Mastodon

> Cumulative Layout Shift (CLS): Layout shifts caused by ads, images without dimensions, or injected content can move elements between the time an agent identifies them and the time it attempts an interaction.

are we really doing “Agent pls click at 50x,50y”

A follow up here on action items (assuming you’re already using trusted publishers OIDC to scope releases to a single GitHub Action workflow):

1. Look for any `pull_request_target` GitHub Actions workflows! (this allows external forks/code to run your actions with write access ☠️☠️☠️☠️☠️)
2. Look for use of `cache` in your GitHub Actions release workflow (cache was poisoned/compromised by `pull_request_target` trigger)

Learn more about `pull_request_target`: https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/

I really like Google Search’s stated mission to “organize the world's information and make it universally accessible and useful” but I’m curious what organizations do y’all think are most ideally invested in that mission?

Wikipedia seems like an obvious one. Internet Archive seems like another. Any others?

@matthiasott I happened to notice https://matthiasott.com/uses that you use a Sony ZV-E10 with a Elgato Cam Link 4K on an Apple Silicon MacBook! I just recently got the Cam Link and am seeing the aspect ratio of the video coming out of the same camera as 4:3 (instead of 16:9) in https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/getUserMedia and in Slack. You wouldn’t happen to have solved that problem? 😅 if not, please ignore me!