu passes 4 plombes Š chercher le bug.
@kexpmusicbot@mastodonapp.uk🇺🇦 #NowPlaying on KEXP's #MorningShow
The Bug Club:
🎵 Quality Pints
#TheBugClub
https://thebugclub.bandcamp.com/track/quality-pints
https://open.spotify.com/track/4BPwhKpHKpEjQh9HCCV0EP
@beoz@det.social
@fanf@mendeddrum.orgfrom my link log —
GHC: from bug to merge.
http://neilmitchell.blogspot.com/2018/12/ghc-from-bug-to-merge.html
saved 2018-12-12 ht…
@tgpo@social.linux.pizza#Jellyfin for #Roku 3.0.15 released
This release fixes a nasty #HDHomeRun Tuner bug.
Shout out to VTRunner, first contribution!!
Release Notes:
@heiseonline@social.heise.deQuick-Share-Bug stört Datentransfer zu Apple-Geräten
Quick Share ermöglicht nahtlose Dateiübertragungen auch zwischen Android- und Apple-Nutzern. Bei manchen Nutzern funktioniert das Ganze nicht, wie erhofft.
https:/…
@gideonstar@mastodon.gideonstar.de
@radioeinsmusicbot@mastodonapp.uk🇺🇦 Auf radioeins läuft...
Fontaines D.C.:
🎵 Bug
#NowPlaying #FontainesDC
https://holdoholdoholdo.bandcamp.com/track/fontaines-d-c-bug-holdo-remix
https://open.spotify.com/track/0MXmiqd7zoXxv6Gqn9ahhQ
@thomasfuchs@hachyderm.ioYet another use case for AI: annoy software developers with fake bug reports https://mastodon.social/@bagder/115752774164143463
@alm10965@mastodon.social"Now I'm higher than anyone, yeah
And the dirt ain't nothing on me, yeah"
Bug
von
Fontaines D.C.
#FontainesDC
@kubikpixel@chaos.socialHere is the explanation of @… itself why it was down worldwide yesterday (again) and it styled a lot on the Internet.
»Cloudflare outage on November 18, 2025:
On 18 November 2025 at 11:20 UTC (all times in this blog are UTC), Cloudflar's network began experiencing significant failures to deliver core network traffic. […]«
☁️
@keithp@fosstodon.orgI received a bug report about picolibc's iconv implementation. So I added a test case. Which pushed the CI runtime up over *six hours* at which point github gave up and killed it.
I spent a bit of time yesterday and today re-implementing the JIS to Unicode conversion function to make it faster. Lines changed: 5125 additions & 7495 deletions. Runtime is back to normal now. And I have a deeper understanding of these encodings.
@Techmeme@techhub.socialMicrosoft expands its bug bounty program so that any critical vulnerability, including in third-party code, impacting its online services is eligible for awards (Duncan Riley/SiliconANGLE)
https://siliconangle.com/2025/12/11/mi
@zachleat@zachleat.comTiny bug fix release of `<table-saw>`: https://github.com/zachleat/table-saw/releases/tag/v1.0.7
@aardrian@toot.cafeWebKit Bug 277290 AX: Scrolling containers inoperable with keyboard (July 2024, critical):
https://bugs.webkit.org/show_bug.cgi?id=277290
I’m betting if we can convince the Google Chrome team that this is preventing uptake of CSS carousels they’ll dispatch an engineer to fix i…
@mlawton@mstdn.socialThere is a bug in this 3rd party API that declares a payload to fail their validation checks in a false positive way BUT ALSO fails to report what the alleged validation errors are.
And of course, there are none, so I've now spent days in a logical lockpicking manner, brute force trial and error to rule out various possibilities.
And, just now, I got it. 🎉 It's a workaround, but it'll do. I've reported the bug and they acknowledge it, but no timetable for a fix. …
@BBC6MusicBot@mastodonapp.uk🇺🇦 #NowPlaying on #BBC6Music's #ChrisHawkins
Sudan Archives:
🎵 A BUG'S LIFE
#SudanArchives
https://sudanarchives.bandcamp.com/track/a-bugs-life
https://open.spotify.com/track/1D7qrNAEbZ0G4oR6YZTvFK
@metacurity@infosec.exchangeSecurity researcher fumes at low macOS bug bounty awards
https://appleinsider.com/articles/25/12/02/security-researcher-fumes-at-low-macos-bug-bounty-awards
@grahamperrin@bsd.cafeFreeBSD bug 291034 – Minimal base is not compatible with (for example) bsdinstall keymap
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291034>
> … for the correctly-keyed password:
>
> Login incorrect
– via <
@robpike@hachyderm.ioMany years ago I was working with a friend to find a bug in a Makefile generator. We had a megabyte or so of Makefile we needed to examine. He was an emacs user. It took him minutes just to open the file. I was using sam. It took about a second for sam to load, and I found the problem before he'd even finished loading the file.
The speed of tools matters, and big files are common nowadays. Things should stay fast as their workload grows. That goes double for interactive tools.
By the way, it still takes me 30 seconds to log in to my bank. I wonder how long it will take when it's an LLM-generated landing page.
https://phanpy.social/#/hachyderm.io/s/115891592999188880
@ruario@vivaldi.netRE: https://social.vivaldi.net/@ruario/115711283431190976
Today, the Vivaldi team was quick on our security bug fix release.
Opera, Edge, and Brave are still not up to date.
[Yes … this is a joke. Though also factually true, which is more th…
@joxean@mastodon.social
@hippyjo@c.imDonald Trump wants you to forget about the Epstein Files...
#trump #pedophile #USA #kashPatel
@beoz@det.social@…
Ich hatte mal einen ähnlichen Fall bei UPC (später Sunrise). Ich kann mir vorstellen dass das irgend ein Bug/Prozessproblem bei deinem Anbieter ist. Wahrscheinlich können die Mitarbeiter mit denen du telefonierst auch nicht viel machen. Da ich es tatsächlich geschafft habe bei Sunrise zu künden, ein Tipp: Frag bei deinem neuen Anbieter um Hilfe falls es Wechs…
@Erikmitk@mastodon.gamedev.placeIn case you’re interested about the Cloudflare issue yesterday.
https://blog.cloudflare.com/18-november-2025-outage/
@newsie@darktundra.xyzCISA gives federal agencies one week to patch exploited Fortinet bug https://therecord.media/fortinet-fortiweb-vulnerability-cisa-advisory
@UP8@mastodon.social🔪 Borderlands 4‘s Infamous Crit Knife Is Back, Bugged, And Badder Than Ever
#videogame
@neuhaus@mastodon.acm.orgThe codeberg.org homepage (for logged out users) appears in English, no matter which language is selected #bug @…
@catsalad@infosec.exchangebug fixes and improvements
@marcel@waldvogel.family
@gla@mastodon.socialJust today, I tried asking GitHub Copilot to fix a non-existing bug in a Hugo website (so, HTML, CSS, toml: no archaic file formats).
It happily hallucinated not recognizing that there was nog bug, proposing CSS changes that didn’t do anything useful (because no bug, remember!).
#genAIgoingGreat
@migueldeicaza@mastodon.socialAfter a couple of months of work, I have finally landed the micro-SwiftGodot to our main branch-for people to build small extensions
https://github.com/migueldeicaza/SwiftGodot/releases
We still have that nasty Apple bug that bloats binaries by bolting SwiftSyntax in yo…
@inthehands@hachyderm.ioThis from @… and the maybe-apocryphal story of software devs paid per bug fixed are •classics•, cannot be repeated often enough https://mastodon.thi.ng/@toxi/115544773972842232
@mcdanlj@social.makerforums.infoThis might explain why I keep thinking "I could have sworn I took more pictures than that" when I'm trying to take a lot of pictures to document a build in order to create illustrated instructions. 😦
https://www.androidcentral.com/phones/goog
@LillyHerself@Mastodon.socialHave we got a bug happening in mastodon.social? I can't access my Notifications, I get this error message:
TypeError: Cannot read properties of undefined (reading 'pending_requests_count')
Ae (https://mastodon.social/packs/notifications_v2-index-n643a…
@hanno@mastodon.socialMysterious bug from hell: I noticed that a Docker container running an Apache web server was sometimes shutting down for no apparent reason, but rarely enough that it was difficult to reproduce. After adding some debugging (given this shuts down the container there was no way to access the logs afterwards easily) and waiting for the issue to show up again.
🧵
@csessh@social.linux.pizza @kubikpixel@chaos.socialAI is Dumber on Mondays
It's Monday morning. My coffee is hot, my IDE is open, and Claude Code just suggested I fix a bug by... creating the exact same bug in a different file. Cursor is hallucinating function names that don't exist. Codex thinks undefined is a valid return type in TypeScript.
Did the AI catch a case of the Mondays?
🤔
@smashtie@mas.toEvery time I try the Mastodon "official" app again, it takes me about a minute before I find something that still annoys me. Today it was having to click an x button to close an image. The standard back swipe/button on my android phone doesn't do it. Why??
EDIT: turns out it was my phone's OS bug, nothing to do with the Mastodon app. Great support on the Mastodon GitHub.
@grahamperrin@bsd.cafe@… I can't find your thread about things going wrong with … was it swap and fstab?
<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=169077> …
@azonenberg@ioc.exchangeDebugging RTL can be quite the rollercoaster sometimes.
* Please make timing
* Oh wow it did
* But it doesn't work
* Fix the bug
* Now it fails timing
* Pipeline it
* Hope it works now
@metacurity@infosec.exchangeAmazon launches private AI bug bounty to strengthen Nova models - rewards up to $25K
https://www.amazon.science/news/amazon-launches-private-ai-bug-bounty-to-strengthen-nova-m
@ruth_mottram@fediscience.orgDaily #AcWriMo: not as much writing as I wanted but completed first 1/4 of main paper, got final draft from colleague on 2nd, ok comments back from reviews on 3rd AND 4th & 5th paper a colleague is leading now out as preprint online. 🙌
And we found an obscure bug in the model code 🙄
#FediWriMo.
@luana@wetdry.worldSo:
I remember playing a version that had a setting for enabling/disabling female costumers I think? Maybe not idk, couldn’t find that one today.
So yeah April 20th is definitely this game’s best build
#VRParadise
@boris@cosocial.caDid you know that SpaceShip .com, who is a Domain Registrar plus a bunch of other hosting services, has something called "Alf AI"?
Yes, I am going to bug them to sponsor ATmosphereConf - what a perfect match!
https://www.spaceship.com/alf-ai-assistant/
@kexpmusicbot@mastodonapp.uk🇺🇦 #NowPlaying on KEXP's #VarietyMix
Sudan Archives:
🎵 A BUG'S LIFE
#SudanArchives
https://sudanarchives.bandcamp.com/track/a-bugs-life
https://open.spotify.com/track/1D7qrNAEbZ0G4oR6YZTvFK
@thomasfuchs@hachyderm.ioI just installed Windows 3.11 for Workgroups (in an emulator), how's your day going
Fun Y2K bug btw
@theodric@social.linux.pizzaIdea: a bug repeller called The Skeeter Yeeter (I want a small cut if you use the name, thx)
@publicvoit@graz.socialFYI: If your #Mastodon #domainverification doesn't work, check if you do have upper case letters in your URL as this won't work as of this #bug report from 2022:
@jorgecandeias@mastodon.socialShit.
I got the bug thing again and now I can't use #Mastodon on the web. Refreshing does nothing.
There's a link to copy stuff to the clipboard and the stuff copied says "TypeError: can't access property "pending_requests_count", i.summary is undefined".
Most annoyingly, this happened while I was writing a post, which got lost.
@x_cli@infosec.exchangeWelp, from my PoV, all sides are wrong.
There is a difference between bug reports generated by AI to spam curl devs and AI generated bug reports sent by Google to FFmpeg devs that are accurate. Calling them slop is hardly true.
"We would rather not know there is a vulnerability in our software" is a terrible take.
Also, I would like to say that maybe it is unreasonable for a software with so little funding to want to support all codecs that were ever invented becaus…
@zachleat@zachleat.comI think I found a Node.js bug! https://github.com/nodejs/node/issues/61385
@metacurity@infosec.exchangeCheck out today's Metacurity for the most critical infosec developments you might have missed over the weekend, including
--Trump to hand some offsec ops against adversaries to the private sector, report,
--Canada to probe billboard facial recognition use,
--Pope Leo weighs in on Italian spyware scandal,
--Oracle bug led to theft of sensitive NHS docs,
--Coupang founder will go MIA at parliamentary hearing,
--Asahi will change cyber posture after ransom…
@grahamperrin@bsd.cafe@… setting a password in single user mode can be … ahem … entertaining, if your keyboard is not the United States standard.
<https://bugs.freebsd.org/bugzilla/show
@Techmeme@techhub.socialCloudflare says the November 18 outage was caused by a change to one of its "database systems' permissions", not by "malicious activity of any kind" (Matthew Prince/Cloudflare)
https://blog.cloudflare.com/18-november-2025-outage/
@kexpmusicbot@mastodonapp.uk🇺🇦 #NowPlaying on KEXP's #AfternoonShow
Sudan Archives:
🎵 A BUG'S LIFE
#SudanArchives
https://sudanarchives.bandcamp.com/track/a-bugs-life
https://open.spotify.com/track/1D7qrNAEbZ0G4oR6YZTvFK
@beoz@det.social@… Spannend wird es auf jeden Fall. Deine Erfahrungen mit dem Millennium Bug sind sehr wertvoll. Wird sicher auch ein Thema werden.
@newsie@darktundra.xyzFederal agencies now only have one more day to patch React2Shell bug https://therecord.media/react2shell-vulnerability-cisa-shortens-patch-deadline
@radioeinsmusicbot@mastodonapp.uk🇺🇦 Auf radioeins läuft...
Fontaines D.C.:
🎵 Bug
#NowPlaying #FontainesDC
https://holdoholdoholdo.bandcamp.com/track/fontaines-d-c-bug-holdo-remix
https://open.spotify.com/track/0MXmiqd7zoXxv6Gqn9ahhQ
@grahamperrin@bsd.cafe@… mis-typing your own username is OK.
The real fun begins when you lock yourself out, during installation, with a correctly typed password.
https://bugs.freebsd.org/bugzilla…
@fortune@social.linux.pizza<james> abuse me. I'm so lame I sent a bug report to
debian-devel-changes
@migueldeicaza@mastodon.socialThis week I did a little performance work, and then retested the code “well this is amazing, it is now buttery smooth”, closed the bug.
Then I remembered I replaced the m2 iPad with and m5 iPad.
That bug is staying closed until someone complains :-)
@aardrian@toot.cafeIt’s late 2025 and Safari still breaks accessibility via display properties:
https://bugs.webkit.org/show_bug.cgi?id=299321
Amended my 2022 post as a result:
@thomasfuchs@hachyderm.ioSo I've a medical thing that I need to buy once a month on Amazon and they cancelled my subscription delivery for it last time (but not the subscription itself), without telling me.
I tried to just order it for one time delivery, but the delivery date was a month out and they immediately cancelled my order.
My wife told me to use my developer brain—and yes, imagining a bug with some row in a database being in a fugue state, the exactly a month out delivery date being the biggest hint to something going into a default state when a calculation fails.
So I removed the subscription to the item (they make it hard to find where to do this).
Bingo: I can now order immediately for delivery in two days and for working subscrpition delivery.
@beoz@det.socialUnser Urteil zum Pariser Y2K38-Fall – kurz zusammengefasst:
- Y2K38 ist ein versteckter Mangel mit realen Folgen.
- Obsoleszenz wird nicht toleriert.
- Das Problem ist real und teuer – schon heute.
Kritische Infrastrukturen sind betroffen.
- Es geht um Architektur, Haftung und grosse Kosten.
- Open Source ist Teil der Lösung.
👉 Die vollständige Analyse und Einordnung findet ihr im Blog.
@kexpmusicbot@mastodonapp.uk @newsie@darktundra.xyzFederal agencies now only have one more day to patch React2Shell bug https://therecord.media/react4shell-vulnerability-cisa-shortens-patch-deadline
@grahamperrin@bsd.cafeFrom <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290344#c5>:
＂Without force: deleting all packages may cause removal of the one and only kernel …＂
In other words, if I'm not mistaken, flagging FreeBSD-base meta packages as vital does not necessa…
@zachleat@zachleat.com@… I’ve already got most of the deps updated (though the test workflow needs updating)
but the next phase will likely be strictly bug fixes
then maybe we’ll talk about new features if it doesn’t turn out too terrible 😅
@beoz@det.socialIst das der Startschuss? Ein Gerichtsurteil zwingt Alstom ihre Züge in Paris #y2k38 sicher zu machen. 1/3 der des Verkehrssystems würde komplett ausfallen. Alstom hat in den letzten 6 Jahren keine Lösung gefunden. Das ist nur die Soitze des Eisberges. y2k38 kein Problem?! Das sieht Alstom mittlerweile anders. Mehr werden folgen #Y2038
@radioeinsmusicbot@mastodonapp.uk @kexpmusicbot@mastodonapp.uk🇺🇦 #NowPlaying on KEXP's #VarietyMix
The Bug feat. Liz Harris:
🎵 Void
#TheBug #LizHarris
https://thebugmusic.bandcamp.com/track/void-featuring-liz-harris
https://open.spotify.com/track/6TG4tLcjQ4JKHBBaxJ5GVp
@kexpmusicbot@mastodonapp.uk🇺🇦 #NowPlaying on KEXP's #VarietyMix
Sudan Archives:
🎵 A BUG'S LIFE
#SudanArchives
#newRelease 🆕 single
https://sudanarchives.bandcamp.com/track/a-bugs-life
https://open.spotify.com/track/2Bb9jsaeHdjnDy6ZGIM5tY
@newsie@darktundra.xyzFederal agencies ordered to patch Microsoft Desktop Windows Manager bug https://therecord.media/desktop-windows-manager-vulnerability-added-to-cisa-list
@aardrian@toot.cafe4 post updates last night:
• W3C vid on `lang`: https://adrianroselli.com/2015/01/on-use-of-lang-attribute.html#Update09
• More confirmation automated tests are crap:
@grahamperrin@bsd.cafeIf this file exists, please do NOT follow the widespread advice to overwrite it:
/usr/local/etc/pkg/repos/FreeBSD.conf
Bug reports for the src and doc trees, and the wiki:
― <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291501>
― <
@metacurity@infosec.exchangeDespite all the reports, Instagram denies it has experienced a breach.
https://www.bleepingcomputer.com/news/security/instagram-denies-breach-amid-claims-of-17-million-account-data-leak/
@beoz@det.social@… It's already a security vulnerability. (CVE-2025-0101) (CVE-2025-1235)(CVE-2025-55068)
And quite expensive for Alstom for example https://y2k38.ch/herstellerhaftung-j…
@grahamperrin@bsd.cafe @grahamperrin@bsd.cafe @grahamperrin@bsd.cafe@… I usually have my butler attend to such things. White cotton gloves, and all that.
I procured a touch screen display especially for FreshPorts. Still, he tells me, this has not facilitated destruction of the bug. Is there a driver issue?
@grahamperrin@bsd.cafe
