Tootfinder

Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link (Swati Khandelwal/The Hacker News)
https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.htm…

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
OpenAI fixed a P1 ChatGPT flaw that let malicious shared links execute code in signed-in sessions and access private conversations.

Why isn't there a Deutsche Bahn branded USB charger? Type F plug so it doesn't lose contact all the time; with all the electronics in the plug.
Edit: Already exists. Not DB branded, but from Brennstuhl. https://www.brennenstuhl.com/de-DE/steckdosenadapter-usb-…

I grew up in Stubaital, a valley in Austria. It was only a few years ago that I realized Wuppertal isn't a valley but a city.
Why isn't it called Wupperstadt?!

William Nordhaus
Yale ‘63,
Sterling Professor of Economics
who won a Nobel Prize in 2018
for integrating climate change into long-run macroeconomic analysis,
died Oct. 30 at age 85. 
https://news.yale.edu/2026/10/31/wil…

William Nordhaus, Nobel laureate who integrated economics and climate change, devoted Yale citizen
William Nordhaus ‘63, Sterling Professor of Economics who won a Nobel Prize in 2018 for integrating climate change into long-run macroeconomic analysis, died Oct. 30 at age 85.

Very nice write-up about #BeOS, it’s history and specialities, and how you can now run it in your browser.
https://blog.persistent.info/2026/10/infinite-mac-beos.html

Infinite Mac: BeOS

RE: https://infosec.exchange/@0xabad1dea/117529823729259748
With every passing day I become increasingly emboldened that it is not only “not radical” but in fact “the only right choice” to only ever run software you yourself write, and to never connect…

3 questions Cowboys must answer to beat the Cardinals in Week 8 https://cowboyswire.usatoday.com/story/sports/nfl/cowboys/2026/11/01/3-questions-cowboys-must-answer-to-beat-the-cardinals-in-week-8/925…

Alaska’s Republican-run state government on Saturday urged a federal judge to dismiss a lawsuit filed at President Donald Trump’s direction to stop the certification of a possible Democratic win in that state’s pivotal U.S. Senate race,
writing that there is “no reason for this Court to entertain this meritless lawsuit any longer.”
The scathing filing from the state’s attorney general’s office comes as U.S. District Court Judge Sharon L. Gleason set a deadline of Saturday for argu…

Jemand Tipps wie ich meinen Brother DCP-L3550CDW repariert bekomme?
Vermutlich ist ein Kondensator hinüber. Die letzten Male hat ein paar Stunden stromlos stehen lassen geholfen, dann konnte ich ihn wieder einschalten. Seit letzter Woche klappt das nicht mehr und er macht keinen Mucks, wenn das Stromkabel angeschlossen wird. Power-Button gedrückt halten vor und während dem einstecken hat nicht geklappt.

Great piece - interestingly written from a critical, mostly Chinese-focused perspective, which is rare. Doesn't include a single quote from any Indonesian workers
https://grist.org/labor/indonesia-nickel-chinese-workers-energy-transition/

There were some few big computers run by governments and companies. Hacking started when some younger people with (some temporary) access to computers use them creatively for other things during night shifts or by starting to build their own small computers¹.
Hacking was liberating technology from big corporations and government, from the ones in power for fun and creativity, to fight back.
TechBros try to see themselves in succession of these hackers, but they are the opposite:…

Ok #php people, I need your input :)
What's the best practice for running Composer audit in CI? We used to run it for every merge request, but that no longer scales given how often packages are updated due to security issues. Everything is now red and requires a lot of manual intervention to get the builds green again.
Should we run the audit command once per day, or what is recommended?…

I stopped recommending Proton after their CEO praised a decision of the Republican party in the USA and the company afterwards pleaded political neutrality.
Based on this reporting by @… on their internal push for speeding up development by outsourcing coding to LLMs and sidelining security, I am going to warn people about it.

A group of men detained in Texas found a new way to communicate what they are going through in custody,
despite being shuttered from the outside world.
They compiled hundreds of pages of handwritten testimony and some hand-drawn art, and mailed it from inside the privately run ICE jail.
One man even wrote two protest songs and sang them over a crackly prison pay phone to the Guardian.
In a solemn and defiant tone, he sang from the perspective of one detainee to anot…

Men detained at Texas’s ‘dog pound’ ICE facility describe their experience – in art, letters and song
Nearly 500 men are detained at the T Don Hutto detention facility, and many have risked sharing their experiences in a unique way

Andy Jassy says Prime Video has "a revenue run rate in the tens of billions of dollars and is now profitable in its own right" (Julie Bort/TechCrunch)
https://techcrunch.com/2026/10/29/andy-jassy-says-prime-video-is-on-…

Andy Jassy says Prime Video is on track to earn 'tens of billions of dollars' | TechCrunch
The success of blockbuster hits like Project Hail Mary and Verity is only part of the story, Amazon's CEO says.

„the last few weeks, lenders to AI companies seem to be having a collective Wile E. Coyote moment — the point at which the animated character, having run off a cliff, looks down and only then, obeying the laws of cartoon physics, plunges to the ground.”
https://paulkrugman.substack.com/p/wil<…

I wrote a proposal in the #CoSocialCa members forum about making services we already run on @… for general co-op operations.
Git hosting (we run @…

Shopware 6: "Google says our sitemap is three months old" — no errors, the scheduled task looks healthy, regenerating even seems to work. It doesn't. One killed run can strand a lock with no expiry, silently blocking every regeneration after it. The one flag that breaks the spell.
…

Raiders vs. Jets Week 8 key matchups that could shape Sunday's outcome https://raiderswire.usatoday.com/story/sports/nfl/raiders/2026/10/30/raiders-jets-key-matchups-week-8/92522190007/

Just added Sveltia CMS to an #11ty project and had no idea i could also run it locally - what a great idea! So I can use its CMS to manage a site locally and just push files to the CDN - no build required - no need to worry about node upgrades on the CDN! And it was incredibly easy to install compared to the old NetlifyCMS.

Google's search revenue rose 12% YoY to $63.25B in Q3 2026, down from 14.5% in Q3 2025, with Google attributing the slowdown to "lower monetization" in AI Mode (Simon Sharwood/The Register)
https://www.theregister.com/ai-and-ml/2026

Google struggling to make AI Mode searches pay
That’s a problem, cos it just spent $51 billion on infrastructure and still needs to rent compute from others to run its cloud

In light of the passing of Walter Koenig, let’s look at his iconic role in #StarTrek for today’s #TrekTriviaTuesday question.
As always no googling and no spoiling the answer for others. Please boost after voting! :BoostOK:
Vote will run for 24h, then I will reply with the correct a…

⚙️ Event-driven runtime: the server accepts pipeline and run requests, a control plane schedules and dispatches work, workers execute runs. #PostgreSQL stores durable state, #NATS JetStream carries lifecycle events
🚀 Install via curl script,

We did not run out. The later round of teenagers finished off the first box, so we decided to turn off the lights and not open the second box.

Two years ago, I asked a security leader what their threat model was for having agents run their access management
I got a blank stare in return
This is about the same

Procrastination once again saved me from having to move off a new mail host I meant to migrate to but never did by staying with my current mail host.
Turns out both mail hosts are run by terrible people! 🎉

1400 inappropriate searches over three years. Unconscionable. Just unbelievable. If they're found guilty, their police certifications must be revoked. #Indiana #deflock

Court docs: IMPD officer tracked women through Flock, arranged run-ins
Three of the women allegedly targeted by Schultz told investigators they'd never interacted with him.

Corners of Life VIII 🎆
生活的角落 VIII 🎆
📷 Nikon F4E
🎞️ Lucky SHD 400
If you like my work, Support by buying me a coffee or a roll of film from
PayPal ‪ ‪https://paypal.com/paypalme/ydcdingsite€
Wise ‪ ‪

Cowboys poor run-pass balance dwarfed by predictability consequences https://cowboyswire.usatoday.com/story/sports/nfl/cowboys/2026/10/24/dallas-cowboys-poor-run-pass-balance-dwarfed-predicta…

Man did I pick up a good book right now: The Yahoo Boys: Love, Deception, and the Real Lives of Nigeria's Romance Scammers
A journalist from Spain went to Nigeria and located a few Nigerian scammers that run all of these romance/gift card scams and wrote about who they are, how they get into it, how they live etc. It's a bit unreal how it's almost like a sport to these guys. Very fascinating.
It's says unreleased but somehow my library had this /shrug

Hey all
It’s Wednesday and we have a new retrofit demo to share:
https://retrofit.sh/demos/rails-adopt-retrofit/
This is similar to the Liquibase and Flyway demos. We inject retrofit into the Ruby/Rails developer workflow.
Bootstrapping an existing Ruby project i…

Add foreign keys to a Rails polymorphic association with Retrofit · retrofit
See strong_migrations stop a one-migration refactor of a Rails polymorphic association, Retrofit render the five-migration recipe forward and in reverse from one operation log, and Rails run both directions.

#PHP #Java

Increasingly of the belief that "can write to disk at all" is an unacceptable risk for a webapp. Whether session tokens or file uploads or body buffers or whatever. Leave all of that to a database or blob store or reverse proxy. Ideally, run the webapp in a container with a readonly filesystem.
#HotTake #LocalFileInclusion

> ls /nix/store/*-php*
ls: cannot access '/nix/store/*-php*': No such file or directory
Luckily I don't seem to run anything even remotely related to #PHP, so I apparently dodged that bullet. 😌
#nixos

Sigh..
(Thankfully I don't run a GitLab anymore... but I know some who do)
#cybersecurity #gitlab
https://

Trump says data centers are “liquid gold.” Voters smell something else, and savvy candidates should take advantage of that in November. My latest Substack for Crimson Goes Blue https://jonippolito.substack.com/p/run-against-the-server-farm

Cowboys' George Pickens brushes off Brian Schottenheimer's critique, says team needs to improve

https://www.cbssports.com/nfl/news/cowboys-george-pickens-defle…

📊 Project benchmark across eight harness × model configurations on one task: cost ranged from 223 down to 0.47 credits (99.8% lower) and latency from 4m 36s to 1m 25s (3.2x faster). The best configuration varies per task
🔐 Secrets passed through env references or vault are redacted from responses, streams, traces and stored records. Sessions run in separate workspaces under separate OS users

Great run from Koumas and Rio puts it on a plate with a perfectly weighted pass. Great save to deny it. Great run.
#LFC

It's kinda amazing if you think about the fact that the IT industry manages to run services like google, amazon, facebook with close to zero downtime, which is quite an achievement and probably difficult in different ways for each of those, yet, at the same time, the one service that everyone working in this industry needs for their job all the time is famous for being notoriously unreliable.

Dak Prescott details how finding rhythm in run game can help spark Cowboys offense https://www.dallascowboys.com/news/dak-prescott-details-how-finding-rhythm-in-run-game-can-help-spark-cowboys-offense

Mein Trainingsplan will mich jetzt auf einen 16km Long Run schicken und meine Lust hält sich in Grenzen. Aber hilft ja nix...
#WeltenkreuzerLäuft

My spouse has always wanted to be 'that house,' I'm not sure why, but this year the economics of Costco made it possible. I'm just hoping we don't run out!

Aktuelles Lieblingsgericht: Veganes Kürbisrisotto.
Reis, Hokkaido-Kürbis, Zwiebel, Weißwein, Gemüsebrühe, Kreuzkümmel, Pfeffer, Margarine, Hefeflocken, veganer Cheddar.

3 causes for concern for Raiders Week https://raiderswire.usatoday.com/story/sports/nfl/raiders/2026/10/24/raiders-causes-for-concern-week-7-rams-matt-stafford-run-defense-offense/9241736900…

The term "single use software" currently lives rent free in my head.
People use LLMs to create software specific for their needs. But neither can other people use it (hardcoded variables, no rights management, too specific), nor do they use it again (too specific, easier to produce a new one).
Single use software is not maintained. Nobody understands it or has an interest in keeping it working.
The creation of single use software feels cheap, but isn't. It tak…

✅ Every batch is verified on both sides of the write, and durable checkpoints only advance after successful work, so runs can safely pause and resume
🧩 Sources, sinks, state storage and event transport are replaceable interfaces. Run it as a service with API and #React web UI, deploy it on your own infrastructure, or embed the engine in a Go application

A pipeline failed because a directory "already existed" — except it didn't, not when I looked. Turns out screen had quietly let two copies of the same self-hosted Bitbucket runner run side by side for who knows how long, and Bitbucket never once complained about it.

Two Bitbucket Pipelines runners, one ID, and a git clone error for a directory that wasn't there - Winkelwagen GmbH - an ecommerce agency
A pipeline run failed with this:

„This could be us. But you are too overstimulated to respond to my texts.“
I'm sorry.

Favorite time of the day: Cat sleeping on my stomach.

War. War never changes. But it takes place in a lot of different places in #StarTrek. And where exactly is the subject of today’s #TrekTriviaTuesday question.
As always no googling and no spoiling the answer for others. Please boost after voting! :BoostOK:
Vote will run for 24h, the…

✅ To do: run composer update laravel/framework, check config/auth.php for token guards (top priority on MySQL/MariaDB), and run composer audit against published advisories
https://laravel-news.com/laravel-token-guard-auth-bypass

FCC Chairman Brendan Carr warns broadcasters not to air "fake polls" or "suppression polls", once again threatening regulatory action for news content (Ted Johnson/Deadline)
https://deadline.com/2026/10/fcc-brendan-carr-fake-polls-trump-12371697…

FCC Chairman Warns Broadcasters That Airing “Fake Polls” Could Run Afoul Of “Regulatory Obligations”
Brendan Carr wrote that stations could risk running afoul of their "regulatory obligations" by airing such surveys.

Top Democrats in Congress have joined a California immigrant and the Nevada State Democratic Party in
suing the Trump administration over its unprecedented voter fraud probes in both states
and broader efforts to meddle in state-run elections nationwide
— alleging they are a
“pretext to seize control over elections.”

A California immigrant and a Nevada group, joined by top Democrats, sue over federal election probes
The lawsuit accuses Trump and his administration of using “shoddily compiled lists of supposed noncitizens” and “coercive threats" against state officials to assert federal control over the midterms.

A moment of peace. #cat

Shopware 6: The official Shopware API docs describe an API your shop doesn't actually run — plugin fields, custom entities and ERP extensions excluded. One command dumps the real spec of your shop instead, integrations included. It's mentioned in exactly one line of the docs.

War. War never changes. But it takes place in a lot of different places in #StarTrek. And where exactly is the subject of today’s #TrekTriviaTuesday question.
As always no googling and no spoiling the answer for others. Please boost after voting! :BoostOK:
Vote will run for 24h, the…

⚡ Runs in parallel across all CPU cores while returning results in input order, so --check output stays identical on every run
🔌 Built-in Language Server (laravel-fmt lsp) for format on save and format selection, plus --stdin-filepath for editors that only pipe a buffer

Cowboys WR George Pickens Responds to Brian Schottenheimer's Criticism https://www.si.com/nfl/cowboys/onsi/cowboys-wr-george-pickens-responds-to-brian-schottenheimer-criticism

🐍 Best fit is algorithmic code that can be tailored to hardware, but plain Python and PyTorch graphs also benefit, since the company says they are often far from optimal even under Torch's compiler.
🔧 Tracing and profiling overhead is capped at 2%, zero when idle. Setup: install the runtime, run your code. The model is hosted by doubleAI, so some trust is required.
🌐