Mastodon Feed: Posts

Boosted by jsonstein@masto.deoan.org ("Jeff Sonstein"):
bobdahacker@infosec.exchange ("BobDaHacker 🏳️‍⚧️") wrote:

🙏 New Blog Post

The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check.

What's exposed:

• Email addresses
• Names
• Country
• Date of birth (they call it "borned_date" lol)
• Account role (it's "PRAYER" for everyone, obviously)

Also found:

• Signup endpoint returns the email verification token in the response body, so you can verify accounts without accessing the inbox
• Their verification emails fail their own domain's authentication requirements

Reported January 3rd. Emailed 9 people. A journalist also contacted them. Zero responses. Still live six months later. Vow of silence I guess.

Full writeup: https://bobdahacker.com/blog/click-to-pray

#InfoSec #BugBounty #ResponsibleDisclosure #IDOR #Security #CyberSecurity #Privacy #DataExposure #ClickToPray #Vatican #APISecurity

Boosted by jsonstein@masto.deoan.org ("Jeff Sonstein"):
MikeDunnAuthor@kolektiva.social wrote:

Today in Labor History July 24, 2017: The Queer Insurrection and Liberation Army (TQILA) was established in Rojava, Syria to combat the persecution of LGBT people by ISIL. The TQILA was a queer anarchist subunit of the IRPGF, who fought alongside the Kurdish People’s Defense Units (YPG).

#workingclass #LaborHistory #queer #insurrection #liberation #anarchism #syria #isis #isil #kurdish #lgbtq #ypg #rojava

jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:

the 1/2 in PVC extension down the middle is not stiff enough, so I’ll probably go back and get the adapters for a 3/4 inch centerpiece instead. I am hopeful that metal near the feedpoint will not have too bad an effect.

#QuadLoop #AmateurRadio #Antenna

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
diffrentcolours@tech.lgbt ("Dick Armoire") wrote:

If you agree with @Codeberg 's decision over banning LLM-generated code, why not support them financially with a membership?

https://join.codeberg.org/

For €2/month you can support an important organisation taking a stand against AI, providing a #FOSS alternative to big corporate GitHub. Many nerds here can afford that.

As an active member of the Codeberg e.V. nonprofit, you also get a voice and a vote in how Codeberg is run. It was the members who voted to support the resolution against slopcode.

#Codeberg #git #NoAI #FuckAI

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
neil@mastodon.neilzone.co.uk ("Neil Brown") wrote:

I don't get why people who want to use LLMs to generate code are grumpy because Codeberg doesn't want to host it.

Surely they can just use their LLMs to generate a replacement for Codeberg, which they can operate on whatever basis they choose?

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
aworkinglibrary@mstdn.social ("mandy brown") wrote:

“If a soldier is imprisoned by the enemy, don’t we consider it his duty to escape?” https://aworkinglibrary.com/writing/open-universe

Boosted by rmrenner ("The Old Gay Gristle Fest"):
repeattofade@tootr.co ("garry") wrote:

ti west directing johnny depp as ebenezer.. maybe we need another hollywood shutdown

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
Natasha_Jay@tech.lgbt ("Natasha :mastodon:🇪🇺🇮🇪") wrote:

"Bird Trails" by photographer Edu Aguilera. It is a composite photograph created by merging multiple high-speed photo sequences into one image...

#Photo #Photograper #Art #Photoart

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
hmm_cook@universeodon.com ("Heather Cook🖖Autistic Coach") wrote:

If you take burnout as a warning sign that there's worse danger ahead, and say: "I'm on a bad track, and if I keep going it's going to get worse, so I'm going to make changes now that are actually life-giving" — you can get out of it. And you can make your life so much better.

I'm actually grateful for the burnouts I went through. Without them I'd have just kept pushing, kept forcing myself to achieve, to meet social standards, to do things that were really, really hurtful to me.

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
tuxilio@toot.teckids.org ("Tuxilio 🇪🇺 🏳️‍🌈") wrote:

> Code generated by generative AI is not accepted in SuperTuxKart. Any code submission produced with this method will be rejected.

nice #SuperTuxKart

(from https://supertuxkart.net/How%5Fto%5Fcontribute%5Fcode)

#stk

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
inquiline@assemblag.es ("tools for commensality 🧿") wrote:

this book on Fungal Machines look like it will be of interest to folks here:

https://link.springer.com/book/10.1007/978-3-031-38336-6

do not @ me about the publisher

#FungalMachines #mushrooms #sensing

dysfun@treehouse.systems ("gaytabase") wrote:

there was a good discount on chicken at the supermarket if i could cook it today.

anyway, chicken tikka is now marinading in the fridge 🥰

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
kestral@masto.hackers.town ("Kestral") wrote:

The world needs more hackerspaces! I want to help with that. Specifically, in the little slice of Scotland I call home.

I love the existing spaces in Glasgow and Edinburgh, but I know some incredible hackers, makers, and creators who aren't close enough to make those places home.

So, if you know anyone who happens to live in/around the south west coast of Scotland, could you please share this survey with them?

https://tally.so/r/gDxoAl

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
timnitGebru@dair-community.social ("Timnit Gebru (she/her).") wrote:

Its all about "free markets" and "let the market decide" until you have competition that shows how full of bullshit you are and then you run to daddy Trump saying to stop these bad Chinese models from entering our market.

The irony of OpenAI and Anthropic running to the government to save them whenever there’s competition and it’s this government that complains about “handouts” and communism.

jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:

why yes, since you mention it, my PVC gluing technique *could* be a touch less sloppy.

#HamRadio #Antenna

dysfun@treehouse.systems ("gaytabase") wrote:

just had my elderly laptop turn off while listening to a podcast.

from ~2/3 battery. to not even finish a single podcast episode.

these are not the original batteries, they're chinese replacements. they've also gotten spicy and will need replacing when i can spare the money.

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

Honestly I find alt text a pretty neat writing exercise, "here is an image (or video); try to paint a suitable picture with words"

Boosted by glyph ("Glyph"):
luis_in_brief@social.coop ("Luis Villa") wrote:

Me during the “smart contracts” craze: guys, keeping track of what contract you signed is not the hard part

Tesla: hold my bible

https://electrek.co/2026/07/23/tesla-solar-lease-contract-book-of-enoch/

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

I put a lot of thought into getting descriptive Alt Text and occasionally add an in-joke or two. I wonder if anyone notices

Boosted by ChrisWere@toot.wales ("Chris Were ⁂🐧🌱☕"):
nein@chaos.social wrote:

USB-C is hard! (this conversation just happened between @janamarie and @fionafokus - more or less)

Attachments:

• video: Dimitri finds out meme with following captions: D=Dimitri, R=Reporter D: I have a problem with my microcontroller R: What is it? D: Nothing works... R: I have a degree in electrical engineering D:I cannot program it. D: And the debugger shows weird errors R: Did you check your power supply? D: Yes, I tried 3 different USB-C cables D: so it cannot be a power problem D: USB-C makes power supply so hard D: PD negotiation is hard D: the specification is hundreds of pages D: the USB consortium is making it hard for me R: Did you hear of USB-A? D: what? R: of USB-A? D: USB-A? R: USB-A always delivers power! D dances happily

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
bachimusprime@estradiol.city ("Bachimus") wrote:

STOP USING GENDERED LANGUAGE!!!!! CALL IT GERMXN!!!!!!!!!! /j

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
david_chisnall@infosec.exchange ("David Chisnall (*Now with 50% more sarcasm!*)") wrote:

The contract for my first book had a thing in it called an 'on time completion bonus'. This seemed like a weird thing: surely the contract delivery date is the expected date? A bonus for delivering early made sense, but a bonus for 'meets expectations' seemed strange.

In the end, I submitted the first draft manuscript a couple of weeks before the deadline. My editor had, apparently, been completely unaware until that point that writing a book in less time than you said it would take was a thing that authors could do.

I understood Douglas Adam's comment about deadlines a lot more after that.

pzmyers@freethought.online ("pzmyers 🕷") wrote:

Here comes another little monster with a quarter of my genome…just more happy news at last.

https://freethoughtblogs.com/pharyngula/2026/07/24/grandpa3/

dysfun@treehouse.systems ("gaytabase") wrote:

i assume my problem here is i'm not a brazen liar, but i still find it difficult to believe anybody is prepared to stand there and honestly say they got a bot to rewrite a project in rust to improve quality.

Boosted by cwebber@social.coop ("Christine Lemmer-Webber"):
jackdaniel@functional.cafe ("Daniel Kochmański") wrote:

"Faulty Towers, vibe sickness, and the vibe bobsled" by @cwebber

Very thoughtful and insightful. I like the term "vibe bobsled :). The voting machine excerpt is especially persuasive.

edit: and the link!
https://dustycloud.org/blog/faulty-towers-vibe-sickness-and-the-vibe-bobsled/

Boosted by dysfun@treehouse.systems ("gaytabase"):
acarsdrama@live.acarsdrama.com ("ACARS Drama") wrote:

Air to Ground Message:

U HAVE TO SEND.. I HAVE TO ASK.. AND WE BOTH GET LAUGHED AT. ACK2 BTW

Area: Jacksonville, FL, USA
Type: Airbus A320
A: #a4541207c85
F: #f4151fbf9e4

#acars #vdlm2

dysfun@treehouse.systems ("gaytabase") wrote:

you are an expert tokenmaxxer with 20 years of tokenmaxxing experience. tokenmaxx like there's no tomorrow. make no mistakes.

dysfun@treehouse.systems ("gaytabase") wrote:

agentic tokenmaxxing will let you tokenmaxx like never before. simply instruct your agent to tokenmaxx and enjoy the bill

Boosted by jsonstein@masto.deoan.org ("Jeff Sonstein"):
EugeneMcParland@mastodon.ie ("Eugene McParland 🇺🇦") wrote:

The US Department of Justice is attempting to prosecute an Atlanta resident in connection with the movement against the police training center known as Cop City because he had GrapheneOS on his phone, an open-source operating system that enables users to enter a passcode and wipe a phone clean.

🖊️ Timothy Pratt

https://www.theguardian.com/us-news/2026/jul/23/cop-city-protester-phone

Boosted by jsonstein@masto.deoan.org ("Jeff Sonstein"):
austinkocher ("Austin Kocher, PhD 🌎") wrote:

The ACLU did something it never has before. It says ICE is too broken to fix and should be replaced, after documenting 1,200 enforcement incidents across eight states. My conversation with the authors. Watch or listen: https://austinkocher.substack.com/p/they-are-going-to-kill-somebody-aclu