Public updates from xsukax and this corner of the network.
Sign In to your accountPublic posts known to this server, including selected instances.
Rose, 2017
See my work at https://creativeramblings.com
#photography #closeup #closeupphotography #flowers #naturephotography
Cendrine Marrouat – ArtistCendrine Marrouat - ArtistCendrine Marrouat is an artist, poet, author, and literary editor living in Winnipeg, Canada.
Today is #ChuckyTheNotoriousKillerDollDay but after hearing this track, I will be the one you'll want to notortiously murder.
https://youtu.be/3qagAdxv8ns
It is a loading screen for the bad guys.
Rotate any API credentials exposed on systems running LiteLLM, audit your installations, and watch for suspicious outbound traffic. Operator action required; the update button is not your friend today.
Reward: You've received a Cursed Dependency — soulbound, untradeable, already installed.
#SupplyChainAttack #Malware (2/2)
CSO OnlineLiteLLM release pipeline hacked to distribute credential-stealing malwareAttackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.
🏆 New Achievement! Patch Notes From Hell!
v[COMPROMISED] — ADDED: credential-stealing malware, bundled free with your LiteLLM update. FIXED: the developers' trust in their own release pipeline (it's not fixed). KNOWN ISSUE: anything you typed into that installation is now someone else's problem.
Attackers breached LiteLLM's release pipeline and weaponized it to push malware targeting credentials directly to users who pulled affected versions. Your supply chain is not a feature. (1/2)
Ring in 2027 Austrian-style at Flachau, where a torchlit descent down Achterjet valley kicks off the wildest #NYE celebrations in the Alps! 🔥 Expect packed mountain huts, pulsing DJ sets, and that perfect blend of après-ski energy that only #Austria delivers when the clock strikes midnight. Since most venues are still finalizing their programs, your best move is checking directly with local bars and clubs for the freshest details on what's happe...
https://events.europa.tips/flachau-silvester-partys-clubs?lang=en
Europe Events Calendar 2026-2027 – Festivals, Concerts & EventsNew Year's Eve Flachau 2026/2027: Parties and Après SkiNew Year's Eve in Flachau 2026/2027: parties, après ski bars, DJs, fireworks and torch run. See what is confirmed for the turn of the year.
Week-end riche en émotion, dans la demi du mixte nos champions du monde ont joué une revanche contre les numéro 1 et le niveau de jeu des deux paires était exceptionnel. Dénouement insoutenable à 19-19 dans le 3e set, l'arbitre donne un point de pénalité sévère aux bleus pour retard de jeu que les chinois convertissent immédiatement. On est frustrés de ne pas avoir vu le match se terminer raquette en main.
Merci Delphine & Thom pour le match 🙏❤️🩹
Aziz Yıldırım’ı şaşkına çeviren Kante sözleşmesi! “Ya Rabbi Ya Resulullah!”
https://abcgazetesi.com.tr/spor/aziz-yildirimi-saskina-ceviren-kante-sozlesmesi-ya-rabbi-ya-resulullah-875431?_unique_id=6ade7fb4c1f05
ABC HaberAziz Yıldırım’ı şaşkına çeviren Kante sözleşmesi! “Ya Rabbi Ya Resulullah!”Fenerbahçe’de N’Golo Kante’nin menajerine ödenmesi gündeme gelen 3 milyon euroluk ücret tartışma yarattı. Aziz Yıldırım’ın söz konusu ödemeyi kabul etmediği y..
Today I had a nothing day. I skipped out on any semi-obligations and did stuff like laundry, cleaning out the shower drain, calling family, cleaning the shower walls, playing on my phone, etc. Do I feel a little guilty about the semi-obligations? Yes, but I needed this day. #MentalHealth
United States GP - Race Pace (Average, Median, Fuel corrected Average)
Why am I getting political spam from South Carolina I don’t live there
Chasing a perfect Moon
Was I supposed to turn them down Lord? Did I fail? Should I have had faith in good times to come and not take the devils deal?
⬛⬛⬛⬛⬛⬛
⬛🟩🟩🟩🟩🟩
⬛🟩🟩🟩🟩🟩
⬛⬛⬛🟩🟩🟩
⬛⬛⬛🟩🟩🟩
🍎⬛🟢🟩🟩🟩
Score: 19
RE: https://mastodon.world/@kammerotica/117486838885263494
This is very interesting. I think at this point anybody who has used AI in one form or another knows how useful it is. Regardless of how we handle this, if AI is ever going to become this amazing thing we want it to become (rather than the current iteration which is amazing in some things and horrendous at others), it will likely have to have access to books and other material, in one way or another.
I'm super curious to see how this develops.
Australia May Legalize AI Training on Your Books without your consent. Sign an Authors Guild-sponsored Statement Opposing It. https://authorsguild.org/news/australia-ai-training-statement/ #WritingCommunity #Copyright #Licensing #AustralianLaw #AITraining #LLM
MastodonRegina Kammer (@[email protected])Australia May Legalize AI Training on Your Books without your consent. Sign an Authors Guild-sponsored Statement Opposing It. https://authorsguild.org/news/australia-ai-training-statement/ #WritingCommunity #Copyright #Licensing #AustralianLaw #AITraining #LLMnext we're gonna find out that Olive Garden doesn't make its own olives
Today is Constitution Day in #Lithuania https://cromwell-intl.com/travel/lithuania/?s=mb #travel #history
Bob's Pages of Travel, Linux, Cybersecurity, and MoreLithuania — Visiting the Baltic CountriesHow to travel to Lithuania — where to stay, how to get around, and things to see and do.
On the new TJ Maxx ad-
Since WHEN was that brand associated with being unique and original?
That's weird, like these new Estee Lauder ads trying to appeal to the Young People that have lower incomes in comparison to their moms that wear that makeup.
Japan Launches Mission to Study Martian Moon https://hackaday.com/2026/10/22/japan-launches-mission-to-study-martian-moon/
HackadayJapan Launches Mission To Study Martian MoonHumanity has been sending robotic explorers to Mars since the 1970s, and for our efforts we’ve been rewarded with not only incredible imagery of the Red Planet’s magnificent desolation,…
The lesson in patience that comes from only having one (1) 3D Printer, needing to print 40+ nearly identical pieces, and needing to keep them ordered, but not wanting to go through the effort to boolean in a serial number on each piece.
Kids don't have beds here you know things are bad
Snap bolts Iron Man onto $2,195 glasses with four hours of battery. The waveguides are real engineering. The "honorary CXO" is the actual product: a celebrity renting credibility to pre-orders.
https://www.moneycontrol.com/science/2-processors-and-a-7-millisecond-latency-how-robert-downey-jr-s-specs-ar-glasses-work-science-explained-article-14059226.html
26 Ekim – 2 Kasım 2026 haftalık burç yorumları: Boğa Dolunayı neleri değiştirecek?
https://abcgazetesi.com.tr/astroloji/26-ekim-2-kasim-2026-haftalik-burc-yorumlari-boga-dolunayi-neleri-degistirecek-875429?_unique_id=6ade7e87ae934
ABC Haber26 Ekim – 2 Kasım 2026 haftalık burç yorumları: Boğa Dolunayı neleri değiştirecek?26 Ekim – 2 Kasım haftalık burç yorumlarında Boğa burcunda gerçekleşen dolunay öne çıkıyor. Koç’tan Balık’a kadar 12 burç için aşk, para, kariyer, aile ve sos..
JetBrains Thinkrail
https://github.com/JetBrains/thinkrail
there's a 50-50 chance I get murdered within the next two months by ice Nazis or a jealous husband. so I'm living my best life now.
AsyncConfigPortal (0.17.0) for esp32/esp8266 by Peter Soos
➡️ https://github.com/soosp/AsyncConfigPortal
Reusable modular web configuration portal for ESP32 and ESP8266.
#ArduinoLibs #ArduinoLibraries #esp32Libraries #esp8266Libraries
Compose key on Ubuntu 26.04.1: an invalid key no longer aborts the sequence #2604 #ibus #composekey
This week has been extremely busy. I have seen 4x RCE vulnerabilities, compromised eMudhra CA certificates that spill into their own CVE for Java with a CVSS of 9.1, and 3x DoS type of vulnerabilities, all in very popular and widely used software that can either crash under specific conditions or give remote code execution capabilities to threat actors. The mentioned vulnerabilities are:
PHP RCE: CVE-2026-109618/109619/115560
Gitlab RCE: CVE-2026-110264
Node2Shell \ HTTP2Shell RCE: CVE-2026-111497
ISC Bind 9 RCE: CVE-2026-94300
ISC Bind 9 DoS: CVE-2026-19630/96888/97313
Windows SMB Server DoS: CVE-2026-91403
Unbound DNS-over-QUIC Bug: CVE-2026-97206
Oracle Java (JSSE) containing compromised eMudhra certificates: CVE-2026-91403
Patching all these vulnerabilities on endpoints and servers will take a humungous amount of time and effort, as it can't be done overnight and is heavily dependent on the size of your environment. It's good that we are getting security patches for software that had critical vulnerabilities present for years without anyone discovering them, like in the Gitlab case where the RCE vulnerability went undiscovered for 12 years across all their releases.
What will happen over the coming years is that we will get a massive influx of vulnerabilities just like the one seen this week, but over time it will stabilise more as software becomes more secure, and we will start seeing fewer vulnerabilities overall.
#Gitlab #eMudhra #Node2Shell #CyberSecurity #Vulnerabilities
