matrix07012 @matrix@gameliberty.club

cc @disarray

for anyone wondering, the mastodon security advisories got posted.

https://github.com/mastodon/mastodon/security

in summary:

OEmbed preview parsing could lead to XSS.
A bug that allowed users to upload files anywhere the Mastodon app could write to was squashed.
It was possible to read-timeout the HTTP workers by constantly delaying requests.
Something about how it’s possible to craft a misleading verified URL using formatting. (I don’t quite think this is a security issue, more a user issue but fine, whatever).

https://github.com/Rosentti/opensteamclient

wtf is this

>Additionally, Valve does not provide any headers or code to go along with these binaries, so this project essentially works because of guesswork by lots of community members and projects (Thank you!) (such as open-steamworks, open-steamworks fork by m4dEngi, SteamTracking, protobufs dumped from the steam client and MiniUTL).

MiniUTL? Didn't knew my fork of Source SDK template library (relicensed by Valve under BSD) would be useful to anyone.