Tootfinder

bug fixes and improvements

@… I’ve already got most of the deps updated (though the test workflow needs updating)
but the next phase will likely be strictly bug fixes
then maybe we’ll talk about new features if it doesn’t turn out too terrible 😅

Thinking about future release plans for ngscopeclient.
There have been massive performance improvements and some significant bug fixes since v0.1.1 and the ThunderScope dev edition units are going to manufacture so we'll be getting a lot of additional users in ~2 months.
But there's also a lot of ongoing backend refactoring and changes to filter graph blocks that won't be strictly backwards compatible (old filter graphs will need updating) and while I freely break sof…

legacy code, OH:
junior engineer, bright-eyed: "once your fixes land, my broken job should be fine, right?"
staff engineer, staring into middle distance: "the [redacted] pipeline contains many ancient evils that are best left undisturbed. And yet... here we are."
staff, a few minutes later: "Our team now owns this pipeline; my fingerprints are on the doorframe."
junior: "it looks like your changes just landed! shall I try again? cros…

Metacurity is the independent, non-hype, non-personality-dependent cybersecurity newsletter that delivers a daily dose of critical developments you need to know.
Check out today's issue, which covers
--CISA warns US infrastructure owners following Russian attack on Poland's power grid,
--Russia throttles Telegram accusing it of failing to protect personal data or combat crime,
--N. Korean hackers targeted crypto company with unique malware and multiple scams,…

CISA warns US infrastructure owners following Russian attack on Poland's power grid
Russia throttles Telegram accusing it of failing to protect personal data or combat crime, N. Korean hackers targeted crypto company with unique malware and multiple scams, Israel claims it foiled hundreds of Iranian cyberattacks, Microsoft issued fixes for six zero day flaws, much more

⚙️ Configuration: `cache.result` for result caching, `extensions` for custom listeners
🐛 Bug fixes: Parallel mode stability, Windows path handling, PHAR extraction issues
https://github.com/sebastianbergmann/phpunit

If Browns clean house, Cowboys would be wise to pounce on two coaches https://cowboyswire.usatoday.com/story/sports/nfl/cowboys/2025/12/12/if-cowboys-fire-coordinators-browns-staff-could-hold-ke…

Viele Fixes, wenige Neuerungen: Wird iOS 27 ein neues Snow Leopard?
Nach Liquid Glass in iOS 26 steht für iOS 27 nun mehr Ruhe an – Apple will vor allem intern verbessern. Das gilt allerdings nicht für alle Bereiche.

#Jellyfin for #Roku 3.0.14 has been released.
🎉 New Features
- Remember if user unchecks Save Credentials on login screen
🐛 Bug Fixes
- Fix crash affecting users on Roku OS 14 or below
Release Notes:

„Die Tage des Verbrenners sind also auch ohne Ausstiegsdatum gezählt. Den Autoherstellern geht es wohl um etwas anderes: Sie wollen die Vorgaben zur Co2-Reduktion in den kommenden Jahren aufweichen, um in der Übergangszeit mehr Verbrenner verkaufen zu können, das tote Pferd reiten, solange es lukrativ bleibt.“

Selbst ohne fixes Datum für das Verbrenner-Aus werden E-Autos gewinnen
Das Ausstiegsdatum für Verbrenner ist inzwischen irrelevant geworden. Wichtig wäre, die Etappenziele für die Reduktion der Emissionen nicht aufzuweichen

On the automation front it's a bit imperfect the installer shows it's fetching an image, but when booted into Aurora for the 1st time it notifies me my current image is a month old. Ujust update fixes that, but it's an additional 3.4Gb download that imho should've been taken care of during install?
#auroralinux

#PhanpySocial changelog ✨
🗓️ Experimental "Year In Posts"
🐛 Bug fixes
🔗 https://phanpy.social/
💬

Phanpy
Minimalistic opinionated Mastodon web client

Raiders interim OC Greg Olson talks fixes for pass protection, run game https://raiderswire.usatoday.com/story/sports/nfl/raiders/2025/11/27/raiders-interim-oc-greg-olson-talks-fixes-pass-protectio…

#GitPages now implements an audit system that allows on-line, background processing of uploaded content to e.g. scan it for viruses, phishing, and other abusive material
I consider this table stakes for any service with open registration, so now I can finally say that git-pages is _almost_ done (it needs a GC and a few minor fixes to other functions)

Good morning! Today it’s back to full time TelemetryDeck, plus a bit of working out! I also want to make January my Snow Leopard month where I don’t work on any new features, just bug fixes, improvements, and quality of life upgrades.

AWS launches DevOps Agent, an AI-enabled tool designed to help clients quickly identify root causes of outages and implement fixes, available in preview (Jordan Novet/CNBC)
https://www.cnbc.com/2025/12/02/amazon-launches-cloud-ai-tool…

Amazon launches cloud AI tool to help engineers recover from outages faster
Amazon Web Services' DevOps Agent is meant to help developers more quickly figure out what caused an outage and how to fix it.

Worked on some more #Gentoo global #jobserver goodies today.
Firstly, Portage jobserver support patch: #PyTest jobs will also be counted towards total job count.
Again, it's not a perfect solution, but it works reasonably. The plugin still starts -n jobs as specified by the arguments, but it acquired job tokens prior to executing every test, therefore delaying actual testing until tokens are available. It doesn't seem to cause noticeable overhead either.

I added enough Linux support to picolibc to run lua; the lua test suite found a number of core picolibc bugs. This whole adventure suddenly turns out to have actual value and not just comic relief.
I now have a shell script that adapts gcc to using picolibc and have built a small number of applications including snek, nickle and lua.
exec cc -static --specs=picolibc.specs "$@"

Fixes for oslib/linux usage by keith-packard · Pull Request #1184 · picolibc/picolibc
Remove fatal meson warnings from the new scripts. Pre-1.10 meson fix. Add picolibc_linux.ld

Note to self: every time a simple electrical project doesn't work, try resetting the Arc Fault or GFCI breaker. Fixes it every time.

I've recently stumbled upon an RCE "exploit" for the Serendipity blog software, which I happen to use and have contributed to in the past. From what I can tell, it does nothing interesting (it does not even work due to broken indents, if one fixes that it uploads a PHP shell given existing credentials, but that won't be executed unless you have a server config that executes .inc files). I'm 95% certain this is bogus. Yet... in case anyone wants to have a look:

Exploit (probably bogus) on exploit-db · Issue #940 · s9y/Serendipity
I stumbled upon this: https://www.exploit-db.com/exploits/52036 This claims to be a remote code execution exploit for serendipity. I believe it is bogus. I'm sharing what I figured out here, mostly...

Client told DEV the changes looks good in test, deploy.
DEV told our support person, deploy the fix.
Me? STOP, CEASE, DESIST!
1. It is a Friday and we have three special set of 'apps' running this evening. They must run tonight!
2. There were zero backups that would allow a rollback if there are problems.
3. No process defined to verify the before and after.
4. NEVER DEPLOY FIXES ON A FRIDAY UNLESS IT IS AN EMERGENCY!

OMG, it's Patch Tuesday
Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws
https://www.bleepingcomputer.com/news/microsoft/microsoft-january-2026-patch-tuesday-fixes-3-zero-days-114-flaws/

Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws
Today is Microsoft's January 2026 Patch Tuesday with security updates for 114 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.

Martin Stransky highlights some recent major achievements for #Firefox on Linux: ""HDR video playback support, reworked rendering for fractionally scaled displays, and asynchronous rendering implementation. All this progress was enabled by advances in the Wayland compositor ecosystem, with new features implemented by Mutter and KWin.
[…]
And there are even more challenge…

People have complained for a LONG time about my blog's poor performance on mobile. Made a bunch of fixes tonight, hope it's better!
https://parentheticallyspeaking.org

Day 2 of #freesoftwareadvent I use digikam for most photo management; and also it's sibling showfoto. digikam has a load of different photo tools, from the simple colour fixes, un-distortion etc - and simple album management - all the way up to some very fancy tools. It does the download from phone or camera great. showfoto is most of the basic tools but setup generally for …

Ugh, fare inspectors, SFPD, Bart PD, etc are all over the Mission probably because our pretty boy wants to look good on TV.
Is this what having Newsom (fixes my hair) as mayor was like?

For interested folks, here’s the React PR that fixes CVE-2025-55182 affecting React Server Components (CVSS 10.0 Critical Severity): https://github.com/facebook/react/pull/35277
Blog post:

RE: https://mastodon.gamedev.place/@yurisizov/115632939559593764
Also, by the way, if anybody fixes this: I really love you!

Yay, Mastodon 4.5.1 (released last week) fixes the bug I reported! Really fast turnaround. Thanks ClearlyClaire! https://github.com/mastodon/mastodon/issues/36775

• 60 out of 100 times it’ll “sync” and freeze with all 4 LEDs on. The Wii U does a little beep but doesn’t show the controller and no inputs work.
• 38 out of 100 times the same thing will happen but with all LEDs off
  • You need to remove the batteries in order to take the wiimotes out of these states
• 2 out of 100 times the wiimotes actually connect, but show with 1 battery bar and almost no inputs go through (and the ones that do are extremely laggy, except for the power button)
  • The manual states that if this happens you can remove the batteries, wait 3 minutes and connect (without syncing) again. That does fixes it sometimes, but it really only worked once for each wiimote.
  • A truly successful connection only happens after the “low battery one”, and even then it seems to be hard to achieve for the first time.
    • Afterwards you’re supposed to be able to reconnect without syncing and then not encounter the issues anymore. That was true for the pink wiimote, but the blue wiimote had to be synced again. I spent quite a few hours trying and wasn’t able to get a successful connection.
    • If you connect the pink wiimote that was working when the other wiimote is in the 4 LEDs freeze state it’ll break the connection of the other one and make you need to sync it again
      • Now none of my aliexpress wiimotes are synced and idk when I’ll be able to sync them again

Happy New Year with #Textpattern

Textpattern 4.9.0 is a feature release with support for PHP 8.5 & MySQL 8.4, new features, security enhancements, improvements and bug fixes. In semantic versioning terms, Textpattern 4.9.0 is a minor release; in Textpattern terms we consider this a ‘big’ release.
Get with the minimalist CMS that does all that

I have released a first v0.1.0 of intel_fw to crates.io today: https://crates.io/crates/intel_fw
There will be additional features and fixes coming at some point, but this concludes the work for now.
Feedback and questions are welcome! :)

crates.io: Rust Package Registry

Thank you very much Dan, you really get us! https://retro.social/@ifixcoinops/115746825145674767

One of the stupidest fixes I ever did (after two days of searching how to fix the problem).
The problem was Kobo Books iOS app opening links to book chapters inside popups, instead of jumping to the target page.
😞
#epub #kobo

I suspect that my VS Code is completely "borken" as I cannot imagine how so many people are productive using it.
1. The selection behavior I have shared earlier continues to manifest sporadically. A restart fixes it. Sometimes.
2. I can't recall any keyboard shortcuts as they don't use any historical paradigms and they are all of the place.
3. Frequently used functionality (e.g. stage changes) has no shortcuts.
I am sure this is will be unpopular opinion.
It's been my experience so far. Very frustrating and I almost gave up a few times already.

"To be very clear, Gemini 3 isn’t perfect, and it still needs a manager who can guide and check it. But it suggests that “human in the loop” is evolving from “human who fixes AI mistakes” to “human who directs AI work.” And that may be the biggest change since the release of ChatGPT."

Three Years from GPT-3 to Gemini 3
From chatbots to agents

Either KDE fixes the problems with their Wayland session (faulty font rendering with fractional scaling, no ability to remap touchpad gestures that are literally baked in at compile time, and so on) or I'll be shopping for a new desktop environment once they drop X11 in 2027. I'll not be railroaded into accepting a dogshit user experience because somebody wants to dunk on the chuds. Plasma isn't that special!

I hope iPadOS 26.2 fixes the issue where open folders auto-close when coming out of applications in windowed mode. It is quite annoying. Especially when you were going to open a related app in the same folder.

#PhanpySocial changelog ✨
⌨️ More sequential hotkeys, g>s (Settings), g>p (Profile), g>b (Bookmarks)
💈 Redesigned poll
🛬 Redesigned landing page
🐛 Bug fixes
🔗 https://phanpy.social/…

Does anybody have a connection at Signal who could receive some urgent app design feedback? The app has several very specific problems / limitations / design quirks that are causing major headaches for neighbor groups trying to communicate here in Minneapolis.
(I’ll eventually try to write up some feedback through normal channels so it can go through the normal user feedback pipeline — but I’m sure any fixes that arrive that way will arrive far too late to be useful to us, so I’m not even bothering now. If there’s any chance of having some issues prioritized, I’d sure appreciate it.)
[ETA: I already tagged Mer__edith, but I’m sure she’s far too busy and her mentions are far too crowded for her to give this attention]

Just tagged ngscopeclient v0.1.1-rc1.
Go poke at it, this is your last chance to get bug fixes in before we cut the v0.1.1 release!

I received a bug report about picolibc's iconv implementation. So I added a test case. Which pushed the CI runtime up over *six hours* at which point github gave up and killed it.
I spent a bit of time yesterday and today re-implementing the JIS to Unicode conversion function to make it faster. Lines changed: 5125 additions & 7495 deletions. Runtime is back to normal now. And I have a deeper understanding of these encodings.

Iconv fixes by keith-packard · Pull Request #1141 · picolibc/picolibc
PR #1139 fixes one issue in iconv, but when I implemented an exhaustive test case, I found a bunch more.

Sources: iOS 27 will be a Snow Leopard-style update focused on bug fixes and performance, plus new AI features; FT's retirement report on Tim Cook was premature (Mark Gurman/Bloomberg)
https://www.bloomberg.com/news/newsletters…

Even if you're gearing up for a monster winter storm, take the time to check out today's Metacurity for the most crucial cybersecurity developments you should know, including
--Acting CISA head got grilled on mass firings at the agency,
--EU's CIRCL launches GCVE system,
--DeFi project EVM was exploited for $6m,
--Attackers exploit patch bypass for FortiGate flaw,
--Cisco fixes Unified Communications and Webex Calling RCE flaw,
--Mass spam wave …

Acting CISA head got grilled on mass firings at the agency
EU's CIRCL launches GCVE system, DeFi project EVM was exploited for $6m, Attackers exploit patch bypass for FortiGate flaw, Cisco fixes Unified Communications and Webex Calling RCE flaw, Mass spam wave emanates from unsecured Zendesk support systems, much more

#Jellyfin for #Roku 3.0.15 released
This release fixes a nasty #HDHomeRun Tuner bug.
Shout out to VTRunner, first contribution!!
Release Notes:

The Raiders’ O-line: A 2025 disaster that exposed deeper issues https://raiderramble.com/2026/02/03/the-raiders-o-line-a-2025-disaster-that-exposed-deeper-issues/

f you've been having trouble with Grist plus Firefox 145: Firefox released a bugfix version 145.0.1, https://www.firefox.com/en-US/firefox/145.0.1/releasenotes/ - so if you had to downgrade to get Grist working, you can now upgrade again.

Firefox 145.0.1, See All New Features, Updates and Fixes

@… same! Can't wait to get it up and running. Turns out talos.dev needs some work in progress fixes to support the pi 5 😅

Die Instanz https://bayerwald.social läuft jetzt mit Softwareversion v4.5.1
https://github.com/mastodon/mastodon/r

Release v4.5.1 · mastodon/mastodon
This is a patch release for 4.5. Check out the 4.5.0 release notes for information. Changelog Fixes Fix Cmd/Ctrl + Enter not submitting Alt text modal on some browsers (#36866 by @diondiondion) Fi...

PCIe / FPGA folks: the ThunderScope people are chasing a strange issue where the TS PCIe card appears to work properly on AMD hosts (even with fairly long lossy channels like OCuLink cables or >1 foot riser ribbons) but is failing to train the link at all (i.e. not even coming up as gen1 x1) on Intel hosts.
Ideas on root cause / fixes? I haven't scoped the training yet, as soon as I get an updated unit in my lab I will.

Don't miss today's packed Metacurity for the most critical infosec developments you need to know, including
--DOGE workers shared SSN data with outsiders, derailed DISA operations,
--UK launches national fraud reporting service,
--China blames Taiwan for cyberattacks,
--EU proposes freezing out Chinese tech suppliers,
--New Zealand launches Manage My Health breach probe,
--Curl ends its bug bounty program due to AI flood,
--Cloudflare fixes WAF…

DOGE workers shared SSN data with outsiders, derailed DISA operations
UK launches national fraud reporting service, China blames Taiwan for cyberattacks, EU proposes freezing out Chinese tech suppliers, New Zealand launches Manage My Health breach probe, Curl ends its bug bounty program due to AI flood, Cloudflare fixes WAF flaw, much more

Amazon unveils its Autonomous Threat Analysis system, born from a 2024 internal hackathon, to use AI agents competing in teams to identify vulnerabilities (Lily Hay Newman/Wired)
https://www.wired.com/story/amazon-autonomous-threat-analysis/

Amazon Is Using Specialized AI Agents for Deep Bug Hunting
Born out of an internal hackathon, Amazon’s Autonomous Threat Analysis system uses a variety of specialized AI agents to detect weaknesses and propose fixes to the company’s platforms.

RE: https://witter.cz/@vyskocilm/115731439089521819
This fixes the problem - at least with forgejo-runnner. Thanks god for a community.
steps:
- name: Checkout Repository (sha-256 patch)
uses:

#PhanpySocial changelog ✨
🤳 QR code for profiles and shortcuts settings
🔃 Import/export accounts
📸 Extract description from attached image metadata
🐛 Bug fixes
🔗 https://phanpy.social/
…

Phanpy
Minimalistic opinionated Mastodon web client

🔧 #OpenRouter launches Response Healing: automatically fixes malformed #JSON responses from #LLMs before they reach your app

People have this weird idea that commercially maintained software would be of better quality, because there are paid developers working on it. On the contrary, the main difference is how much red tape #OpenSource contributors have to go through to get the fixes in. Or the amount of effort necessary to even get someone to look at the pull request before the stale-bot closes it.
#FreeSoftware

EoY project is finally upgrading my Pi CM4 NAS to a recent OS that doesn't depend on a custom legacy 5.15.92 kernel that I literally backported 6.1-tree Pericom PCIe switch fixes to as well as building in SATA and XFS support.
Looks like openSUSE finally supports the Pi 5 https://news.opensuse.org/2025/11/…

The week's cybersecurity news is really heating up today, so check out Metacurity for the most critical developments you should know, including
--China orders domestic companies to stop using US cybersecurity software,
--White House renominates Plankey as CISA Director,
--Whistleblower leaks sensitive data on ICE and Border Patrol workers,
--Man to plead guilty for hacking Supreme Court system,
--Microsoft issues fixes for 114 flaws,
--Belgian hospital …

China orders domestic companies to stop using US cybersecurity software
White House renominates Plankey as CISA Director, Whistleblower leaks sensitive data on ICE and Border Patrol workers, Man to plead guilty for hacking Supreme Court system, Microsoft issues fixes for 114 flaws, Belgian hospital forced to cancel procedures after cyberattack, much more

• Type Coercion: 0.041ms (32,600 ops/second)
• Basic Parsing: 0.133ms (16,900 ops/second)
• Large Payloads (10KB): 2.3ms (437 ops/second)
💰 Cost: Free plugin with negligible latency impact (<1ms for typical responses)
🎯 Scope & limitations:
• Fixes JSON syntax errors, not schema adherence
• Works for non-streaming requests only
• XML healing available on request
• Tool calling has few structural issues, schema adherence evaluation coming soon<…

OPNsense 25.7.7 released
This update ships a number of third party security updates, firewall live
log improvements based on user feedback from 25.7.6, plus minor fixes and
improvements like usual.
https://forum.opnsense.org/index.php?topic=49616.msg25204…

A multilingual website I've been building for a while went live a few days ago. It's a pretty simple site from user perspective but somewhat challenging to build, esp. due to data org to ease site gen, and me learning some of the tech as I build the site.
Many fixes and features are pending, but I'm happy with the outcome and the initial reception. I'm also humbled by the opportunity to work with and learn from a great scholar in the subject matter, and pleased to be able to use my time and knowledge for a worthy cause. 🙇‍♂️
#webdev #achievement #learning #gita #India #service #Kannada #Sanskrit #Hindi #Tamil #Telugu

⏰ Extended Lifecycle Support (ELS): Up to 5 additional years of security patches after end-of-life - continuous CVE fixes, updated SBOMs, and audit compliance
🎯 Goal: Secure software supply chain from first line of code to production - secure by default for all 26 million developers in the container ecosystem
🌐 https://w…