psa

#PSA
#Mastodon, nor the #Fediverse in general will never ask you to "verify" with payment details, especially not from a non-moderator account. If you get a message asking you to verify, it is a #Scam #Bot, and you should block and #report it to #moderation.

We are currently getting a wave of #spam from bots like this. Again, do not even click the link, just block and report.

- TechHub Moderation

ALT

ALT

(Because no one reads the full post, apparently: read the ETA at the end of the post)

#PSA: if you have a Steam account, you may wanna look into changing your password ASAP

Please boost and share so people can protect themselves as best as they can.

#Steam #DataBreach

ETA: and apparently it's all bullshit (read multiple comments below this)

ALT

#PSA: I deleted all the #Meta/ #Facebook apps. Have you tried #Signal? It is co-founded and initially funded by Brian Acton, a co-founder of #WhatsApp. [1] Signal is better than WhatsApp in every possible way. @signalapp also has impermanent usernames for when you don't want to give out your number. Does audio/video/group chats as well.
https://signal.org

Note 1: https://en.m.wikipedia.org/wiki/Brian_Acton

#PSA: stardict-gtk 默认会将用户选中的文本以非 HTTPS 形式发送至有道/海词。

- stardict（星际译王）是一款历史悠久的跨平台词典软件。
- 词典软件的一个常见功能是「划词翻译」，即对用户选中的文本自动进行翻译。
- stardict-gtk 默认启用了此功能，因此会发送用户选中文本到有道/海词词典，但通过未加密的 HTTP 协议。
- 在 Wayland 下，stardict 默认无法获取其它应用的选中文本，因此此功能无法使用，也没有上述安全问题。
- 这个问题早在 2015 年就被报告 [1] ，但一直尚未被修复。

CVE: CVE-2025-55014
CVSS: 4.7 (MITRE)

lwn.net/~

1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806960

#stardict

Telegram 原文