Elfififififififi... @elfi@pixie.town

"Isn't that a bit alarmist?" No!

xz is a base-system package in literally every distro I know of. It's everywhere.

Compromised releases have been out for five weeks and we didn't notice. We only noticed because someone caught openssh taking 10x as long to do DH exchanges and auth. If the attacker had been sneakier we wouldn't have noticed at all.

The compromised xz was in Fedora's testing versions and they didn't notice. You had the compromised version in Arch for a month (and arguably still do, but a combination of build method and source acquisition method likely renders it safe).

If some random guy didn't go "Why is openssh so slow?" and dig really deep into that, it would have hit stable/live distros and then what? We don't know.

Red Hat released an urgent security alert for Fedora 41 and Rawhide users:

> PLEASE IMMEDIATELY STOP USAGE OF ANY FEDORA 41 OR FEDORA RAWHIDE INSTANCES for work or personal activity.

https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users

> Although Fedora 40 beta contained the 5.6 version of xz in an update, the build environment prevents the injection from correctly occurring, and has not been shown to be compromised. Fedora 40 has now reverted to the 5.4.x versions of xz.

#RedHat #Fedora #FedoraRawhide #Fedora41

These cool system clocks are now available online at https://rmcretro.store/collections/clocks

the middle schooler: then I installed linux on my [school] chromebook

me: um are you allowed to do that?

middle schooler: I asked our tech teacher and he doesn't know what linux is so I decided yes

It's the Trans Week of Visibility, and today I'm hostin' cozy chat games for a cause!

Come chat, chill, have some fun, and support TransLifeline: stream's up in 1hr!

#charitystream #vtuber

Another #PixelArt daily done! :) Treetop traverse.

You can grab the full-quality versions (for free) here: https://ko-fi.com/i/IG2G1W4Q3T

ENJOY!

you can tell i was a lil too focused on the background haha <3

this icon/headshot commission is for the same commissioner (hazelenglish on discord) as my previous post! not so scary now...

smooches <3

rubberduck debugging :3 piece for @fl4nn

capy

"Collector's Log: Compass Moon, Third Day.

Yesterday, I encountered a strange glowing plant known by the locals as 'the fool's lure.' If only I had known its name ahead of time."

(pssst, this piece is available on my INPRNT, and they're having a sale!)

https://www.inprnt.com/gallery/dustyteacup/fools-lure/

#art #MastoArt #illustration

I had a dream last night that fantasy creatures existed in our world and as a result the fediverse had strange discourse regarding our fantasy world

My favorites include:
Discourse about how satyrs can be ace.
Advocacy against unicorn horn hunting.
People jealous that druids could become cats.
Witchcraft against politicians being a genuine threat and people making posts about how to do it only for it to treated kinda like piracy on here where bigger instances throw a tantrum about it sometimes.
Black market trading of illegal potions that made people turn into the gender they identify as.
The mermaid sex workers.
And the yearning to abandon capitalism and to frolic in the forest being so much more intense somehow.