@michabbb@social.vivaldi.net⚠️ Second advisory, same day: GHSA-5wcm-3v2w-8362 (CVSS 6.5) in the JSON:API resources added in Laravel 12.45. A crafted request to a read-only endpoint could trigger a destructive operation and empty a related table
📦 Patched in Laravel 12.68.0 and 13.29.0, both released August 25, 2026. The JSON:API issue is fixed from 13.27.0 on the 13.x branch. Patches exist only for 12.x and 13.x
@mia@hcommons.socialThis Friday! LIBER AI Pulse seminar, 'A Critical Perspective on AI Literacy', 12:30 CEST
https://libereurope.eu/event/liber-ai-pulse-session-vi/
I'm going to share these resources - any other key suggestions?
Elements of AI (and more):
@cellfourteen@social.petertoushkov.euAMD Software: Adrenalin Edition 26.10.1 Driver Release Notes
AMD FSR Upscaling 4.1 support for:
AMD Radeon™ RX 6000 Series Graphics products
...
https://www.amd.com/en/resources/support-articles/release-notes/RN-RAD-WIN-26-10-1.html
@underdarkGIS@fosstodon.orgMeet the QGIS Hub — sharing is caring!
Everyone knows the QGIS Plugin Repo but have you had a look at the QGIS Hub yet? It's similar to the plugin repository in that it allows sharing of resources between community members, but it so many different types of resources, that warrants multiple blog posts: from styles and projects all the way to processing scripts. Today, I want to have a look at the (a little cryptic) …
@v_i_o_l_a@openbiblio.social"The Vanishing Newspaper, Academic Libraries, and Our Withering Democracy"
https://doi.org/10.5860/lrts.70n4.8862
@profcarroll@federate.socialPatient Computing: Virtuous Waiting because the output is free as in libre, free as in beer, and free as in it didn't consume more resources than this post.
@dcm@social.sunet.seWhen discussing scientific achievements made mostly or partly by AI systems, especially the headline-making ones, it's good to think about the resources being allotted to such projects, which are plausibly incomparable to previous investment. For instance, I suspect that no one had previously invested several millions of dollars to hire a team of mathematicians exclusively to tackle a single millennium problem.
@hynek@mastodon.socialI’m seeing some really _hot_ hot takes so let me make one thing clear:
I’m 100% sure that someoneS both KNEW and EXPLOITED the eMudhra fuckup and the PHP RCEs.
“AI” finding it for the rest of us is one of the rare instances of them doing actual public good. Every exploit they find someone else with nation-state resources already knew about – or soon would.
Do y’all really think Russia, North Korea, and China are just banging rocks against each other!?
@adamhotep@infosec.exchangeTrump tried to undermine the US organization that ensures fair elections:
#USPol
@DamonHD@mastodon.socialOooooh, my university is trying to force me to run Microsoft Authenticator on my private devices (given the US CLOUD Act, possibly spyware) to access my UK uni resources. Not against MFA but very against that sort of assumption of right to use my private hardware invasively. So I am stirring the sh*t with my uni, will start a formal grievance procedure, etc, etc. Note that I don't even run the app store on my phone...
@tarah@infosec.exchangeHey, folks. I'd appreciate conversations with fam who are in the Boise area. I have a friend running for statewide office there, and if that's of interest to you, would love to chat.
Can I just say: the resources provided by *either* party to women running for office both on a personal security and an infosec level are just damn parlous.
@unixorn@hachyderm.io
