Patching Pulse Oximeter Firmware https://lobste.rs/s/nqcuma #hardware #reversing
https://stefan-gloor.ch/pulseoximeter-hack

Do you depend on Signal? Please donate to keep us growing

Settings > Donate
http://Signal.org/donate

‘Reverse mathematics’ illuminates why hard problems are (Researchers have used metamathematical techniques to show that certain theorems that look superficially distinct are in fact logically equivalent). ~ Ben Brubaker. https://www.quantamagazine.org/reverse-mathematics-illuminates-why-hard-problems-are-hard-20251201/ #Math #CompSci

(‘~’) 뇸뇸

모든 x ∈ R 에 대해서 쿼리의 귀여움 > x 가 성립합니다 ​​

情緒是需要出口的，但不應該是從嘴巴…

I may not be an professional workplace negotiator, but calling the other side 'moaning minnies' during an acrimonious labour dispute, really doesn't suggest a serious intent to resolve things.

It look like West Streeting is rather seeking to enflame the situation, so that he can (further) demonise the Resident Doctors; he may be banking on being able to hold the moral high ground with the public... my guess is he may be (very) wrong!?

#NHS #ResidentDoctors #politics
https://www.bbc.co.uk/news/articles/c4g47gvy7wjo

평안하신가요

#필사부 #필사토돈 #둥근달에필사해요

​​

This poem is dedicated to anyone making a start on their advent calendar today.

10 years ago today, the Swift programming language was open-sourced. 🎉

Mapping Every Dollar of America's $5T Healthcare System

Link: https://healthisotherpeople.substack.com/p/an-abominable-creature
Discussion: https://news.ycombinator.com/item?id=46135008

으아아 아직 네트워크중

ﾌﾟｬﾌﾟｬ

Starbucks workers are still on strike. Three weeks and going strong. If you’re not already boycotting SBX coffee, you should be!

Not joking: has one reporter responded to his preposterous Sgt Schultz “I know nothing” schtick by immediately asking: * Doesn’t this level of ignorance disqualify you as speaker? * Do you really think we are so dumb to believe you? * Do you think it is appropriate to insult the voters like this?

RE: https://bsky.app/profile/did:plc:4llrhdclvdlmmynkwsmg5tdc/post/3m6zctxlmug2j

Come use The Cloud™, we have
- loading screens
- can’t use your computer because AWS is down
- handing your data over to whatever government wants it
- your private info was compromised
- we sold your private info
- we’re shutting the product down, here’s one hour’s notice to get your data before we delete it
- subscription fees
- “maybe later"
- CAPTCHAs
- and more!

don’t miss the exciting opportunities of The Cloud™

Day 3 of our week of action against online ID checks 🙌🏽 we’ll be hosting a live panel on LinkedIn today with @effElectronic Frontier Foundation and other digital rights experts discussing the threat of online age + ID verification to the internet we love and the tools we can use to fight back.

Join us! FFTF.link/noidchecks

Great to be part of social.coop! Here's an #introduction: The People's Tech is aimed towards becoming a co-op based in England with a small team of Small Tech workers promoting technology at the intersection of privacy, security, sustainability, *and* inclusivity, Covid-safer and non-hierarchical, slowly rolling out public workshops discussing alternatives to Big Tech, plus private consultation for co-ops, non-profits, and campaign groups on how to make better choices (which has already begun!)

​​​​

[React] Critical Security Vulnerability in React Server Components

​​​​​​​​​​​​

@kurauKurau 🧣

I wouldn’t be surprised if they just wrote that badly?

Were you thinking about attending? It would be worth asking if they really meant Japanese attendees or if they meant to say “attendees from Japan” (including residents)

良い感じに進んだから寝る
​​

I just filed a Rust compiler Major Change Proposal to introduce a standalone, non-WASI Wasm Component target using the `wasm32-component` target triple:

https://github.com/rust-lang/compiler-team/issues/948

上位3位​​

[$] Just: a command runner

Over time, many Linux users wind up with a collection of aliases, shell scripts, and makefiles to run simple commands (or a series of commands) that are often used, but challenging [...]

https://lwn.net/Articles/1047715/ #LWN

New: ATmosphere Report 145, with collections of links to interesting #atproto stuff for November

This time, all the links are on-protocol, as a Semble.so collection, with a custom page that also shows you comments on Leaflet and posts on Bluesky

https://traverse.connectedplaces.online/

寝ると決めたときッ！
すでに行動は​​💤​​​​

🚀 Ready to join mission control?

We're recruiting Admins to help guide our program for socials, fundraising, outreach, and program development. Enthusiastic folks with initiative read on! No Djangonaut experienced required.

Apply by Dec 12th! https://forms.gle/UD3gN3ngrEtAFien6

Cloudflare offers protection against a new high profile vulnerability for React Server Components: CVE-2025-55182. All customers with WAF enabled are automatically protected. https://blog.cloudflare.com/waf-rules-react-vulnerability/

Top 5 reasons GNOME is awesome:

1. Distraction-free: we respect you and include personal digital wellbeing features

2. Accessibility: we work to make computing accessible to all

3. Design: we make a cohesive, modern experience that looks great

4. Free and Open Source: we preserve your freedoms

5. Privacy: your data is yours, and we respect that

If these resonate with you, consider supporting us today! We're aiming for 1,500 #FriendsOfGNOME by the end of the year.

https://donate.gnome.org

Thread with a horrible punchline https://mas.to/@kims/115654542670185071

Fix color contrast issues caused by new theme tokens (#37105) by diondiondion has been merged! https://github.com/mastodon/mastodon/commit/498e88f059326c4a84d0bdac64cda6f7daa29ca2

yo @kizuRoma Komarov, request / nerd snipe:

i have a hunch this classic overflow problem could be solved by scroll driven animation: https://github.com/w3c/csswg-drafts/issues/4519

i know you love finding ways to crack nuts like this, curious if you agree that there's a potential path here for CSS only to solve this?

(노량진역에서 우동을 먹으면서 썼습니다.)

Panic.

From my notes in a team coaching session not too long ago. Always applicable.

#panic #science

@semitones @cwebberChristine Lemmer-Webber pumpkin chat is more of a traditional multi-user chat system in that the room has to be hosted somewhere, which means the machine hosting the room has to be online in order for you to chat. brassica chat is fully p2p and a room is not hosted anywhere. instead, everyone in the room maintains their own copy and users synchronize when they are able to reach each other, kinda like a git repo.

"We did a number of refactors [...] This also fixes a critical security vulnerability." 👀

CVE-2025-55182, an RCE in React Server Components just landed:

https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

Enjoy your patching, and make sure to check your bundled frameworks and dependencies.

Here's the commit:
https://github.com/facebook/react/commit/7dc903cd29dac55efb4424853fd0442fef3a8700

Massive AdventOfSysadmin traffic & no incidents,managed with:

❌No CDN/Cloudflare
❌No LB or autoscaling
❌No caching
❌No fast code (Python)
❌No big server

But:

✅good architecture
✅rate limits at multiple levels
✅ bkgrnd dependencies with timeouts
✅static page 😅

Fail, fail and fail again...

The UK Information Commissioner's Office has issued a weak reprimand to the Post Office for publishing the identities of Horizon’s victims.

The ICO's failure to enforce data protection law adds insult to injury for the victims of this scandal.

Read our response ⬇️

https://www.openrightsgroup.org/press-releases/the-ico-fails-to-take-action-over-the-post-office-horizon-scandal/

#ICO #dataprotection #PostOffice #HorizonScandal #privacy #databreach #ukpolitics #ukpol #gdpr

Help us get Mapping for Equity data into OpenStreetMap! 🗺️

We’re hosting two hands-on OpenStreetMap data entry workshops at the NYC PIT Pop Up in the Oculus on Friday, Dec 5 — choose what works best for you: 12 pm or 4 pm.

Bring a laptop, charger, and mouse, and we’ll walk you step-by-step through editing OpenStreetMap with support from the BetaNYC team.

RSVP: https://www.beta.nyc/events

Use `normalizes` API for Tag `display_name` value (#35797) by mjankowski has been merged! https://github.com/mastodon/mastodon/commit/7c730e9041b5cf1de0741925b7ebbaa43d7d0f22

Help us get Mapping for Equity data into OpenStreetMap! 🗺️

We’re hosting two hands-on OpenStreetMap data entry workshops at the NYC PIT Pop Up in the Oculus on Friday, Dec 5 — choose what works best for you: 12 pm or 4 pm.

Bring a laptop, charger, and mouse, and we’ll walk you step-by-step through editing OpenStreetMap with support from the BetaNYC team.

RSVP: https://www.beta.nyc/events

This past weekend we had #BoilingTheOcean 8 at Cultivation Space in Berlin! Topics included Reflection, a local-first system sync service, Flatpak, the GNOME governance proposal, focus stealing prevention, TeamType, Dino on Android, GNOME Circle, and much more!

Some notes from the event here: https://pad.gnome.org/SkiIvfFxTUiTW-ppZNR3Tw#

Thanks to Cultivation Space for hosting us, and everyone for joining. See you at the next edition in the new year 🎇