Home | Notifications | New Note | Local | Federated | Search | Logout
Federated Timeline
Morgan@kaidenshi@exquisite.social (2026-10-22 00:59:46)
I deleted my Facebook account in 2017 because I saw what was coming and I didn't like it. I didn't "deactivate" it, I deleted it, according to all the "are you sure?" prompts I recall wading through to get the final message that if I don't log into it in the next 30 days, it's all gone forever.
This morning I woke up to a 2FA email request from Facebook, to the email address I last used with the service. It was a legitimate email from FB so I decided to see if my account was really just deactivated instead of fully deleted. Welp, guess what? I logged in with the password stored in my password manager, and it sent me a new 2FA code. I continued all the way in, and absolutely nothing was actually deleted. All of my friends from that era who still had Facebook accounts were in my friend list, my last post from the summer of 2017 was still there, and many more sent before that, along with photos that I recall individually deleting before closing the account just in case.
Facebook lied. Imagine that.
Of course I immediately went through the whole deletion process again, confirming I was sure at least seven times, and got the same "if you don't log in over the next 30 days all posts are deleted and unrecoverable". Gee, where have I heard that before?
I will try logging in around the first of December just to see what happens. As for that first 2FA request this morning, clearly someone has my FB login info. I know there was a breach a few years ago but I wasn't concerned back then since like a good tech person I only ever used that password on that site (which I confirmed with my password manager), and besides I had deleted my account right? ...Right. And I know that even if they really "delete" it this time and I can't get back in, they still have my data forever.
So the moral of the story (and we all know this already, don't we?) is that all corporations; all data holders and harvesters; all social media companies; all entities trusted with our personal and finan
Masanori Ogino 𓀁@omasanori@mstdn.maud.io (2026-10-22 00:59:14)
なるほどね
---Attachments---
image: https://s3-mstdn.maud.io/media_attachments/files/117/479/721/318/386/100/original/0f43631d4508e6d0.jpeg
00aa@00aa@misskey.io (2026-10-22 00:58:28)
鴉は光り物を集める習性があるらしい
---Attachments---
image: https://media.misskeyusercontent.com/io/4eadc498-8e41-40d0-9968-d2db03dec934.png
image: https://media.misskeyusercontent.com/io/98a994c1-ce76-438c-917b-88ba0118085b.png
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@musl@social.treehouse.systems (2026-10-22 00:55:35)
Programs which might pass attacker-controlled regular expressions to the libc regcomp function are affected.
Programs not using these interfaces are not affected.
Reply to @musl@social.treehouse.systems
musl libc@musl@social.treehouse.systems (2026-10-22 00:55:35)
Programs which might pass attacker-controlled regular expressions to the libc regcomp function are affected.
Programs not using these interfaces are not affected.
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@konnyaksankaku@misskey.io (2026-10-21 17:53:43)
一応眼鏡ないのもある。
眼鏡ないと謎のポーズになる:blobcat_kiss:
RE: https://misskey.io/notes/ask54pnphbsm07q9
---Attachments---
image: https://media.misskeyusercontent.com/io/7736b6f8-beeb-4708-a7c9-72d34172cdd9.png
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@musl@social.treehouse.systems (2026-10-22 00:54:02)
As an issue that can lead to writes outside of an allocated object, overflowing into other objects on the heap, this should be taken with appropriate seriousness.
However, as far as we know at this time, without concurrent accesses from another thread to objects which might be stomped during regcomp, or unsafe SIGSEGV handler code, a predictable crash should happen before any further code runs that could use the clobbered objects in a way yielding control over the flow of execution to an attacker.
Reply to @musl@social.treehouse.systems
musl libc@musl@social.treehouse.systems (2026-10-22 00:54:02)
As an issue that can lead to writes outside of an allocated object, overflowing into other objects on the heap, this should be taken with appropriate seriousness.
However, as far as we know at this time, without concurrent accesses from another thread to objects which might be stomped during regcomp, or unsafe SIGSEGV handler code, a predictable crash should happen before any further code runs that could use the clobbered objects in a way yielding control over the flow of execution to an attacker.
負け知らずの負けヒロイン@kelvin27315@mstdn.maud.io (2026-10-22 00:53:26)
---Attachments---
image: https://s3-mstdn.maud.io/media_attachments/files/117/479/702/889/945/335/original/e9806b6ffd4b467e.webp
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@musl@social.treehouse.systems (2026-10-22 00:49:51)
The patch in the advisory email adds checking for the overflows and also establishes improved early bounds intended to prevent the overflow conditions from being reachable in the first place.
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@musl@social.treehouse.systems (2026-10-22 00:48:09)
SECURITY ADVISORY: musl libc up through 1.2.6 (present version) is affected by integer overflows in regcomp (regular expression handling) leading to insufficient allocation of heap-based buffers for the compiled regex data structures.
CVE-2026-107891 has been assigned for this issue.
https://www.openwall.com/lists/musl/2026/10/21/1
Reply to @musl@social.treehouse.systems
musl libc@musl@social.treehouse.systems (2026-10-22 00:49:51)
The patch in the advisory email adds checking for the overflows and also establishes improved early bounds intended to prevent the overflow conditions from being reachable in the first place.
musl libc@musl@social.treehouse.systems (2026-10-22 00:48:09)
SECURITY ADVISORY: musl libc up through 1.2.6 (present version) is affected by integer overflows in regcomp (regular expression handling) leading to insufficient allocation of heap-based buffers for the compiled regex data structures.
CVE-2026-107891 has been assigned for this issue.
https://www.openwall.com/lists/musl/2026/10/21/1
特務機関NERV@UN_NERV@unnerv.jp (2026-10-22 00:41:42)
【台風第30号実況・予報 2026年10月22日 00:41】
大型で猛烈な台風第30号（チャンパー）は、フィリピンの東を1時間に20キロの速さで西北西に進んでいます。
#台風情報
---Attachments---
image: https://media.unnerv.jp/media_attachments/files/117/479/656/792/872/070/original/a128ec683503d197.png
諷氣@foolkid@pawoo.net (2026-10-22 00:39:52)
何だか鯖罐が大變らしい
Coro@Coro@mstdn.maud.io boosted:
@MastodonEngineering@mastodon.social (2026-10-21 23:05:15)
In the wake of the compromise of the eMudhra Intermediate CA, we strongly encourage all Mastodon administrators to make sure their systems are up-to-date.
For those using our official Mastodon container images, we just rebuilt them (with the same tags) so they contain the latest updates to the list of CA certificates. Please update them as soon as possible.
For more information about this compromise and ways to check if your server is impacted, please read https://emudhra.we-have-a-problem.com
#mastoadmin
しゅうまい君（バカンス）@shuumai@misskey.io (2026-10-22 00:35:01)
結局なんだかんだ紙本って思う
Reply to @Coro@mstdn.maud.io
Coro@Coro@mstdn.maud.io (2026-10-22 00:35:00)
ネットが静止する日 (2026)
BrianKrebs@briankrebs@infosec.exchange (2026-10-22 00:29:57)
Expect quite a few sites to return error pages toay and possibly through the week. Here's my piece on the new PHP zero-day that affects about 70 percent of the Internet. We'll be updating the story with important new developments.
https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/
#php #zero-day #security
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/479/606/441/200/275/original/f14be581389ae8d5.png
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-10-22 00:18:53)
永眠すると睡眠不足が解消出来るらしい
KOBA789@koba789@misskey.io (2026-10-22 00:17:51)
:tearaiba: ←名前がひどい
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-10-22 00:16:49)
アポカリプス
材料
・アクエリアス
・ポカリスウェット
・シュウェップス
立花@tatibna@misskey.io (2026-10-22 00:13:33)
ꘐ
---Attachments---
image: https://media.misskeyusercontent.com/io/cdf596e8-644d-4777-bfc4-38550c8e5a04.png
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@archlinux@fosstodon.org (2026-10-22 00:13:00)
Update to php ≥ 8.5.12 and/or php-legacy ≥ 8.3.36 to prevent remote code execution
https://archlinux.org/news/update-to-php-8512-andor-php-legacy-8336-to-prevent-remote-code-execution/
#ArchLinux #Linux #news #PHP
Arch Linux :archlinux:@archlinux@fosstodon.org (2026-10-22 00:13:00)
Update to php ≥ 8.5.12 and/or php-legacy ≥ 8.3.36 to prevent remote code execution
https://archlinux.org/news/update-to-php-8512-andor-php-legacy-8336-to-prevent-remote-code-execution/
#ArchLinux #Linux #news #PHP
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@archlinux@fosstodon.org (2026-10-22 00:11:57)
Update to ca-certificates-mozilla ≥ 3.131.1-1 to prevent man-in-the-middle attacks
https://archlinux.org/news/update-to-ca-certificates-mozilla-31311-1-to-prevent-man-in-the-middle-attacks/
#ArchLinux #Linux #news #nss #CA #eMudhra #TLS
Arch Linux :archlinux:@archlinux@fosstodon.org (2026-10-22 00:11:57)
Update to ca-certificates-mozilla ≥ 3.131.1-1 to prevent man-in-the-middle attacks
https://archlinux.org/news/update-to-ca-certificates-mozilla-31311-1-to-prevent-man-in-the-middle-attacks/
#ArchLinux #Linux #news #nss #CA #eMudhra #TLS
サメくま@SharkChop@misskey.io (2026-10-22 00:10:15)
天使👼×悪魔👿
デザイン案
---Attachments---
image: https://media.misskeyusercontent.com/io/b28ae675-1273-4a6f-9a34-6751e98340c1.webp?sensitive=true
Masanori Ogino 𓀁@omasanori@mstdn.maud.io boosted:
@aiwas@yysk.icu (2026-10-21 23:21:30)
🚨26/11/10に .NET 8 はサポート終了🚨
Phoronix@phoronix@masto.ai (2026-10-22 00:09:01)
Snapdragon X2 Performance On Linux Exceeding Expectations In Initial Benchmarks
For your viewing pleasure today are the first Linux benchmarks of the Qualcomm Snapdragon X2 Elite Extreme on Linux using the new Ubuntu 26.10 X1E Concept ISO for Snapdragon X laptop support on Linux. The Snapdragon X2 Elite Extreme flagship SoC is tested within the ASUS Zenbook A16 UX3607OA laptop.
https://www.phoronix.com/review/snapdragon-x2-linux
Older Notes