Inlay

Profile

acorninteractive.ca Home of the devvy Kjörndogs. Buckle up, get comfortable. We’ll be pushing automated updates from any major developments on our core application, while publishing technology insights, code related findings, and general dev musings.

Acorn DevOps

Beige comment to say in the neutral: I like not having to hand code yaml, or json files.

🤔 how does a rapid iteration cycle benefit from such, knowing that the need for testing is itself subject to matters of technological flux?

I suppose the endpoint of deterministic system design is to promote a continuous state of “no worries” or, at the very least the minimization of such. One for the interdisciplinary club, for bringing this chemical matter to our attention.

🚨 High-severity security fix in undici (6.26.0, 7.28.0, 8.5.0) just released! Patches CVE-2026-12151. undici WebSocket client vulnerable to denial of service via fragment count bypass. github.com/nodejs/undic...

Could, and I am not joking, be used recursively to avoid... the next Titanic. And as such, I am "pro" these recollections across the stack and architecture suite.

What's often left out of the discourse is that a highly specific takeaway like "[the] operating stats were available via a data bus that could be tapped through a standard RS-232 serial port." and "every time the value written to the port was 0, the modem software ignored it as a NULL-byte." ...

Last but not least: www.reddit.com/r/programmin...

How do we communicate such incidence is a more prescient question.

It is.... simply unavoidable. And yet much of modern progress has everything to do with the act of measurement in determining the quantities in algebra, determining a statistical minima... *adjust bow tie and runs away*

Acorn DevOps

Ulises Gascón

Acorn DevOps

## Impact The undici WebSocket client enforces `maxPayloadSize` on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSoc...

github.com

undici WebSocket client vulnerable to denial of service via fragment count bypass