There are still some other things to do, so don't think if I didn't fix
your favorite bug that your bug report is in the bit bucket. (It may be,
but don't think it. :-) Larry Wall in <[email protected]>
Search
253 results for “bug”
-
-
⚠️ La gala Astra Film Festival, directoarea artistică Csilla Kató, care leșinase pe scenă la deschidere, și-a anunțat autosuspendarea: fără sediu, fără buget propriu, salarii mici. Directorul Muzeului ASTRA cere o lege a culturii. Articol complet pe site. #AstraFilm #Culture #Romania
-
🐍📰 Python Debugging With Pdb
Learn the basics of Python pdb, the interactive source-code debugger, and use it to track down hard-to-find bugs in your programs
-
People seem pretty salty at Krebs for this https://github.com/pbatard/rufus/issues/3064
He over-reacted, however I can see how this misunderstanding arose. There's a fairly unpleasant bug (issue 3042) and it has been reported in 2021, and the reporter was mocked.
Between maintainer compromises and CI/CD shenanigans, and supply chain dependency issues, "just look at the source bro" doesn't really cut it.
-
"In the past couple of months, my focus as a tech writer has shifted from writing to building machines, which in reality are elaborate skills that do things. One skill triages incoming bugs and website feedback on an hourly schedule, and another analyzes AI chat logs to recommend documentation improvements and hands its bugs off to the triage skill. This post describes both skills and reflects on documentation logistics, comparing them to the many processes that keep a city running.
I’ve shifted my focus as a tech writer in the past couple of months. I’m no longer writing; instead, I’m building machines, so to speak. I like to think of them as machines because it suggests invention, creativity, and engineering. In reality, the machines are just elaborate agent skills that do things."
https://idratherbewriting.com/blog/building-machines-skills-for-tech-comm-workflows
#TechnicalWriting #SoftwareDocumentation #AI #LLMs #GenerativeAI #AIAgents #AgentSkills
-
Security researchers used AI tools to uncover years-old vulnerabilities in PHP - and then AI-assisted attacks began almost immediately, a pattern Wired argues makes bugs fundamentally more exploitable #mix #cybersecurity #ai
Posted into FLIPBOARD EXCHANGE FEED 🗞️ @flipboard-exchange-feed-Econopass
-
COSMIC 1.11 Desktop Environment Released with New Touchpad Settings:
https://9to5linux.com/cosmic-1-11-desktop-environment-released-with-new-touchpad-settingsKDE Plasma 6.8.1 Desktop Environment Released with Various Bug Fixes:
https://9to5linux.com/kde-plasma-6-8-1-desktop-environment-released-with-various-bug-fixesKDE Plasma 6.9 Stabilizes KWin's Wayland Picture-In-Picture Support:
https://www.phoronix.com/news/KDE-Plasma-6.9-Wayland-PiPGNOME 51.1 Improves Drag and Drop Between Wayland and Xwayland Clients:
https://9to5linux.com/gnome-51-1-improves-drag-and-drop-between-wayland-and-xwayland-clientsTiling Shell now supports mouse button layout activation:
https://www.omgubuntu.co.uk/2026/10/tiling-shell-right-mouse-button-activationSimple Taskbar V72 Releases: GNOME Taskbar Extension Gets Performance and Geometry Fixes:
https://www.linuxcompatible.org/story/simple-taskbar-v72-releases-gnome-taskbar-extension-gets-performance-and-geometry-fixes/DankMaterialShell Becomes Dux Shell as Dank Linux Rebrands to Dux Labs:
https://itsfoss.com/news/dank-linux-dux-labs-rebrand/Weston 16.0.1 Release: Fixes Intel i915 Native Backend and HDR Detection:
https://www.linuxcompatible.org/story/weston-1601-release-fixes-intel-i915-native-backend-and-hdr-detection/MangoWM 0.18.3 Release Brings Fixes and Optimizations to dwl-Based Wayland Compositor:
https://www.linuxcompatible.org/story/mangowm-0183-release-brings-fixes-and-optimizations-to-dwlbased-wayland-compositor/Shelly ALPM 3.1.8 Fixes Broken Zig Rewrite of pacman for Arch:
https://www.linuxcompatible.org/story/shelly-alpm-318-fixes-broken-zig-rewrite-of-pacman-for-arch/Shelly 3.1.9 GUI Package Manager for Arch Linux Improves AUR Support:
https://9to5linux.com/shelly-3-1-9-gui-package-manager-for-arch-linux-improves-aur-supportMyrlyn 1.1 Released For SUSE/openSUSE GUI Package Manager:
https://www.phoronix.com/news/Myrlyn-1.1-ReleasedCanonical's Multipass 1.17 Adds Direct Support For Non-Ubuntu Linux Distros:
https://www.phoronix.com/news/Multipass-1.17(Post 2/7)
#WeeklyNews #News #Linux #LinuxNews #COSMIC #KDE #KDEPlasma #GNOME #TilingShell #SimpleTaskbar #DankMaterialShell #Weston #MangoWM #Shelly #ShellyALPM #Myrlyn #Multipass #DE #DesktopEnvironment #LinuxDesktop #DesktopLinux #FosseryTech
-
Raytracing: Version 0.10.1 of the plugins for LightWave 3D 5.x
@midwan has updated his plugin package for the AmigaOS version of Lightwave 3D. Version 0.10.0 added the six new plugins listed below; a bug-fix update, version 0.10.1, is meanwhile available as well.
-
-
"During an appearance at the Stanford Graduate School of Business, Altman told a group of grad students that the cybersecurity crisis is worse than anyone could imagine."
https://gizmodo.com/sam-altman-i-no-longer-think-were-gonna-be-able-to-just-patch-all-the-bugs-2000829947
#AI -
-
Jump Crypto's Firedancer, the independent validator software for Solana, now requires researchers to burn 1 SOL to qualify for its bug bounty under terms effective 18 October. The burn is non-refundable, even for duplicate reports of real vulnerabilities. Payouts are doubled until 20 November and tripled for Alpenglow consensus findings. https://cryptoslate.com/firedancer-makes-bounty-hunters-burn-1-sol-even-for-duplicate-bug-reports/ #Web3 #Blockchain #Security
-
For everyone interested in Fakturownia incident - the extracted data not exists anymore.Everyone make mistakes sometimes and their reaction was very professional. After my private conversation with them they declared to start public bug bounty program - great news that private companies starting to care and i hope others will go in their steps. Btw soon new interesting news.
Stay safe - fingerprint -
A natural language interface: brilliant!
Search summaries: kinda cool.
10,000 lines of code or day with subtle bugs that can't be fixed: yuk.
Bot swarm cyber attacks : gross.
Seas of auto-generated web content drowning out all else: sigh.
Paying off all the leveraged investments: oh no.
All my prompts stored on someone else's computer, accessible to the government: help!I just want swipe typing to learn from my corrections. Maybe a personal assistant that doesn't phone home.
-
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111
SAP scores CVE-2026-89111 at 10.0. That is an unusual number for a server-side request forgery, and the reason is scope: the bug does not merely send a request to the wrong host, it hands the attacker the credentials needed to complete that request themselves. The affected package is the SAP Cloud SDK for Python, and the fix shipped in two parts, months apart, with a regression between them.The mechanism
The SDK builds an OAuth2 token URL for the client credentials flow. Part of that URL comes from a caller-supplied value namedtenant_subdomain, which the SDK substitutes into the URL by string replacement.Whoever controls
tenant_subdomaincontrols the destination host. Whenfetch_tokenruns, it sendsgrant_type,client_idandclient_secretin the form body to whatever host that value points at. An attacker who can set the field to a host they operate receives the client secret directly, with no parsing trick required.Those credentials buy a real access token from the legitimate endpoint. The token carries whatever permissions the original client held, and the documented Destination configuration stores third-party system credentials. The blast radius runs from one subdomain parameter to the credentials of every system that SDK integrated with.
Two fixes, and a window in between
The advisory lists affected versions below 0.45.2, with the fix in 0.45.2. According to the vendor, that is the whole story.In practice it is not. Researchers tested each release and found that the module migration work in 0.53.0 reintroduced the flaw, which remained present through 0.55.0. Version 0.55.1 re-fixed it; the current release line is 0.58.5.
The per-version behaviour is reproducible. 0.45.0 and 0.45.1 send the secret to the attacker host, 0.45.2 blocks it, 0.53.0 and 0.55.0 send it again, and 0.55.1 and 0.58.5 block it. One test run against 0.53.0 captured two separate credential sets from a single request flow.
That gap is the finding worth carrying away. Anyone who patched to 0.45.2 and later upgraded to 0.53.0 for unrelated reasons became exploitable again, and no advisory said so. A version-range check driven by the vendor advisory alone would report those hosts as fixed.
Disclosure context
The issue was published at SAP Security Patch Day on 13 October 2026 alongside 19 other vulnerabilities: 4 critical, 3 high, and 4 that had been pre-published on GitHub. No in-the-wild exploitation has been reported.Other items in the same batch matter for anyone tracking SAP exposure broadly. CVE-2026-89110 is a broken access control issue in NetWeaver Visual Composer. CVE-2026-89107 is code injection in S/4HANA. CVE-2026-89108 is a missing authorization check in Manufacturing Integration and Intelligence, scored between 9.9 and 9.1 depending on the source.
What to do
- Compare the installed version against 0.45.2, 0.55.1 and 0.58.5, and treat anything in the 0.53.0 to 0.55.0 range as vulnerable regardless of what an advisory lookup reports.
- If an upgrade cannot land yet, whitelist
tenant_subdomainagainst the values your integrations actually use. It is a narrow control, but it addresses the injection point itself. - Rotate client secrets for any SDK integration that ran a version in either vulnerable range. Assume the secret was exposed.
- Review what the affected client was authorized to reach. The token the attacker obtains is the client's token, so the question becomes what that client could read, and the Destination configuration is where to look.
The lesson that outlasts the CVE
Advisories describe the versions the maintainer knew about when the advisory was written. A regression introduced later, during a refactor, is invisible to an advisory-based scanner and to any team whose remediation reads as an instruction to upgrade past the listed version.For a library that handles credentials, the durable control is a negative test in your own pipeline: point
tenant_subdomainat a host you control, run the token fetch, and assert that no secret leaves. That test survives version changes, module migrations, and advisory text nobody has updated.References
- SAP Security Patch Day, 13 October 2026, SAP Note for CVE-2026-89111
- GHSA-4mv3-jxxm-9cx2 (SAP Cloud SDK for Python, OAuth2 SSRF)
#sap #oauth2 #ssrf #credentialleak #software #coding #development #engineering #inclusive #community
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111 -
New vulnerabilities discovered in the open-source programming language PHP have prompted urgent warnings for website owners to apply patches or take their sites offline.
Researchers participating in OpenAI and Wiz's Hack the Planet initiative utilized AI to exploit the bugs.
Cloudflare and Amazon reported observing millions of attempted exploitation efforts linked to the issue, emphasizing the massive scale of risk across foundatio…
-
Deep dive: building SMP (Structural Memory Protocol), a structural code-graph MCP server in Python, benchmarking it against codebase-memory-mcp on the same hardware, and the perf bug my own benchmark caught.#python #mcp #ai #devtools #software #coding #development #engineering #inclusive #community
I indexed a 96k-file Linux kernel tree in 2m51s on a laptop — benchmarking two code-graph MCP servers -
Legacy freebsd-update and /etc/ssl/certs/ following FreeBSD-SA-26:73.caroot
https://www.reddit.com/r/freebsd/comments/1xe2h45/legacy_freebsdupdate_and_etcsslcerts/
PS symptoms were previously reported in The FreeBSD Forums:
https://forums.freebsd.org/threads/freebsd-update-loop-15-1-release-p6.104176/
It seems that users of #pkgbase are not bugged.
-
I had a swarm of trading agents that each had role, and they could access Sabrina lab mcp sever. They had abundance of tools, the trading script had a bug so the agents wrong a script to make trades that fixed the bug. Began making weird trades.
The prompt was loose xD
-
Trophikos 1.2.0 has been released on the App Store! We’ve got iPhone Duo support! We’ve got a new “Want to make” list! We’ve got richer logging details! We’ve got bug fixes! It’s a whole lot of new and improved stuff!
-
Linux Weekly Releases Issue #75 (Week 43 – 10/24/2026)
Every week, new Linux versions that are under a supported version series get released to incorporate bug fixes and other general improvements that are pushed to the servicing branches. This ensures that your Linux user experience gets better when latest versions fix some of the bugs.
This week, the below Linux kernel versions under the v7.x series are released:
SeriesVersionFull sourcePatchSignatureDatev7.2.xv7.2.12LinkLinkLink10/21/2026v7.3.xv7.3.0LinkLinkLink10/19/2026Alongside v7.x, here are the v6.x versions that were released:
SeriesVersionFull sourcePatchSignatureDatev6.6.xv6.6.160LinkLinkLink10/21/2026v6.12.xv6.12.114LinkLinkLink10/21/2026v6.18.xv6.18.58LinkLinkLink10/21/2026Please note that the downloads are in the source code form, so this means that you may have to compile from source in order to use one of the Linux versions shown above. Your distribution might not include the above Linux versions.
#Kernel #Linux #LinuxKernel #news #Tech #Technology #update -
@tux @Larvitz Fehler gefunden. Ich nutze #Surfshark #VPN als Erweiterung unter #Firefox und ich finde es ist ziemlich Buggy. Die eingestellte Umgehung funktioniert nicht richtig.
-
noch eine schlupfwespe, eine aus der
Gattung Itoplectis
möglicherweise I. maculator ♀
https://de.wikipedia.org/wiki/Itoplectisdie ich auf allen bildern immer nur teilweise scharf bekommen hab, wenn überhaupt
#insekten #insects #krabbeltierchen #BugOfTheDay #nature #biodiversity #entomology #macro
-
da war heut ziemlich der wurm drin, sehr viele bilder unscharf geworden, sehr viele nicht erwischt bevor sie abhauten, selten so viel verwurf gehabt. naja, ein bisschen was gibt's doch, zB diesen
Admiral
Vanessa atalanta
https://de.wikipedia.org/wiki/Admiral_(Schmetterling)wenigstens hab ich noch was für den SilentSunday geknipst, aber dazu morgen mehr
#insekten #insects #krabbeltierchen #BugOfTheDay #nature #biodiversity #entomology #macro
-
Der neue #Nvidia #GeForce Game-Ready-#Treiber 621.01 sorgt für schwarze Bildschirme und Videohänger bei RTX-Karten. Bis zum Fix hilft ein Downgrade auf die vorherige Version 617.42. #Gaming #Bug https://winfuture.de/news,162178.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
🔴 LIVE NOW ON VORTEX
📻 Vortex Lounge 🍸 (Chillout, ethnic electronica, nu jazz)
──────────────
🎵 Bugge Wesseltoft - New Conception of Jazz▶️ Écouter / Listen : VorteX [Radio]
https://lesonduvortex.net💬 Join us on Discord:
https://discord.gg/d82hJZBeDE -
RE: https://fosstodon.org/@keepassxc/117320648185069600
🚨Attention! Yesterday, we published new 2.8.0-1 binaries for macOS (DMG) and Linux (AppImage) to fix three separate upstream Qt bugs on macOS and to ship an updated version of Brotli that fixes CVE-2026-111497.
The new version will not show up as an update automatically, but we recommend everyone to install it from https://keepassxc.org/download/ until the release of 2.8.1.
-
https://weberblog.net/october-2026-another-leap-second-coming/
Leap seconds may be officially over, but false leap seconds announced by buggy implementations will be with us twice every 256 weeks forever.
-
Pure vibe coding in the wild. You deploy directly to production with zero planning, hit one tiny bug, and spend the next six hours frantically prompt-engineering your way into an absolute system-wide apocalypse. Just like the experts.
(Credit: Pat & Mat)
#VibeCoding #Programming #ProgrammerHumour #AI #SoftwareEngineering #PromptEngineering -
eine schlupfwespenartige die ich nicht näher bestimmen konnte, vermutlich aus der familie der brackwespen, opiinae
https://de.wikipedia.org/wiki/Brackwespen#insekten #insects #krabbeltierchen #BugOfTheDay #nature #biodiversity #entomology #macro