X XFediYour place in the Fediverse
XFEDI

Federated

ActivityPub
HELLO, FEDIVERSE

Good conversations travel.

Public updates from xsukax and this corner of the network.

Sign In to your account

Public posts known to this server, including selected instances.

RE: https://mastodon.world/@webstandards/117507318192908666

1 week today!

❞ Quoted postLondon Web Standards

Free tickets for next week's meet-up: https://londonwebstandards.org/events/lws-nov-2026/#tickets featuring: @diekus @seaotta #FoldableWeb #DualScreens

MastodonLondon Web Standards (@[email protected])Free tickets for next week's meet-up: https://londonwebstandards.org/events/lws-nov-2026/#tickets featuring: @[email protected] @[email protected] #FoldableWeb #DualScreens
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html

The Hacker NewsCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesGitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

My home server has been compromised for the past three days. A cron job has been running the #XMRig #cryptominer disguised as Plex Media Server.

I deleted #Plex, but it kept running and using all my CPU cores. I ChatGPT'd the solution and took care of it. The system is offline now, and scans are running, but I might reinstall the OS. I hope none of my data got corrupted.

This was the first time something like this happened to me.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

🚨 OWASP Top 10:2025 has changed.

📈 Security Misconfiguration: #5 → #2
🔗 Software Supply Chain Failures: NEW
⚠️ Mishandling of Exceptional Conditions: NEW

Scanners flag risks. Pentesters validate exploitability.
👉 https://7asecurity.com/blog/2026/10/owasp-top-10-testing-guide/

#OWASP #AppSec

7ASecurity BlogOWASP Top 10 Testing Guide: How Pentesters Validate ExploitabilityOWASP Top 10 testing guidelines have changed. Learn why SSRF was merged into Broken Access Control in 2025 and what else has changed.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

RE: https://pixelfed.social/p/brejoc/1020667678188559719

Last time I'm mentioning this. If you'd like to enter, you should do it now. And please share, so more people might get the chance. Thanks!

#photography #raffle #giveaway

❞ Quoted postChase Colors

Would you like to win this print? I'm doing a giveaway! This is your last chance! Only four more days. https://pixelfed.social/p/brejoc/1016690905735692121 #photography #raffle #giveaway

A framed fine art print showcasing bright sun rays piercing through dark tree branches and foliage in a hazy, misty forest.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

🛡️ SoC Engineer at OpenAI
📍 Hybrid · San Francisco, CA
💰 $287k–$485k a year

Apply: https://blueteamjobs.com/job/soc-engineer-openai-qffjec/

#BlueTeam #InfoSec #CyberSecurityJobs #DetectionEngineer

BlueTeamJobsSoC Engineer at OpenAI | BlueTeamJobsOpenAI is hiring a SoC Engineer, San Francisco, CA. Pay: $287k–$485k a year. About the Team OpenAI’s Hardware organization develops custom silicon and…
↩ Reply ♡ 0 · ↻ 0 ↗ Original

New Shared Link - Free Tools and Tips to Help Your Job Search https://thejobhopper.substack.com/p/free-tools-and-tips-to-help-your?utm_source=post-email-title&publication_id=2629223&post_id=221700381&utm_campaign=email-post-title&isFreemail=true&r=1edcbi&triedRedirect=true&utm_medium=email - Finding a new job is hard enough without paying money for the privilege. These tools are 100% free.

thejobhopper.substack.comFree Tools and Tips to Help Your Job SearchFinding a new job is hard enough without paying money for the privilege. These tools are 100% free.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

question : j'ai n'ai pas de compte sur Leboncoin ni sur Vinted, mais j'ai un paquet de bouquins (thèmes très hétéroclites) dont je souhaite me débarrasser (et si je peux me faire de quoi payer un ou deux repas avec, ça m'arrangerait).

Vous avez des recommandations ? Des conseils ?

Peut-être que c'est mieux de commencer ici sur Masto ? A prix libre ? Est-ce qu'il y a des hashtags qui sont dédié à ça ?
Ou Inventaire.io ?

↩ Reply ♡ 0 · ↻ 0 ↗ Original

🎙️ ■ Qué flores comprar este 1 de noviembre, Día de Todos los Santos, para llevar al cementerio y cuáles son sus significados ■
https://los40.com/2026/10/27/que-flores-comprar-este-1-de-noviembre-dia-de-todos-los-santos-para-llevar-al-cementerio-y-cuales-son-sus-significados/?int=MASTODON_WORLD

#los40 #fiesta #todoslossantos

Flores en el cementerio el 1 de noviembre / Javier Ruiz
LOS40Qué flores comprar este 1 de noviembre, Día de Todos los Santos, para llevar al cementerio y cuáles son sus significados | LOS40Estos son los cuatro tipo de flores que más se compran durante esta festividad
↩ Reply ♡ 0 · ↻ 0 ↗ Original

🇺🇦#Ucraina a doborât numai două din cele 16 rachete balistice lansate de 🇷🇺#Rusia în atacul de noaptea trecută.
O persoană decedată și 12 rănite.

🔗 https://wp.me/p9KpFA-5LSk

#Știri

Media attachment
G4Media.roUcraina a doborât numai două din cele 16 rachete balistice lansate de Rusia în atacul de noaptea trecutăAntiaeriana ucraineană a doborât noaptea trecută numai două din cele 16 rachete balistice cu care Rusia a atacat ţinte la Kiev şi în alte zone ale Ucrainei, provocând noi pagube infrastructurii energetice şi logistice, precum şi podului principal de peste Nipru care împarte în două capitala ucraineană, au semnalat marţi Forţele Aeriene ucrainene şi preşedintele ucrainean Volodimir Zelenski, care l
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Would you like to win this print? I'm doing a giveaway! This is your last chance! Only four more days.

https://pixelfed.social/p/brejoc/1016690905735692121

#photography #raffle #giveaway
A framed fine art print showcasing bright sun rays piercing through dark tree branches and foliage in a hazy, misty forest.
PixelfedChase Colors (@[email protected])Hey everyone, now that our recent "Blende 11" photo group exhibition in the town hall of Gersheim, Germany has wrapped up, I’ve got four printed photos sitting here. Rather than taking them out of their frames and packing them away in a dark drawer, I'd love for them to find a good home. I'm giving all four away right here on Pixelfed/Fediverse. To enter, just reply with a comment letting me know
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Morgen um 9:30 Uhr: Deep-Dive-Session zum Thema „Zero Trust: neuer Ansatz, Hype oder alter Wein in neuen Schläuchen?“ von cirosec-Geschäftsführer Stefan Strobel. Infos unter https://cirosec.de/news/congressit-sa-deep-dive-sessions/. Kommen Sie einfach vorbei und genießen Sie bei einem hochkarätigen Fachvortrag eine kleine Auszeit vom Messegeschehen.

Morgen um 9:30 Uhr: Deep-Dive-Session zum Thema „Zero Trust: neuer Ansatz, Hype oder alter Wein in neuen Schläuchen?“ von cirosec-Geschäftsführer Stefan Strobel. Infos unter https://cirosec.de/news/congressit-sa-deep-dive-sessions/. Kommen Sie einfach vorbei und genießen Sie bei einem hochkarätigen Fachvortrag eine kleine Auszeit vom Messegeschehen.
ciroseccongress@it-sa – Deep Dive Sessions - cirosecKostenfreie Deep Dive Sessions am 28.10.2026 in Nürnberg: Zero Trust, Incident Response, Ransomware, EDR/XDR, Pentesting & NIS2. Fachvorträge von cirosec Experten.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Published Lone Coder article 176: "Are AI Coding Tools Fun or a Behaviour Addiction?"

A comment by Linus Torvalds during the AI cybersecurity news raised a new question. Some programmers use AI-assisted programming excessively while others find little value in it. Studies mentioned in this column claim these tools do not increase productivity so why do some programmers work long hours with them? Perhaps they are addicted.

https://www.pegasoft.ca/coder/coder_october_2026.html

#tech

www.pegasoft.caAre AI Coding Tools Fun or a Behaviour Addiction? - The Lone CoderStudies mentioned in this column claim these tools do not increase productivity so why do some programmers work long hours with them? Perhaps they are addicted.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

My main takeaway from Anthropic’s S-1, AWS capacity being sold out thru 2027 and the AI-driven cuts at Barclays, Microsoft & American Express is that demand for AI is massive.

There’s a bubble due to not enough datacenter capacity to satisfy the current demand but this will work itself out in the long run.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

❓🐍 Quiz: Exploring AI Coding Agent Workflows Quiz

Test your understanding of IDE, terminal, PR, and cloud AI coding agents, and learn which workflow fits each development task.

https://realpython.com/quizzes/exploring-ai-coding-agent-workflows/

Real PythonExploring AI Coding Agent Workflows Quiz – Real PythonTest your understanding of IDE, terminal, PR, and cloud AI coding agents, and learn which workflow fits each development task.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

❓🐍 Quiz: Python Circular Imports: Why They Happen and How to Fix Them Quiz

Test your understanding of Python circular imports, from how the import system loads modules to the fixes and workarounds that break a cycle.

https://realpython.com/quizzes/python-circular-imports/

Real PythonPython Circular Imports: Why They Happen and How to Fix Them Quiz – Real PythonTest your understanding of Python circular imports, from how the import system loads modules to the fixes and workarounds that break a cycle.
↩ Reply ♡ 0 · ↻ 0 ↗ Original