Category: tech

CNBC Daily Open: China’s GDP meets official target, Apple has worst day in months – CNBC

  1. CNBC Daily Open: China’s GDP meets official target, Apple has worst day in months  CNBC
  2. China’s economy meets official growth target, but many feel worse off  Reuters
  3. China Hits 5% GDP Target But Trump Tariffs Threaten Further Growth  Bloomberg
  4. Barrage of Stimulus Powers Robust Chinese Growth—and Some Skepticism  The Wall Street Journal
  5. China Says Economy Grew 5% Last Year, Driven by Exports  The New York Times

Evacuations ordered, Highway 1 closed after fire at Moss Landing Power Plant – SFGATE

  1. Evacuations ordered, Highway 1 closed after fire at Moss Landing Power Plant  SFGATE
  2. One of world’s largest lithium battery plants ignites in Moss Landing  SFGATE
  3. Fire At One Of The World’s Largest Battery Storage Plants Triggers Evacuations Near Monterey Bay  Forbes
  4. Evacuations ordered in California after fire at battery power plant in Moss Landing  USA TODAY
  5. Top S&P 500 Stock Vistra Falls After Fire At California Battery Facility  Investor’s Business Daily

Rio Tinto and Glencore held talks about combining their businesses – Financial Times

  1. Rio Tinto and Glencore held talks about combining their businesses  Financial Times
  2. Asian Stocks Fall Ahead of Chinese Economic Data: Markets Wrap  Bloomberg
  3. Rio Tinto and Glencore discussed merger but talks no longer active, source says  Reuters
  4. Mining stocks rise after reports of Glencore, Rio Tinto merger talks; European markets resume rally  CNBC
  5. Mining giants plot £130bn mega-merger to ride net zero commodity boom  The Telegraph

Improving Fediverse Engagement With the Reactions Block

We believe in the open web and interoperability between online publishing platforms. That’s why we’re excited about the Fediverse and are committed to shipping features that improve the way your site connects to the open web. Today, we’re introducing Likes, Reposts, and the Fediverse Reactions block, building on our commitment to decentralized publishing.

Introducing the Reactions Block

With the Reactions Block, likes and reposts from Mastodon and other Fediverse platforms are automatically added to the end of your posts (if you’re using the Site Editor). It’s even smart enough to hide itself on posts without Reactions. Here’s a look at Fediverse reactions in action:

To disable or customize its placement, click “Edit Site” in the admin bar, select the Content block, and adjust the settings:

For older themes, you can manually add the block to any post or page.

But wait, that’s not all

We’ve been working over the past several months to improve your experience with WordPress.com. Here are two other recent enhancements we’re excited to share with you:

  • Push and email notifications. Get notified instantly when your posts are Liked or Reposted via the Jetpack app, dashboard, or email.
  • Reply to comments, federated. When someone comments from the Fediverse, your replies federate back, keeping the conversation visible on both sides. Likes and Reposts are treated like comments, allowing you to manage them directly in the WordPress admin interface. This feature has been live since early 2024, but it’s worth sharing now.

Have you connected your WordPress.com site to the Fediverse?

Fediverse integration is available to all WordPress.com users—including free plans—and for WordPress.org users via the ActivityPub plugin. We want to ensure that our tools are accessible to creators of all sizes, so that your work is accessible to all of your followers, everywhere.

Start receiving Likes, Reposts, and showcasing engagement today. Get started with our Enter the Fediverse guide.

Hello from the new Steering Council; and a quick temporary voting process change

Hello Django community! The Steering Council is officially in action and we want to give you a heads up on a change we’re making for the short-term.

The process for formal Steering Council votes (documented in DEP 10) has not been working.
It’s our goal for the community to refresh Django’s governance during the upcoming release cycle. In order to allow us to move forward now, and under supervision of the DSF Board, we are suspending use of the +1, 0, -1 public voting system in cases where a Steering Council consensus clearly exists. Instead, we will deliberate internally, summarize our opinions, and share that publicly (location and full details TBD).

We hope that this allows us to move faster on the smaller things we have in front of us currently. We appreciate all of your patience and look forward to what we all do together!

— The Django Steering Council: Carlton, Emma, Frank, Lilly, and Tim

Django 5.2 alpha 1 released

Django 5.2 alpha 1 is now available. It represents the first stage in the 5.2
release cycle and is an opportunity for you to try out the changes coming in
Django 5.2.

Django 5.2 brings a composite of new features which you can read about in
the in-development 5.2 release notes.

This alpha milestone marks the feature freeze. The current release schedule
calls for a beta release in about a month and a release candidate about a month
from then. We’ll only be able to keep this schedule if we get early and often
testing from the community. Updates on the release schedule are available on
the Django forum.

As with all alpha and beta packages, this is not for production use. But
if you’d like to take some of the new features for a spin, or to help find and
fix bugs (which should be reported to the issue tracker), you can grab a
copy of the alpha package from our downloads page or on PyPI.

The PGP key ID used for this release is Sarah Boyce: 3955B19851EA96EF

Django security releases issued: 5.1.5, 5.0.11, and 4.2.18

In accordance with our security release policy, the Django team
is issuing releases for
Django 5.1.5,
Django 5.0.11, and
Django 4.2.18.
These releases address the security issues detailed below. We encourage all
users of Django to upgrade as soon as possible.

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation

Lack of upper bound limit enforcement in strings passed when performing IPv6
validation could lead to a potential denial-of-service attack. The undocumented
and private functions clean_ipv6_address and is_valid_ipv6_address were
vulnerable, as was the django.forms.GenericIPAddressField form field,
which has now been updated to define a max_length of 39 characters.

The django.db.models.GenericIPAddressField model field was not affected.

Thanks to Saravana Kumar for the report.

This issue has severity “moderate” according to the Django security policy.

Affected supported versions

  • Django main
  • Django 5.1
  • Django 5.0
  • Django 4.2

Resolution

Patches to resolve the issue have been applied to Django’s
main, 5.1, 5.0, and 4.2 branches.
The patches may be obtained from the following changesets.

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation

The following releases have been issued

The PGP key ID used for this release is Natalia Bidart: 2EE82A8D9470983E

General notes regarding security reporting

As always, we ask that potential security issues be reported via private email
to [email protected], and not via Django’s Trac instance, nor via
the Django Forum, nor via the django-developers list. Please see our security
policies for further information.

Trump’s Cabinet picks face scrutiny on Capitol Hill this week as Biden prepares to say goodbye – CNN

  1. Trump’s Cabinet picks face scrutiny on Capitol Hill this week as Biden prepares to say goodbye  CNN
  2. Opinion | Which of Trump’s nominees should get confirmed? We made a chart.  The Washington Post
  3. Trump’s Cabinet picks are set for Senate hearings. Here’s the schedule  The Associated Press
  4. Confirmation Hearings Open in a Test of Trump’s Hold on Senate G.O.P.  The New York Times

Alleged looter dressed as fireman arrested in Pacific Palisades – KTLA Los Angeles

  1. Alleged looter dressed as fireman arrested in Pacific Palisades  KTLA Los Angeles
  2. LA fires death toll rises to 24 as high winds expected  BBC.com
  3. LA fire arrests: Man dressed as firefighter caught burglarizing home in Malibu area during California fires, sheriff says  ABC7 Los Angeles
  4. Amid Evacuations for the L.A. Fires, Fears of Looting Take Hold  The New York Times
  5. CA firefighters face impersonators, staffing shortages, low pay  NewsNation Now