tell someone that they're cool, what happens next may surprise you

The recent announcement about Anthropic joining the Blender Development Fund as a Corporate Patron member has raised concerns from the community around how we engage with AI topics.

This is how we plan to address the issue: https://www.blender.org/news/upcoming-blender-development-fund-and-ai-policies/

#b3d #DevFund

RE: https://fedi.lwn.net/@lwn/116483835313862451

Seth was the leader of the GNOME Usability project, which led to the creation of the human interface guidelines; the words might have changed over 25 years, but he's one of the people that made the Linux desktop, and we're still walking in his footsteps.

This is epic, first time camera is working in #Waydroid 🤩 Thanks to @supechicken and the WayDroid-ATV project!

#LinuxMobile #NixOS #postmarketOS

Anyone saying "Scientists don't want you to know this fact" has never met a scientist.

Scientists are famous oversharers.

Dear #gitlab a Work Item is not something I want to be concerned with in #FreeSoftware stuff I do in my free time. Can't we have names that are more motivating like "Puzzles to solve"?

Today I have spent way too much time handling the https://copy.fail situation #copyfail

The persons who discovered it didn't notify the distribution security list, so no patched kernels was available for people to install when they released it.

But they did have time to write an exploit, and thought it was a good idea to distribute that on day one, before vendors had time to provide patches.

I'm not very impressed with xint.io, I guess it's the marketing department that runs the show.

I don't understand the hate against GPT. I think it's a great technology, and definitely a step in the right direction. Of course there are those who will resist it, but we should all accept it's here to stay.

For example, having a backup copy of the partition table at the end of the disk greatly increases the chances of being able to recover from disk corruption at the first few sectors of the disk.

...chatbot? What chatbot?

CopyFail Was Not Disclosed to Distros : https://www.openwall.com/lists/oss-security/2026/04/30/10

#CopyFAil

Update: not available
I'm donating #Pixel3 with installed #PostmarketOS #Phosh edge. It helps me open #mobileLinux world and now I prefer a more modern hardware.

I'd be happy to post it to someone who needs it as long it's in the EU. No payment needed.

You can also come collect it in #Helsinki

#fediGiveFi

https://wiki.postmarketos.org/wiki/Google_Pixel_3_(google-blueline)

Update:
Thank you for the support. I'm going to send the phone to Hamburg. Happy coding!

#cats

Quickly dove into the copy.fail exploit.

1. Yes, it's real.
2. Current chain can write any arbitrary content to any user-readable file (into the page cache).
3. Current chain relies on an available target suid binary that you can open() as a lowpriv user.
4. Current exploit relies on that binary being /bin/su and then being able to execve(/bin/sh, 0, 0) (which doesn't work on alpine, etc.). The former is easily replaced in the code. The latter needs a rebuilt payload ELF (also easy).

important reminder about copy.fail:

https://xkcd.com/1200/

Seven new stable kernels for Thursday

https://lwn.net/Articles/1070641/ #LWN #Linux #kernel

Disclosure: in some cases, a Linux user can use doas to edit files in /etc/periodic/15min, allowing to execute code as root. I haven't reported this to cron because maintainer's e-mail address was so long I didn't want to type it.

lauren@hayasaka ~ $ doas python3 ./turbohack.py
lauren@hayasaka ~ $ tail -n2 /tmp/out.txt
[+] Executing: whoami
root

ios users; how old is your (main) phone (since release)?
don’t vote if your main phone isn’t an iphone and/or you don’t connect it to the internet

android users, how old is your (main) phone (since release)?
don’t vote if your main phone doesn’t run android and/or you don’t connect it to the internet