X XFediYour place in the Fediverse
XFEDI

Federated

ActivityPub
HELLO, FEDIVERSE

Good conversations travel.

Public updates from xsukax and this corner of the network.

Sign In to your account

Public posts known to this server, including selected instances.

I feel like a pretty common frustration with AI and LLMs is that they’re being pitched as infinite consumption machines and humans are going, “no, actually, there is a limit to consumption.”

Like yes, dozens or hundreds of acts of consumption are involved in seeing, say, The Sistine Chapel, or playing a video game, or watching a movie, but the point of all those is the meaning they provide our lives, *not* the act of consumption itself.

↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

CHP Genel Merkezi’ne dikkat çeken pankart: “Arınma için önce siyasi ahlak kanunu”
https://abcgazetesi.com.tr/politika/chp-genel-merkezine-dikkat-ceken-pankart-arinma-icin-once-siyasi-ahlak-kanunu-874685?_unique_id=6ad7505ade9b9

ABC HaberCHP Genel Merkezi’ne dikkat çeken pankart: “Arınma için önce siyasi ahlak kanunu”CHP Genel Merkezi’nin dış cephesine “Arınma için önce siyasi ahlak kanunu” yazılı pankart asıldı. CHP kayyumu Kemal Kılıçdaroğlu’nun arınma çağrısı ve yeni an..
↩ Reply ♡ 0 · ↻ 0 ↗ Original

RE: https://mastodon.social/@hadeelfamily9/117457130945352944

#winteriscoming #fediforgaza #boost

❞ Quoted posthadeelfamily9

💔 Winter is coming, and my heart trembles with fear for my children. I lost my husband in the war, and now I’m struggling alone to protect my three children from the cold. We desperately need blankets to keep them warm during the freezing nights. Nothing hurts more than seeing yo

Mastodonhadeelfamily9 (@[email protected])Attached: 2 images 💔 Winter is coming, and my heart trembles with fear for my children. I lost my husband in the war, and now I’m struggling alone to protect my three children from the cold. We desperately need blankets to keep them warm during the freezing nights. Nothing hurts more than seeing your children cold and not being able to provide the warmth they deserve. Please, a single blanket cou
↩ Reply ♡ 0 · ↻ 0 ↗ Original

I must say, I get annoyed with the NHS box-tickers who keep trying (despite my constant feedback) to get me to make various appointments for tests that I neither want nor need.
This isn't done out of a concern for patients and their health, it's the Government push to "keep records" on everyone.
I refuse to become an entry on a page. I am a person with needs and feelings.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

🔥 ■ Brays Efe se pronuncia sobre los comentarios acerca de su parecido con Carlos González, protagonista de 'La bola negra': "Los Javis son mis amigos, no me deben nada" ■ El actor ha estado en 'El sótano' de TEN y ha hablado de[…]
https://www.huffingtonpost.es/virales/brays-efe-pronuncia-sobre-comentarios-acerca-parecido-carlos-gonzalez-protagonista-la-bola-negra-los-javis-son-mis-amigos-me-deben-f202610.html?int=MASTODON_WORLD

#virales #javiercalvo #braysefe #javierambrossi #labolanegra

↩ Reply ♡ 0 · ↻ 0 ↗ Original

🚨 OWASP AI Top 10: Big changes for 2026!

🤖 Excessive Agency: #6 → #3
📉 Output Handling: #5 → #10
💸 Unbounded Consumption: #10 → #6

📊 Real-world incidents are reshaping AI security priorities.

👉 https://7asecurity.com/blog/2026/10/owasp-ai-top-10-2026/

#AISecurity #OWASP

7ASecurity BlogOWASP AI Top 10 2026: The Rankings Just Had Their Biggest Shakeup YetExplore the OWASP AI Top 10 2026 updates, key ranking changes, emerging LLM security risks, and how to prioritize AI security testing.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Build a Python Honeypot: A Hands-On Guide

A complete hands-on guide to building a multi-service Python honeypot: asyncio listeners, structured logging, systemd hardening, log shipping and alerting.

https://www.halkynconsulting.co.uk/a/2026/10/python-honeypot/

Halkyn Security BlogBuild a Python Honeypot: Hands-On Guide | HalkynBuild a Python honeypot from scratch: asyncio listeners for SSH, Telnet and HTTP, JSON logging, systemd hardening, alerting and safe deployment.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

"Aapo toimii tavallisella puhelimella ilman erillistä sovellusta. Se soittaa käyttäjälle sovitusti ja tarjoaa päivää rytmittävää säännöllistä juttuseuraa.

Puhelinohjelmaa on testattu eri puolilla Suomea, muun muassa Porissa. Palaute on ollut myönteistä, ja ikäihmisiltä sekä terveysalan ammattilaisilta saatu palaute muovaa lopullista palvelua.

Palvelun voi hankkia kuukausiveloituksella loppuvuonna. Rehakka ihmettelee markkinoilla olevia minuuttitaksaisia tekoälypalveluita, sillä ne voivat käydä kalliiksi." #TätäköTarvitsimme

https://yle.fi/a/74-20251091

Yle UutisetTekoäly soittaa luuriin ja kysyy kuulumisia – tällainen on ikäihmisille suunnattu AapoErilaisia ikäihmisten käyttöön tarkoitettuja tekoälyapureita hiotaan nyt kovalla vauhdilla. Juttukumppanina tekoäly on vielä hieman viipyilevä.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Next round - a full redesign of the Space features - https://social-home.io/blog/2026-10-20-spaces-redesign/ Now supporting local communities any many more - just simple to install on #HomeAssistant OS - other installation types follow soon

Media attachment
Social HomeSpaces, redesigned: calmer, quicker, and local · Social HomeSpaces get a fresh look. One Spaces page with Discover, a space that opens on its people and the composer, tabs that fit your screen, settings on one page, and a calendar that shows a camp once. Public spaces can now be local communities for the households nearby. All in Social Home 2026.10.20.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
T

🚨 17 CVEs across 12 AI agent frameworks — one disclosure wave, same three design failures.

6× CVSS 9.8 unauthenticated RCE:
- Piflow: POST /chat → exec_shell, no auth
- Langchain-Chatchat: /tools/call invokes shell tool, no auth
- DB-GPT: mock auth grants everyone admin
- Letta: compose.yaml omits LETTA_SERVER_SECURE, all routes open
- Cognition: no auth on REST/SSE API (fixed: 0.13.0)

5× 8.8: approval gates return True, unsandboxed python3, async sub-agents skip interrupt_on.

2× 8.3 IDOR: IBM Langflow OSS (fixed: 1.12.5), Coze Studio (fixed: 0.5.2).

7 products have no published fix. Put an auth proxy in front, bind DB ports to localhost, and rotate every secret in the execution environment.

https://threataft.com/articles/ai-agent-framework-rce-mega-cluster-17-cves

#InfoSec #AIAgent #LLM #RCE #CVE #AppSec

ThreatAftAI Agent RCE Cluster: 17 CVEs, Auth Defaults Off | ThreatAft17 AI agent framework CVEs in one disclosure wave: auth defaults off, sandboxing absent, approval gates bypassable. Full CVE list and fixes.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

İşsizlik ödeneğinde yeni dönem: İŞKUR hesaplama sistemini değiştiriyor
https://abcgazetesi.com.tr/ekonomi/issizlik-odeneginde-yeni-donem-iskur-hesaplama-sistemini-degistiriyor-874683?_unique_id=6ad74f2d339ea

ABC Haberİşsizlik ödeneğinde yeni dönem: İŞKUR hesaplama sistemini değiştiriyorİki farklı iş yerinde aynı anda çalışanların işsizlik ödeneği hesabıyla ilgili önemli bir gelişme yaşandı. Kamu Denetçiliği Kurumu, İŞKUR’a kazançların aylık ..
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Great, now sponsors are increasingly sending out 18 page "briefs" for each product. All AI generated of course, so I can spend 30 minutes nonsense just so I can find the 3 bullet points that contain actual information.

↩ Reply ♡ 0 · ↻ 0 ↗ Original