@fido_node
xn--b1a8afx.xn--e1a4c/
Joined February 2018
  • Tweets1.1K
  • Following156
  • Followers400
119Media
Replying to @fido_node
Да, тут дальше будет шитпост на русском. Слегка tech-aware шитпост на англ остается на @fido_node_code
5
1,771
PSA: If you use node and list of thing in this security release didn't motivate you to update - god forbid. nodejs.org/en/blog/vulnerabi…

Node.js — Wednesday, October 21, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org
Charlie Marsh
@charliermarsh11h
PSA: If you use Node or Bun, please upgrade even if you’ve enabled --use-system-ca! That flag unions the system roots with the the bundled roots, so older versions will continue to accept the eMudhra cert even if your OS removes it.
77
Это + iPad + кофейня с ароматом усов хипстера. Мысли?
5
10
408
Решил я значит в БГ съездить, рамена похавать.
2
7
260
> something odd > sauna Oh, fuck off!
Terrible Maps
@TerribleMapsOct 20
The hangover cure in each European country
2
60
Air gapping my ass from now on.
Phoronix
@phoronix20h
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List As high as CVSS 9.0. Whoops. phoronix.com/news/LKML-New-T…

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list

phoronix.com
9
197
Bun сосать. Ладн, у nodejs вчера rce поверх brotli запатчили.
John Althouse@4A4133Oct 21
Replying to @4A4133
Patched: Cloudflare quiche quic-go lsquic Wireshark Unpatched (0-Day): Bun 1.4.3 h3 (hyperium) aioquic / mitmproxy Vuln notifications started a year ago, some responded, some didn't.
1
93
Sadly not just 'init 0' xitter.cf/grhmc/status/211304599…
Graham Christensen
@grhmcOct 21
Replying to @4A4133 @dpc_pw
Turn off a server?
21
Староватое. То что староватое, то на 2.6 начинается :(
Daniel M.
@DanielMyslivetsOct 21
Обалдеть, однако, у колонок от Яндекса ядро староватое.
8
312
Четверть будущего за людьми, которые будут хуярить харнесы для взаимодействия с физическим миром, но не роботикс.
yurikrupenin.bsky.social@turbojedi21h
Что ж, у нас есть AI-ассистед jailbreak свитча 2 через интерпретатор бейсика, что за таймлайн pepsipu.com/blog/2026-10-swi…
1
9
504
Спойлер, они в простонародье называются "СТАНКИ".
5
52
Неделя продолжается. Я правда не понял кто затронут, каким образом. "пользователи использующие определенные API и передающие данные из внешних запросов в эти API" Проще обновится не глядя, честно говоря.
3
8
351
Посмотрите лучше sub 24 hl1 scriptless youtube.com/watch?v=P74qS4zY…

[WORLD RECORD] Half-Life in 23:58

📢 First ever Half-Life scriptless run completed in sub24 and a new ...

youtube.com
83
С августа конечно могли бы просто на rust переслопить и никакого use after free.
Felipe Daragon
@FelipeDaragonOct 21
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell! Researchers are reporting a successful double-free trigger on the newly patched release. ⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation. Don't assume you're safe just because you've patched. #php4shell #php #cybersecurity xitter.cf/_annieversary/status/2…
1
3
464
Александр Михайлов retweeted
Sultee
@sultOct 21
Replying to @krll_vrntsv
Зажать край одеяла между коленок, чтобы жена не вырвала
2
76
1,422
It is just 4, but nobody can remember it and eqch time you need to recove rit by bruteforce.
Iceman
@herrmann1001Oct 21
I wonder which PIN ?
14
322
DO IT! TURN OFF GH! LET THE WORLD BURN!
Jack Ellis
@JackEllisOct 21
This would be a pretty funny time for GitHub to have another outage.
1
8
274
Sadly not actions.
26
Indeed. But by some published unprooven quotes there were NO HSM. (do not @ me on this, and I'm not gonna recheck someones larp)
stacksmashing
@ghidraninjaOct 20
The sad thing is: I'd immediately believe it if someone told me this was an HSM bug.
65
What a time to be alive.
Jon Oberheide
@jonoberheideOct 21
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
3
70
ПИЗДАФОН!
Pasha papasha@medvediOct 21
Replying to @eve_yulia
Может имеется у виду гигиенические души? Ну типа биде
1
10
322
Load more