GoKawiil
Tech News
A new report from The Data Drop examined 23 widely used open-source software projects and found 11 of them have only one or two active maintainers, often working without pay or adequate funding. The report cites past incidents like Shellshock, ImageMagick's exploited vulnerabilities, Log4Shell, and the libwebp zero-day as examples of how thinly staffed, ubiquitous code can produce major security failures.
A hobbyist web developer documented a method for building an animated 88x31 'website button' — a tiny web graphic format popular on retro and Small Web sites — that scrolls through the full text of Moby Dick. The project uses the TomThumb typeface, designed for legibility at very small sizes, combined with ImageMagick on a POSIX system to generate the GIF frames from a plain text copy of the novel.
Wordfence researchers using their Argus AI system found a critical heap buffer overflow in Ghostscript, the PostScript/PDF rendering engine used by tools like ImageMagick and WordPress's thumbnail generator. A malicious PDF embedding a JPEG 2000 image can force Ghostscript to write far more data than a buffer can hold, corrupting memory and allowing unauthenticated remote code execution. The bug affects Ghostscript versions 9.21 through 10.07.1 and was confirmed present across ten tested Linux distributions and an official WordPress Docker image.
A UI engineer who worked at Apple's online store from 2004-2006 shared how he redesigned the 'Personalize your iPod' page to replace a plain form with a rotatable iPod graphic, a live engraving preview, and a shipping-time highlight. The rotation used cycling JPEGs via JavaScript, ImageMagick generated the engraved text overlay, and CSS class swaps produced a yellow-fade effect to flag shipping changes. He notes a working demo of the old feature still exists.