drspod

joined 4 years ago
sorted by: new top controversial old
pingwing: v0.0.13: A Lisp-powered notification nexus (Guile Scheme) - Programatically send e-mail with HTML (SXML) templates, (and more things coming soon) in c/foss@beehaw.org
[–] drspod@lemmy.ml 3 points 1 year ago (1 children)

It appears to spawn a curl process to send the email by constructing a string using user-supplied values. I don't know what checks Guile Scheme does on system calls, but I would guess you are vulnerable to command injection here. That's not ideal for something you want to deploy as a micro-service.

libcurl has bindings for Guile, you should use those instead: https://github.com/spk121/guile-curl

AI scammers are killing all my hobbies in c/fuck_ai@lemmy.world
[–] drspod@lemmy.ml 46 points 1 year ago (2 children)

You can install this blacklist with either uBlockOrigin or uBlacklist. It's still being updated:

https://github.com/laylavish/uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist

A huge blocklist of manually curated sites (1000+) that contain AI generated content, for the purposes of cleaning image search engines (Google Search, DuckDuckGo, and Bing) with uBlock Origin or uBlacklist.

Also works on mobile (iOS, iPadOS, Android) via uBlacklist, as well as pihole/adguard (via Hosts file)

Our new AI strategy puts Wikipedia's humans first – Wikimedia Foundation in c/technology@lemmy.zip
[–] drspod@lemmy.ml 3 points 1 year ago

This marks the end of the beginning of the end.

« Pas d’écrans avant 6 ans », alertent plusieurs sociétés savantes in c/france@jlai.lu
[–] drspod@lemmy.ml 1 points 1 year ago (2 children)

paywall :(

Sycamore Gap tree destroyed in 'moronic mission', court told in c/unitedkingdom@feddit.uk
[–] drspod@lemmy.ml 36 points 1 year ago* (last edited 1 year ago) (5 children)
  • They drove there in their own vehicle
  • They were seen on CCTV cameras going there and back
  • They turned off their phones around the time when the tree was cut down
  • They filmed it being cut down
  • They took a photo of a piece of the tree in the back of their car
  • They discussed it over text messages and voice notes as the media coverage picked up
  • They pled not guilty 🤣
Not Real Artists, Not Real Work in c/fuck_ai@lemmy.world
[–] drspod@lemmy.ml 7 points 1 year ago

It ain't made with mematic

honest work

Kali Linux warns of update failures after losing repo signing key in c/linux@lemmy.zip
[–] drspod@lemmy.ml 9 points 1 year ago

Q. I don’t trust this new key! Are you really Kali Linux?

A. The new key is signed by some developers from the Kali team, and the signatures are available on the Ubuntu OpenPGP keyserver. You can check it out at https://keyserver.ubuntu.com/pks/lookup?search=827C8569F2518CC677FECA1AED65462EC8D5E4C5&fingerprint=on&op=index.

I hope those developers have verified in person that the key custodian is not under duress!

Why AI is in Everything Now in c/fuck_ai@lemmy.world
[–] drspod@lemmy.ml 19 points 1 year ago (1 children)

That pretty much sums it up, well said.

I take issue, though, with the repeated misspelling of "vulture capitalist."

Exploring Ethical Social Media Platforms in c/fediverse@lemmy.world
[–] drspod@lemmy.ml 15 points 1 year ago (5 children)

Who is "we"?

peertube recomendation algo alpha build in c/fediverse@lemmy.world
[–] drspod@lemmy.ml 2 points 1 year ago (1 children)

Please tell me you're not vibe coding this project.

What good did the court ruling in the EU for installing Apps from alternative sources actually do? in c/apple@lemmy.ml
[–] drspod@lemmy.ml 1 points 1 year ago

I thought the fine was for not allowing apps to tell users about alternate payment systems. Nothing to do with sideloading apps. Unless there was a second judgement with a fine recently?

[Solved. Don't get why solution works] Unexpected large number of external interrupts except when logic analyzer is connected to pin. in c/askelectronics@discuss.tchncs.de
18
Visiting The Mining Spaceship Red Dwarf - Props & Costumes From The BBC Series (www.youtube.com)
 

Amazing collection of props and costumes!

113
Malicious VSCode extensions infect Windows with cryptominers (www.bleepingcomputer.com)
submitted 1 year ago* (last edited 1 year ago) by drspod@lemmy.ml to c/programming@programming.dev
30 comments fedilink
 

Edit 2025-04-09 16:42Z - article was updated with a tenth package (Prettier - Code)

A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero.

ExtensionTotal researcher Yuval Ronen has uncovered ten VSCode extensions published on Microsoft's portal on April 4, 2025.

The package names are:

  1. Prettier - Code for VSCode (by prettier) - 486K installs
  2. Discord Rich Presence for VS Code (by Mark H) - 189K installs
  3. Rojo – Roblox Studio Sync (by evaera) - 117K installs
  4. Solidity Compiler (by VSCode Developer) - 1.3K installs
  5. Claude AI (by Mark H)
  6. Golang Compiler (by Mark H)
  7. ChatGPT Agent for VSCode (by Mark H)
  8. HTML Obfuscator (by Mark H)
  9. Python Obfuscator for VSCode (by Mark H)
  10. Rust Compiler for VSCode (by Mark H)
13
Malicious VSCode extensions infect Windows with cryptominers (www.bleepingcomputer.com)
submitted 1 year ago* (last edited 1 year ago) by drspod@lemmy.ml to c/cybersecurity@sh.itjust.works
2 comments fedilink
 

Edit 2025-04-09 16:42Z - article was updated with a tenth package (Prettier - Code)

A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero.

ExtensionTotal researcher Yuval Ronen has uncovered ten VSCode extensions published on Microsoft's portal on April 4, 2025.

The package names are:

  1. Prettier - Code for VSCode (by prettier) - 486K installs
  2. Discord Rich Presence for VS Code (by Mark H) - 189K installs
  3. Rojo – Roblox Studio Sync (by evaera) - 117K installs
  4. Solidity Compiler (by VSCode Developer) - 1.3K installs
  5. Claude AI (by Mark H)
  6. Golang Compiler (by Mark H)
  7. ChatGPT Agent for VSCode (by Mark H)
  8. HTML Obfuscator (by Mark H)
  9. Python Obfuscator for VSCode (by Mark H)
  10. Rust Compiler for VSCode (by Mark H)
31
Suggestions for music streaming services (lemmy.ml)
 

I would like to switch away from Apple Music, and Spotify despite being a European company, is not a desirable option for me. What music streaming services would you recommend?

I managed to download a text-only list of the albums in my Apple Music library, so if there's a simple library import option then that would also be very helpful.

2
[meta] so are we doing a raffle or a sweepstakes? (lemmy.ml)
 

Actually I'm not sure what the difference is between a raffle and a sweepstakes. Is it like a tombola?

I'm not trying to start an argument it's just, ngl i could really use some of those empty cans rn

62
R(ul)esign (lemmy.ml)
 

AMAB

37
rule set in a meat garden (lemmy.ml)
 
41
This "Basic" Robot Solves REAL Problems (without AI) (www.youtube.com)
submitted 1 year ago* (last edited 1 year ago) by drspod@lemmy.ml to c/technology@lemmy.world
10 comments fedilink
 

This is a moving story about a cafe in Japan that allows house-bound people to join in with society and find a purpose, using remotely operated robotic avatars.

9
Absolute Linux has reached the end – where next? (www.theregister.com)
 

I had never heard of Absolute Linux, but the rest of this article has some interesting musings on lightweight distros that I thought would make for good discussion here.

123
Bad Apple But It’s 6,500 Regex Searches In Vim (hackaday.com)
 

If you want to go straight to the original write-up, it's here: https://eieio.games/blog/bad-apple-with-regex-in-vim/

16
[video] Atari XE Computer to Laptop Conversion (2m22s) (www.youtube.com)
 

Build log: https://www.southernamis.com/forum/general-discussions/xe-book-development

3
Füxa - Photon (www.youtube.com)
 

From the Free Your Soul EP in 1995.

view more: next ›