Antizionist Jews pretending a connection to Israel isn’t a core pillar of Judaism is like taking the meat out of a hamburger and insisting your handheld bread pile is in fact the genuine burger. Eat whatever you want, but you don’t get to redefine a classic for everyone else.
**v8.1.8 Important security upgrade**
We have learned that the SQL injection vulnerability fixed in v8.1.6 has been exploited at scale since at least May 18, 2026 and so before the v8.1.6 release.
We released a new version that remove all user token access gained before v8.1.6. We also explain the attack in the changelog and the countermeasures taken by this release.
**Please upgrade to v8.1.8 as soon as possible.**
After yesterday’s #Vernissage release, we’re not slowing down 😊 Today, version 1.5.0 of the iOS client is now available on the App Store.
This update introduces grouped notifications for selected notification types, along with several bug fixes and improvements.
Thank you for all your feedback, support, and help - we truly appreciate it! 🤩
https://apps.apple.com/pl/app/vernissage-photos/id6759335335
Week in Fediverse 2026-05-22
Servers
- Gush! v0.0.37
- Stegodon v1.8.5
- Iceshrimp.NET v2026.1.1-beta
- Iceshrimp v2026.5.1
- Hollo v0.9.0
- Mastodon v4.5.10
- PeerTube v8.1.6
- Sharkey v2025.4.7
- Hubzilla v11.2.1
- Friendica v2026.05
- Ktistec v3.3.9
- Smithereen v1.0.0
- Vernissage Server v1.38.0
- ActivityPub for WordPress v8.3.0
- Misskey v2026.5.4
- tootik v0.22.2
- NeoDB v0.14.4
- Open beta testing for Lemmy 1.0.0
- Trunk & Tidbits, April 2026
- XMPP/ActivityPub Bridge: Chat between XMPP and the Fediverse
- Cookifed: A free and federated recipes management app and cooking social network
Clients
- Nicolium v0.3.0
- Fedilab v3.40.1
- Aria v1.5.1
- Blorp v1.14.0
- Impressia v3.2.0
- Holos v1.6.0
Tools and Plugins
- Analytodon: Analytics for Mastodon
For developers
- Fedify v2.2.3
- BotKit v0.4.2
Protocol
- Basic Profile for Social API Servers
- FEP-baf5: Administrator Collection
Articles
- the may 2026 fedi software vulnerability
- Never Lose a Toot Again: Full-Text Search for Your Mastodon Feed
-----
#WeekInFediverse #Fediverse #ActivityPub
Previous edition: https://mitra.social/objects/019e2d21-c15d-7653-a6d5-f476dcc0559d
Please don't skip 🚨⁉️️
I haven't received donations for two days. The situation for me has become very difficult.🥺I can't provide basic needs. Medicine, water, food. I was infected with the virus and I'm very tired. I suffer from nausea and severe dizziness.😭Please don't leave me alone. Any donation from you will save me from this torment.💔
"He reportedly floated himself as a potential VP pick on the 2028 Democratic ticket to senior staff. Their reaction, per one staffer in the room: "Are you out of your mind? You don't do your job, you can't raise any money, and your entire party hates you."
Leaked Fetterman texts leave his own staff 'incredulous': 'Your entire party hates you' - Raw Story
'Quem tem medo do Kneecap?' Banda acusada de terrorismo vira fenômeno
https://www.uol.com.br/toca/noticias/2026/05/22/quem-tem-medo-do-kneecap-banda-acusada-de-terrorismo-vira-fenomeno.htm?utm_source=flipboard&utm_medium=activitypub
Posted into Música @m-sica-UOL
And that's how my son went through a gender transition before me. :P
Now for the politics part
Medical staff can get it wrong when a kid is cis. That they can get it wrong for other reasons isn't a surprise.
Not being able to fix mistakes made is never a good place to be. Even if that mistake was made 35 years ago and no one noticed in all that time.
Change is the only constant. Deal with it.
About Me
There is No Antimemetics Division
An antimeme is an idea with self-censoring properties; an idea which, by its intrinsic nature, discourages or prevents people from spreading it.
Antimemes are real. Think of any piece of information which you wouldn't share with anybody, like passwords, taboos and dirty secrets. Or any piece of information which would be difficult to share even if you tried: complex equations, very boring passages of text, large blocks of random numbers, and dreams...
But anomalous antimemes are another matter entirely. How do you contain something you can't record or remember? How do you fight a war against an enemy with effortless, perfect camouflage, when you can never even know that you're at war?
Welcome to the Antimemetics Division.
No, this is not your first day.
Friendship is Optimal
Hanna, the CEO of Hofvarpnir Studios, just won the contract to write the official My Little Pony MMO. Hanna has built an A.I. Princess Celestia and given her one basic drive: to satisfy everybody's values through friendship and ponies. Princess Celestia will satisfy your values through friendship and ponies, and it will be completely consensual.
My therapist's other advice was:
1. Log off any social media networks that are activating you.
2. Go outside, touch grass, BREATHE, etc. etc. Find something pleasant and fun to do.
Whatever happens, we need to make sure Labour is never, ever allowed to escape the reputational ruin and shame of being the party that imposed trans segregation on the UK. If this is a bathroom ban, it's *Labour's* bathroom ban, and we should never let them forget this. One post I saw pointed out that Labour is to the right of the *literal Vatican* on this
Trump ha fatto causa tramite il suo ministro della giustizia al ministero delle finanze per aver pubblicato in passato le sue dichiarazioni dei redditi, da cui traspariva che in pratica non pagava le tasse. Dopodiché c'è stato un patteggiamento per cui il fisco pagherà 1,7 miliardi a un fondo per i "perseguitati da Biden". Meraviglioso.
"Il presidente in questo processo era sia querelante che imputato, sia parte lesa che giudice autorizzato a timbrare il verdetto. «Effettivamente posso decidere io», aveva ammesso ad un certo punto con caratteristico candore."
https://ilmanifesto.it/giudice-e-imputato-trump-ruba-allerario-per-dare-ai-golpisti
@_elena @dillyd
#bloomScrolling is probably one of my favourite hashtags
TIL: The mediainfo command (apt install mediainfo) will show you the codecs used by the audio and video in a file. Very useful if you have a .webm and it doesn't play in Jellyfin - for me most of the time it's the lack of AV1 support in iOS which means I have to convert using a command like:
ffmpeg -i input.webm -c:v libx264 -crf 20 -preset medium -c:a copy output.mp4
Although file size went from 650MB to 2.5GB!
Abolitionist Intimacies
In Abolitionist Intimacies, El Jones examines the movement to abolish prisons through the Black feminist principles of care and collectivity. Understanding the history of prisons in Canada in their relationship to settler colonialism and anti-Black racism, Jones observes how practices of intimacy become imbued with state violence at carceral sites including prisons, policing and borders, as well as through purported care institutions such as hospitals and social work. The state also polices intimacy through mechanisms such as prison visits, strip searches and managing community contact with incarcerated people. Despite this, Jones argues, intimacy is integral to the ongoing struggles of prisoners for justice and liberation through the care work of building relationships and organizing with the people inside. Through characteristically fierce and personal prose and poetry, and motivated by a decade of prison justice work, Jones observes that abolition is not only a political movement to end prisons; it is also an intimate one deeply motivated by commitment and love.
For example, did you know that since Python has no cross-database way of specifying a prepared SQL statement, that it will take the comparatively much slower path of just re-uploading the same SQL string over and over again, if that string varies at all? And that it's *very* easy to trigger this failure mode with SQLAlchemy because there's nothing to suggest to you that you should not be dropping Python constant objects into the middle of your expressions?
Also, did you know that manually constructing SQLAlchemy queries in the body of functions consumes *substantially* more CPU and memory resources in your application than pre-computing them at import time? And that SQLAlchemy has a bindparam() object specifically to facilitate this much more efficient mode of operation?
Yá'át'ééh! We're tryna fundraise so we can travel this summer to bookfairs etc. without further fucking up rent/food at home (it's already fucked up). Worst comes to worst, we'll just cancel plans. Y'all know the struggle. We ain't got any of that ngo, bezos money or connects
since the guardrail subagent contexts generally don't get fed back into the main agent context (the whole point is to cut token costs in the main high-end agent context), and the subagent contexts are transient, there's nothing capturing that repeated stream of redirects and pattern matching "this looks like an infinite redirect". in a lot of deployment approaches this would run forever until someone on the dev team killed the loop. do it 500 times and you've got an expensive DoS.
anyway the takeaway here is that hosted LLMs are a total playground for SSRF attacks. any skill script that does a web request directly from the server is prone to it, and since the use-cases generally demand accepting arbitrary URLs it's exceedingly tricky to build robust protection in, especially as not everything they need to block access to is in an RFC1918 or bogon address range, and robust preflight DNS checks that are TOCTOU resistant aren't simple to implement.