장식용 서버 계정의 비밀번호를 분실했습니다... ​​

Critical RCE Vulnerabilities in React and Next.js

Link: https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182
Discussion: https://news.ycombinator.com/item?id=46136067

#react

MinIO is now in maintenance-mode

Link: https://github.com/minio/minio/commit/27742d469462e1561c776f88ca7a1f26816d69e2
Discussion: https://news.ycombinator.com/item?id=46136023

「ほしいものリスト」の対義語で
「やきいものショパン」ってのが有るって知った。

Did you know that you can watch short videos describing the research published in the Constraints Journal on ACP's YouTube account?

For example: here's a playlist with videos accompanying Vol 29: https://youtube.com/playlist?list=PLcByDTr7vRTa943JoLYbnbO6fG2HHM11F

#ConstraintProgramming #ACP #ConstraintsJournal #YouTube #SciComm #Science #Research #Optimization #CombinatorialOptimization #AI

Wrapstodon modal with new share button (#37109) by ChaosExAnima has been merged! https://github.com/mastodon/mastodon/commit/31c392b1bc816814d0ba3058ea87eb16bedec321

お

Hey, les gens qui se trompent. ÇA VOUS ÉCORCHERAIT LA GUEULE DE DIRE "DÉSOLÉ, JE T'AI FAIT PERDRE TON TEMPS, J'AVAIS TORT" ????

Parce que sans ça, j'ai toujours l'impression que tu maintiens que c'était de ma faute au départ. Alors que non.

Mais c'est peut-être l'effet recherché.

Auquel cas, va te faire cuire des oeufs sur la surface de Vénus.

so, this kid popped a wheelie for 93 miles

I've done lots of bike rides of 93 miles or more, but I used *both wheels*, which now feels like ... cheating?

this guy is metal

Item 2 in my latest "Linkfest" newsletter, free to read/subscribe here: https://buttondown.com/clivethompson/archive/linkfest-42-phytomining-adversarial-poetry-and/

RE: https://mastodon.social/@djangonews/115656609854465970

Featuring, my personal highlight of course, `django.tasks`!

https://theorangeone.net/posts/django-dot-tasks-exists/

If you decide to build passkey support into your product, and you only support the OS's store and not 3rd party password managers, you are doing a half-arsed job.

That Power Bank Isn’t Quite So Sweet

https://hackaday.com/2025/12/03/that-power-bank-isnt-quite-so-sweet/

Django 6.0 released https://www.djangoproject.com/weblog/2025/dec/03/django-60-released/

Wir fordern, alle politischen Parteien* auf Verfassungstreue zu prüfen.

– Kundgebung von PRÜF Bayern
🗓 13.12.2025
🕑 14:00 Uhr
📍Geschwister-Scholl-Platz, München

*) Alle Parteien, die vom Verfassungsschutz als rechtsextremer Verdachtsfall oder gesichert rechtsextrem eingestuft werden, sollen durch das Bundesverfassungsgericht überprüft werden. Unsere konkrete Forderung: Bayern soll sich im Bundesrat für ein PRÜF-Verfahren beim Bundesverfassungsgericht einsetzen.

10 years ago today, the Swift programming language was open-sourced. 🎉

RE: https://mastodon.social/@Launched/115656562760274314

🚨 New Launched! 🚨

This week I sat down with the amazing Aja Becket to talk about her winding journey to building Shotsy.

Great great story about how building in public as an authentic part of a community can really help get you started with a passionate userbase

서버 모더레이터분들
제 서버에서 갑자기 웨이팅이 와다다다다다 늘어났을텐데
해결되었을겁니다...
ㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠㅠ

Mathematics is hard for mathematicians to understand too. ~ Emily Riehl. https://www.science.org/doi/10.1126/science.aec9014 #Math

with or without AI, A/B testing as practiced by Silicon Valley is unethical. It ranges from quiet gaslighting to full-on Stanford prison experiments with no ethics board or informed consent.

해결햇습니다
KT는 죄가 없습니다.

집에 공유기가 2대있는데 2대가 갑자기 모두 같은 공용아이피가 할당되어 충돌나고 터져버린거였습니다.

덕분에 아이피주소 바뀜
시발

RE: https://gameguard.moe/notes/afthh9uipl2j003u

So true! 💪

#linux #windows #macos

설명을 이따위로 적긴 했는데 실제로 해보면 되게 감명깊은 게임이었다

AI Warning: Google has been caught A/B testing replacing real article headlines with AI-generated substitutes, which are of course sometimes wildly misleading/against journalistic ethics. If you see a blatantly horrible headline in a news aggregator, check whether the site's own page matches before blaming the site! https://www.pcgamer.com/software/ai/googles-toying-with-nonsense-ai-made-headlines-on-articles-like-ours-in-the-discover-feed-so-please-dont-blame-me-for-clickbait-like-bg3-players-exploit-children/

탄핵정국 때 누가 알만툴로 그냥 자기 자리에 앉아서 찬성/반대만 누르면 되는 게임을 올리셨던 적이 있는데 오랜만에 생각났다

寝るかな

AI Warning: Google has been caught A/B testing replacing real article headlines with AI-generated substitutes, which are of course sometimes wildly misleading/against journalistic ethics. If you see a blatantly horrible headline in a news aggregator, check whether the site's own page matches before blaming the site! https://www.pcgamer.com/software/ai/googles-toying-with-nonsense-ai-made-headlines-on-articles-like-ours-in-the-discover-feed-so-please-dont-blame-me-for-clickbait-like-bg3-players-exploit-children/

寝ましょうの舞 ​​
​​

#イマソラ

태즈님 그거 곰이에요?
수달인줄알았는데

RE: https://mastodon.social/@Launched/115656562760274314

🚨 New Launched! 🚨

This week I sat down with the amazing Aja Becket to talk about her winding journey to building Shotsy.

Great great story about how building in public as an authentic part of a community can really help get you started with a passionate userbase

Teaching Values to Machines https://lobste.rs/s/bngg1m #ai
https://lord.technology/2025/12/03/teaching-values-to-machines.html

The Future of Magic

#webcomic #krita #miniFantasyTheater

“You have to be an authentic member of the community you’re building for.” — Aja Beckett

In our latest episode of Launched, Aja shares how that mindset shaped Shotsy, the GLP-1 tracking app born from her own personal journey.

There is an unauthenticated remote code execution vulnerability in React Server Components.

Even if your app does not implement any React Server Function endpoints it may still be vulnerable if your app supports React Server Components.

If your app’s React code does not use a server, your app is not affected by this vulnerability.

CVE-2025-55182

Mastodon server not impacted btw.

https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

これはベロリンガです　気に入っている

I would not have guessed this was possible!

Vladan Majerech has found a one-dimensional spaceship in the Game of Life: a pattern just one cell high and 3,707,300,605 cells wide that, after 133,076,755,768 generations (during which it is not confined to the one-dimensional line, of course) recreates the starting pattern but translated two cells to the right.

https://conwaylife.com/forums/viewtopic.php?&p=222136#p222136

Trying out a whole-class collaborative project to wrap up a grad seminar (formal math) for the first time this semester, and it's actually really fun so far and seems to be working out.

The students all contributed ideas, then we voted and went with one idea, which is nicely scoped. Today in our planning class, I used my experience as a software engineer to help the class (25 people) form teams, define an MVP, pick leaders & TPMs, and agree on initial interfaces.

Now we have four teams with dedicated purposes, each with one leader and one TPM. And we have an initial intermediate data format to help with the modularity, and plans for how to iterate.

There are two days left of class to actually hack on the project, and I am cautiously optimistic, and confident in my management abilities to help teams adapt to the unexpected, too.

Anyways, we'll see how it goes. But it's energizing.

​​ちゃん

모든 x ∈ R 에 대해서 쿼리의 귀여움 > x 가 성립합니다 ​​

떡꼬치먹고싶다

"What if I just made the entire voice out of vocal fry…"

Do you depend on Signal? Please donate to keep us growing

Settings > Donate
http://Signal.org/donate

After 14 years away from coding, I finally rebuilt my old Python + GTK text editor.

From Python2 + GTK2 → Python 3, GTK4 — and now preparing a talk for GNOME Asia Summit 2025.

Feels good to build again.

Full story 👇
🔗 https://zulfian1732.medium.com/rebuilding-a-python-gtk-text-editor-after-14-years-the-story-of-jollpi-9258fc883caf

#Linux #GTK #Python #GNOME #FOSS #DevJourney #IndieDev #TextEditor #OpenSource #Programming #Coding

👽Space espionage failed: Russian expelled with scandal

Russian cosmonaut Oleg Artemyev secretly filmed secret SpaceX materials - technical documentation, engines and internal equipment of the spacecraft - on his smartphone while preparing for the Crew-12 mission.He was hastily suspended to try to cover up the scandal.Yesterday, Roscosmos announced that it had replaced Artemyev with Andrei Fedyayev, explaining that he was "moving to another job."

AiScriptに関する本をZennで出してみました。
正直あんまり自信ないので色々教えてくれるとありがたいです。

Berlin crowd, I've got a spare ticket for Kraterfest on Saturday. Anyone wants to join me?