Draw an iceberg and see how it will float.
https://joshdata.me/iceberger.html
https://joshdata.me/iceberger.html
Forwarded from Music Bot
我想吃脆薯饼
大钉子欸嘿嘿
WordPress Core PHP Template Path Traversal
Unauthenticated path traversal in page-template resolution leading to conditional RCE
CVE-2026-87902
Fixed in:
- 7.1.2
- 7.0.6
- 6.9.9
- 6.8.10
- 6.7.9
- 6.6.9
- 6.5.12
- 6.4.12
- 6.3.12
- 6.2.13
- 6.1.14
- 6.0.16
- 5.9.18
- 5.8.17
- 5.7.19
- 5.6.21
- 5.5.22
- 5.4.23
- 5.3.25
- 5.2.28
- 5.1.26
- 5.0.29
- 4.9.33
- 4.8.32
- 4.7.37
https://lwn.net/Articles/1096195/
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp
Unauthenticated path traversal in page-template resolution leading to conditional RCE
CVE-2026-87902
Fixed in:
- 7.1.2
- 7.0.6
- 6.9.9
- 6.8.10
- 6.7.9
- 6.6.9
- 6.5.12
- 6.4.12
- 6.3.12
- 6.2.13
- 6.1.14
- 6.0.16
- 5.9.18
- 5.8.17
- 5.7.19
- 5.6.21
- 5.5.22
- 5.4.23
- 5.3.25
- 5.2.28
- 5.1.26
- 5.0.29
- 4.9.33
- 4.8.32
- 4.7.37
https://lwn.net/Articles/1096195/
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp
LWN.net
Critical WordPress RCE vulnerability announced
A critical vulnerability has been discovered in WordPress's get_page_template() function for pa [...]
GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/
GitLab Docs
GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 | GitLab Docs
Learn more about GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE).
Forwarded from Hacker News 摘要
Telegraph
五角大楼称过度依赖 AI 导致导弹击中伊朗学校
原标题：Pentagon says overreliance on AI contributed to missile strike on Iran school 彭博社详细调查并还原了美军导弹袭击伊朗米纳卜（Minab）一所小学并造成重大伤亡的事件，披露了美军内部“杀伤链”（Kill Chain）中出现的一系列人为与技术失误。 事件背景与伤亡情况 2026年2月28日，美军发射的两枚战斧巡航导弹击中了位于伊朗南部米纳卜的“泰耶伯树”（Shajarah Tayyebeh）小学及其周边区域。该袭击导致超过…
五角大楼称过度依赖 AI 导致导弹击中伊朗学校
原文：https://www.bloomberg.com/graphics/2026-iran-school-attack/
阅读时间：10 分钟
分数：896 🔥🔥
原文：https://www.bloomberg.com/graphics/2026-iran-school-attack/
阅读时间：10 分钟
分数：896 🔥🔥
Forwarded from DocOfCard Channel (矮油我去少年你这是喜脉️️)
TenPayGo 官宣正式发布
#TenpayGo #WeChat
✅ • iOS • Android
• 微信团队 出品，面向来华境外游客，支持“外卡内绑”“外包内用”和 Apple Pay 等
• 即将支持深圳通
👉🏿 @DocOfCard_channel
#TenpayGo #WeChat
✅ • iOS • Android
• 微信团队 出品，面向来华境外游客，支持“外卡内绑”“外包内用”和 Apple Pay 等
• 即将支持深圳通
👉🏿 @DocOfCard_channel
👍1👎1
Forwarded from YCombinator News
F-Droid 2.0
338 points by daveoc64 1 day ago | 91 comments
https://news.ycombinator.com/item?id=49831968
338 points by daveoc64 1 day ago | 91 comments
https://news.ycombinator.com/item?id=49831968
Forwarded from 竹新社
刘欢9月25日上午9时52分在上海病逝，享年63岁。
（对外经贸大学）
（对外经贸大学）
news.uibe.edu.cn
讣 告 | 沉痛悼念我国著名音乐家刘欢老师-对外经济贸易大学新闻网
我们沉痛宣告：我校退休教师、全国家喻户晓的音乐家刘欢，于2026年9月25日上午9时52分在上海不幸病逝，享年63岁。刘欢，1963年8月出生于天津，1991年7月来校工作，担任艺术教研室教师、副教授，2023年9月退休。从教三十余载，他深耕音乐美育讲台，曾多次获得学校教学表彰。2011年受聘为第三届校董会董事。刘欢老师主讲的《西方音乐史》是我校美育经典课程，课堂座无虚席，深受学生喜爱，影响了一代代贸大学子。他为我校校歌《UIBE之歌》作曲，以激扬深情的旋律承载校训精神，每每在...
😢1
Forwarded from encmasuta
频道编辑发现，中国内地部分银行发行的万事达Apple Pay设备卡可能存在严重安全隐患。
因未知原因，该部分设备卡允许通过三要素进行支付，卡号采用顺序发卡，且不校验CVV，同时可能并无3DS等额外校验措施，因此仅需通过稍加猜测或复用其他类似卡有效期即可实现盗刷。且除中行外亦有他行被盗刷的报告。
频道编辑建议您将所有已加入Apple Pay的中国内地银行发行的万事达信用卡/借记卡全部解绑，有必要时建议关闭所有境外支付功能。
因未知原因，该部分设备卡允许通过三要素进行支付，卡号采用顺序发卡，且不校验CVV，同时可能并无3DS等额外校验措施，因此仅需通过稍加猜测或复用其他类似卡有效期即可实现盗刷。且除中行外亦有他行被盗刷的报告。
频道编辑建议您将所有已加入Apple Pay的中国内地银行发行的万事达信用卡/借记卡全部解绑，有必要时建议关闭所有境外支付功能。
🤯1
crt . sh alternatives
https://community.letsencrypt.org/t/certificate-transparency-search-resources/203368
https://community.letsencrypt.org/t/certificate-transparency-search-resources/203368
Let's Encrypt Community Support
Certificate Transparency Search Resources
(This post is a wiki, other community members are welcome to edit and improve it. It's quite likely that I've gotten something wrong, or that offerings have changed.) Certificate Transparency ("CT") is a system that Certification Authorities (CAs) need…
Forwarded from 层叠 - The Cascading
因作者无法忍受 Google Play 行为，软件 Conversations 在 Play 上不再收费。
- Conversations 是一款支持 XMPP/Jabber 平台的聊天软件。
- 虽然开源，但此软件之前在 Google Play 收费提供。之后用户也可以通过 F-Droid 免费下载。
- Google Play 会对软件销售收入抽成 15%，但作者对其审批更新的效率及随意下架其应用的行为不满。
- 作者现在不再依赖 Google Play 收入维生，因此在 Play 上把软件切换到免费。
gultsch.de/~
seealso: HackerNews:49855315
#Conversations #GooglePlay
- Conversations 是一款支持 XMPP/Jabber 平台的聊天软件。
- 虽然开源，但此软件之前在 Google Play 收费提供。之后用户也可以通过 F-Droid 免费下载。
- Google Play 会对软件销售收入抽成 15%，但作者对其审批更新的效率及随意下架其应用的行为不满。
- 作者现在不再依赖 Google Play 收入维生，因此在 Play 上把软件切换到免费。
gultsch.de/~
seealso: HackerNews:49855315
#Conversations #GooglePlay
Daniel Gultsch
Breaking Up with Google Play: Why Conversations Is Now Free
Conversations, my federated instant messaging client for Android, started out as many traditional open-source projects do: as an attempt to scratch my own itch. Development started in January 2014 in my student dormitory, and within weeks I started dogfooding…
Forwarded from Daniel Watson
An update from BGP.Exchange
We are still working to recover control of the bgp.exchange domain. We cannot put our services and plans on hold while that process continues, so we have begun rebranding as ixFabric.
You may start seeing the ixFabric name across our website, application and communications. Please don’t be alarmed: this is the new name for BGP.Exchange.
Once we regain control of bgp.exchange, we intend to redirect it to ixFabric. Until we explicitly announce that we have restored control, do not trust the bgp.exchange website, its redirects, or any communications claiming to come from a bgp.exchange email address. For now, use ixfabric.net to reach us. Further information regarding BGP.Exchange will be kept updated on https://bgpexchange.com
We are still working to recover control of the bgp.exchange domain. We cannot put our services and plans on hold while that process continues, so we have begun rebranding as ixFabric.
You may start seeing the ixFabric name across our website, application and communications. Please don’t be alarmed: this is the new name for BGP.Exchange.
Once we regain control of bgp.exchange, we intend to redirect it to ixFabric. Until we explicitly announce that we have restored control, do not trust the bgp.exchange website, its redirects, or any communications claiming to come from a bgp.exchange email address. For now, use ixfabric.net to reach us. Further information regarding BGP.Exchange will be kept updated on https://bgpexchange.com
❤2👍1