Show more

So, my criteria are:

* Desktop, graphical calendar.
* Multiple calendars.
* Subscribe to remote ICS files, or at least be able to import them.
* The usual repeating-event features.
* Persistent *graphical* alerts (that nag me, but can be snoozed) with customizable time horizons. Not just a little background bloop or whatever.
* Not fucking losing my data.

That's not much to ask for.

Show thread

Reminder: if you could use some good news, the GEO "release party" for our journal issue on union co-ops is happening this coming Monday!

Monday, October 26
7:00 PM - 8:30 PM CDT

luma.com/0u9j9wgm

Hey, this eMudhra cert issue might mean I can MITM this Blink home camera system and get it to work without phoning home or requiring a smartphone!

I wrote on Boing Boing about The Underwater Cabaret, a satirical magazine incredibly made by a poet hiding from the Nazis in a Netherlands attic.
-
boingboing.net/2026/10/22/the-

Framing the php2shell story as "AI uncovered php2shell" is like hearing an awesome song and crediting the guitar instead of the player. It's just incorrect and steals credit from a good researcher.

The underlying bug was discovered in 2020, a related one in 2024, and they were both rediscovered again through exploitation in 2026 by a human researcher. The researcher used LLM tech to help with parts of the process, not all of it, and says so in the writeup.

calif.io/php2shell/

The right-wing owners of Scientific American, once the pillar of science writing, have ruined the publication's content and reputation. An incredibly sad situation: thenation.com/article/society/

RE: narrativ.es/@janl/117484474907

#FOSDEM will not have a DEIB room 😔 True to #DIY #OpenSource spirit we will fix this ourselves.

Support @Gina @elena @RosannaSibora initial proposal for a DEIB room with the #FOSDEMPledge @janl proposes:

Take a min or 2 to discuss the need for diversity, equity, inclusivism & belonging (DEIB) in your talk or have a talk on this topic in the room you organise.

For me #FLOSS is about people. Let's make sure everyone feels welcome & enable their participation in the FLOSS ecosystem. ✊

I work in the #food industry – and the UK is heading for full supply-chain collapse - thebureauinvestigates.com/stor "#Climatechange will soon throw our food system into chaos. But solutions are there for a government willing to see them"

You can feel the AI in everything as a dev because every app and service you use is randomly broken far more frequently. You know that it's because code reviews and QA got thrown into the trash because you've had those meetings too.

@tehstu @baldur because Wiz didn't release their exploit, others are trying to reproduce it, and you can find lots of attempts on github under names related to 'php2shell'. Elias surveyed *those*, and claims that none of *those* actually works as an exploit against a server without specific non-default properties.

Elias' contention is that reproducing an exploit like Wiz's for this is non-trivial - much harder than other 'famous' vulnerabilities - and nobody has done it yet.

What's scarier than life under capitalism?

This limited tote bag and book bundle includes our Horrors of Capitalism tote plus four books examining, critiquing, and laying bare just a few of the horrors we face daily living under late-stage capitalism. Get these 4 books and the limited edition tote thru 11/1 here: pmpress.org/product/the-horror

has obviously changed how some common phrases are interpreted these days. infosec.exchange/@0xabad1dea/1

The people agreeing with this assume the worker has little recourse to make their own choice of tools. Such an assumption didn't used to be common.

🔵 This week's Tom the Dancing Bug
🤡 D'oh! A Simpsonian look at Putin/Trump/Musk's Ukrainian War
-
Brought to you by the Inner Hive, including long-time member Auntie Freeze and new member Josh Finder! Join us at tomthedancingbug.com/the-inner-hive/
READ IT RIGHT HERE👇

The BBC being absolutely on the button. Their Cyber correspondent had never even heard of php before? Really??? 🤦‍♀️

bbc.co.uk/news/live/ckgel5xp2x

#php

But my observation was primarily that many of the claims I've seen surface over the past day or so seem quite dubious in hindsight and seems to have led to a herd effect of sorts.

Show thread

Having worked in corporate software environments for 30+ years, I'm used to seeing many offenses against good practice (release without adequate testing, adoption of tools and processes without supporting metrics, inadequate to no training, etc.), so why does this AI rollout seem particularily egregious? Maybe this will help explain: neuromatch.social/@jonny/11748

It does seem kind of funny that all these FOSS security breaches seem to always come from code hosted on . It's almost like being in their repositories automatically makes your code more scrutinized by some large corporation that hates FOSS.

Show more
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml