2026-04-10T01:05:07Z https://njump.me hanno https://njump.me/npub1syue7pmxnqdduqh2ydqwavs0vx056jnc5zxmlg6lxecrl9zdtxfq283cq9 https://files.mastodon.social/accounts/avatars/000/035/017/original/638f75eba54df0e7.jpg https://files.mastodon.social/accounts/avatars/000/035/017/original/638f75eba54df0e7.jpg https://njump.me/nevent1qqsfcl7r7ky6wxv3qf75g6mr8zj6ngn96jg24y4tkzfu66wlrgwlccszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyxualrp In reply to <a href='/nevent1qqszym8mujeqeyuga7q66l67jhzqmjhhs3gqczmtucm68a3f2vjnaqqdnchuh'>nevent1q…chuh</a><br/>_________________________<br/><br/>FWIW: I don&#39;t have a big conclusion here, I&#39;m just sharing random thoughts and observations. /end thread 2026-03-27T09:05:19Z https://njump.me/nevent1qqszym8mujeqeyuga7q66l67jhzqmjhhs3gqczmtucm68a3f2vjnaqqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyv334qh In reply to <a href='/nevent1qqsdqgtjr4e34zmmcg3xxapved0uz4aj84vuq52shy65p9ccjp2343gxtfrn8'>nevent1q…frn8</a><br/>_________________________<br/><br/>But that wasn&#39;t an isolated development either. It&#39;s clearly showing up everywhere. I&#39;m running out of reasons not to think that AI tools got really good at finding security vulnerabilities.<br/><br/>Obvious caveat: None of that changes that there are plenty of good reasons to be very worried about the whole AI thing. 2026-03-27T09:02:26Z https://njump.me/nevent1qqswveqdv78h2qmy5ya8sl3hmwqfwr6av9yk43lk8xn393qnjru208czyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veynyhvy4 AI, a few thoughts, observations about AI &amp; security vulns.<br/>My standard line about AI is &#34;there&#39;s a lot I&#39;m uncertain about&#34;. But let&#39;s be clear, there&#39;s a lot I don&#39;t like &amp; I&#39;m probably biased towards the &#34;here&#39;s how spectacularly AI failed once again&#34; news (of which there are plenty) or at least the &#34;it&#39;s not as impressive as it may look&#34;.<br/>Yet, I don&#39;t want to close my eyes if I see things that clearly don&#39;t fit my biases. And I know a thing or two about security vulnerabilities.🧵 2026-03-27T08:52:14Z https://njump.me/nevent1qqs2qhycpj0quqrzzzf8vgagwtc3s5fa4xz2vlq3qeegnrcewxtxguszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyl6nj3g In reply to <a href='/nevent1qqsy6ugaua6a96q0dp7xzavzqsp9nsxl86v77ea8tahr3chqa7hw3gs60cpef'>nevent1q…cpef</a><br/>_________________________<br/><br/>In der Frage steckt schon ein Mißverständnis: es sind keine gigantischen Flächen.<br/>Und nein, der CO2-Effekt von Aufforstung auf diesen vergeichsweise kleinen Flächen hätte keinen großen Effekt. (Etwas anders sieht das bei Bioenergie aus, wo tatsächlich sehr große Flächen beansprucht werden.) 2026-01-30T14:57:15Z https://njump.me/nevent1qqs9epd5w2lk867g26qe9dzkver36k328tm5erxnxwtl8xajthdmdrqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veynqtwhm Hallo <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1prv43977f9e49954v2cqs600xcqquuzcklxa7t39q2v5f36yymkqfp5px6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>BSI</span> (<span class="italic">npub1prv…5px6</span>)</a></span> ihr habt da ja jetzt ein Portal mit dem man Schwachstellen melden kann. Ich wollte ja nur mal ausprobieren wie das so aussieht, aber falls Ihr Euch wundert dass da niemand was meldet: offenbar ist das Portal immer der Meinung, dass der eingegebene CVSS-Wert ungültig ist, egal was man eingibt. (Davon abgesehen halte ich es für eine sehr dumme Idee, Leuten, die freiwillig was melden wollen, erstmal mit so einem Quatsch zu behelligen.)<br/> <img src="https://files.mastodon.social/media_attachments/files/115/847/477/688/246/351/original/9d6c53415261ff88.png"> <br/> 2026-01-06T09:37:25Z https://njump.me/nevent1qqsqgd68mhk8m49ayj5hh2qr57d95nrj4fgd5jaglhasvcmzm8q43lczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veymwe4a4 In reply to <a href='/nevent1qqst608mwgwev77f0fda9sf8vkxycdk3ry8u7jl8pkqrj9eesp0vqucys4d4w'>nevent1q…4d4w</a><br/>_________________________<br/><br/>I really don&#39;t have any idea what they&#39;re doing at google. I had a recent instance where I was searching for a filename that was on an open source mirror in plenty of places, and Google said it knows nothing about it... there&#39;s, like, zero possiblity they don&#39;t have any of the mirror dirlistings indexed. 2026-01-04T12:52:08Z https://njump.me/nevent1qqst608mwgwev77f0fda9sf8vkxycdk3ry8u7jl8pkqrj9eesp0vquczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey2lys5q Anyone got a recommendation for a good web search engine? The one I used to use has decided to pivit towards providing a chatbot with a crappy search engine attached that isn&#39;t really working properly. 2026-01-04T12:50:18Z https://njump.me/nevent1qqs2tl9phwjgpmfer7mzhkkrysty7jr22t59tp33xd6krlzrfa8vkyczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey04hylq In reply to <a href='/nevent1qqspvmud4kuvjmlftke2hckxk7mgjt4cpal4dyt75a7dp2zlruy9z2s0gtkea'>nevent1q…tkea</a><br/>_________________________<br/><br/>I&#39;m totally fine with that. 2026-01-01T12:24:50Z https://njump.me/nevent1qqsxkvt7pc3fg3n2jd3vzda5ac2ag9zvcn5nhhj9dqwkwz3lg8mzrsgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyh7d5uq In reply to <a href='/nevent1qqspvevnpzxqxusrla46afajv49636tnnnqvqxf9z2saxl3f54taeucspxdfm'>nevent1q…xdfm</a><br/>_________________________<br/><br/>I have requested countless CVEs without doing CVSS and let mitre do that so I can ignore it. I think CVSS is more or less a random number generator (but not a cryptographically secure one). 2026-01-01T12:17:26Z https://njump.me/nevent1qqs8mtnr7lzal0rng7gqrypkhqdpv0drvhdexd5v92g49s7ny9vex5gzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey74k6a7 Now those gpg.fail people made me find similar vulns elsewhere (console control character injection). By &#34;elsewhere&#34; I mean... my own code.<br/>Opinions wanted: should &#34;input can inject console output with ansi and control chars&#34; always be considered a vuln/CVE?<br/>(I&#39;ll fix it in any case, I&#39;m just wondering if I should do all the &#34;security release/advisory/request CVE/...&#34; stuff.) 2026-01-01T12:08:40Z https://njump.me/nevent1qqs23my8pnvfhcmj04fg9pzk00klnv2jrzk2zy7kvctrm7nqxxsm8gczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyyxg489 German ministry renames itself, domain expires, is bought by SEO-spammer, expires again, is bought by domain grabber, then later bought by itsec company who now learns that apparently plenty of internal systems of the ministry still try to connect to the domain...<br/>I don&#39;t even know where to start how terrible that is and what it tells us about government IT security practices...<br/><a href="https://mint-secure.de/bundesdomain-im-blindflug-dns-leaks-und-ein-jahrzehnt-it-nachlaessigkeit/">https://mint-secure.de/bundesdomain-im-blindflug-dns-leaks-und-ein-jahrzehnt-it-nachlaessigkeit/</a><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s9uc3aa3ssykqpearnj5mpkxnftu7mp4ga3977u97rzht53r6q0q9d2y0t" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Tim</span> (<span class="italic">npub1s9u…2y0t</span>)</a></span> good work! 2025-12-10T08:25:24Z https://njump.me/nevent1qqswp6answ5qa7z7h69cl82jr7egxqf4nj87v2ld0vpjcgev8eg63wgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyeqr4dj I&#39;ve recently stumbled upon an RCE &#34;exploit&#34; for the Serendipity blog software, which I happen to use and have contributed to in the past. From what I can tell, it does nothing interesting (it does not even work due to broken indents, if one fixes that it uploads a PHP shell given existing credentials, but that won&#39;t be executed unless you have a server config that executes .inc files). I&#39;m 95% certain this is bogus. Yet... in case anyone wants to have a look: <a href="https://github.com/s9y/Serendipity/issues/940">https://github.com/s9y/Serendipity/issues/940</a> 2025-12-02T10:32:05Z https://njump.me/nevent1qqs0uslm8gnrukw9atp5h2ala23gndn9lgyj8ykhvzpzc29aka3wecszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veygykcdd In reply to <a href='/nevent1qqsr43044p6g0ytagdtpgxfkq6tuzl2pt0g0ylph6y2spn3unfe7xycc7jy92'>nevent1q…jy92</a><br/>_________________________<br/><br/>That means the attack is only relevant if a) you have a file with a secret, but no newlines&amp;other characters breaking an URL, b) you know the path.<br/>That seems rather unlikely in practice.<br/><br/>It may be that there are implementations that will ignore that and still open the URL. Or that will auto-encode newlines. Or that there&#39;s some trick I don&#39;t know. But that&#39;s all speculation. If you know of any *working* scenario where exfiltration with newlines works, I&#39;d be interested to hear about it. 2025-10-10T07:53:38Z https://njump.me/nevent1qqsr43044p6g0ytagdtpgxfkq6tuzl2pt0g0ylph6y2spn3unfe7xyczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyy5rxgs Dear Infosec people who have looked at XML and XXE before: I am trying to get an understanding of Blind XXE.<br/>Many of the descriptions I find are lacking an important detail which makes the attack much less practical. Blind XXE works by building an URL which contains content of a file, allowing to exfiltrate content. However, in all my tests, that *only* works if the file contains no newlines, as those are not allowed in URLs. Am I missing something?<br/>🧵 2025-10-10T07:50:07Z https://njump.me/nevent1qqszgp6lc79thf4mdttzhscz3wggkz4uqeyqtg0mm4hskrszr6apwxqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veykway6j There&#39;s a study indicating that a cheap nasal spray that is already on the market (for allergies) can reduce Covid 19 infection risk by ~2/3rd, and also reduce other respiratorial infections. I&#39;m somewhat torn between &#34;too good to be true&#34; and &#34;any reason I shouldn&#39;t immediately buy and use this?&#34;<br/><br/>Anyone read any insightful (and particularly: skeptical, caveats) takes on it?<br/><a href="https://jamanetwork.com/journals/jamainternalmedicine/fullarticle/2838335">https://jamanetwork.com/journals/jamainternalmedicine/fullarticle/2838335</a> 2025-09-26T11:42:44Z https://njump.me/nevent1qqs2u93zyauezytve9thn25e6eq63j6m7gdu6rl6pkn8raqmj2u0m9czyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey0mpzu0 Anyone happens to know if there&#39;s any easy trick to bypass an Incapsula &#34;security firewall&#34; that thinks downloading with curl/wget is an attack to be prevented? (It&#39;s not just the user agent, I tried that.) 2025-08-21T08:12:14Z https://njump.me/nevent1qqsv8cwvn3qgvgg03scyvedrkl0xdq06ftp5lqqexyy72a7hrluhkeszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey3mpnwu In case I know anyone here who&#39;s familiar with the finer details of DNS and particularly DNS amplification attacks and their mitigations, I have some questions. 2025-08-14T05:41:15Z https://njump.me/nevent1qqsrmlm52hy8zuk2khs2zxctxzpa2tu6gt937s2j77utvl3q2ls4q9qzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veywpmvlv In reply to <a href='/nevent1qqsf9j2ws0lpu0nk5geks75zfrpx5kpdcec8ju6g36q9r37u78qtlpqh9txpk'>nevent1q…txpk</a><br/>_________________________<br/><br/>So that&#39;s that. This study wouldn&#39;t be expensive. Given that LDL and heart attacks are a big deal, a lot of people drink Espresso, and the impact may or may not be significant, I think it&#39;s a study worth doing. But it needs a lab that can measure that stuff. 2025-08-12T09:23:11Z https://njump.me/nevent1qqsf9j2ws0lpu0nk5geks75zfrpx5kpdcec8ju6g36q9r37u78qtlpqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyts25ez In reply to <a href='/nevent1qqsfw57kq78x6rpwzhj0zqr660jmu5u77qu6uc25lmz2z32925mzghsw0p3z8'>nevent1q…p3z8</a><br/>_________________________<br/><br/>I almost thought I could do this study on my own. I&#39;d have to brush up my statistics a bit, but it&#39;s in no way a complicated analysis, designing a statistically really good study with preregistration would be feasible.<br/><br/>However, it seems there&#39;s no such thing as a cafestol/kahweol home test or any easy way to test their concentration. The existing studies use something called chromatography in a lab, and I don&#39;t think it&#39;s something you can easily build at home. 2025-08-12T09:21:13Z https://njump.me/nevent1qqsfw57kq78x6rpwzhj0zqr660jmu5u77qu6uc25lmz2z32925mzghszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey5zdwuc In reply to <a href='/nevent1qqsq7553wxp5w45p6uamzplct8vvqqrsy2rctevau52v6qmtrfwvpsgy6n9x8'>nevent1q…n9x8</a><br/>_________________________<br/><br/>However, that&#39;d be a really expensive study, and nobody will do that. But the data on cafestol/kahweol seems good enough to justify making a simpler study. Just make a few cups of Espresso with different types of machines with and without a paper filter. Measure the concentration. No humans involved, no blood tests, no ethics committee to ask, etc.<br/>If we assume the existing data shows that cafestol/kahweol are increasing LDL and that&#39;s unhealthy (very plausible), that&#39;d be a &#34;good enough&#34; study. 2025-08-12T09:17:59Z https://njump.me/nevent1qqsq7553wxp5w45p6uamzplct8vvqqrsy2rctevau52v6qmtrfwvpsgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veye4f5wg In reply to <a href='/nevent1qqsdz9u4vlayld98h2m4pyuytjllj8anvm99amglzvzxjk9lt9me0hssaq5ah'>nevent1q…q5ah</a><br/>_________________________<br/><br/>I think the main reason people use these paper filters is that they think it tastes better and you have less coffee grounds. However, plausibly, they could make a heart-healthier coffee.<br/><br/>Now, I can do that. Question is: does it work? I mean, plausibly, it will. But it&#39;s not exactly the same as standard filtered coffee.<br/><br/>The perfect study would test it in humans who drink espresso with paper filter (ideally 4 groups, real espresso machine, my electric espresso can, with/without paper). 2025-08-12T09:15:15Z https://njump.me/nevent1qqsdz9u4vlayld98h2m4pyuytjllj8anvm99amglzvzxjk9lt9me0hszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyfgkade In reply to <a href='/nevent1qqs87t2h59ynh2s8y4ghxm5fwl9fagmdghzh0hg0046xe5au2mqprjcgc823c'>nevent1q…823c</a><br/>_________________________<br/><br/>There&#39;s no paper filter involved, and it turns out from existing data, Espresso has high levels of cafestol and kahweol. (Whether that&#39;s also true for my electric not-really-Espresso can, I don&#39;t know for sure, but plausibly, it probably is.)<br/>Now, my question was: Can I add a paper filter? Shouldn&#39;t be too hard. Just put it on top of the coffee. Paper filters for &#34;real&#34; Espresso machines are cheap and can be bought in your favorite online shop. 2025-08-12T09:12:01Z https://njump.me/nevent1qqs87t2h59ynh2s8y4ghxm5fwl9fagmdghzh0hg0046xe5au2mqprjczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyuqmek8 In reply to <a href='/nevent1qqst8cpsgjw3qvmjw7p9grtttkdm6ndw7f3yp2rgl7ruykevqlu5r2gjev3sx'>nevent1q…v3sx</a><br/>_________________________<br/><br/>Concentration of these LDL-increasing substances depends a lot on the way you make your coffee. Notably, coffee that went through a paper filter has very low levels of cafestol and kahweol. Turkish Coffee, meaning pouring hot water over coffee powder and not filtering it, has high levels. So this is malleable.<br/>Now, my coffee consumption is, to a large part, Espresso out of an electric espresso can. (Some may argue that that&#39;s not &#34;real&#34; Espresso, but that&#39;s not my point, it&#39;s what I drink.) 2025-08-12T09:10:19Z https://njump.me/nevent1qqst8cpsgjw3qvmjw7p9grtttkdm6ndw7f3yp2rgl7ruykevqlu5r2gzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey07lkmm In reply to <a href='/nevent1qqspt3t0lcxcdt68mx27mg3leyypdmnl7tj8370ecp5dc3975zzzv9gl56ysc'>nevent1q…6ysc</a><br/>_________________________<br/><br/>First of all, it appears the scientific consensus is going in the direction that , overall, Coffee consumption is not unhealthy, and may even have some health benefits<br/>However, cafestol and kahweol are probably bad due to their effect on LDL. I read in some sources that the effect can be up to 15 points in LDL level, which is enough to care. (To get an idea: my LDL is 170, &lt;100 would be considered healthy. Eliminating cafestol/kahweol won&#39;t get me to healthy levels, but it would be significant.) 2025-08-12T09:07:32Z https://njump.me/nevent1qqspt3t0lcxcdt68mx27mg3leyypdmnl7tj8370ecp5dc3975zzzv9gzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyn3pn9a In reply to <a href='/nevent1qqs9wn4x5hly98fhjjx4akw7zdg7emefjet48qsehtuuw0rxq67mshsfgfsm3'>nevent1q…fsm3</a><br/>_________________________<br/><br/>From the things one can do to lower LDL, most of them I already do. I don&#39;t smoke, don&#39;t consume alcohol, don&#39;t eat meat, my main source of fat is olive oil, which is considered one of the healthiest options.<br/>But digging deeper, I came across something that I hadn&#39;t really on my radar (I kinda knew, but didn&#39;t think it&#39;s a big deal): Coffee. Or, more precisely, two substances in Coffee called Cafestol and Kahweol. 2025-08-12T09:01:48Z https://njump.me/nevent1qqs9wn4x5hly98fhjjx4akw7zdg7emefjet48qsehtuuw0rxq67mshszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyef9wcx In reply to <a href='/nevent1qqsgr83yf9v86jme944up2j8hutj2x7fuevw528d8a8a3jw0rqq9kqgfrjml8'>nevent1q…jml8</a><br/>_________________________<br/><br/>LDL is a major risk factor for heart disease. (It isn&#39;t the best value to predict heart disease risk, that is ApoB. But unfortunately, standard medical practice hasn&#39;t adopted this yet.)<br/>So my high LDL is... not good. Unfortunately, the effect of lifestyle changes on LDL is limited, and my risk is still far away from what would receive medication. (Some doctors think that far more people should receive medication, which I find a very interesting debate, but that&#39;s another story.) 2025-08-12T08:59:18Z https://njump.me/nevent1qqsgr83yf9v86jme944up2j8hutj2x7fuevw528d8a8a3jw0rqq9kqgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veywjnad3 I went down a rabbit hole trying to understand some health issues, and I ended up with an idea for a study that involves Espresso and heart disease risks that would be relatively easy to perform and could help make more informed health decisions. My journey (and this is only one tiny aspect, I&#39;ve been thinking about this a lot) started a bit more than a year ago when I got a blood test as part of a health checkup that contained some concerning values, notably high glucose and high LDL. 🧵 2025-08-12T08:53:24Z https://njump.me/nevent1qqs8txfgtxl7e7rp9k8v3md5knrxfav8wnzaq7gyvgpx36p66maz75czyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey68wrus Do I know anyone who knows anyone at cloudflare? Can you tell them to fix their documentation about email smtp/submission ports? It&#39;s outdated (see RFC 8314) and still recommends the less secure 587+starttls, and it&#39;s the most prominent google result... <a href="https://www.cloudflare.com/learning/email-security/smtp-port-25-587/">https://www.cloudflare.com/learning/email-security/smtp-port-25-587/</a> 2025-07-10T09:22:04Z https://njump.me/nevent1qqsgt70yh05v5h639u5xlzy0k2wmqd9d9rufrv87yf77wcjnwzl8rdqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyerpx7l In case anyone here has connections with the Python team: can you please tell them to update their docs on XML security? The way it is is quite misleading, and it&#39;s been annoying me for a while. I raised this a while ago in their issue tracker, but it got no reaction whatsoever. <a href="https://github.com/python/cpython/issues/127502">https://github.com/python/cpython/issues/127502</a> 🧵 2025-06-08T09:22:05Z https://njump.me/nevent1qqsps6cp7xam4fah5fwmstwnl7keg3yhs7mjmc0h6lnr0pkvh0a2ktczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey29arze This is a gruelling summary of all the things wrong with OpenSSL <a href="https://www.haproxy.com/blog/state-of-ssl-stacks">https://www.haproxy.com/blog/state-of-ssl-stacks</a> I&#39;ve mostly watched this whole thing from the sidelines, but was also affected noting that private key parsing suddenly became 70 times slower. I think they&#39;ve now improved it to &#34;only&#34; be 10-20 times slower, and there does not seem any effort to work on it any more. 2025-05-07T07:45:54Z https://njump.me/nevent1qqszk252mhy9nl82llc0yg3q0v8e288wg4trsl0yqcgpv0ppy96drkqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyzmejay Is there a way to configure the Linux kernel or a tool that puts a laptop into a &#34;no-fan&#34; mode? Like, if it gets too hot, reduce the CPU frequency. It&#39;s definitely possible to run my laptop without the CPU fan, by reducing the cpufreq scaling_max_freq enough for all cores. But what I&#39;d want is &#34;you&#39;re allowed to go to whatever freq you still can do safely without running the fan, but auto-reduce if it gets too hot, never use the fan&#34;. 2025-04-21T11:57:06Z https://njump.me/nevent1qqsv32jw94yhwhn8ac276fgdt657qrl2p47vumtjr43s40sxph6y4gszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veypn4tkh In reply to <a href='/nevent1qqsdsc8xn2zr2g2zlp97xq9k0q65yy3gvmegzrc228gq8pqqwv6qpugfwh3m7'>nevent1q…h3m7</a><br/>_________________________<br/><br/>We measured fever with mercury, had lead in fuel, christmas decorations, and it was melted as a fun tradition for new years eve. Batteries did not just contain cadmium, but also mercury. This is all extremely toxic stuff, and it used to be around us not too long ago. NiCd battery sales were banned in the EU in 2017. 2025-03-30T07:00:49Z https://njump.me/nevent1qqsdsc8xn2zr2g2zlp97xq9k0q65yy3gvmegzrc228gq8pqqwv6qpugzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyp6qs78 #toxic stuff:<br/>Recently, my shaver broke, and for situations like this, I had an older electric shaver in a box. Which... also didn&#39;t work any more, so that didn&#39;t help. But curiously, I noted that the older shaver still had a Nickel Cadmium battery. Which is... one of the many toxic things we used to have around us, and we no longer have. and I think this is an underappreciated fact and a success of reasonable regulation. 🧵 2025-03-30T06:54:27Z https://njump.me/nevent1qqsgecjc6da7qu2f5cf38uclewxgmuepqp7u89ht32rxwymufr7x8zqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyw74wd7 In reply to <a href='/nevent1qqsdwdygd0aqm2zdm890y9r43tal57tgmwmgfr0n02yfz35vczeft5spku3k7'>nevent1q…u3k7</a><br/>_________________________<br/><br/>This was one of the instances of insecure openid connect keys I blogged about recently <a href="https://blog.hboeck.de/archives/909-Mixing-up-Public-and-Private-Keys-in-OpenID-Connect-deployments.html">https://blog.hboeck.de/archives/909-Mixing-up-Public-and-Private-Keys-in-OpenID-Connect-deployments.html</a> the host auth.univie.ac.at has an openid connect configuration file. It points to https[://]auth.univie.ac.at/jwk for its jwks_uri that contains the public keys. Apparently, one of those keys is an example key used in the software &#34;OpenID-Connect-Java-Spring-Server&#34;. Therefore, the private key is what I like to call a &#34;Public Private Key&#34;. 2025-03-17T16:30:28Z https://njump.me/nevent1qqsdwdygd0aqm2zdm890y9r43tal57tgmwmgfr0n02yfz35vczeft5szyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyza64u5 So... I recently called out the University of Vienna as a bad example for not providing a usable security contact. In case you were wondering what that was all about, and how it continued... I eventually was pointed to a security contact address. I also reported the issue, and they confirmed it. They also claimed to have fixed it. Yet... <a href="https://mastodon.social/@hanno/113956477328875800">https://mastodon.social/@hanno/113956477328875800</a> 🧵 2025-03-17T16:28:34Z https://njump.me/nevent1qqsgayhg28kmef7cvszflk7gc5r8f500kjjw4d2xkzwap5a24e20ehszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyjlus4d In reply to <a href='/nevent1qqsqxyy33eae2vpcg2edgp6x4ara3ul0a0xjwh7qcft0xfyt6amfucgl3vuen'>nevent1q…vuen</a><br/>_________________________<br/><br/>Assuming I neither want to learn how to parse ics files or how caldav works internally. Isn&#39;t there any tool that takes an ics file and uploads it to a caldav-capable calendar? Or am I thinking wrong, and I should solve my problem in a different way? How? Can anyone point me to a howto/doc/blogpost that is simple and explains how to do that? 2025-03-07T17:18:49Z https://njump.me/nevent1qqsqxyy33eae2vpcg2edgp6x4ara3ul0a0xjwh7qcft0xfyt6amfucgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veymu63qe In reply to <a href='/nevent1qqsyskeyn3suu3xndeqhedk7sy8r7t20mmjxtu6aru5wdyqce0fcn0gwptlpq'>nevent1q…tlpq</a><br/>_________________________<br/><br/>Ultimately, what I want is some scriptable tool that I can run - either locally or on the server - that takes an ics file and puts it into the calendar. Either something that utilizes nextcloud&#39;s commandline stuff, or a web API. I *think* this could be done with caldav. Which is, as far as I understand, a way other applications can interact with a calendar application like nextcloud. Yet: How excatly would I do that? 2025-03-07T17:16:22Z https://njump.me/nevent1qqsyskeyn3suu3xndeqhedk7sy8r7t20mmjxtu6aru5wdyqce0fcn0gzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veydh4z5t Dear Internet hivemind, I have a tech problem. I use nextcloud as my calendar. I get a lot of ics files these days, via email, or from web pages where I signup for events. I want to get the ics files into my nextcloud calendar without it being annoying. I think it should be simple to solve, but somehow, it isn&#39;t. I don&#39;t find any good answers how I might do that. Maybe I&#39;m googling for the wrong terms. 🧵 2025-03-07T17:14:30Z https://njump.me/nevent1qqsxkslddxwfv9s84m9aelermpp3uuqpxmtk5jvd2ayccv5gwmcyuqgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyddhfy8 In discussions about clean Hydrogen, there is a popular idea floating around, particularly in countries like Germany or Japan that import large parts of their current fossil fuel energy. Instead of importing fossil fuels, the story goes, we will import large quantities of Hydrogen in the future from places where wind and sun are plentiful, and therefore, renewable energy is cheap. The problem with this idea is that Hydrogen is really difficult to transport. ⚡💧🚢🏭 🧵 2025-03-04T11:56:26Z https://njump.me/nevent1qqsp8k6033qg056vnamgd5eyj00ux88mdzwmm60hjmnttnmk54ypqzgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey3t95kl Hab mir gerade eine Rede der Linken Spitzenkandidatin Heidi Reichinnek auf youtube angeschaut, die ja scheinbar gerade dafür sorgt, dass ihre Partei noch eine Restrelevanz hat. Als erstes spricht sie über den Rechtsruck und Rassismus. Jetzt würde man ja denken: Linke Partei, die sich als zentrales Thema gegen Rechtsruck und Rassismus wendet, ist eigentlich selbstverständlich. War es halt für die letzten Jahre meist nicht. 2025-02-23T07:14:56Z https://njump.me/nevent1qqsxlsrmeulst9traqs3krd26797p73mmkggye7m9t4gm5jpynql40qzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey9gfmcx In reply to <a href='/nevent1qqsq8qp8l5mjclrh90zlxr755ddlwa9eeq2ccumkwvvzateuvc70peqhwp23l'>nevent1q…p23l</a><br/>_________________________<br/><br/>You may compare your 32x32 pixel PNG icon to your SVG and think that it&#39;s smaller. But your PNG is compressed, your SVG isn&#39;t. (It&#39;s XML, essentially a text format.) Yet, your web server can compress it on the HTTP layer. You cannot further compress PNG or JPG or AVIF usually, but you can compress SVG. The data transmitted is smaller than the file size for SVGs, but not for PNG/JPG/AVIF. 2025-02-20T08:34:27Z https://njump.me/nevent1qqsq8qp8l5mjclrh90zlxr755ddlwa9eeq2ccumkwvvzateuvc70peqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veydeqkp5 Webdesign tip: SVG files are smaller in practice than it may appear.<br/>If you use an image on a webpage that you have as a vector graphic, it&#39;s usually a good idea to use SVG instead of raster formats like JPG/PNG. Given high resolution displays and zooming habits, your width=&#34;[pixelsize]&#34; is practically not what&#39;s displayed, and it&#39;ll look better if it can be zoomed without losses. But if you&#39;re an optimization perfectionist, you may look at file size, which can be misleading. 🧵 2025-02-20T08:32:28Z https://njump.me/nevent1qqsxsdsvuh3amvhtp50pf0mrrwhtxjvu9ldqhd7lrhcj7acyc7kd9xgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey50y2c7 In reply to <a href='/nevent1qqsvdzvpnghpwjsegfts6fv7rncy80f0e9qts4qgmac9le0eqc8d9ugxfcq7c'>nevent1q…cq7c</a><br/>_________________________<br/><br/>also... if your webpage tells me you have foobar ISO whatnot security certification, BUT YOU DONT HAVE A SECURITY CONTACT, I&#39;m wondering what these certifications actually do if you can pass them and still fail at the absolute basics. 2025-02-06T10:33:24Z https://njump.me/nevent1qqsvdzvpnghpwjsegfts6fv7rncy80f0e9qts4qgmac9le0eqc8d9ugzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veym0xutq In reply to <a href='/nevent1qqsdw4uvratarynwdc5fgx9rymynk38vn4s49pemkd7l9cac0ykcpcguegdmv'>nevent1q…gdmv</a><br/>_________________________<br/><br/>How not to do it: Here&#39;s the university of Vienna. They tell you to use their support desk contact form WHICH REQUIRES A LOGIN... <a href="https://zid.univie.ac.at/it-security/">https://zid.univie.ac.at/it-security/</a><br/>So... you have to study or work there in order to tell them about a security issue.<br/><br/>In unrelated news, in case you know anyone at the university of vienna&#39;s security team, you may want to tell them to get in touch with me. 2025-02-06T10:30:49Z https://njump.me/nevent1qqsdw4uvratarynwdc5fgx9rymynk38vn4s49pemkd7l9cac0ykcpcgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veymsmjn7 I am regularly surprised how many organizations fail with one of the most basic things they can do about IT security: HAVE A SECURITY CONTACT.<br/>If someone externally wants to tell you about a security issue, make it easy for them. There&#39;s a standard for it (security.txt), but even having any place on your webpage saying e.g. &#34;if you found a security issue, please contact XYZ&#34; is good enough. 2025-02-06T10:29:26Z https://njump.me/nevent1qqsxsme24rukay8szq33uua63xxaamn8tw7duw65ga72vaq2se944tszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyldevvc Es sagt ja so viel über den kaputten Stand unserer gesellschaftlichen Diskurse, dass wir gerade eine Diskussion über den Krankenstand haben, aber kein einziger Vorschlag dazu zielt darauf ab, dass Leute weniger krank werden. Ich mein, ist ja nicht so dass man da nix tun könnte. (Luftfilter, Masken, Homeoffice, leichterer Zugang zu Impfungen, ...) 2025-01-07T14:10:40Z https://njump.me/nevent1qqst4q7ufxk6yg6xzyatkwewtm4g5vdk3wus9zjhuq8642s94uhe7qgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyh3rg9x Ach echt, es war gar keine tolle Idee, die Heidekrautbahn mit Wasserstoff (wohlgemerkt aus Erdgas) fahren zu lassen? Hätte uns nur jemand gewarnt! <a href="https://www.rbb24.de/wirtschaft/beitrag/2024/12/wasserstoff-engpass-einschraenkungen-regionalbahn-berlin-brandenburg-vbb.html">https://www.rbb24.de/wirtschaft/beitrag/2024/12/wasserstoff-engpass-einschraenkungen-regionalbahn-berlin-brandenburg-vbb.html</a> 2024-12-29T09:03:10Z https://njump.me/nevent1qqsptecl4389n94wsf9s6tmsgfk85k9yg5aggmty0slrwtftrzkthvqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyew8dp3 In reply to <a href='/nevent1qqsdng0kkvr60hxgca5yjcza0cenqtv7fftx6x656ceqe435q3uqpzq69yfzd'>nevent1q…yfzd</a><br/>_________________________<br/><br/>is it really GPS spoofing? I talked to someone yesterday who observed that the phone would go into the wrong timezone when connecting to the wifi. 2024-12-29T08:32:37Z https://njump.me/nevent1qqsg0v9mgszfa233ntvgn08wl4ceh2l7fu4d2rtrg03eq8kawk7qf4szyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyttpfxq Anyone has an explanation how that happened? I got an error about a double free in an ssh shell with an immediate disconnect afterwards. Likely a memory corruption happening in bash. Possibly also in ssh itself...<br/> <img src="https://files.mastodon.social/media_attachments/files/113/706/633/272/305/820/original/56dc077e6346dfe8.jpg"> <br/> 2024-12-24T07:32:56Z https://njump.me/nevent1qqsz0s7drhe7cl66jm6umrzg0n23mfay5ftsp9xdqj6yujnnfhg7fgqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey3vchlg This is quite something: The BBC reports about health misinformation. One example is... a show on BBC!<br/>I mean, I guess it&#39;s good that they critically evaluate their own reporting.<br/><br/>But it gets better: &#34;A spokesperson for the BBC declined to comment.&#34;<br/><br/>That&#39;s quite arrogant of the BBC to decline to comment when a journalist working for the BBC asks you for a comment<br/><br/><a href="https://www.bbc.com/news/articles/c4gpz163vg2o">https://www.bbc.com/news/articles/c4gpz163vg2o</a> 2024-12-13T12:32:53Z https://njump.me/nevent1qqsyhlmt9kegcm8xw9cujrsxm0qxdx6efp3r5zrqvdkdzpqw4jeny2qzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey5xedk7 In reply to <a href='/nevent1qqsxtlpzercye3alvhrsfznn7cwhmavnx99h9tq6sxj9g9ggxlpdysghy03yy'>nevent1q…03yy</a><br/>_________________________<br/><br/>This thing with lower quality due to audio compression is a bit of a myth. It is totally possible to compress music a whole lot without loosing quality in a way that is recognizable by humans. Here&#39;s a &#34;classic&#34; post discussing this in great detail: <a href="https://xiphmont.dreamwidth.org/57937.html">https://xiphmont.dreamwidth.org/57937.html</a><br/>Technically, it&#39;s true that these compression algorithms loose information, but when it&#39;s impossible to recognize this information loss with a human ear, it&#39;s not relevant. 2024-12-04T11:25:28Z https://njump.me/nevent1qqsylxjpvk5v9knrq6lfzpf0ycatxtzhw7kwh39vyg00efthrtve83qzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey42dmpm Dear everyone who owns domains that are *not used for e-mail*, particularly ones that are potential targets for phishing (banks, high-profile names): Could you please configure SPF+DMARC, ideally with p=reject? You may wonder: Why should I configure anything email for a host that isn&#39;t used for email? Well... it helps others to identify spam sent with your domain as the sender. 2024-11-25T08:51:21Z https://njump.me/nevent1qqswh9ekz23xqaxqyvgcxnnyf42dkxjgxjzfhl8x2m3r22sysfvg8mszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veynad469 Google payed me a bugbounty for a bug I reported 8 years ago... 2024-11-21T08:37:34Z https://njump.me/nevent1qqsdkd9hc26f5w7aev9e9tgvuu5dlwg7w5k4g7dlnry00wchcftxn2czyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey5a6k4h In reply to <a href='/nevent1qqs0a0ce0tgxg4tzzrdmqq05lsugdjtkqzvznnvk95l77g3ngx9lrvgcpkl25'>nevent1q…kl25</a><br/>_________________________<br/><br/>Option &#34;Nein, das Virus war schneller&#34; fehlt... 2024-11-14T10:48:18Z https://njump.me/nevent1qqs94tgjejuwyjyqj3le7x9x3f6dq5jqgsha93q05uxslpfnxqs4emszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veydnnjee In reply to <a href='/nevent1qqs26qxw84slwzx2ncvkldyjp2n6msqlaa9xyu6k7s2yvyvavygm2uccgavkx'>nevent1q…avkx</a><br/>_________________________<br/><br/>I don&#39;t understand the &#34;where you can have the right answer base64-encoded in a hidden field&#34; part. why would you need that? Check the answer client side? 2024-10-19T08:40:42Z https://njump.me/nevent1qqswvtumt209kzrdxt7gsa8x8a9wkhmf3d7vaf0qq4p746che6an7qszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veya8tpxa Is there anything like a reasonably working local antispam solution for web contact forms? It appears the popular one is akismet, but that essentially means &#34;sent the whole message to someone else&#34;, and that feels really inacceptable privacy wise. 2024-10-19T08:30:36Z https://njump.me/nevent1qqst3tp7rczf3qp6l8p3rhymlmel4lxlctxa6gycgm5tk55md0yaefgzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veykdqqn6 Certainly the thought crosses my mind whether anyone will want to read my likely-30k-characters thoughts on green methanol that I&#39;m currently writing down, with obscure, nerdy side quests towards formaldehyde, dimethyl ether, and gasification technology. But then, I know at least a couple of people that will almost certainly read it, so I guess it&#39;s okay. 2024-09-19T14:35:13Z https://njump.me/nevent1qqsgjh5c6jzwmkkxw0hmp6c7fmcvdtfs4t8vjxt89z3lzl90jjphkeszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyfhzjd5 In reply to <a href='/nevent1qqsg8trsw33qh26gwdsyvx73ugch6xr0x72t92xpyexu6gstj3rykhg35x87z'>nevent1q…x87z</a><br/>_________________________<br/><br/>das klingt so als ob du bisher sehr viel bezahlst(?) - ich hatte die neulich auch da, und die haben mir erzählt dass ich kaum mehr zahlen würde als bisher, und mir irgendwelche Zahlen genannt (ich hab sowas ja nicht im Kopf und habs erstmal geglaubt...), Ich hab&#39;s dann gecheckt, ich zahl im Moment deutlich weniger als der mir erzählt hat. 2024-09-17T11:49:59Z https://njump.me/nevent1qqsdtr4hfu72lzsk0pdszdn0h37pc5974scgvf345fhx8qhh4rvw0yszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veygf53pn This widely shared infographic uses a trick to make its message appear much stronger than it actually is. It seems to show a strong correlation between energy consumption and wealth of a country. By using a logarithmic scale, the correlation appears much stronger than it actually is. I covered this before in articles, and now have also uploaded a short video ⚡💸🎥 <a href="https://www.youtube.com/watch?v=2xZ6CihdKu0">https://www.youtube.com/watch?v=2xZ6CihdKu0</a> 🧵 2024-09-10T11:14:45Z https://njump.me/nevent1qqsym29x2qasxhe62thm292km58uerzryqywg5aflj7cr4uqyr96hpszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey8a57ra In reply to <a href='/nevent1qqspzc4qmsptuzveszhahac84prsddafgqlh4tyffyyqktn93pxfzyclgmn6p'>nevent1q…mn6p</a><br/>_________________________<br/><br/>have fun: <a href="https://github.com/hannob/geogrep">https://github.com/hannob/geogrep</a> 2024-09-09T08:40:47Z https://njump.me/nevent1qqspzc4qmsptuzveszhahac84prsddafgqlh4tyffyyqktn93pxfzyczyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyjz2hm8 In reply to <a href='/nevent1qqs0dcwfx7dt8re8d3q6nu4l9mz2jjp43zndldgvehq3xf3qvsdar8c0gymyd'>nevent1q…ymyd</a><br/>_________________________<br/><br/>Ok... I wrote that tool. It works, I found the pic I was looking for. Will publish soon. 2024-09-09T08:20:01Z https://njump.me/nevent1qqs0dcwfx7dt8re8d3q6nu4l9mz2jjp43zndldgvehq3xf3qvsdar8czyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey56s3u0 Followerpower: I&#39;m looking for a specific picture in a not well sorted collection... It is probably geotagged, and I know relatively precisely where it was taken. So... Is there any tool (offline, linux) that can do the following: Search for any picture close to specific geocoordinates? 2024-09-09T06:59:01Z https://njump.me/nevent1qqs9vjq9jntqk304relqv06nhmv6kremllwtzawuk0x2s0c8edm0fnqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey4582mn Do you remember how people were discussing those disgusting food practices in China at the beginning of the Covid pandemic that were blamed for the virus transmission? Why don&#39;t we have such a discussion now when US cow farms are breeding dangerous bird flu strains? 2024-09-07T09:45:28Z https://njump.me/nevent1qqs0ukf2qq5gh07jdg5p0v9hhfak5tvsrhf2ygczgvl2yf8r0q6yulqzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyenr6km Falls sich potentiell jemand für gebrauchte Solarmodule &#34;Schüco MPE 90 AL&#34; interessiert: könnte potentiell vermitteln dass die von einer alten Anlage, die abgebaut werden soll, abgeholt werden können. Wenn sie niemand holt werden sie wohl entsorgt. 120 Stück, Standort nordöstlich von Stuttgart. 2024-08-14T09:59:24Z https://njump.me/nevent1qqsx7r7ysrjq3xs2kdelatp52dpsvnkwd5ghxugxggggpdxknm44rrszyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4vey3pswc8 Question to cryptographers who are... somewhat older. Was RSA 512 the smallest key size that was ever used widely, or were smaller key sizes ever used in common applications? 2024-08-11T20:26:18Z https://njump.me/nevent1qqsvlgxquav7eu93kasy50vjjendzjgve9wqyszrnz5pps5pft8mwngzyzqnn8c8v6vp4hszag35pm4jpase7n220zsgm0artum8q0u5f4veyev23e7 Preparing a talk about industrial emissions, &amp; I like to illustrate things with local examples. The place where I&#39;m presenting is close to a cluster of chemical factories, in the German state of Saxony-Anhalt. In the pic on the left is a large coal power plant, pretty nasty, + the largest emission source in Saxony-Anhalt. But I want to talk about the factory on the right. That&#39;s the Dow steam cracker, a major step in the production of plastics. Pic CC by-sa, Foto Fitti, <img src="https://commons.wikimedia.org/wiki/File:Merseburg,_Germany_-_panoramio_(55).jpg"> 🧵<br/> <img src="https://files.mastodon.social/media_attachments/files/112/925/734/667/224/316/original/5bd778cd5429fb50.jpg"> <br/> 2024-08-08T09:39:56Z