Security updates for Wednesday
Security updates have been issued by AlmaLinux (emacs, firefox, gnutls, java-17-openjdk, java-21-openjdk, osbuild-composer, python39:3.9, and thunderbird), Arch Linux (screen), Debian (varnish), Fedora (chromium), Gentoo (Atop, FreeType, and Spidermonkey), Mageia (java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, java-latest-openjdk and postgresql15, postgresql13), Oracle (389-ds-base, emacs, firefox, kernel, libsoup, libtiff, mod_auth_openidc:2.3, nodejs:20, nodejs:22, … ⌘ Read more
HAProxy 實現 MySQL 的負載均衡
使用 HAProxy 實現 MySQL 的負載均衡：1、DS 服務器、負載均衡服務器停掉 LVS 負載均衡的配置：[root@server04 ]# ./lvsdrdsmysql.sh stop[root@server04 ]#[root@server04 ~]# ipvsadm -LnIP Virtual Server version 1.2.1 (size=4096)Prot LocalA ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1340 ARCHIVED:87069 CACHE:2784 FOLLOWERS:22 FOLLOWING:14
vLLM-DeepSeek 本地部署大模型終極解決方案，細到超乎想象！
自從 DeepSeek 火遍大江南北，人人都在使用大模型，也有很多同志在像曉智同學一樣，開始私有化部署。當然選擇私有化部署使用最多的是 ollama 部署，但是對於併發相對高的場景，vllm 是非常不錯的選擇。現就將曉智同學一步步部署併成功上線實施的方案分享如下：一、環境構建1、安裝 ubuntu24.04 操作系統，並安裝對應的基礎軟件，比如輸入法等（可以不安裝）。2、安裝顯卡驅動檢查顯卡驅動是 ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1339 ARCHIVED:87053 CACHE:2780 FOLLOWERS:22 FOLLOWING:14
My cow is 2.3kg at 4 years old. ⌘ Read more
Understanding Stealer Logs and Their Role in Security Testing: A Focus on Asset Discovery- Part 2 ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1338 ARCHIVED:87031 CACHE:2786 FOLLOWERS:22 FOLLOWING:14
Powerbeats Pro 2 Available for Lowest Ever Price of $199.95, Plus Beats Pill at $99.95 and More
Amazon this weekend is discounting a collection of Beats headphones and speakers, including an all-time low price on the Powerbeats Pro 2. You can get this new 2025 model for $199.95 in all four colors, down from $249.99.
 using the LGA1851 socket. While not yet officially launched, this upcoming board targets industrial computing and embedded applications with a combination of modern performance and legacy interface support. The motherboard supports proce … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1335 ARCHIVED:86994 CACHE:2814 FOLLOWERS:22 FOLLOWING:14
🧮 USERS:1 FEEDS:2 TWTS:1334 ARCHIVED:86974 CACHE:2839 FOLLOWERS:22 FOLLOWING:14
Shazam’s New Viral Chart Tracks Hit Songs Across TikTok, TV, and More
Shazam today announced the launch of its Viral Chart, which lists the fastest-growing songs of the week that were “discovered on screens and socials.”
“Shazam’s new Viral Chart playlist doesn’t just track TikTok hits—it captures the full spectrum of songs blowing up right now, whether through streaming, socials, TV placements, or that random 2004 banger s … ⌘ Read more
Step 1: Show belly. Step 2: Bite the fool. ⌘ Read more
$2,900 Bounty: Public S3 Bucket Exposure in Shopify
How a Simple S3 Misconfiguration Exposed Private Images Across Shopify Stores and Earned a $2,900 Bounty
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/2-900-bounty-public-s … ⌘ Read more
[47°09′40″S, 126°43′17″W] Raw reading: 0x681AE8D1, offset +/-2
VP2430 Vault Pro Featuring Intel N150 and 4x 2.5GbE in a Fanless Design
The VP2430 is a compact, fanless network appliance based on Intel’s N-series platform. As part of the Vault Pro series, it builds on earlier models such as the VP2410 and VP2420, introducing incremental enhancements in processing capability, thermal management, and connectivity. This model incorporates the Intel N150 quad-core processor, operating at up to 3.6GHz with […] ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1333 ARCHIVED:86968 CACHE:2847 FOLLOWERS:22 FOLLOWING:14
clumsy fig turns 2! ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1332 ARCHIVED:86951 CACHE:2881 FOLLOWERS:22 FOLLOWING:14
(Updated) ESP32-C5-DevKitC-1 with 240MHz RISC-V Processor, Zigbee, and Thread Connectivity
The ESP32-C5-DevKitC-1 is another upcoming entry-level development board designed for IoT applications, featuring the ESP32-C5-WROOM-1 module. This board supports key wireless protocols, including Wi-Fi 6 (2.4 GHz and 5 GHz), Bluetooth LE 5, Zigbee, and Thread. The ESP32-C5-WROOM-1 module is equipped with a 32-bit RISC-V single-core processor running at 240 MHz along … ⌘ Read more
Building Trust with OpenID Federation Trust Chain on Keycloak
OpenID Federation 1.0 provides a framework to build trust between a Relying Party and an OpenID Provider that have no direct relationship so that the Relying Party can send OIDC/OAuth requests to the OpenID Provider without being previously… ⌘ Read more
Security updates for Monday
Security updates have been issued by Debian (ansible, containerd, and vips), Fedora (chromium, java-17-openjdk, nodejs-bash-language-server, nodejs-pnpm, ntpd-rs, redis, rust-hickory-proto, thunderbird, and valkey), Mageia (apache-mod_auth_openidc, fcgi, graphicsmagick, kernel-linus, pam, poppler, and tomcat), Red Hat (firefox, libsoup, nodejs:20, redis:6, rsync, webkit2gtk3, xmlrpc-c, and yelp), and SUSE (audiofile, ffmpeg, firefox, libsoup-2_4-1, libsoup-3_0-0, libva, libxml2, and … ⌘ Read more
HELLO 2
🧮 USERS:1 FEEDS:2 TWTS:1331 ARCHIVED:86912 CACHE:2874 FOLLOWERS:22 FOLLOWING:14
** DevSecOps Phase 2: Code & Commit Stage — Harden the Developer Workflow** ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1330 ARCHIVED:86883 CACHE:2892 FOLLOWERS:22 FOLLOWING:14
On my blog: Free Culture Book Club — Pilogy, part 2 https://john.colagioia.net/blog/2025/05/03/pilogy-2.html #freeculture #bookclub
🧮 USERS:1 FEEDS:2 TWTS:1329 ARCHIVED:86868 CACHE:2902 FOLLOWERS:22 FOLLOWING:14
White House looking for other countries to accept deportees
Gregory Svirnovskiy, Staff Writer - Politico
Stephan: Just as Hitler did, Trump is looking for other countries where he can establish concentration camps, paying for them with citizen tax dollars. Hitler’s principal target population was Jews, whereas Trump’s is immigrants. But both actually imprisoned anyone who opposed them.
 platform, a quad-core processor running at 2.0 GHz, similar to the original Banana […] ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1328 ARCHIVED:86845 CACHE:2901 FOLLOWERS:22 FOLLOWING:14
CNCF and Synadia align on securing the future of the NATS.io project
CNCF and Synadia have come to an agreement to ensure that NATS continues to thrive as a healthy open source project within CNCF, with Synadia’s continued support and involvement. Please see our joint announcement for more… ⌘ Read more
Republican posts video defending law that declared slaves ‘three-fifths’ of a person
Sarah K. Burris, Senior Editor - Raw Story
_Stephan: I think it is very important to recognize that Donny “2 doll”, as Lawrence O’Donnell called him on his program tonight, when Trump said basically that American children have too many toys, is just the leader of a racist fascist coup, but far from the only person perpetrating this destruction of the feder … ⌘ Read more
Today is my cat KitKat’s 5th birthday! I honestly can’t believe it’s been that long. I’ve had him since he was a 2 months old 🥹 ⌘ Read more
[$] LWN.net Weekly Edition for May 1, 2025
Inside this week’s LWN.net Weekly Edition:
Front: Mailman 2 vulnerabilities; AI in Debian; __nonstring__; Cache-aware scheduling; Freezing filesystems; Socket-level storage; Debugging information; LWN in 2025.
Briefs: Debian election; Kali Linux key; OpenBSD 7.7; Firefox 138.0; GCC 15.1; Meson 1.8.0; Valgrind 3.25.0; FSF review; OSI retrospective; Mastodon; Quotes; …
[Announcements](https://lwn.net/Arti … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1327 ARCHIVED:86834 CACHE:2905 FOLLOWERS:22 FOLLOWING:14
RVPC Adds BASIC Interpreter to €1 Open Source RISC-V Computer
The RVPC, a fully open source hardware and software retro-style computer project built around the CH32V003 microcontroller, now supports a BASIC interpreter. This update further expands the capabilities of the €1 RISC-V-based system, which already features VGA output and PS/2 keyboard input, despite its extremely limited resources. Originally conceived as a DIY challenge, the RVPC […] ⌘ Read more
[$] The mystery of the Mailman 2 CVEs
Many eyebrows were raised recently when three vulnerabilities were announced
that allegedly impact GNU Mailman 2.1,
since many folks assumed that it was no longer being supported. That’s
not quite the case. Even though version 3 of
the GNU Mailman mailing-list manager has been available
since 2015, and version 2 was declared (mostly) end of life
(EOL) in 2020, there are still plenty of users and projects still
usi … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1326 ARCHIVED:86801 CACHE:2903 FOLLOWERS:22 FOLLOWING:14
Announcing Vitess 22
The Vitess maintainers are happy to announce the release of version 22.0.0, along with version 2.15.0 of the Vitess Kubernetes Operator. This release is the first to benefit from a 6-month-long development cycle, after our recent… ⌘ Read more
We havet an AI assistant at work, new version came out today “nearby restaurant recommendations” mentioned. Gotta try that!
Ask it where I can get a burger, knowing there’s 3 spots that had it on the menu, AI says there’s none. Ask it to list all the restaurants nearby it can check… it knows 3, of the 10 or so around, but 1/3, even has a burger, on the menu.
Ask it to list the whole menu at restaurant 1: it hallucinates random meals, none of which they had (I ate there).
Restaurant 2 (the one most people go to, so they must have at least tested it with this one): it lists the soup of the day and ¾ meals available. Incomplete, but better than false.
Restaurant 3: it says “food” and gives a general description of food. You have to be fucking kidding me!
“BuT cAnInE, tHe A(G)i ReVoLuTiOn Is NoW”
🧮 USERS:1 FEEDS:2 TWTS:1325 ARCHIVED:86778 CACHE:2902 FOLLOWERS:22 FOLLOWING:14
MINIX Elite EU715-AI Mini PC Combines Meteor Lake Performance and dual 2.5GbE Ports
The MINIX Elite EU715-AI is a compact mini PC based on Intel’s Meteor Lake-H processor architecture. It features integrated Intel Arc Graphics, Wi-Fi 6E, dual 2.5G Ethernet ports, and quad-screen display support. The system runs Windows 11 Pro and comes equipped with 32 GB of DDR5 SO-DIMM memory, configured as two 16 GB modules. For […] ⌘ Read more
Security updates for Monday
Security updates have been issued by AlmaLinux (thunderbird), Debian (distro-info-data, imagemagick, kernel, libsoup2.4, and poppler), Fedora (chromium, java-1.8.0-openjdk, java-1.8.0-openjdk-portable, java-17-openjdk, java-17-openjdk-portable, java-latest-openjdk, pgadmin4, thunderbird, and xz), Mageia (haproxy and libxml2), Oracle (bluez, firefox, gnutls, libtasn1, libxslt, mod_auth_openidc:2.3, ruby:3.1, thunderbird, and xmlrpc-c), Red Hat (delve and golang, glibc, mod_auth_o … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1324 ARCHIVED:86731 CACHE:2910 FOLLOWERS:22 FOLLOWING:14
AnalogLamb Expands Maple Series with Low-Cost ESP32C6 Breakout Boards
AnalogLamb has introduced three new RISC-V development boards based on the ESP32-C6, designed for low-cost, full-function, and low-power IoT applications. These boards feature Espressif’s first Wi-Fi 6 SoC, integrating Wi-Fi 6 (2.4 GHz), Bluetooth 5 LE, and IEEE 802.15.4 protocols. Each board is built around the ESP32-C6-WROOM-1 module, which combines a high-performance 32-bit RISC-V core […] ⌘ Read more
AirPods 4 Hit $99.99 on Amazon, Plus Big Discounts on ANC Model and AirPods Pro 2
Amazon this weekend has major discounts on a few AirPods models, including all-time low prices on the AirPods 4. You can get the base AirPods 4 for $99.99 on Amazon, down from $129.00.
I just fixed a bug in tt’s reply to parent feature. Previously, when the message tree looked like the following
Message
├╴Reply 1
│ └╴Subreply
└╴Reply 2
and “Reply 2” was selected, pressing A to reply to the parent should have picked “Message”. However, a reply to “Reply 2” was composed instead. The reason was a precausiously introduced safety guard to abort the parent search which stopped at “Subreply”, because its subject didn’t match “Reply 2”’s. It was originally intended to abort on a completely different message conversation root. Just in case. Turns out that this thoght was flawed.
Fixing bugs by only removing code is always cool. :-)
↳
In-reply-to
»
Can you beat me at the circle game? 😂 https://neal.fun/perfect-circle/
⤋ Read More
Can you automate the drawing with a script? On X11, you can:
#!/bin/sh
# Position the pointer at the center of the dot, then run this script.
sleep 1
start=$(xdotool getmouselocation --shell)
eval $start
r=400
steps=100
down=0
for step in $(seq $((steps + 1)) )
do
# pi = 4 * atan(1)
new_x=$(printf '%s + %s * c(%s / %s * 2 * (4 * a(1)))\n' $X $r $step $steps | bc -l)
new_y=$(printf '%s + %s * s(%s / %s * 2 * (4 * a(1)))\n' $Y $r $step $steps | bc -l)
xte "mousemove ${new_x%%.*} ${new_y%%.*}"
if ! (( down ))
then
xte 'mousedown 1'
down=1
fi
done
xte 'mouseup 1'
xte "mousemove $X $Y"
Interestingly, you can abuse the scoring system (not manually, only with a script). Since the mouse jumps to the locations along the circle, you can just use very few steps and still get a great score because every step you make is very accurate – but the result looks funny:
🥴
🧮 USERS:1 FEEDS:2 TWTS:1323 ARCHIVED:86698 CACHE:2903 FOLLOWERS:22 FOLLOWING:14
Milwaukee County Circuit Judge Hannah Dugan charged with 2 felonies in ICE case
Daniel Bice John Diedrich Mary Spicuzza, and Vanessa Swales, Reporters - Milwaukee Journal Sentinel
_Stephan: Psychopathic dictator Trump for the first time in U.S. history has arrested a County Circuit Judge. Because Trump’s first response is always to be a bully he is clearly attempting to intimidate lower court judges from ruling against him. Like all fascists … ⌘ Read more
test test 1 2 3
Run Mac OS X 10.2 Jaguar in a Web Browser
Mac OS X Jaguar 10.2 may have been released all the way back in 2002, but thanks to the InfiniteMac project, you can also run Mac OS X Jaguar on your modern Mac right now with just a web browser. Sure you might even have an old dusty Mac laying around in a closet that … Read More ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1321 ARCHIVED:86594 CACHE:2833 FOLLOWERS:21 FOLLOWING:14
Deals: Save Up to $150 Off M4 MacBook Air, $70 Off M3 iPad Air, & More
Amazon is back with some great Apple deals, taking up to $150 off the retail price of brand new M4 MacBook Air series, up to $70 off the new M3 iPad Air, $70 off Apple Watch Series 10, and $70 off the Apple Watch SE 2. If you’re in the market for some new Apple … Read More ⌘ Read more
Run Mac OS X 10.2 Jaguar in a Web Browser
Mac OS X Jaguar 10.2 may have been released all the way back in 2002, but thanks to the InfiniteMac project, you can also run Mac OS X Jaguar on your modern Mac right now with just a web browser. Sure you might even have an old dusty Mac laying around in a closet that … Read More ⌘ Read more
NUCLEO-WBA65RI Brings Bluetooth LE, Thread, and Zephyr RTOS to STM32 Nucleo-64 Platform
The NUCLEO-WBA65RI is a wireless STM32 Nucleo-64 development board built around the STM32WBA65RIV7 microcontroller. It combines the MB2130 MCU RF board with the MB1801 mezzanine board to support Bluetooth LE and IEEE 802.15.4-based protocols such as Thread, Matter, and Zigbee. The STM32WBA65RIV7 microcontroller is a 32-bit Arm Cortex-M33 device featuring 2 MB of flash and … ⌘ Read more
Security updates for Friday
Security updates have been issued by AlmaLinux (thunderbird), Debian (libbpf), Fedora (golang-github-openprinting-ipp-usb, ImageMagick, mingw-libsoup, mingw-poppler, and pgbouncer), SUSE (glib2, govulncheck-vulndb, libsoup-2_4-1, libxml2-2, mozjs60, ruby2.5, and thunderbird), and Ubuntu (linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-iot, linux-aws-fips, … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1320 ARCHIVED:86540 CACHE:2803 FOLLOWERS:21 FOLLOWING:14
China plans to build a nuclear power plant on the Moon + 2 more stories
China urges Korea to restrict rare earth exports to U.S.; global coral bleaching spreads due to record ocean heat; China plans a nuclear power plant on the Moon. ⌘ Read more
Prepare your application landscape for zero trust with Keycloak 26.2
Strong identity and access management is a key component of a zero trust architecture for cloud native applications. Keycloak is well-known for its single-sign-on capabilities based on open standards. It provides you all the building blocks… ⌘ Read more
@xuu@txt.sour.is or @kat@yarn.girlonthemoon.xyz Do either of you have time this weekend to test upgrading your pod to the new cacher branch? 🤔 It is recommended you take a full backup of you pod beforehand, just in case. Keen to get this branch merged and to cut a new release finally after >2 years 🤣
[47°09′14″S, 126°43′37″W] Raw reading: 0x6809E172, offset +/-2
OWASP Juice Shop | Part 2 — Bully Chatbot ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1319 ARCHIVED:86501 CACHE:2810 FOLLOWERS:21 FOLLOWING:14
[$] VFS write barriers
In the filesystem track at the 2025 Linux Storage, Filesystem, Memory
Management, and BPF Summit (LSFMM+BPF), Amir Goldstein wanted to resume
discussing
a feature that he had briefly introduced at the end of a 2023 summit session: filesystem “write
barriers”. The idea is to have an operation that would wait for any
in-flight write()
system calls, but not block any new write() calls as bigger
hammers, such as freezi … ⌘ Read more
Security updates for Wednesday
Security updates have been issued by AlmaLinux (bluez, expat, and postgresql:12), Fedora (chromium, golang, LibRaw, moodle, openiked, ruby, and trafficserver), Red Hat (bluez, expat, gnutls, libtasn1, libxslt, mod_auth_openidc, mod_auth_openidc:2.3, ruby:3.1, thunderbird, and xmlrpc-c), and Ubuntu (linux, linux-aws, linux-gcp, linux-hwe-6.11, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oem-6.11, linux-oracle, linux-raspi, linux-realtime, linux-azure, linux-azure-6.11, linux-gc … ⌘ Read more
revisitando um projeto de há 2 anos
erro no build
python do meu OS é agora uma versão mais recente
incompatível com uma das bibliotecas
keeptryingkeepfailing.mp3
a esperança vã de meter um issue no tracker do projeto
má disposição por acabar o dia com prob não resolvido
horas depois à noite, ping
o developer respondeu ao issue
e fez grande commit pra resolver o problema
fuck yeah software livre :szterminal:
↳
In-reply-to
»
Also, I should cut down on coffee. Seriously, I've nearly had a ... I honestly don't know what it was; A Panic attack? A heart attack? I dunno, I just felt like my heart and lungs were so about to burst I had to go for a run to cope.
⤋ Read More
@aelaraji@aelaraji.com I use to be a pot or more a day but have cut that back in the last 4 or so years to just 2-3 cups. Main reason was because I was getting jittery which didn’t happen before. I do think it is good to go without periodically (probably applies to more things than coffee) to just reset the system.
I don’t drink it often but decaf’s taste has gotten better too.
The Nintendo Switch 2 is $700, are video games getting more expensive?
High-end games and systems are more popular than ever, but what about their price tags? ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1317 ARCHIVED:86476 CACHE:2798 FOLLOWERS:20 FOLLOWING:14
Pyra paizuri [Xenoblade 2] ⌘ Read more
[$] DMA addresses for UIO
The Userspace\
I/O (UIO) subsystem was first added to the kernel by
Hans J. Koch for the 2.6.32 release in 2007. Its purpose is to facilitate
the writing of drivers (mostly) in user space; to that end, it provides
access to a number of resources that user-space code normally cannot touch.
One piece that is missing, though, is DMA addresses. [A proposal to\
fill that gap](https://lwn.net/ml/all/20250410-uio-dma-v … ⌘ Read more
Security updates for Tuesday
Security updates have been issued by AlmaLinux (java-1.8.0-openjdk, kernel, libxslt, mod_auth_openidc:2.3, and webkit2gtk3), Fedora (c-ares, giflib, jupyterlab, perl, perl-Devel-Cover, perl-PAR-Packer, prometheus-podman-exporter, python-notebook, python-pydantic-core, rpki-client, ruby, rust-adblock, rust-cookie_store, rust-gitui, rust-gstreamer, rust-icu_collections, rust-icu_locid, rust-icu_locid_transform, rust-icu_locid_transform_data, rust-icu_normalizer, rust-icu_normalizer_data … ⌘ Read more
Apple Releases New iOS 18.5 and macOS Sequoia 15.5 Public Betas
Apple today seeded the second public betas of upcoming iOS 18.5, iPadOS 18.5, and macOS Sequoia 15.5 updates, allowing the public to test the updates ahead of when they see an official launch. The public betas come a day after Apple provided the third betas to developers.
Public beta testers can downlo … ⌘ Read more
10 Things You Might Not Know About Greenland
Greenland has been in the news because President Trump has expressed a desire to buy the country. But just how much do you know about this frozen land? With a coastline of 24,430 miles (39,316 km) punctuated by deep fjords, it’s the world’s largest island. It is described as “an autonomous territory within the Kingdom […]
The post [10 Things You Might Not Know About Greenland](https://listverse.com/2025/04/22/10-things-you-might-not-know-ab … ⌘ Read more