As part of the hardening effort, and because ActivityPub is “basically email”, I propose Sharkey should switch to federation over SMTP only

morning!

nini fedi

server reboot time for more kernel upgrades (fixing pintheft)

For Akkoma and Pleroma users, this says:

Unofficial Announcement: We just released 2026.5.4-beta.0 of Misskey, which includes important security fixes. Official 2026.5.4, along with security advisory, is expected to be released several hours later due to timezone differences.

RE: https://transfem.social/notes/amhpmefg5yrf003n

alright pretty much everyone figured out how it works instantly, and it's been like 40 minutes without mastodon announcing their security release on their fedi profiles despite having the release published on github. heres a post

w.on-t.work/activitypub/may-2026-vulnerability

We just released Mastodon 4.5.10, 4.4.17, and 4.3.23.

These versions contain several medium and high severity security fixes.

Also, please note that this marks the final Mastodon v4.3 update, this branch is now unsupported. If you are still using it, please move to a newer version as soon as possible.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#MastoAdmin

morning!

new Linux LPE, this time using io_uring. I think it's good to point out this Google security blog from 2023. Sending all kernel commits into an LLM might be somewhat new, the mitigation measures are already old.

also I think io_uring is a very cool technology, it just has it's tradeoffs like everything. That's all :)

alpine update broke sound (stops detecting any speakers after plugging in an HDMI cable, even after unplugging it) so I switched from pulseaudio to pipewire

now HDMI audio doesn't work

sddm is broken in alpine (again) so I just switched back to greetd+regreet and fixed the weird large cursor issue (which involved adding support for setting the GTK cursor-theme-size option) and figured out how to hide the titlebar (passing -d to cage to disable CSD)

chinchillas

my mum saw a fox staring at a cat in our garden

apparently gitlab renamed issues to "work items"

KDE is showing my SDR as a mouse for some reason. It's not even a HID device.

how are spectacle and kdeconnectd using an entire CPU core each?

nini

kwin fucking crashed and erased all my work in GIMP