Hister v0.18.0 is out!

- New search suggestion UI with history completions, fields, facets, and sorting
- Import PDF, DOCX, Markdown, Org mode, and text files
- New Twitter, Bluesky, Reddit, and Discourse extractors
- Responsive terminal result details
- Persistent sessions and safer MCP results

https://github.com/asciimoo/hister/releases/tag/v0.18.0

#Hister #SelfHosted #OpenSource #freesoftware #search

“Before you become too entranced with gorgeous gadgets, remember that the goal is not to have more information, but to have more understanding.”

— Arthur C. Clarke

Does anyone actually have real-world examples of widescale token theft occurring through compromised middleware boxes or accidental logging of tokens?

100 companies are responsible for 71% of global emissions.

They told YOU to recycle better while they polluted more.

Don't fall for it.

Hold systems accountable.

#ClimateCrisis

Credit: Abilu Tangwa

@joe BSD and LSD both hail from Berkeley. We do not believe this to be a coincidence

Dutch Pension Fund Pulls Nearly Half a Billion Euros From Climate ‘Megapolluter’ BlackRock.

“This is a massive win for Dutch pensioners—not to mention all living creatures on Earth.” #ClimateChange #GlobalWarming

https://www.commondreams.org/news/blackrock-climate-change

For the past almost a year, I’ve been building a fully working, 1:1 scale Tune Thumper Bike from Mario Kart World!

Full build video: https://youtu.be/vbM31wagyRg

The bike is fully functional. The cassette tape door is also a Nintendo switch 2 dock, so when you put the switch in and plug in hdmi to tv, it outputs without any other power source needed.

Specs:
~65mph top speed
~70lb
Fully functioning buttons, speakers, lights, antenna, nintendo switch 2 dock
wood, steel, and a ton of 3d printing

We gave hundreds of developers an AI agent that can run shell commands, edit files, and call MCP servers on their laptops.

Then we realized we had no record of what it actually did.

So we built one.

1 bash script, 280 lines, no dependencies. Cursor hooks fire it on every tool call. Elastic Agent ships the log to Elasticsearch.

Since the May rollout: 13M+ tool-call events across 1,100+ machines.

What the data showed:
- File reads outnumber shell commands roughly 4 to 1: agents mostly read your codebase before acting
- 300+ distinct MCP servers in use, 86% of them by only 1 or 2 people
- The CLI surface alone produced nearly a fifth of all events

"Which hosts ran an agent that read a .pem file last week?" is now 1 ES|QL query.

We log commands, paths, and tool names. Never file contents, prompts, or responses.

Full writeup from Wieger van der Meulen on the InfoSec team: the collector script, hooks.json, the 2 deployment gotchas that cost the most time, and the ES|QL hunting queries.

https://go.es.io/4wHDZID

Courtesy of @stevelord:

https://stwipe.com/

This is the next-gen, value-aligned, over the horizon, into the abyss company I've been looking for, to waste my money on.

for the #emacs folks re: https://www.openwall.com/lists/oss-security/2026/08/21/1 ... to be clear: the implication here is that if you e.g. navigate a malicious git repo with dired (just opening the dir is enough) these bugs result in arbitrary command execution, because dired will stat the files by default ... so definitely pick up these fixes if you can 👍

@kagihq 's "small web" experiment kicked off 3 years ago with about 6,000 vetted human-written non-commercial blogs and is now up to almost 37,000. I would love to know how it's going: https://blog.kagi.com/small-web

@unchartedworlds or you could lead by example and steel-man my position?

@unchartedworlds then maybe help me better understand your position?

@unchartedworlds Not sure how quoting myself helped, but glad it did.

"- implicit consent vs explicit consent"

Do I understand correctly that you think requirements for consent are/should be the same on Fedi as they are on a city street?

"- context & scale as factors."

Do I understand correctly that you think Fedi and a city street are similar in how many people you meet, how many of them are familiar/stranger to you (scale) and that people participate in the street traffic in a similar capacity as they do in the Fediverse (context)?

@wdormann @malwaretech See, this removes friction! We should be thankful.

CVE Crowd's search feature is now public!

This means you can now search for vendors, products, package names or CVE numbers and find related posts on the Fediverse and Bluesky - all without signing up anymore.

Previously, I used sign up as an obstacle for bots. But since #ALTCHA proved good enough to keep those away, it now also secures search.

I hope this is useful to y'all!

https://cvecrowd.com

#Pentesting #AppSec #InfoSec #CyberSecurity #BugBounty #Hacking #CVE #CveCrowd

OMG did @jerry just update Akkoma so we now have enhanced search? 😍

Thank you!

@infosecdj Right??

I'm on this picture and don't like it.

...If anybody's looking for a person who basically does everything from compiler {backend,frontend} development, GPU driver development, to hardware/firmware security research, let me know. #getfedihired

US only.