GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 00:05:44 JST prettygood prettygood
    CLI tool compromised by Javascript. I shouldn't be surprised.

    Here let's start more shit: vibe-coded KeepassXC not looking so bad now eh?

    RT: https://infosec.exchange/users/feross/statuses/116454480932354343
    In conversation about 3 months ago from socially.drinkingatmy.computer permalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Feross (@feross@infosec.exchange)
      from Feross
      🚨 Bitwarden CLI compromised in active supply chain attack. @bitwarden/cli version 2026.4.0 contains malicious code in bw1.js, published after attackers compromised a GitHub Action in Bitwarden's CI/CD pipeline. This is part of the broader Checkmarx supply chain campaign that has been hitting multiple repositories through the same GitHub Actions vector. Bitwarden is the latest confirmed target. Socket's research team discovered the compromise. We're conducting a full technical analysis now and will publish IOCs, affected version details, and remediation guidance. If you use Bitwarden CLI: • Review your CI logs for unexpected behavior in recent builds • Rotate any secrets that may have been exposed to the compromised workflow • Pin to a known-good version until this is resolved Developing story... See how the attack worked → https://socket.dev/blog/bitwarden-cli-compromised
    • Embed this notice
      david (dps910@social.freedombits.org)'s status on Friday, 24-Apr-2026 00:09:10 JST david david
      in reply to
      @prettygood I like KeePass over bitwarden cause my passwords are on my computers, not on some randos cloud server

      ik u can self-host bitwarden. I aint wanna do that
      In conversation about 3 months ago permalink
      T man :sex: :puffgiga: :puffpowerroll: and prettygood like this.
    • Embed this notice
      david (dps910@social.freedombits.org)'s status on Friday, 24-Apr-2026 00:09:34 JST david david
      in reply to
      • david
      @prettygood the only good thing abt bitwarden is basically no risk of ever losing ur passwords unless bitwarden shuts down for some reason, or u forget ur bitwarden passwrd
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      fiat volvntas tva (scathach@stereophonic.space)'s status on Friday, 24-Apr-2026 00:10:12 JST fiat volvntas tva fiat volvntas tva
      in reply to
      @prettygood pass users stay winning
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 00:10:12 JST prettygood prettygood
      in reply to
      • david

      @dps910 cloud service? Shutting down? That never happens!

      In conversation about 3 months ago permalink
    • Embed this notice
      dead_man@dill.burggit.moe's status on Friday, 24-Apr-2026 00:11:41 JST dead_man dead_man
      in reply to
      • david

      @dps910@social.freedombits.org @prettygood@socially.drinkingatmy.computer you can self host bitwarden using docker containers

      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 00:13:00 JST prettygood prettygood
      in reply to
      • david
      @dps910 I like keepass cause I can just sync the encrypted-at-rest database to every relevant machine with syncthing. No cloud, no git, just a file and software to read it.
      In conversation about 3 months ago permalink
    • Embed this notice
      prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 00:29:05 JST prettygood prettygood
      in reply to
      • david
      @dps910 I do not desire to know what pissmail is
      In conversation about 3 months ago permalink
    • Embed this notice
      david (dps910@social.freedombits.org)'s status on Friday, 24-Apr-2026 00:29:07 JST david david
      in reply to
      @prettygood pissmail went down recently. rip
      In conversation about 3 months ago permalink
    • Embed this notice
      7666 (7666@comp.lain.la)'s status on Friday, 24-Apr-2026 00:30:26 JST 7666 7666
      in reply to
      @prettygood can't get supply chain attacked if you just reimplement everything locally :brain4:
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Friday, 24-Apr-2026 01:26:15 JST 翠星石 翠星石
      in reply to
      • david
      @prettygood @dps910 Pissmail went proprietary - thus not much of value was lost.
      In conversation about 3 months ago permalink

      Attachments


      1. https://media.freesoftwareextremist.com/media/b6/c6/8a/b6c68a1edb694838f53acd7010ed6b8fe9ebfeac9bbb7bdcd428fc36f373486d.png
      prettygood likes this.
    • Embed this notice
      prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 03:47:56 JST prettygood prettygood
      in reply to
      • 翠星石
      • david
      @Suiseiseki @dps910 things I wish I didn't know about.
      In conversation about 3 months ago permalink
    • Embed this notice
      Poppy (Back from tha dead) :neofox_flag_trans: (radmin@limepeeps.perchinup.top)'s status on Friday, 24-Apr-2026 05:34:54 JST Poppy (Back from tha dead) :neofox_flag_trans: Poppy (Back from tha dead) :neofox_flag_trans:
      in reply to
      • 翠星石
      • david

      @Suiseiseki@freesoftwareextremist.com @prettygood@socially.drinkingatmy.computer @dps910@social.freedombits.org "I have always cooperated with valid law enforcement requests in the past"
      "My apartment got raided"Aww, they're finding out you can't be nice to bad people, especially at the expense of better people :fox_aww:

      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      LisPi (lispi314@udongein.xyz)'s status on Friday, 24-Apr-2026 13:10:03 JST LisPi LisPi
      in reply to
      • 翠星石
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david
      @radmin @Suiseiseki @prettygood @dps910 Cooperating or collaborating with authoritarians, being one of the "good ones", doesn't work.

      Anyone with basic skill at pattern recognition would've noticed it across the decades.
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 13:10:24 JST prettygood prettygood
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david
      @lispi314 @Suiseiseki @radmin @dps910 since its officially Shut The Fuck Up Friday I'm posting this.
      In conversation about 3 months ago permalink

      Attachments


      ✙ dcc :pedomustdie: :phear_slackware: likes this.
    • Embed this notice
      Scarlett (scarlett@clew.lol)'s status on Friday, 24-Apr-2026 13:15:10 JST Scarlett Scarlett
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david
      @prettygood @Suiseiseki @radmin @dps910 @lispi314 Never take a breathalyzer, either. Sure, they'll suspend your license, but they will anyway, so stfu.
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      prettygood (prettygood@socially.drinkingatmy.computer)'s status on Friday, 24-Apr-2026 13:16:58 JST prettygood prettygood
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • Scarlett
      • david
      @Scarlett @Suiseiseki @radmin @dps910 @lispi314 I do my damnedest to keep my interactions with Jonny Law to an absolute minimum, so I don't drive drunk, but even stone sober I would decline anyway. Go hassle some meth dealer, I'm not your huckleberry.
      In conversation about 3 months ago permalink
    • Embed this notice
      PodunkPotato (podunkpotato@nicecrew.digital)'s status on Friday, 24-Apr-2026 13:20:04 JST PodunkPotato PodunkPotato
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • Scarlett
      • david
      That experience talking, Scarlett?
      In conversation about 3 months ago permalink
    • Embed this notice
      Scarlett (scarlett@clew.lol)'s status on Friday, 24-Apr-2026 13:20:04 JST Scarlett Scarlett
      in reply to
      • 翠星石
      • PodunkPotato
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david
      @PodunkPotato @Suiseiseki @radmin @dps910 @prettygood @lispi314 I had a lawyer boyfriend, so I knew that when I got pulled over, to STFU. Wasn't prosecuted, just paid a fine. Breathalyzers are proof. Nein until death.
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      Scarlett (scarlett@clew.lol)'s status on Friday, 24-Apr-2026 13:21:25 JST Scarlett Scarlett
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david
      @prettygood @Suiseiseki @radmin @dps910 @lispi314 It's easier for le to target drunks instead of meth heads or niggers. They'll lie in wait in the club parking lots & wait for some drunk to stagger out. Easy-peasy.
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      T man :sex: :puffgiga: :puffpowerroll: (theorytoe@ak.kyaruc.moe)'s status on Friday, 24-Apr-2026 14:43:16 JST T man :sex: :puffgiga: :puffpowerroll: T man :sex: :puffgiga: :puffpowerroll:
      in reply to
      • david
      @dps910 @prettygood yeah you can with vaultwarden its P nice
      In conversation about 3 months ago permalink
    • Embed this notice
      sapphire (sapphire@shortstacksran.ch)'s status on Friday, 24-Apr-2026 21:14:36 JST sapphire sapphire
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • Tiberius J. Nougat
      • david
      @lord_nougat @Suiseiseki @radmin @dps910 @prettygood @lispi314 actually from the moment they detain you miranda rights apply and if they get anything out of you between detention and the reading and acknowledgement of Miranda rights you can pretty easily get it thrown out, courts have been historically very good about it, that's why Terry stops and the Kansas two step etc have been so important to the law enforcement playbook
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      Tiberius J. Nougat (lord_nougat@nicecrew.digital)'s status on Friday, 24-Apr-2026 21:14:37 JST Tiberius J. Nougat Tiberius J. Nougat
      in reply to
      • 翠星石
      • sapphire
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david

      They're not legally obliged to tel you squat. They get to do whatever the hell they want with little recourse.

      But you're spot on otherwise.

      In conversation about 3 months ago permalink
    • Embed this notice
      sapphire (sapphire@shortstacksran.ch)'s status on Friday, 24-Apr-2026 21:14:38 JST sapphire sapphire
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david
      @prettygood @Suiseiseki @radmin @dps910 @lispi314 you have a right to remain silent

      Anything you say will be used against you in a court of law

      This is all you need to know if you are detained and it’s so important they’re legally required to say it to you if they detain and American policing has spent the last 60 years expanding their authority outside of a detention so they can avoid telling you this for as long as possible because if you shut the fuck up there’s almost zero percent chance they can convict without video of you committing the crime
      In conversation about 3 months ago permalink
    • Embed this notice
      sapphire (sapphire@shortstacksran.ch)'s status on Friday, 24-Apr-2026 21:39:03 JST sapphire sapphire
      in reply to
      • 翠星石
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • Tiberius J. Nougat
      • david
      @lord_nougat @Suiseiseki @radmin @dps910 @prettygood @lispi314 my only concern with it is it doesn’t take a conviction or really even a charge to ruin someone’s life these days and pissing off the pigs is a great way to make an enemy
      In conversation about 3 months ago permalink
      prettygood likes this.
    • Embed this notice
      Tiberius J. Nougat (lord_nougat@nicecrew.digital)'s status on Friday, 24-Apr-2026 21:39:04 JST Tiberius J. Nougat Tiberius J. Nougat
      in reply to
      • 翠星石
      • sapphire
      • LisPi
      • Poppy (Back from tha dead) :neofox_flag_trans:
      • david

      Yes, all true. And as you say it is of utmost importance to be mindful of this as they can forget to mention it.

      In conversation about 3 months ago permalink
    • Embed this notice
      zer0unplanned (zer0unplanned@friendica.rogueproject.org)'s status on Friday, 24-Apr-2026 21:45:18 JST zer0unplanned zer0unplanned
      in reply to
      @prettygood I just wonder who uses BitWarden in CLI?
      In conversation about 3 months ago permalink
      prettygood likes this.

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.