The feds should only approve this deal if Netflix rebrands as Max.

Another #React2Shell Update: Fastly saw a 2,775% increase in attack activity across our global network between the peak we reported yesterday (Dec. 4th) and 20:00 UTC today (Dec. 5th).

⚠️ This in-the-wild evidence suggests attackers are relentlessly probing for vulnerable applications at scale. ⚠️

It is worth your time to verify, not just trust, that you have zero exposure, and then drop everything to patch.

After the POC publicly dropped around 21:04 UTC yesterday (Dec. 4th), @fastlydevs detected what appeared, at the time, like a sharp escalation in attack activity.

In the 24 hours since then, the number of requests triggering our NGWAF signals for React2Shell exploded by 2,775% (as shown in the graph).

🌎 Fastly's Security Research team verified that select public PoCs grant attackers the single-step ability to execute commands, exfiltrate data, and gain write access on vulnerable servers.

This means cybercriminals and nation state actors alike face an alluring ROI, which is likely to motivate them to invest in weaponizing and operationalizing this at scale.

We are sharing this intelligence not to sow fear, but to reinforce the undeniable, urgent necessity of patching at this point. We also have a few updates for our customers:

🛡️ Fastly's teams expanded our Virtual Patch for CVE-2025-55182 to detect scan/probe activity and attempts to circumvent our NGWAF protections.

🛠️ We discovered the built-in "Attack Tooling" signal in our NGWAF already detects scanners that emerged in the past 24h to probe for vulnerable apps; we suggest customers investigate any requests that triggered this signal, as it may indicate React2Shell activity.

🤖 Fortuitously, Fastly's Bot Management product flagged some react2shell attack tooling as a "Suspected Bad Bot," offering organizations another layer of defense here.

At this time, Fastly's goal is to provide our customers with breathing room to patch.

The best available fix at this time is to update your apps to the applicable patched versions. We are at the point where it is no longer "if," or possibly even "when," but "how often"?

We will continue monitoring global attack activity, investing in additional mitigations for our customers, and sharing intel with the public community.

​​

New addition to the display: a #Mastodon #Plushtodon! 3rd new item in the past year... I got the bald eagle at Fort Stevens State Park near Astoria, Oregon and the kangaroo at Port Campbell National Park in Victoria, Australia. The Linux Tux penguins and XCOR Lynxes are all more than a decade old. The Plushtodon was shipped from Germany - but I didn't go there to get it. #SocialMedia

​​​​​​​​​​ #しゅいろママ生誕祭2025

​​

psst! you! do you write Go?

check this out: https://github.com/ncruces/go-sqlite3/blob/aad2224095c5a956d0d46334699c489e37412d7a/ext/seq/push_coro.go

​​​​​​

A friend, while having an existential meltdown, just said:

"I think I'm grieving for the future."

And dayum! That pretty much sums up all the feels rather poetically, eh?

🤘 It's Changelog & Friends!

@nicknisiNick Nisi joins us to dig into the latest trends from this year and how they're impacting his day-to-day coding and Vision Pro wearing. Anthropic's acquisition of Bun, the evolving JavaScript and AI landscape, GitHub's challenges and the AMP/Sourcegraph split. They dive into AI development practices, context management, voice assistants, Home Assistant OS and home automation, the state of the AI browser war, and...

💫 https://changelog.am/120 #podcast

hey hi I'm going to stream some

~PEAK~

co-op climbing shenanigans with the Girlfriend Squad! come join @silverchangeling.bsky.social and @moomanibe.bsky.social and me... right now!! ^^
https://www.twitch.tv/zandravandra

'goat' is now in homebrew! $ brew install goat formulae.brew.sh/formula/goat

'goat' is now in homebrew! $ brew install goat formulae.brew.sh/formula/goat

hey hi I'm going to stream some

~PEAK~

co-op climbing shenanigans with the Girlfriend Squad! come join @silverchangeling.bsky.social and @moomanibe.bsky.social and me... right now!! ^^
https://www.twitch.tv/zandravandra

A friend, while having an existential meltdown, just said:

"I think I'm grieving for the future."

And dayum! That pretty much sums up all the feels rather poetically, eh?

Frank Gehry has died

Link: https://www.bbc.co.uk/news/articles/c5y2p22z9gno
Discussion: https://news.ycombinator.com/item?id=46167621

Fizz Buzz in CSS

Link: https://susam.net/fizz-buzz-in-css.html
Discussion: https://news.ycombinator.com/item?id=46166708

#css

쿠르츠게작트 1시간짜리 새동영상을 보고 있는데 바다가 진짜 이쁘게 뽑혔다

しゅいろさんのお誕生日なので絵がいっぱい流れてきて良い

​​

Age Verification Laws Won't Work!

#privacy #AgeVerification #politics #democracy

Magic Magikarp Makes Moves

https://hackaday.com/2025/12/05/magic-magikarp-makes-moves/

Hello Fediverse

If everything works out according to plan, when I hit publish on this post it will show up in the #Fediverse. After a year of on-and-off attempts, to implement #ActivityPub on this website, with no success, I have hopefully cracked it! Well, when I say “I have hopefully cracked it,” what I mean is @pfefferle@mastodon.social and the #WordPress “open office hours” program, have cracked it. It turns out; if you have a problem with the WordPress ActivityPub plugin, the best thing to do is disable other plugins and, though a process of elimination, see if one of them is the issue. So big thanks to Mathias and WordPress for your help on this.

Now this is working and I am broadcasting out into the Fediverse, I feel like I should modify my content a little to appeal to all of you woke, leftists, godless, communists 🙂 out there. For a while I was far too smitten with the every little #Sustainability initiative, every little carbon reduction program, and every other bit of  #GreenWashing that was put out there by brands. Full confession I actually believed that ElonMusk wanted to save the planet! Yeh I know, I was naive…

While I do continue to applaud any actions that a corporation takes, that materially helps either people or planet, it’s clear that problems are systemic. We need corporations to shift from Shareholder Primacy to Stakeholder Capitalism, valuing environmental and social impact alongside profit. Or try someting completely different. Right now, if there is a more sustainable or ethical brand choice to be had, we should always take it, but we must understand, that we are not “saving the planet” with those choices, just minimising our impact. Nebula TV channel, Our Changing Climate,  has this excellent video on the subject of Ethical Consumerism.

It turns out, that whoever first pointed out “Corporations are Psychopaths” was mostly correct – How a corporation is designed to function, putting shareholders before people and planet, is psychopathic behaviour. (Psychopathic behaviour includes a lack of empathy and remorse, superficial charm, manipulation, and a disregard for social norms and the rights of others.) The only solution is to rewrite corporate charters and incorporation acts and include specific legal provisions that mandate environmental and social responsibility, shifting the core purpose of business beyond mere profit maximisation. Ultimately Corporations and their leaders are never going to fully act in the best interests of people and planet, because that’s not what they were created to do.

So the plan, for 2026, is to be posting more content here that challenges both brands and the whole system. To shine a light on the negative impacts to people and planet that brands are having. And to share more content about organisations and companies working on regeneration and decarbonisation.

Please follow and share your thoughts and ideas below.

#activitypub #branding #corporations #fediverse #sustaiability #sustainability #wordpress

​​

국토부, 애플 고정밀지도 반출 처리기간 연장 국토교통부 국토지리정보원은 5일 애플이 신청서 보완을 위한 기간을 요청함에 따라 신청서 보완 제출에 걸리는 만큼 처리 기간을 연장한다고 밝혔다.

국토부, 애플 고정밀지도 반출 처리기간 연장

국토부, 애플 고정밀지도 반출 처리기간 연장

국토교통부 국토지리정보원은 5일 애플이 신청서 보완을 위한 기간을 요청함에 따라 신청서 보완 제출에 걸리는 만큼 처리 기간을 연장한다고 밝혔다. https://n.news.naver.com/article/092/0002401300

Street Style
As one of the most popular genres, street photography comes in many different styles or sub-genres.
I'll end this series with probably my favourite style, Street: Abstracts.
I am comfortable photographing strangers but not everyone is, and in some countries it is even illegal.
Freed from that pressure, the abstract street photographer becomes absorbed in the colours, textures, patterns, reflections, light and shapes of the city.
#photography #StreetPhotography #AbstractPhotography

밥테일. 그는 광고의 신이야.

https://youtube.com/shorts/HzW85bUIQvo

雛見沢とかホルガとかさ

職場に電話しますか。いやだなあ、この時期に熱出たから休みたいなんて言いたくないけど…電話するしかねえ

​​​​​​​​​​​​​​​​
​​​​​​​​​​​​​​​​​​
​​​​​​​​​​​​​​​​​​​​​​​​

ウチにものえすきーとかあるよ（）

​​

因習村いいね（よくないね）

삶을 변화시키는 작은 용기

1. 두려움을 두려워하지 않는다
2. 실수를 성장의 기회로 받아들인다
3. 매일 한 걸음씩 앞으로 나아간다
4. 자신을 믿고 도전한다
5. 긍정적인 마인드를 유지한다

Judge Signals Win for Software Freedom Conservancy in Vizio GPL Case

Link: https://fossforce.com/2025/12/judge-signals-win-for-software-freedom-conservancy-in-vizio-gpl-case/
Discussion: https://news.ycombinator.com/item?id=46166994

起きた……が、眠い。二度寝しようかな。

Alex Vindman here.

The Wall Street Journal broke the news that Trump’s chief negotiator,
Steve Witkoff,
met with Russian oligarchs about lucrative post-war business opportunities.

It’s clear:
Trump’s so-called “peace plan”
is a vehicle for appeasement and personal gain for those in and around the Trump Administration.

The objective isn't peace and stability for Ukraine — it’s money.

There’s no other way to look at this but as corruption at the highest level of our government.

My friend Bridget Brink,
our former U.S. Ambassador to Ukraine,
lived through Putin’s nightly missile and drone attacks for three years.

And when Trump appeased Putin instead of standing with Ukraine, she resigned in protest.

Now, Bridget is running Congress to flip a must-win seat.

Bridget will always fight for what’s right.
She was even accused of “focusing too intensely on the issue of corruption.”

Too focused on corruption?

I would argue there is no such thing,
especially when we see what’s happening in Washington right now.

Bridget is exactly the leader we need in Congress.

It’s no surprise Trump’s allies are already attacking Bridget.

They know when she gets to Congress, she’ll hold them accountable.

If you believe in defending democracy and taking on Trump’s corruption,
chip in right now to help Bridget win MI-07 and flip the House.

https://brink4michigan.org

Thank you,
Alex Vindman

기성 자동차 업체가 이런 미친 인간하고 경쟁해야한다는 것부터가 자존심 상할듯

@syuiloしゅいろ(本物) ​​

しゅいろママ誕生日おめ！！！結婚しようね

しゅいろママおめでと～​​

@syuiloしゅいろ(本物) しゅいろさんお誕生日おめでとうございますー！！！！​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​
今度おいしいピザごちそうするね​​

그나저나 사람들 Digi-key보다 디바이스 마트를 많이 쓰나요?

私のお気に入りのブラウザ、Vivaldi を是非試してみて！： https://vivaldi.com/invite

しゅいろ​​誕生日！？
@syuiloしゅいろ(本物) おめでとうございます​​

​​

​​ ​​​​