Tootfinder

My Open Graph Checker browser extension/add-on was updated to fix the Open Graph image preview so it now loads on pages behind HTTP Basic Auth.
Chrome: https://chromewebstore.google.com/detail/open-graph-checker/lkjaebkedoblfeglnhbgbjbdodjdogpe

I suggest if you find a remote code execution vuln in the most popular CMS system in the world and make a web page for it, expect some traffic... https://wp2shell.com/ is currently down...
In other news, if you use Wordpress and have disabled security-autoupdates, you shouldn't have done that. But if you have, …

Do you play #LeftWordle and or #Wordle every day and post your scores to Mastodon?
Have I got a tool for you: https://left-wordle.com/stats-checker

from my link log —
Rewriting the Futhark type checker.
https://futhark-lang.org/blog/2026-07-21-rewriting-the-type-checker.html
saved 2026-07-22

📢 Save-the-Date und Call for Presentations für den 9. Workshop Retrodigitalisierung 2027
Bereits zum 3. Mal wird NFDI4Culture mit der Workshopreihe Retrodigitalisierung (#WSRD) kooperieren, organisiert von
🔸 @…
🔸 @…@…

ID verification service IDScan has confirmed that a data breach involved the theft of driver’s licenses from its systems,
a week after a report said the identity document checker had been breached during a year-long hack.
The company said in a website notice that hackers stole the driver’s licenses from the company’s cloud;
the stolen information includes people’s full names and driver’s license numbers,
along with identity numbers from other government-issued docume…

ID verification giant IDScan confirms data breach with more than 150 million driver's licenses stolen | TechCrunch
The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.

I really need to build a "timing checker" filter for ngscopeclient that given a signal, optional clock, and some setup, hold, minimum pulse width, etc. constraints can verify that they're being met, or point out where a violation took place

Plus Regen-Checker - Nass oder noch sonnig? So beginnt Ihr Mittwoch #News #Nachrichten

Das blöde WP-Plugin "Broken Link Checker" update hat mir gestern 2 Seiten zerschossen. Eine habe ich durch einen rollback wiederhergestellt, bei der anderen ging leider bei mir etwas schief 😩 (Datenbank abgeschmiert).
Der Support von meinem Hoster All-Inkl hat mir (mal wieder) super schnell geholfen und alles läuft wieder.
Absolute Empfehlung!
#webhost

When you are a Swift compiler contributor, every day is Xmas!
https://forums.swift.org/t/dropping-the-requirement-for-c-only-bootstrapping/87739/

Dropping the requirement for C++-only bootstrapping
Dear compiler developers, I'm happy to announce that from now on "mandatory" parts of the compiler can be implemented in Swift (on the main branch). So far we only used Swift as an implementation language in parts of the compiler which are not strictly necessary for correct code generation of the standard library, like some optimization passes. Now, we can use Swift in all parts of the compiler, including the parser, AST, type checker or mandatory SIL passes. We are dropping the requirement…

@… @… yes! someone should make a kit contrast checker microsite 😅

from my link log —
Compiling Rust is NP-hard: the pattern match exhaustiveness checker as a SAT solver.
https://niedzejkob.p4.team/rust-np/
saved 2021-07-08 https://

Compiling Rust is NP-hard
...though it's not the flagship borrow checking that's at fault. What I noticed, and would like to share with you today, is that the exhaustiveness checking performed by the Rust compiler on match patterns is a superset of the SAT problem.…

⚡ #Harper is an offline, privacy-first #grammar checker for developers, written in #Rust and maintained by #Automattic

Build-Authorized Evidence for Opaque Calls: A Fail-Closed Rewrite-Authority Boundary
Zhonghua Yi (Toka Language Research Group)
https://arxiv.org/abs/2607.18949 https://arxiv.org/pdf/2607.18949 https://arxiv.org/html/2607.18949
arXiv:2607.18949v1 Announce Type: new
Abstract: Detached semantic facts about opaque native providers do not by themselves justify compiler rewrites: rewrite authority must be confined to the accepted fact, selected provider and build, caller, callback environment, observation, and runtime target. We present a build-authorized path-effect interface that enforces this boundary through fail-closed authorization and link receipts. The design separates receipt closure, callback-environment closure, and projection identity, and passes accepted facts to LLVM through a narrow internal API. We use one-hop topology-load reuse as a minimal observable witness of authority, not as the optimization target.
A conservative LLVM consumer reuses a pointer observation only from a noalias root or one constant nonzero projection. Rocq models prove conditional refinement and authority non-amplification under explicit effect, alias, compiler/ABI, and target-resolution premises. We instantiate checked production with Toka: a source-summary gate emits exact LLVM IR, a separate IR checker accepts only a bounded topology-preserving subset, and only accepted IR is compiled into the receipt-bound provider object. A bounded static Darwin/arm64 profile also checks the final direct branch target.
Across issuer-declared readv, recvmsg, and Cairo boundaries, authorized IR retains each opaque call, reduces the relevant loads from two to one, and preserves observed results; mismatched providers, builds, callbacks, projections, and unsupported IR remain neutral. A libjpeg case is rejected because its callback environment is open, while a bound callback singleton demonstrates the supported closure rule. The contribution is a checked deployment-compiler boundary with an explicit trust and applicability frontier, not a uniquely expressive effect encoding or a new load-elimination algorithm.
toXiv_bot_toot