Show newer

Hi everyone!

We've just pushed a very important security bugfix release for #GoToSocial v0.17.3 and below:

https://github.com/superseriousbusiness/gotosocial/releases/tag/v0.17.4

If you are running on GoToSocial v0.17.3 or below, you should update to v0.17.4 as soon as possible. It's a very small update from v0.17.3 -> v0.17.4 as it contains only some code logic changes, and no database migrations.

In short, when a dereferencing bug is triggered under a specific set of circumstances it can cause loss of account data on affected instances. It's a rare thing to be triggered, but when it does happen it really, really stinks, and necessitates restoring from backup or manually editing the database to get things working again. (It's not possible to access or tamper with data by triggering the bug, only destroy it.)

We'll release a proper CVE for this in a couple of days when admins and packagers have had a chance to update.

Please note that folks who are already on v0.18.0-rc1 or latest snapshots are unaffected and do not need to do anything, as the bug occurs specifically in v0.17.3 and below. This means if you prefer to update straight from v0.17.3 to v0.18.0-rc1 then that's also an option; you can follow the release notes for v0.18.0-rc1 in this case.

So! If you know folks on GtS v0.17.3 or below, please let them know that they should take action! Link them to this post if you want! And please boost for visibility :)

Thank you everyone! <3 Computers!

subtooting, NixOS 

To make it a little more explicit: Nix follows (a variant of) a 'benevolent dictator' model, whereas Lix follows a 'collective decisionmaking' model.

One of those models is remarkably improving the quality of the software right now, and it sure isn't the 'benevolent dictator' one.

Show thread

subtooting, NixOS 

"But it takes time to fix governance issues! We can't do that overnight!"

Okay, so then how did Lix successfully avoid these issues in a fraction of the time? Do you think that perhaps the problem lies with your perspective on the issue, and not with the proposed fix?

Show thread

subtooting, NixOS 

Or alternatively, y'know, actually fixing those governance issues in Nix that people have been telling you about for half a decade

Show thread

subtooting, NixOS 

You know, if you want the build system to keep using Nix instead of Lix, maybe you should be spending your time fixing Nix bugs instead of pearl-clutching on the issue tracker about how unfair it is that they've switched to a fork that actually works?

NixOS drama, populist language 

The “marketplace of ideas” once it influences your bottom line:

#NixOS

I have a gently used Apple Pencil (2nd Gen) that I can't use anymore. I'd like to give it to a marginalized persion who already has a compatible iPad (apple.com/shop/product/MXN43AM) who could use it for school or art. Sorry, US-only because shipping would be $$ otherwise :(

uspol-adjacent + 

my partner has been spending hours upon hours building and running tools to archive complex at-risk geospatial data (think environmental justice, pollution, ecological resources etc) with no current backup, and isn’t a social media person so they’re never gonna brag about it. so I am. I’m bragging for them

Denk je ook steeds vaker na over alternatieven voor socialmediaplatforms als X (Twitter) en Meta’s Facebook, Instagram en Threads?

Ontdek de mogelijkheden van Mastodon en Bluesky in de informatie- en inspiratiesessie voor communicatieprofessionals in onderwijs en onderzoek op 18 maart.

Meld je aan: surf.nl/agenda/genoeg-van-x-on

#meta

UK stops landlords from evicting without cause
Labour's Renters' Rights Bill has been passed, abolishing landlords' power to evict tenants without cause and capping upfront payments to one month's rent. The landmark reform ends a 35-year era of housing insecurity dating to Thatcher's 1988 deregulation, providing stability for nearly five million British households. The Lead buff.ly/3Q98VP6
#ShareGoodNewsToo

Oproep! Graag #rt
We kunnen bij de Singalong-band nog wat instrumenten gebruiken. We spelen een avond liedjes waarbij het publiek mee kan zingen. Wie vindt het leuk om een avond mee te spelen in de band? Gevraagd wordt elektrische gitaar, fluit, viool, alt- of tenorsax. Andere instrumenten zijn bespreekbaar.

De vier repetities en het optreden zijn in maart/april op vrijdagavond in Utrecht-Zuid.

uspol meta 

y'all gotta stop focusing on the gulf of mexico thing

Is there any connection to the fediverse possible from within Iran?

EDIT: thanks for all the boosts! It's all in hand. What a great community!

#EllieKPosts

"People can learn how to navigate and use unfamiliar things just fine" is true but you do actually need to do the teaching part, and not just expect people to magically infer things from first principles (and this also applies to technical terminology)

The absolute fucking state of NHS trans healthcare in Scotland (sandyford in particular) 

So GiaMtF on r/transgenderUK did an FOI request to see what the fuck is going on with the waiting list at Sandyford GIC.

To the surprise of fucking nobody, it's bad.

Right now, they are seeing on average less than one person for their first appointment per week.

That's 42 a year off a waiting list that's growing at an average rate of 579 a year for the years given.

I referred myself in late 2020, which means that at this rate, I'll be getting my first appointment in more than 20 years.

I'll be 60!

GICs are not healthcare. They are a system designed to keep trans people in limbo, force them to detransition, or kill them through sheer negligence.

PSA - many crisis hotlines will call the cops on you. research this before calling if that could impact your life.

more details: today i was researching resources for our Pride organization and i was compiling a list of crisis hotlines when i came across TransLifeline's
#SafeHotline concept. after digging into the crisis hotlines i was going to provide, i found that none of the commonly cited hotlines adhere to the Caller's Bill of Rights.

The CppNix team has discovered today that the #NixOS infra has actually been running on Lix for a few months because their software is too shit to reliably function on large-scale critical infrastructure (e.g. the build farm supporting NixOS). Like, it just segfaults or has protocol incompatibility regressions every version.

It's been really interesting watching their indignation at having actual competition doing their job better than they do it themselves.

github.com/NixOS/infra/pull/55

wealthy and powerful folks, corporations, etc. constantly ignore laws they know won't be enforced. you're not gaining any moral high ground on them by following pointless or even harmful laws. just don't follow them.

Show thread
Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.