🔴 今日漏洞总结。
php [1]：RCE。请更新至 8.5.12/8.4.27/8.3.36/8.2.35。
Node.js [2]：RCE。请更新至 26.12.1/24.22.1/22.23.4。
eMudhra 证书 [3]：或可导致 MitM。请注意停用受影响证书、检查浏览器更新及更新 ca-certificates 等相关组件。测试方法和修复版本参见 [3]。
TiDB 云被骇 [4]：有用户元信息被泄露；但目前没有数据库数据泄露的证据。
1. php.net/~
2. nodejs.org/~
3. https://emudhra.we-have-a-problem.com/
4. pingcap.com/~
#wtf #today #PHP #Nodejs #PKI #PingCAP
Telegram 原文
nodejs
Ω🪬Ω
#FediAlgo, the customizable timeline algorithm / filtering system for your Mastodon feed, is now deployed on Github Pages and can be used from your web browser.
* Link: https://michelcrypt4d4mus.github.io/fedialgo_demo_app_foryoufeed/
* Code: https://github.com/michelcrypt4d4mus/fedialgo_demo_app_foryoufeed
* Video of FediAlgo in action: https://universeodon.com/@cryptadamist/114395249311910522
#activitypub #algorithm #algorithmicFeed #algorithmicTimeline #Fedi #FediTips #FediTools #Fediverse #Feed #FOSS #Masto #MastoAdmin #Mastodon #mastohelp #MastoJS #nodejs #nod #opensource #SocialWeb #timeline #TL #webdev
Edited 1y ago
Ω🪬Ω
new release of #Fedialgo, the customizable timeline algorithm / filtering system for your Mastodon feed, counts the number of times each hashtag appears in your timeline even if people don't use a "#" character to give you a better sense of what people are talking about in the Fediverse.
there's a little bit of art vs. science here because some strings are disqualified from this kind of counting (e.g. a word like "the" should not be counted even if some maniac decided to make it a hashtag) so let me know if you see any weirdly high counts.
* Link: https://michelcrypt4d4mus.github.io/fedialgo_demo_app_foryoufeed/
* Code: https://github.com/michelcrypt4d4mus/fedialgo_demo_app_foryoufeed
* Video of FediAlgo in action: https://universeodon.com/@cryptadamist/114395249311910522
#activitypub #algorithm #algorithmicFeed #algorithmicTimeline #Fedi #FediTips #FediTools #Fediverse #Feed #FOSS #Masto #MastoAdmin #Mastodon #mastohelp #MastoJS #nodejs #node #opensource #SocialWeb #timeline #TL #webdev #hashtag #typescript #hashtags
Edited 1y ago
Is your company looking for a keen self-hoster with plenty of #Linux experience? I grew up with #RaspberryPi and have picked up many skills along the way including #React, backend JavaScript (#NodeJS) and #Docker. My current obsession is monitoring all the things with #Grafana, #PRTG and #Prometheus. I’m based in the UK but open to primarily English-speaking roles in Germany, too. Currently wrapping up my Advanced Software Development degree but eager to continue learning! Boosts appreciated :D
Ω🪬Ω
#FediAlgo v1.1.19 is deployed. Minor bugfixes and improvements to the customizable timeline algorithm / filtering system for your Mastodon feed.
* Link: https://michelcrypt4d4mus.github.io/fedialgo_demo_app_foryoufeed/
* Code: https://github.com/michelcrypt4d4mus/fedialgo_demo_app_foryoufeed
* Video of FediAlgo in action (slightly out of date): https://universeodon.com/@cryptadamist/114395249311910522
#activitypub #algorithm #algorithmicFeed #algorithmicTimeline #Fedi #FediTips #FediTools #Fediverse #Feed #FOSS #GoToSocial #hashtag #hashtags #MastoAdmin #Mastodon #MastodonApi #mastohelp #mastojs #nodejs #nod #opensource #socialmedia #SocialWeb #timeline #TL #typescript #webdev
Atualizando minha apresentação:
Sou apenas um nerd que gosta de conversar e contar piada ruim.
Trabalho como desenvolvedor de software, principalmente #WebDev com #React, #NodeJS e #Deno.
Abraço o fediverso como ele me abraçou. Sou o responsável pelo #NaReal e outros projetos de código aberto por aqui. Além de ajudar na moderação da https://bolha.us
Cuidado ao me seguir: também estou perdido.
Ω🪬Ω
#FediAlgo (the customizable timeline algorithm / filtering system for your Mastodon feed) v1.2.2 is deployed now. Has a switch that makes sure any #hashtags / users / etc. that you follow are displayed as filter options even if they don't meet the minimum number of recent toots threshold.
Also a bunch of bug fixes and small improvements.
* Try it here: https://michelcrypt4d4mus.github.io/fedialgo_demo_app_foryoufeed/
* Code: https://github.com/michelcrypt4d4mus/fedialgo_demo_app_foryoufeed
* Video of FediAlgo in action (slightly outdated): https://universeodon.com/@cryptadamist/114395249311910522
#activitypub #algorithm #algorithmicFeed #algorithmicTimeline #Fedi #FediTips #FediTools #Fediverse #Feed #FOSS #GoToSocial #hashtag #hashtags #javascript #MastoAdmin #Mastodon #MastodonApi #mastohelp #mastojs #node #nodejs #opensource #socialmedia #SocialWeb #timeline #TL #typescript #webdev
Edited 1y ago
Does anyone use WebHostMost.com? I just heard about it. They have a free tier that doesn’t require credit card info. Can run Node.js, Python apps, PHP.
The `request` module for #Nodejs is deprecated and a vuln has been found in its dependency, `form-data`.
Yet, this module and the modules that depend on it continue to be widely downloaded.
To help with that, I patched the popular wrappers for it, `requestretry`, yesterday. It now uses a secure and compatible fork, and cleaned up all the other vulnerabilities in its own dependency stack.
https://www.npmjs.com/package/requestretry
Thx to Postman for their fork and @fgribreau for publishing!
#NodeJS finally makes its release schedule make sense!
- Each release is an LTS. Just install latest.
- One release per year
- Numbered after the year it first released in (unlike Apple)
- Starting in 2027 so that no numbers have to be skipped!
https://nodejs.org/en/blog/announcements/evolving-the-nodejs-release-schedule
Nemo | 
LOOKING FOR A JOB
https://nemo.earth/#barto
SKILLS
Frontend mostly, JS mostly, Svelte React Vue Ionic mostly. But often after work day I was developing fullstack apps, with NodeJS as backend. Coding also in raw PHP. And maybe will return to Python. Besides of course GIT, HTTP, Rest, SOLID, Keep It Simple, etc.
COOPERATION
Contract B2B with my one-person company.
SALARY
Fair enough for Mid+ / Senior.
IMPORTANT
I don't use AI while coding. And don't want to!
#job #cooperation #frontend #backend #fullstack #noai #javascript #nodejs #svelte #ionic #php #react #vue