Rogue OpenAI Agents Posted 53 User-Uploaded Images Onto the Internet, Accessed US Government Websites
53 images that users uploaded into OpenAI models were included in training data — and then AI agents in an OpenAI research environment posted those 53 images on public image hosting sites.
While posted as links that weren’t publicly listed, “the images could still be discovered e … ⌘ Read more

@prologic@twtxt.net Currently, yarnd links @david@daiwei.me’s mention to /external?uri=… that results in an HTTP 404 “Cannot find external feed”. I reckon no user on this yarnd is subscribed to @mlot@tilde.club’s feed, hence there’s nothing to show. Just fetching the feed on demand of course isn’t an option for privacy and security reasons, at least not for anonymous users. However, in my opinion it would be better if the link pointed to the raw feed URL instead.

220 Million Traveler Records Exposed In Vietnam-Linked APIS Leak
A misconfigured Advance Passenger Information System (APIS) database linked to Vietnam exposed more than 220 million passenger and crew travel records spanning 2017 to 2026, including names, passport numbers, nationalities, flight details, seat assignments, and baggage references. Researchers said the database was reachable through a chain of secu … ⌘ Read more

Malicious OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers in May
A swarm of OpenAI agents launched a “major malicious attack” against RubyGems last May, according to a new report. That coordinated attack hit Ruby’s package manager “with hundreds of junk gems, prompting the maintainers to suspend new user sign-ups for about four days,” writes The Hacker News, … ⌘ Read more

Automattic’s Matt Mullenweg Claims He’s Back ‘In Control’
Less than 48 hours after Automattic’s board placed Matt Mullenweg on leave, Mullenweg told employees he was back “in control” of the company and that the board was again in agreement. 404 Media cited Slack screenshots late Thursday evening where Mullenweg posted “Don’t call it a comeback” and linked to LL Cool J’s music video for “Mama Said Knock You Out.” “Mullenweg’s … ⌘ Read more

Teen Reading Slumps to Worst This Century Due to Surge in Screen Time
Teen reading, math, and science scores have fallen to their lowest levels since international PISA testing began in 2000, with 15-year-olds now reading at roughly the level previously expected of students a year younger. The Organization for Economic Co-operation and Development (OECD) linked weaker results to more screen time, less rea … ⌘ Read more

⚠️ For anyone that signs up on Yarn.social’s multi-user twtd multi-tenant platform I’m runnign on twtpub.com – Be warned. I will delete your account if you create it for the soles purposes of link squatting, spam, link harvesting, seo marketing, or any other useless fucktarrd crap.

To the spammers and would-be assholes of the world: You have been wanred. Don’t abuse my generosity.

it’s all I ask

Amazon Linux 2027 Shows Off Nice Performance Gains On AMD EPYC In The AWS Cloud
Yesterday AWS announced the public preview of Amazon Linux 2027 as their successor to the current Amazon Linux 2023 in-house distribution. With all the software upgrades and improvements like building packages now with link-time optimizations (LTO), enforcing x86-64-v3 builds, and other changes, I was eager to run some performance benchmarks of Amazon Linux 2023 vs. Amazon Linux 2027 in the EC2 cloud. ⌘ Read more

Fedora 47 Considering Use Of Thin LTO Compiler Optimizations
A change proposal filed for what would be part of Fedora Linux 47 is on making use of Thin LTO rather than Fat LTO for link-time optimizations. With Thin LTO being more memory efficient and faster build speeds, the hope is that more Fedora packages could also use Thin LTO for packages where no link-time optimizations are currently leveraged… ⌘ Read more

Nvidia Launches Free Tool That Links Idle Computers Into a Personal AI Data Center
Nvidia has launched PAIR, a free open-source tool that links compatible computers on a home network so they can pool idle processing power for local AI inference and agentic workloads. “While the compatible devices are mostly Nvidia GeForce GPUs (PAIR works with RTX 20-series cards and newer, as well as RTX Pro … ⌘ Read more

itch.io upgraded their app to support Steam shortcuts, a headless mode and linking existing downloads
The itch.io app has been upgraded with some very useful additions, that make using it actually a whole lot nicer.

Image

Read the full article on [GamingOnLinux](https://www.gamingonlinux.com/2026/09/itch-io-upgraded-their-app-to-support-steam- … ⌘ Read more

@movq@www.uninformativ.de Ahh, no you can. Much like what we’ve built here with Twtxt / Yarn. I’m building a spec, clients can implement the spec, or you can ya know, just curl and git your way through. I’ll link the spec soon™, just need to keep refining and testing and make sure this actually works properly 😅

I am finally building a Twtxt / Yarn.social inspired Git forge. I’m actually quite confident that y’all will quite like it, but I won’t post links yet until I’m quietly confident in its design, functionality and behaviour(s).

Stay tuned 🤞 It’ll be like no other Git forge you’ve ever seen! 🤣 Actually, it’s already more like cgit than anything with plain text feeds that power it’s “pure decentralization” as you can no doubt imagine 😅 #twtxt #git #forge

AMD Updates UALink Patches To Get The Linux Kernel Ready For UALoE On Helios
Earlier this month AMD posted a massive set of patches for bringing up UALink support for the mainline Linux kernel and wiring it up into the AMDGPU kernel driver. In closing out the month of August, they have updated this big set of Ultra Accelerator Link patches… ⌘ Read more

@Sumomo@sumomo.neocities.org I haven’t heard of that client before? 🤔 Got a link to it? screenshtos? Should I add it to the Listed Clients? 🤔

Xylitol Linked To Strokes and Heart Attacks, Study Finds
An anonymous reader quotes a report from The Guardian: A common sweetener used in products such as chewing gum, toothpaste, jam, yoghurts and ice-cream has been linked to an increased risk of strokes, heart attacks and death. Xylitol is a sugar alcohol present in some natural foods in very low amounts. It is also added – often in amounts 1,000 times higher – … ⌘ Read more

@arne@uplegger.eu @movq@www.uninformativ.de Achtung, der Uplegger ist im Anmarsch! Dreht die Karten auf links! Entspannte Reise und gute Erholung! :-)

More Than 100 Water Systems Were Hit In July Cyberattacks
CISA says more than 100 internet-exposed U.S. water and wastewater systems were targeted in July, often through programmable logic controllers connected directly to cellular modems. “That’s the first time the feds have put a number on the digital intrusions, but they have yet to attribute the campaign, widely suspected to be linked to Iran, to a particular group … ⌘ Read more

Radiation Link In Flight Attendant’s Breast Cancer, French Court Finds
A French court has for the first time recognized cosmic radiation as a contributing occupational factor in a flight attendant’s breast cancer, alongside passive smoking and years of night work. The landmark ruling could open the door to similar claims from other aircrew, as research continues to link long-term high-altitude flying wi … ⌘ Read more

AMD Proposes New LLVM iTHP Option For Squeezing More Performance
AMD’s compiler team is proposing a new LLVM Clang compiler option, -fenable-readonly-thp for implementing instruction Transparent Huge Pages “iTHP” at compile and link-time. With -fenable-readonly-thp, they are finding more performance out of SPEC CPU, Geekbench, and other workloads from the arranging of 2MB segment alignment at link time and allowing the executable text range can be promoted to huge pages… ⌘ Read more

Nvidia Senior Manager Linked To Supermicro Scheme Smuggling AI Servers To China
An anonymous reader quotes a report from Ars Technica: Taiwan has indicted nine people – reportedly including an Nvidia senior manager and two Supermicro employees based in the country – who allegedly helped forge documents to cover up illegal exports of high-end AI servers to China in violation of US export controls. O … ⌘ Read more

Iran-linked Cyberattackers Shut Down a UK Power Plant for Four Days
“Iran shut down a British power plant for four days in an unprecedented cyber attack,” reports the Telegraph.

More details from the BBC:

The government said that at no point was there a risk to the UK’s energy system, but the Department for Energy Security and Net Zero (DESNZ) has contacted power companies to advise them about the risk of … ⌘ Read more

Rush Rescue Mission for NASA’s $500M Space Telescope Fails
Remember that rush rescue mission for NASA’s $500M space telescope? It failed, reports CNN, and the LINK satellite won’t be able to boost the telescope’s orbit. NASA says its decades-old Swift telescope will now continue losing altitude, until it reaches Earth’s atmosphere later this year and burns up.

CNN reports:

Just weeks after LINK lifted off on July … ⌘ Read more

Google Gives Publishers a ‘Preferred Sources’ Button to Fight AI-Driven Traffic Losses
Google is giving publishers a new way to fight declining referral traffic from AI-powered search by letting them embed a “Preferred Sources” button that readers can use to favor their sites across Search, Discover, and Google News. “The idea is to make it easier for readers to find links from the sites th … ⌘ Read more

Rescue Mission Is Called Off For NASA’s Aging Swift Space Telescope
NASA has called off a $30 million mission to rescue its aging Swift space telescope after Katalyst Space’s Link spacecraft developed persistent control and positioning problems. The Associated Press reports: Katalyst said Link will not attempt to capture Swift and boost it to a higher orbit because of problems with controlling the spacecr … ⌘ Read more

@klaxzy@klaxzy.net Turns out, it’s not a cool project. :-D

Can you build from source? Perhaps not if there is just a download link.

It’s been a hot minute since I last used alien to convert a Debian package into an RPM packge. Or was it the other way around? No clue.

Top Album Releases Linked To Rise In Fatal Crashes
An anonymous reader quotes a report from The Guardian: The release of a new album by Taylor Swift might be a cause for celebration among her fans, but such events have also been linked to a more sombre phenomenon: an increase in fatal car crashes. The team behind a new study say it sheds light on the impact of distracted driving. Writing in the journal Jama Network … ⌘ Read more

@murad@twtxt.net Welcome to Yarn.social / Twtxt 🥳 You might want to fiddle a bit with your settings, maybe a nice avatar, description, maybe a few links, etc 😃

Apple Wants to Charge Developers Up to 15 Percent for Linking Outside the App Store
Apple is proposing to charge U.S. developers up to 15% when users leave an app through an external purchase link, with lower rates of 10% or 5% for certain programs and smaller developers. The proposal follows years of litigation with Epic Games and a contempt ruling that temporarily barred Apple from collect … ⌘ Read more

@brytboi@twtpub.com I mean you can, technically. But most clients won’t render Javascript or HTML fragments at all. Only Markdown, Text, Images and Links.

China-Linked Hackers Used AI To Run First-Ever ‘Autonomous’ Cyberattack On Taiwan
Researchers at Israeli cybersecurity firm Dream say suspected China-linked hackers used an open-source AI-agent system to conduct what may be the first observed end-to-end autonomous cyberattack against a government. According to the Financial Times (paywalled), the attack compromised at least 85 accounts and resulte … ⌘ Read more

Taxi Drivers Rarely Die of Alzheimer’s
An anonymous reader shares a report from The Conversation, written by Hatim Sharif, a civil and environmental engineer who has “spent more than two decades staring at maps” and spatial data. Sharif finds one connection especially fascinating: the link between spatial reasoning and why taxi drivers seem to have lower rates of Alzheimer’s. From the report: Taxi and ambulance drivers are less likel … ⌘ Read more

AI-Powered Browser Just Generates Every Website From Scratch
XDA Developers reports:

On July 22, a Google DeepMind engineer, Vidy Thatte, shared a snippet of a browser he built that “treats every URL as a prompt and generates a site from scratch” on his X account. Just a few days later, he shared a TestFlight link to let iPhone users try it for themselves. The browser he launched is called Gem, and it’s a browser … ⌘ Read more

Intel Makes Progress On HDMI 2.1 FRL With Their Linux Driver For Meteor Lake & Newer
Following AMD making progress with HDMI Fixed Rate Link (FRL) and other HDMI 2.1 functionality for their open-source Linux kernel graphics driver, Intel is out today with a big set of 44 patches working on HDMI 2.1 FRL support for their kernel graphics driver with Meteor Lake hardware and newer… ⌘ Read more

AMD Updates HDMI 2.1 VRR & ALLM Patches But Will Miss Out On Linux 7.3
Complementing the HDMI 2.1 Fixed Rate Link (FRL) support that AMD already upstreamed to the Linux kernel, AMD engineers have been further ironing out their HDMI 2.1 implementation for the open-source AMDGPU Linux kernel driver. The latest quest has been getting HDMI 2.1 variable rate refresh (VRR) support upstreamed along with HDMI Auto Low-Latency Mode (ALLM)… ⌘ Read more

Court Orders Meta To Establish $567 Million Fund To Abate Harms To Youth
A New Mexico court ordered (PDF) Meta to create a $567 million fund to address harms linked to youth mental health and child sexual exploitation after finding its platforms constituted a public nuisance. “In sum, the Court finds that New Mexico is in the midst of a teen mental health crisis affecting public health and public safety … ⌘ Read more

AMD Preps HDMI FRL Fixes, New Knob For Disabling Older AMD GPU DCE Display Support
Overnight AMD engineers sent out their latest round of AMDGPU DC display code updates for their Linux driver. This week’s round of display code updates include some additional fixes for their recently introduced HDMI FRL (Fixed Rate Link) support as part of the work toward their HDMI 2.1 implementation finally coming together for their open-source, upstream Linux driver… ⌘ Read more

Russia-Linked ‘Midnight Blizzard’ Group Hijacks Hotel Wi-Fi With CaptiveCrunch
A Russia-linked group tracked as Midnight Blizzard has compromised hotel and conference Wi-Fi portals worldwide, redirecting guests to phishing pages and fake software updates that steal credentials, session tokens, and other sensitive data. Microsoft says the campaign, dubbed CaptiveCrunch, “targets traveling employees g … ⌘ Read more

@javivf@adn.org.es Oh, I like the looks of that.

GTD was undoubtedly the best developed task-management system I ever got into (and I tried a bunch in my time), but even it wound up being too much work for me to keep up with. An app like that might streamline it enough to make it usable. Thanks for the link!

Publishers Are Losing Google Traffic As AI Answers Replace Links
alternative_right shares a report from Axios: Google has basically stopped sending people to websites (including our site) for answers and information. Instead, it’s using AI to answer them on its platform, in its words. Chartbeat data shared with Axios shows Google Search traffic to publishers fell 34% over the past year. That pain is regressiv … ⌘ Read more

Bwahahaha, these security folks have a great sense of humor! :-D Got a phishing test e-mail disguised as an overdue anti-phishing training e-mail:

We receive these test phishing e-mails every now and then at work. When you follow the links and log in at the fake login, you probably get assigned another (real) training.

When I got this e-mail, I immediately thought of such a test. Since I actually do have some stupid training deadlines coming up soon, I wasn’t 100% sure, but still doubted that this was one of them. To make the timing even better, in the team meeting last week, our bosses reminded us to complete outstanding trainings before the deadlines. Ideally well in advance. Notifications about deadlines coming closer are sometimes not only sent to the individuals but also to the bosses and their bosses. And then things can get out of hands when somebody doesn’t read the e-mails properly and mistakes them for deadline exceeded reports.

Anyway, the URL also looked kinda legit. It really doesn’t help a single bit that domain names change all the fucking time. So, still with the test program in mind, I thought, I just give it a quick shot out of curiosity. Since I just had logged in before, the empty SSO username field was totally obvious then. Looking at the e-mail headers confirmed that this was indeed one of security’s field checks. :-)

A New Middle Class of Content Creators Is Quietly Quitting the 9-to-5
“The rise of TikTok, Instagram Reels and Amazon storefronts has created a new kind of white-collar exit strategy,” reports Bloomberg. Workers ditch office jobs not to become celebrities, necessarily, “but to piece together an income online through brand deals, affiliate links and highly personal videos documenting everyday life.”

In m … ⌘ Read more

@david@daiwei.me Go down to “Releases”, there’s a link to the CHANGES: https://movq.de/git/jenny/CHANGES.html

@movq@www.uninformativ.de Oh, that’s actually quite a bit. I didn’t expect that. You definitely have useful things. :-)

Exactly, I now also send links to my fork. :-D

@lyse@lyse.isobeef.org

How many tickets and merge requests did you get before moving to your own server?

Hm, these were probably some of the more active projects:

• https://github.com/vain/lariza/issues?q=is%3Aissue%20state%3Aclosed
  
• https://github.com/vain/pdfPres/issues?q=is%3Aissue%20state%3Aclosed
  
• https://github.com/vain/xiate/issues?q=is%3Aissue%20state%3Aclosed
  

So it’s not a ton of stuff and there are many “issues” I opened myself, but it’s certainly more than these days.

Haven’t used git send-email even once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.

git send-email is good for sending patches to a mailing list (because then the individual patches can be discussed easily), but since those are dying out as well, it loses its appeal. If you want to send patches to a single person, just sending the link to your repo is far easier. 🤔

@movq@www.uninformativ.de Finally, your software is just perfect and finished by now, no need to report non-existing bugs or send in code changes. :-) How many tickets and merge requests did you get before moving to your own server?

I have to admit that I use git format-patch so rarely, I always have to pull it up from my shell history. Haven’t used git send-email even once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.

Maybe I was just very unlucky, but my experience is that you can perfectly ignore people and their work who only do it for the “fame”. It’s almost always been from inferior quality to say the least.

@prologic@twtxt.net Hmmm, I have no idea how to solve that problem. 😅 Some jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.

I thought I had made that super easy, because you can just send me an email – no sign-up process, nothing. But that’s way too old-school, people don’t know how to use git format-patch (let alone git send-email) and they also don’t understand that they can just send me a link to their forked Git repo (which can be hosted anywhere). Git is super flexible and powerful, but those features are hardly ever used.

Maybe people even need some kind “reward”, or “fame”. Like those “achievements” that you can unlock on GitHub. (Something to put in their CV … ?)

@david@daiwei.me @prologic@twtxt.net No worries, I was just trying it on for size.

I played it again today (10/12 on first try), but I can’t say that I love the format of the “share link” (the unnecessary yellow and green circles).

I think if I did want to post daily scores or something (for posterity), I’d likely setup a separate feed just for my “achievements”. 😁

Yeah, lol, fuck off. Tried to reproduce that hashing issue, thus playing around with Go a little bit. And what did I find?

$ tree ~/.config/go
/home/user/.config/go
└── telemetry
    ├── local
    │   ├── asm@devel-devel-linux-amd64-2026-07-14.v1.count
    │   ├── compile@devel-devel-linux-amd64-2026-07-14.v1.count
    │   ├── go@devel-devel-linux-amd64-2026-07-14.v1.count
    │   ├── link@devel-devel-linux-amd64-2026-07-14.v1.count
    │   ├── upload.token
    │   └── weekends
    └── upload

4 directories, 6 files

It collects and uploads “telemetry” now.

No.

(Don’t tell me how I can turn that off. Not interested. This is a compiler and it wants to track me, without asking for consent. That’s a no-go.)

@prologic@twtxt.net I linked you some of my findings on the twtxt.app on IRC. The main problem is the hashing. Totally broken. But you have got to give it some thought, because GitHub hosting of the feed is tricky (even more so if they are CNAMEing their domain to it). It is also finicky because Pages is auto-enabled on username.github.io, so actions must run each time you twt.