will you? imagine how i’d hold you.

i’ve had this image since march this year and i have somehow not used it in a post yet. now i have.

i present to you: baby burgers. the one displayed is the baby whopper. not very whopping, is it?

anyway, i’m a bit hungry but also not really soooo umm imma go eepy sleepy now. it’s late and i got group therapy tomorrow ~ughhhh~ ~it~ ~sucks~ ~so~ ~bad…~ and i might visit BK afterwards sooooo yea whatever. maybe. maybe not. probably? dunno. can’t tell, am not hungry rn.

just so u know: the burgers are not all that tasty. they are fine, but you should just get regular burgers instead.

i wish you a wonderful day where you, even if just temporarily, turn into someones baby burger ~

cross-posted from: lemmy.world/post/52212601

Source

Artist: Orouu | pixiv | twitter | linktree | danbooru

Full quality: .webp 1 MB (991 × 1674)

Good news, a security issue that was blocking the draft for the new DNS-PERSIST-01 challenge mode for TLS certificates has been resolved, meaning the challenge can resume moving forward.

Some background for those who aren’t up to date:

• TLS challenges are how self-hosters and many other TLS certificate users prove who they are in order to automate cert renewals.
• The most popular challenge methods are HTTP-01 (which involves having a live web server answering on port 80 somewhere) and DNS-01 (which involves putting a key given by the TLS authority in your DNS zone in a TXT record temporarily).
• All the current challenges are conducted “live” and require active online participation on the part of the domain owner each time a cert is approaching expiration.
• The new DNS-PERSIST-01 challenge would let owners keep a proof in their DNS zone indefinitely (or with self-imposed expirations), eliminating the need for those online sessions.
• DNS-PERSIST-01 was slated to come out in Q2 this year at the latest and all the popular tools (ACME bots, reverse proxies etc.) have been chomping at the bit to implement it.
• Unfortunately there’s been a security snag. Trying to do things the way DNS-01 did (record only the server-provided proof in DNS) would open DNS-PERSIST-01 to middleman attacks, because unlike DNS-01 where the proof is only there temporarily for a few seconds or a few minutes at the most, in this case the proof would be long-term.
• Hence issue #64, which has been trying to come up with a way to keep only a partial proof in DNS, and combine it with something issued by the server and something issued by the domain owner to make the whole proof, thus rendering the stuff stored in DNS impossible to use for malicious purposes, yet still sufficient for verifying ownership periodically.

Hopefully now that this hurdle has been passed things will proceed faster and we’ll get to use this in the near future.

According to the officials who spoke to Bloomberg, some personnel inside U.S. Central Command leaned too hard on [Palantir] to accelerate intelligence analysis and decision-making. The Defense Department has reportedly made the software tool a cornerstone of military operations over the past year… Officials said some users expected Maven to flag stale records or contradictions in the intelligence assembled for potential targets, though it is not clear why they thought the system would do that. The Minab [elementary school massacre] site, which was cataloged as an Islamic Revolutionary Guard Corps facility due to outdated data, was fed into Maven with other candidates and came out as a recommended day-one target. Target-list work that once took hours was condensed into minutes.

A Palantir spokesperson told Bloomberg the company “is not responsible for the underlying data nor identifying intelligence deficiencies” and that there is no evidence its software was at fault. Two people familiar with Palantir’s Pentagon contracts said the government keeps primary responsibility for the quality of the information that’s fed into Maven.

cross-posted from: lemmy.world/post/52254714

It will be okay

OK, sometimes you have to fight the odds, push technology to the limit to make the unimaginable possible to achieve something great.
But I still do net see the benefit of putting data centers into space. Even after solving all those problems that are mentioned by the article, what is the upside compared to just building a data center with solar panels and a big battery down on earth? Even powering them with gas turbines seems to be more environment friendly and cost efficient than shooting thousands of rockets into space and have the data centers burn up in the atmosphere after 6 years.

Crossposted from infosec.pub/post/52518361

The TV world has been a pot of controversy thanks to a two-hour-and-15-minute video from Gamers Nexus claiming LG TVs are nefariously spying on everything you do. They can record and store audio even when they seem to be off, track everything you watch, and could even be hacked remotely and turned into covert surveillance […]

idk, bad pun I just came up with. btw saifu (財布) = wallet in Japanese

Pick it, pack it, fire it up, come along
and take a hit from the bong.

also my teto plush committed suicide

Source: https://us.oricon-group.com/news/9298/
Archive link: https://archive.ph/U3HUZ

The Failure at God School is officially getting a TV anime adaptation. The popular manga is written by Hyuuganatsu, author of The Apothecary Diaries, with manga art by Modomu Akagawara, known for Ani Tomo, and is currently serialized in Hakusensha’s Hana to Yume with cooperation on the original work from Seikaisha. A teaser visual has also been unveiled, along with comments from Hyuuga and Akagawara.

cross-posted from: https://piefed.world/c/tech/p/1421710/early-rogue-ai-agent-activity-and-attempts-to-hack-found-on-urlquery-net

cross-posted from: lemmy.blahaj.zone/post/48313374

Promotional

Im not affiliated to Fermi/Harmony chat in any way, im just a user who liked it and want to share my experience of the app i find worthy of sharing

so i wanted to share a promising project that I have been using for a few months.

made this post to promote and share this platform since it needs more people, theres arent many atm and it deserves way more.

Fermi/Harmony Chat is free and open source discord like guild/community centered chat platform with most of the features that are expected from those platforms like message channels, vocal chats, threads, screensharing and more. Importantly the chat platform has a strict stance against LLMs AIs and AI generated slop like vibe coding and other abusive usage of AI that replaces human work and slop it in the process. sadly fermi/harmony is unique of having a strong stance against AI. (other similar projects sadly uses AI and excuses AI usage and vibe coding)

the platform also allows users to create their own client for the platform. harmony chat is the API and fermi is just the currently only working client on the platform (was a spacebar client previously until harmony was created as a spacebar fork with the goal of fixing the many issues and bugs present on spacebar) and in the future, instances are going to be federated and the process will be managed directly by the client (fermi and other clients) without being tidious and for advanced users like on matrix, so more easy and beginner friendly.

the platform also is more lenient on its acceptable policy and have a no bullshit moderation. (sadly not the case for other alternatives which sucks very much)

IMPORTANT

currently the project in its early stage and still has lots of bugs, glitches and various issues.

it is currently only accessible through a web browser (there is no app neither on desktop or on mobile)

lots of features are not finished and the platform still need major improvements. but i hope it is going to grow and become a viable alternative.

currently there are around 800 people are registered on fermi/harmony chat.

fermi.chat the main website currently (use this one to register) melodychat.org the organisation’s website (its called melody on codeberg and on the website since harmony was taken)

codeberg link of both harmony and fermi :

codeberg.org/MelodyChat/Harmony codeberg.org/MelodyChat/Fermi

credit to Mathium5, eliza, devs and contributors for developping and maintaining fermi and harmony chat.

en.wikipedia.org/wiki/Pictures_for_Sad_Children

In some ways “outdated”, too edgy, but in some details maybe even more relevant today than it originally was.

(1/3 of humanity having no electricity is a bit exaggerated, in 2000 it was 1/5.)

I had a report for AI slop today. 1m LOC in 3 months. How do you even modify and distribute that? I do not think we had a rule against it.

IMHO if we allow, the community gets drowned out by AI vomit and it is harder to see handcrafted loved projects that are easy to modify and distribute.

My mind is to ban it to preserve open source.

Are folk in agreememt with this line? Would love to hear your thoughts.

Google’s September 2026 Pixel Update Bulletin contains patches beyond what’s in that month’s regular Android Security Bulletin. According to GrapheneOS, some of those extra patches touch standard Android platform code, the kind that runs on non-Pixel devices, not just Pixel-branded hardware.

None of that platform-level code has reached the regular monthly bulletin or the private preview patches other manufacturers typically draw from to get their own patches ready.

And at this rate, these won’t reach non-Pixel OEMs at all until Android 17 QPR2 ships later this year in December.

The project is characterizing this as Google “gatekeeping security patches to the standard Android platform code from Android OEMs.” The complaints

GrapheneOS says Android 17 QPR1 shipped new developer APIs that never made it into AOSP. This is something they claim hasn’t happened since Android’s Honeycomb days.

Google’s API diff report backs this up. Comparing Android 17 to QPR1 shows one new package, android.hardware.hid, plus changes across sixteen others, including android.media, android.os, android.provider, android.telecom, and android.view.

GrapheneOS has ported its code to QPR1 before Google even released it, but still doesn’t have permission to ship that work. For now, the project is backporting Pixel firmware, kernel drivers, userspace drivers, and HALs from QPR1 onto Android 17 instead.

On top of all that, there’s a compliance issue that seems to be recurring.

Google was slow to comply with a GPL source request. GrapheneOS requested sources for a build (CD1A.260905.001.A1) on September 1, and access only came through more than two weeks later.

Why this is worrying

None of these three issues is catastrophic by itself. A three-month patch delay, a paused API rollout, a two-week wait on source code—each is the kind of thing that could pass as a one-off.

Taken together, however, they point to a recurring theme. Google is holding security fixes back from the wider Android ecosystem, withholding new APIs from AOSP for the first time in over a decade, and slow-walking GPL compliance it’s required to meet.

Don’t even get me started on what they are doing to the Android app ecosystem.

Google is on track to require every Android app developer, whether on the Play Store, F-Droid, or anywhere else, to register with them. Come 2027, that means handing over legal identification and signing key evidence before an app can run on any certified device.

Sideloading an unverified app following this would mean enabling developer settings, waiting through a mandatory 24-hour cooldown, and clicking past several warning screens (classic scare tactics, btw).

GrapheneOS is one of dozens of organizations that signed onto the Keep Android Open campaign opposing this, alongside F-Droid, the Electronic Frontier Foundation, and the Free Software Foundation.

If you ask me, this Big Tech company is doing what’s regrettably natural for it, clamping down open access to things so that its competition cannot benefit.

cross-posted from: https://piefed.world/c/tech/p/1417255/young-users-ditch-google-for-ai-with-unknown-consequences

cross-posted from: https://piefed.world/c/tech/p/1415456/ai-might-be-making-women-sound-bad-at-work

Today’s game is Myst. It was on sale for like 2$ so I picked it up. I was wanting the fancy modern version but ME was 2$ and the same experience. So I figured why not.

I’ve been wanting to play this for a hot second for a while. I used to have a disk for my iMac G3 I could play on. I was young though and had no understanding of what I was doing. So I wanted to give it an earnest try.

First thoughts? This game is creepy and claiming at the same time. Somehow it usually feels like I’m in this serene calm place (picture above not relevant to this part), but also it feels like there’s something there (picture above IS relevant to this part). Either behind me or around the corner and it’s going to get me. It’s an interesting feeling.

I love the graphics. This early kind of FMV is super charming to me in a way even though I didn’t grow up with it. I remember loving it when I was exploring it freely when I was little too. Pair that with the soundtrack and it’s a good time. My favorite so far has been the planetarium. I always loved space growing up and this somehow scratches that feeling.

I made it through the mechanical age before having to stop. I brought the blue page back with me so and that was rather fast so I don’t expect this to be super long of a game to play.

Tsuihou Sareta Tensei Juukishi wa Game Chishiki de Musou Suru, episode 13

Reminder: Please do not discuss plot points not yet seen or skipped in the show. Failing to follow the rules may result in a ban.

All discussions

This post was created by a bot. Message the mod team for feedback and comments. The original source code can be found on GitHub.