Chris Charabaruk @coldacid@podcastindex.social

@dave I wonder if valueslugs.txt would be better off replaced by a TSV or CSV since both method and recipient type values are dependent on the value type. Maybe two files (one for value type -> value method mapping, one for value type -> recipient type mapping).

@adam @dave @jamescridland @SirSpencer I'm registering value4value.rocks for this purpose, let's see what we can do

There needs to be a #value4value "marketing" website that people can be pointed to when we promote the V4V model. It's something that needs to be accessible to people on both sides of the equation, and state things nice and simple rather than diving into the weeds from the get-go. I could certainly set up and host such a site, if necessary, but I'm far from the right person to do the design or the content for it.

@adam @dave @jamescridland @SirSpencer

Softaculous and things like it are a total pain in the ass and only make life harder on the people who actually develop the software that these "services" offer to users.

Note that Ars is being histrionic in the article (LD_PRELOAD attacks aren't really that stealthy, and tend to require someone already doing dumb/bad things while root), but it's another sign that providing the ability to hook into the dynamic linker/loader via a FUCKING ENVIRONMENT VARIABLE is a really dumb idea.

LD_PRELOAD considered harmful.

https://arstechnica.com/information-technology/2022/06/novel-techniques-in-never-before-seen-linux-backdoor-make-it-ultra-stealthy/

#linux #security #malware

Podcast Generator 3.2.7 has been released, providing security fixes for one of our dependencies. If you make use of the Podcast Index or WebSub integration features of Podcast Generator, you are strongly encouraged to upgrade.

https://github.com/PodcastGenerator/PodcastGenerator/releases/tag/v3.2.7

#PodcastGenerator #securityupdate

@merryoscar could you look into why sends from Fountain to my node 4coinsmorejoins / 02239ca479d09faebb126ac666626f377e2e285551547e8a63a8735c021e9f024d seem to fail as often as not? There doesn't seem to be any problem for sends to my co-host's node, but even today multiple attempts by a listener to boost our show failed in the send to me.

@dave would you happen to know the person behind the podcastindex/podcastindex-php Composer package? It hasn't been touched in two years, and I wonder if perhaps it should be taken over by the PI organization in GitHub.

Podcast Generator 3.2.6 is now released! This includes a security update for one of our dependencies, and fixes a post-setup process crash. If you're using Podcast Generator, you are strongly advised to upgrade, especially if you have enabled Podcast Index integration.

https://github.com/PodcastGenerator/PodcastGenerator/releases/tag/v3.2.6

#PodcastGenerator #security

Podcast Generator 3.2.5 is now available, with a few bug fixes and complete translations for Farsi and traditional Chinese.

https://github.com/PodcastGenerator/PodcastGenerator/releases/tag/v3.2.5

#PodcastGenerator

Podcast Generator 3.2.4 is now available, containing the updated German translation (thanks @Fips!) and including setup and upgrade path fixes. If you use Podcast Generator to run your podcast's feed and website, pick it up now!

https://github.com/PodcastGenerator/PodcastGenerator/releases/tag/v3.2.4

#PodcastGenerator

Is there anything newer than 2013 about whether or not it is good to use the __get() and __set() magic functions in PHP classes? Getting real damn tired of stale Stack Overflow links and the stupid clone sites that just copy everything verbatim from it