<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Niklas&#39;s thoughts</title>
    <link>https://thoughts.pivic.com/</link>
    <description>Music and other stuff</description>
    <pubDate>Mon, 03 Aug 2026 22:47:52 +0200</pubDate>
    <item>
      <title>Aphex Twin - &#39;73-yips&#39;</title>
      <link>https://thoughts.pivic.com/aphex-twin-73-yips</link>
      <description>&lt;![CDATA[iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/F9GunhXShMA?si=FoCAW1--sBjAoc7R&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;When I bought the 12–inch Aphex Twin single On, I had heard just the title track.&#xA;&#xA;This b–side blew me away.&#xA;&#xA;#music #AphexTwin #techno #MusicTips ]]&gt;</description>
      <content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/F9GunhXShMA?si=FoCAW1--sBjAoc7R" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p>When I bought the 12–inch Aphex Twin single <em>On</em>, I had heard just the title track.</p>

<p>This b–side blew me away.</p>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:AphexTwin" class="hashtag"><span>#</span><span class="p-category">AphexTwin</span></a> <a href="https://thoughts.pivic.com/tag:techno" class="hashtag"><span>#</span><span class="p-category">techno</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/aphex-twin-73-yips</guid>
      <pubDate>Thu, 30 Jul 2026 09:50:06 +0200</pubDate>
    </item>
    <item>
      <title>Television - &#39;See No Evil&#39;</title>
      <link>https://thoughts.pivic.com/television-see-no-evil</link>
      <description>&lt;![CDATA[iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/a7L0IYPXKj8?si=7wmblYezMisLUROo&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;If justice prevailed, the surviving members of Television should be on dollar bills in the USA. This album is a masterpiece. I could have posted any song above. OK, fuck it:&#xA;&#xA;iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/g4myghLPLZc?si=dGlGvCdpLsOJMDBn&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;Tom Verlaine, the main mind behind Television, took his stage name from Paul Verlaine which kind of says a lot about the music. But the music is North American. There&#39;s jazz. There&#39;s guitars played like Coltrane, to paraphrase what Verlaine wanted.&#xA;&#xA;I love how we can clearly hear the instruments and voice all cleanly separated in the mix. This is wonderful music. The lyrics aren&#39;t the sharpest tool in the box, but what the fuck, that&#39;s partly why they&#39;re perfect.&#xA;&#xA;  What I want  &#xA;  I want now  &#xA;  And it&#39;s a whole lot more  &#xA;  Than &#34;anyhow&#34;&#xA;  I wanna fly, fly a fountain  &#xA;  I wanna jump, jump, jump, a-jump  &#xA;  On a mountain&#xA;&#xA;#music #Television #TomVerlaine #RichardHell #rock #MusicTips]]&gt;</description>
      <content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/a7L0IYPXKj8?si=7wmblYezMisLUROo" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p>If justice prevailed, the surviving members of Television should be on dollar bills in the USA. This album is a masterpiece. I could have posted any song above. OK, fuck it:</p>

<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/g4myghLPLZc?si=dGlGvCdpLsOJMDBn" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p><a href="https://en.wikipedia.org/wiki/Tom_Verlaine">Tom Verlaine</a>, the main mind behind Television, took his stage name from <a href="https://www.poetryfoundation.org/poets/paul-verlaine">Paul Verlaine</a> which kind of says a lot about the music. But the music is North American. There&#39;s jazz. There&#39;s guitars played like Coltrane, to paraphrase what Verlaine wanted.</p>

<p>I love how we can clearly hear the instruments and voice all cleanly separated in the mix. This is wonderful music. The lyrics aren&#39;t the sharpest tool in the box, but what the fuck, that&#39;s partly why they&#39;re perfect.</p>

<blockquote><p>What I want<br>
I want now<br>
And it&#39;s a whole lot more<br>
Than “anyhow”
I wanna fly, fly a fountain<br>
I wanna jump, jump, jump, a-jump<br>
On a mountain</p></blockquote>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:Television" class="hashtag"><span>#</span><span class="p-category">Television</span></a> <a href="https://thoughts.pivic.com/tag:TomVerlaine" class="hashtag"><span>#</span><span class="p-category">TomVerlaine</span></a> <a href="https://thoughts.pivic.com/tag:RichardHell" class="hashtag"><span>#</span><span class="p-category">RichardHell</span></a> <a href="https://thoughts.pivic.com/tag:rock" class="hashtag"><span>#</span><span class="p-category">rock</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/television-see-no-evil</guid>
      <pubDate>Thu, 23 Jul 2026 08:04:57 +0200</pubDate>
    </item>
    <item>
      <title>Aesop Rock - &#39;Mystery Fish&#39;</title>
      <link>https://thoughts.pivic.com/aesop-rock-mystery-fish</link>
      <description>&lt;![CDATA[iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/Q9T9E4lWiyw?si=t7Bkn-kMCewtX32J&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;Aesop Rock is, for me, a hit-and-miss rapper. I don&#39;t mean he&#39;s bad at times: he&#39;s very good all of the time; for me, I can&#39;t take more of his intense lyrical delivery a few songs at a time. To me, he&#39;s like a speech-therapist&#39;s dream version of Run The Jewels.&#xA;&#xA;This track just rocks. I love the build-up synthy intro; the song is the intro to the album The Impossible Kid. The horns in the song work so well with the beats and Aesop&#39;s rap. The lyrics have a lot to unpack.&#xA;&#xA;#music #rap #MusicTips #AesopRock]]&gt;</description>
      <content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/Q9T9E4lWiyw?si=t7Bkn-kMCewtX32J" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p><a href="https://en.wikipedia.org/wiki/Aesop_Rock">Aesop Rock</a> is, for me, a hit-and-miss rapper. I don&#39;t mean he&#39;s bad at times: he&#39;s very good <em>all of the time</em>; for me, I can&#39;t take more of his intense lyrical delivery a few songs at a time. To me, he&#39;s like a speech-therapist&#39;s dream version of <a href="https://en.wikipedia.org/wiki/Run_the_Jewels">Run The Jewels</a>.</p>

<p>This track just rocks. I love the build-up synthy intro; the song is the intro to the album <em>The Impossible Kid</em>. The horns in the song work so well with the beats and Aesop&#39;s rap. <a href="https://genius.com/9057606">The lyrics</a> have a lot to unpack.</p>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:rap" class="hashtag"><span>#</span><span class="p-category">rap</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a> <a href="https://thoughts.pivic.com/tag:AesopRock" class="hashtag"><span>#</span><span class="p-category">AesopRock</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/aesop-rock-mystery-fish</guid>
      <pubDate>Thu, 23 Jul 2026 07:48:35 +0200</pubDate>
    </item>
    <item>
      <title>Shane Parish - &#39;Maetl&#39;</title>
      <link>https://thoughts.pivic.com/shane-parish-maetl</link>
      <description>&lt;![CDATA[iframe style=&#34;border: 0; width: 350px; height: 537px;&#34; src=&#34;https://bandcamp.com/EmbeddedPlayer/album=940875574/size=large/bgcol=ffffff/linkcol=0687f5/package=2003173180/tracklist=false/transparent=true/&#34; seamlessa href=&#34;https://shaneparish.bandcamp.com/album/autechre-guitar-2&#34;Autechre Guitar by Shane Parish/a/iframe&#xA;&#xA;Shane Parish has made an album of Autechre covers on guitar. In other words, he&#39;s turned one of electronic music&#39;s grand ole acts of glitchy, instrumental electronic music into acoustic-guitar stuff. It&#39;s wonderful!&#xA;&#xA;Example:&#xA;&#xA;iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/VkQPG5eELe0?si=UEEcSJ7OWJMPFhtg&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;The original version:&#xA;&#xA;iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/lArXV1kiC3Y?si=EgkUooLpPeDWdyzd&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;#music #MusicTips #Autechre #ShaneParish #guitar #Warp]]&gt;</description>
      <content:encoded><![CDATA[<iframe style="border: 0; width: 350px; height: 537px;" src="https://bandcamp.com/EmbeddedPlayer/album=940875574/size=large/bgcol=ffffff/linkcol=0687f5/package=2003173180/tracklist=false/transparent=true/">&lt;a href=&#34;https://shaneparish.bandcamp.com/album/autechre-guitar-2&#34;&gt;Autechre Guitar by Shane Parish&lt;/a&gt;</iframe>

<p>Shane Parish has made an album of Autechre covers on guitar. In other words, he&#39;s turned one of electronic music&#39;s grand ole acts of glitchy, instrumental electronic music into acoustic-guitar stuff. It&#39;s wonderful!</p>

<p>Example:</p>

<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/VkQPG5eELe0?si=UEEcSJ7OWJMPFhtg" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p>The original version:</p>

<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/lArXV1kiC3Y?si=EgkUooLpPeDWdyzd" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a> <a href="https://thoughts.pivic.com/tag:Autechre" class="hashtag"><span>#</span><span class="p-category">Autechre</span></a> <a href="https://thoughts.pivic.com/tag:ShaneParish" class="hashtag"><span>#</span><span class="p-category">ShaneParish</span></a> <a href="https://thoughts.pivic.com/tag:guitar" class="hashtag"><span>#</span><span class="p-category">guitar</span></a> <a href="https://thoughts.pivic.com/tag:Warp" class="hashtag"><span>#</span><span class="p-category">Warp</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/shane-parish-maetl</guid>
      <pubDate>Wed, 22 Jul 2026 08:03:43 +0200</pubDate>
    </item>
    <item>
      <title>The current political repression in Serbia</title>
      <link>https://thoughts.pivic.com/the-current-political-repression-in-serbia</link>
      <description>&lt;![CDATA[yu1&#xA;&#xA;yu2&#xA;&#xA;yu3&#xA;&#xA;yu4&#xA;&#xA;yu5&#xA;&#xA;yu6&#xA;&#xA;yu7&#xA;&#xA;yu8&#xA;&#xA;This is not new; this is on par with the usual behaviours of desperate despots. Their time will come.&#xA;&#xA;More about this is found in an article by Balkan Insight.&#xA;&#xA;Aleksandar Vučić, the despot in this case, will be gone soon but not soon enough. The people of Serbia know the score.&#xA;&#xA;#Serbia #despot #dictator #politics #AleksandarVucic #repression]]&gt;</description>
      <content:encoded><![CDATA[<p><img src="https://files.catbox.moe/xkti9k.jpg" alt="yu1"></p>

<p><img src="https://files.catbox.moe/8fvhph.jpg" alt="yu2"></p>

<p><img src="https://files.catbox.moe/91nq5l.jpg" alt="yu3"></p>

<p><img src="https://files.catbox.moe/h3ffwr.jpg" alt="yu4"></p>

<p><img src="https://files.catbox.moe/abksg0.jpg" alt="yu5"></p>

<p><img src="https://files.catbox.moe/sl4o7g.jpg" alt="yu6"></p>

<p><img src="https://files.catbox.moe/wy2ci7.jpg" alt="yu7"></p>

<p><img src="https://files.catbox.moe/i1yhxh.jpg" alt="yu8"></p>

<p>This is not new; this is on par with the usual behaviours of desperate despots. Their time will come.</p>

<p>More about this is found in <a href="https://balkaninsight.com/2026/07/20/cancelled-serbian-musicians-pay-price-of-anti-government-protest-support/bi/">an article by Balkan Insight</a>.</p>

<p>Aleksandar Vučić, the despot in this case, will be gone soon but not soon enough. The people of Serbia <a href="https://en.wikipedia.org/wiki/2024%E2%80%93present_Serbian_anti-corruption_protests">know the score</a>.</p>

<p><a href="https://thoughts.pivic.com/tag:Serbia" class="hashtag"><span>#</span><span class="p-category">Serbia</span></a> <a href="https://thoughts.pivic.com/tag:despot" class="hashtag"><span>#</span><span class="p-category">despot</span></a> <a href="https://thoughts.pivic.com/tag:dictator" class="hashtag"><span>#</span><span class="p-category">dictator</span></a> <a href="https://thoughts.pivic.com/tag:politics" class="hashtag"><span>#</span><span class="p-category">politics</span></a> <a href="https://thoughts.pivic.com/tag:AleksandarVucic" class="hashtag"><span>#</span><span class="p-category">AleksandarVucic</span></a> <a href="https://thoughts.pivic.com/tag:repression" class="hashtag"><span>#</span><span class="p-category">repression</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/the-current-political-repression-in-serbia</guid>
      <pubDate>Tue, 21 Jul 2026 08:03:16 +0200</pubDate>
    </item>
    <item>
      <title>π. Διονύσιος Ταμπάκης - &#39;Φῶς Ἱλαρόν καὶ Ἠλεκτρικόν&#39;</title>
      <link>https://thoughts.pivic.com/p</link>
      <description>&lt;![CDATA[iframe style=&#34;border: 0; width: 350px; height: 470px;&#34; src=&#34;https://bandcamp.com/EmbeddedPlayer/album=4087667960/size=large/bgcol=ffffff/linkcol=0687f5/tracklist=false/track=702093665/transparent=true/&#34; seamlessa href=&#34;https://heatcrimes.bandcamp.com/album/paradise-metal&#34;Paradise Metal by π. Διονύσιος Ταμπάκης/a/iframe&#xA;&#xA;A Greek-orthodox priest who releases &#39;metal&#39; is cool.&#xA;The album cover is made for cassette tape, which is cool.&#xA;There&#39;s a Proton Mail e-mail address on the cassette cover, which is also cool.&#xA;&#xA;All of those points are spoken by my twelve-year-old metal self (who never existed really because I discovered metal in my forties).&#xA;&#xA;There&#39;s an interview with Father Tabakis here. Maybe there&#39;s no reason to fear the priest?&#xA;&#xA;#music #MusicTips #metal ]]&gt;</description>
      <content:encoded><![CDATA[<iframe style="border: 0; width: 350px; height: 470px;" src="https://bandcamp.com/EmbeddedPlayer/album=4087667960/size=large/bgcol=ffffff/linkcol=0687f5/tracklist=false/track=702093665/transparent=true/">&lt;a href=&#34;https://heatcrimes.bandcamp.com/album/paradise-metal&#34;&gt;Paradise Metal by π. Διονύσιος Ταμπάκης&lt;/a&gt;</iframe>
<ol><li>A Greek-orthodox priest who releases &#39;metal&#39; is cool.</li>
<li>The album cover is made for cassette tape, which is cool.</li>
<li>There&#39;s a Proton Mail e-mail address on the cassette cover, which is also cool.</li></ol>

<p>All of those points are spoken by my twelve-year-old metal self (who never existed really because I discovered metal in my forties).</p>

<p>There&#39;s an interview with Father Tabakis <a href="https://www.theguardian.com/music/2026/jul/02/father-tabakis-greek-priest-doom-paradise-metal">here</a>. Maybe there&#39;s no reason to <a href="https://www.imdb.com/title/tt0070047/quotes/?item=qt0380670">fear the priest</a>?</p>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a> <a href="https://thoughts.pivic.com/tag:metal" class="hashtag"><span>#</span><span class="p-category">metal</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/p</guid>
      <pubDate>Tue, 21 Jul 2026 07:45:21 +0200</pubDate>
    </item>
    <item>
      <title>WriteFreely and security issues</title>
      <link>https://thoughts.pivic.com/writefreely-and-security-issues</link>
      <description>&lt;![CDATA[writefreely&#xA;&#xA;On 2026-04-26 a critical bug was registered to show that anybody could create a user account even if the administrator of a WriteFreely instance disallowed the registration of user accounts. The person who logged the bug added this information:&#xA;&#xA;  PS: not sure if it&#39;s actually a security issue, but we tried to reach out to security@writefreely.org beforehand, but haven&#39;t received a reply&#xA;&#xA;The fix was merged into code two weeks ago.&#xA;&#xA;The release to fix the problem was published ten hours ago. At the same time, WriteFreely posted this on Mastodon:&#xA;&#xA;  Most importantly, this fixes an issue where malicious actors can create accounts on closed-registration #WriteFreely instances running the previous v0.16 or below. We&#39;ve heard reports of this ACTIVELY being exploited today across many WriteFreely instances -- multi- and single-user. We advise ALL WriteFreely admins to upgrade immediately. You may also notice many unwanted accounts on your instance that need to be manually cleaned up. We&#39;ll be adding admin tools to make this quicker soon.&#xA;&#xA;Two days ago, a person commented on the bug fix. The person made some points:&#xA;&#xA;  [...]&#xA;    Today, I discovered more than 150 automatically created accounts on my instance, which was configured with registrations closed and invitations restricted to administrators. Each account immediately published a spam post.&#xA;    We are talking about a complete bypass of the registration access control, which allows attackers to:&#xA;    - Create unlimited accounts without authorization.&#xA;  - Publish spam or malicious content under the instance’s domain.&#xA;  - Consume storage and server resources.&#xA;  - Damage the domain’s reputation.&#xA;  - Potentially access private content on instances where authenticated users have additional permissions.&#xA;    This issue was reported months ago and acknowledged as unintended behavior:&#xA;    “This isn&#39;t by design, and did need to be fixed.”&#xA;    However, it was deferred to a future release, without publishing a security update, notifying administrators, or providing an official mitigation. In the meantime, the vulnerable endpoint is actively being exploited.&#xA;    A vulnerability of this severity should not have to wait for the next regular release. A corrective version, even if it is simply 0.16.1, should be released immediately, together with a security advisory warning all WriteFreely administrators.&#xA;    [...]&#xA;    Please release a security update immediately and clearly notify administrators. It is not acceptable to leave a publicly exploitable endpoint available for months when it completely invalidates the closed-registration setting.&#xA;&#xA;I just had to manually connect to my instance and use mysql commands to manually delete a number of users.&#xA;&#xA;Don&#39;t get me wrong: I&#39;m grateful to use WriteFreely and I&#39;m grateful to its makers. However, the critique should be taken seriously. WriteFreely does generate money for its maker. To wait nearly three months to fix what WriteFreely themselves seem to infer to as a &#39;critical security fix&#39; is extremely bad. I&#39;m considering to migrate from WriteFreely to a static site generator, for example, Mataroa, where I host another blog.]]&gt;</description>
      <content:encoded><![CDATA[<p><img src="https://p.kagi.com/proxy/cd618b80-cee7-11e9-8579-e6a6e8f21ddb?c=oX1P442RjCH0M-gV8Dimf1sTtugC8qcyD8RpYFCmQTqdc8Q3V5cGgTH_YtC2gp89-C73jlWE_7ZF7VV4kSwlpXZRdPJrsZ_ngjAg9-Jz1I5WL3WM_8tTKWvT_AMf6NXqD__QNnGiyXEMPL-idWl5LQ%3D%3D" alt="writefreely"></p>

<p>On 2026-04-26 <a href="https://github.com/writefreely/writefreely/issues/1649">a critical bug</a> was registered to show that anybody could create a user account even if the administrator of a WriteFreely instance disallowed the registration of user accounts. The person who logged the bug added this information:</p>

<blockquote><p>PS: not sure if it&#39;s actually a security issue, but we tried to reach out to <a href="mailto:security@writefreely.org">security@writefreely.org</a> beforehand, but haven&#39;t received a reply</p></blockquote>

<p>The fix was merged into code <a href="https://github.com/writefreely/writefreely/pull/1686#issuecomment-4879583999">two weeks ago</a>.</p>

<p>The <a href="https://github.com/writefreely/writefreely/releases/tag/v0.17.0">release to fix the problem</a> was published ten hours ago. At the same time, <a href="https://writing.exchange/@writefreely/116937985462214581">WriteFreely posted this on Mastodon</a>:</p>

<blockquote><p>Most importantly, this fixes an issue where malicious actors can create accounts on closed-registration <a href="https://kolektiva.social/tags/WriteFreely"><a href="https://thoughts.pivic.com/tag:WriteFreely" class="hashtag"><span>#</span><span class="p-category">WriteFreely</span></a></a> instances running the previous v0.16 or below. We&#39;ve heard reports of this ACTIVELY being exploited today across many WriteFreely instances — multi- and single-user. We advise ALL WriteFreely admins to upgrade immediately. You may also notice many unwanted accounts on your instance that need to be manually cleaned up. We&#39;ll be adding admin tools to make this quicker soon.</p></blockquote>

<p>Two days ago, a person <a href="https://github.com/writefreely/writefreely/issues/1649#issuecomment-4996036285">commented on the bug fix</a>. The person made some points:</p>

<blockquote><p>[...]</p>

<p>Today, I discovered more than 150 automatically created accounts on my instance, which was configured with registrations closed and invitations restricted to administrators. Each account immediately published a spam post.</p>

<p>We are talking about a complete bypass of the registration access control, which allows attackers to:</p>
<ul><li>Create unlimited accounts without authorization.</li>
<li>Publish spam or malicious content under the instance’s domain.</li>
<li>Consume storage and server resources.</li>
<li>Damage the domain’s reputation.</li>
<li>Potentially access private content on instances where authenticated users have additional permissions.</li></ul>

<p>This issue was reported months ago and acknowledged as unintended behavior:</p>

<p>“This isn&#39;t by design, and did need to be fixed.”</p>

<p>However, it was deferred to a future release, without publishing a security update, notifying administrators, or providing an official mitigation. In the meantime, the vulnerable endpoint is actively being exploited.</p>

<p>A vulnerability of this severity should not have to wait for the next regular release. A corrective version, even if it is simply <code>0.16.1</code>, should be released immediately, together with a security advisory warning all WriteFreely administrators.</p>

<p>[...]</p>

<p>Please release a security update immediately and clearly notify administrators. It is not acceptable to leave a publicly exploitable endpoint available for months when it completely invalidates the closed-registration setting.</p></blockquote>

<p>I just had to manually connect to my instance and use mysql commands to manually delete a number of users.</p>

<p>Don&#39;t get me wrong: I&#39;m grateful to use WriteFreely and I&#39;m grateful to its makers. However, the critique should be taken seriously. WriteFreely does generate money for its maker. To wait nearly three months to fix what WriteFreely themselves <a href="https://writing.exchange/@writefreely/116937920745292055">seem to infer to</a> as a &#39;critical security fix&#39; is extremely bad. I&#39;m considering to migrate from WriteFreely to a static site generator, for example, <a href="https://pivic.blog/blog/mataroa/">Mataroa</a>, where I host another blog.</p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/writefreely-and-security-issues</guid>
      <pubDate>Sat, 18 Jul 2026 11:35:23 +0200</pubDate>
    </item>
    <item>
      <title>Gold Panda - &#39;Loser Mentality&#39;</title>
      <link>https://thoughts.pivic.com/gold-panda-loser-mentality</link>
      <description>&lt;![CDATA[iframe style=&#34;border: 0; width: 350px; height: 853px;&#34; src=&#34;https://bandcamp.com/EmbeddedPlayer/album=1930311459/size=large/bgcol=ffffff/linkcol=0687f5/package=3701885923/transparent=true/&#34; seamlessa href=&#34;https://goldpanda.bandcamp.com/album/ton-up&#34;TON UP by Gold Panda/a/iframe&#xA;&#xA;Gold Panda&#39;s latest album, TON UP, is exactly what I need this morning: hi-energy house that deeply reminds me of the old Paris is Burning style of life.&#xA;&#xA;This album is a lot of fun and high-tempo throughout. Somehow, this album makes me think of SebastiAn&#39;s recent DJ session at Peacock Society.&#xA;&#xA;iframe title=&#34;SebastiAn live at Peacock Society, 2026&#34; width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://peertube.wtf/videos/embed/gZwD4otRhj3sB2pdEXhyqT&#34; style=&#34;border: 0px;&#34; allow=&#34;fullscreen&#34; sandbox=&#34;allow-same-origin allow-scripts allow-popups allow-forms&#34;/iframe&#xA;&#xA;#music #MusicTips #GoldPanda #EdBanger #SebastiAn #HighEnergy #house #techno ]]&gt;</description>
      <content:encoded><![CDATA[<iframe style="border: 0; width: 350px; height: 853px;" src="https://bandcamp.com/EmbeddedPlayer/album=1930311459/size=large/bgcol=ffffff/linkcol=0687f5/package=3701885923/transparent=true/">&lt;a href=&#34;https://goldpanda.bandcamp.com/album/ton-up&#34;&gt;TON UP by Gold Panda&lt;/a&gt;</iframe>

<p>Gold Panda&#39;s latest album, <em><a href="https://goldpanda.bandcamp.com/album/ton-up">TON UP</a></em>, is exactly what I need this morning: hi-energy house that deeply reminds me of the old Paris is Burning style of life.</p>

<p>This album is a lot of fun and high-tempo throughout. Somehow, this album makes me think of SebastiAn&#39;s recent DJ session at Peacock Society.</p>

<iframe title="SebastiAn live at Peacock Society, 2026" width="560" height="315" src="https://peertube.wtf/videos/embed/gZwD4otRhj3sB2pdEXhyqT" style="border: 0px;"></iframe>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a> <a href="https://thoughts.pivic.com/tag:GoldPanda" class="hashtag"><span>#</span><span class="p-category">GoldPanda</span></a> <a href="https://thoughts.pivic.com/tag:EdBanger" class="hashtag"><span>#</span><span class="p-category">EdBanger</span></a> <a href="https://thoughts.pivic.com/tag:SebastiAn" class="hashtag"><span>#</span><span class="p-category">SebastiAn</span></a> <a href="https://thoughts.pivic.com/tag:HighEnergy" class="hashtag"><span>#</span><span class="p-category">HighEnergy</span></a> <a href="https://thoughts.pivic.com/tag:house" class="hashtag"><span>#</span><span class="p-category">house</span></a> <a href="https://thoughts.pivic.com/tag:techno" class="hashtag"><span>#</span><span class="p-category">techno</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/gold-panda-loser-mentality</guid>
      <pubDate>Tue, 14 Jul 2026 07:34:24 +0200</pubDate>
    </item>
    <item>
      <title>Tomma Intet - &#39;Tidöd&#39;</title>
      <link>https://thoughts.pivic.com/tomma-intet-tidod</link>
      <description>&lt;![CDATA[iframe style=&#34;border: 0; width: 350px; height: 470px;&#34; src=&#34;https://bandcamp.com/EmbeddedPlayer/album=4164038599/size=large/bgcol=ffffff/linkcol=0687f5/tracklist=false/track=3493609456/transparent=true/&#34; seamlessa href=&#34;https://tommaintet.bandcamp.com/album/g-varsamt-h-r-vilar-en-dr-m&#34;Gå varsamt, här vilar en dröm by TOMMA INTET/a/iframe&#xA;&#xA;In a few months, it&#39;s election time in Sweden. The Tidö parties are probably going to lose, which is the best thing for anyone. They&#39;re a pack of xenophobic power-hungry political parties that engage in power, disguising their desires as ideology.&#xA;&#xA;Tomma Intet are a Swedish indie-rock collective. Imagine a Californian sect that&#39;ve been forced to sing choral hymns and gorge themselves only on music by The Radio Dept. Here you are. This song is sweet and dreamy. Kind of like something that George Harrison would have made and added a prog drive.&#xA;&#xA;The chorus goes like this:&#xA;&#xA;  Själlösa jävla parasiter&#xA;  ni kan dra åt helvete&#xA;&#xA;...which translates to something like this; translation by yours truly:&#xA;&#xA;  Soulless fucking parasites&#xA;  go to hell&#xA;&#xA;If that&#39;s not love, what is.&#xA;&#xA;#music #MusicTips #TommaIntet #rock]]&gt;</description>
      <content:encoded><![CDATA[<iframe style="border: 0; width: 350px; height: 470px;" src="https://bandcamp.com/EmbeddedPlayer/album=4164038599/size=large/bgcol=ffffff/linkcol=0687f5/tracklist=false/track=3493609456/transparent=true/">&lt;a href=&#34;https://tommaintet.bandcamp.com/album/g-varsamt-h-r-vilar-en-dr-m&#34;&gt;Gå varsamt, här vilar en dröm by TOMMA INTET&lt;/a&gt;</iframe>

<p>In a few months, it&#39;s election time in Sweden. The <a href="https://garden.pivic.com/politics/the-tidoe-parties/">Tidö parties</a> are probably going to lose, which is the best thing for anyone. They&#39;re a pack of xenophobic power-hungry political parties that engage in power, disguising their desires as ideology.</p>

<p><a href="https://tommaintet.se/">Tomma Intet</a> are a Swedish indie-rock collective. Imagine a Californian sect that&#39;ve been forced to sing choral hymns and gorge themselves only on music by The Radio Dept. Here you are. This song is sweet and dreamy. Kind of like something that George Harrison would have made and added a prog drive.</p>

<p>The chorus goes like this:</p>

<blockquote><p>Själlösa jävla parasiter
ni kan dra åt helvete</p></blockquote>

<p>...which translates to something like this; translation by yours truly:</p>

<blockquote><p>Soulless fucking parasites
go to hell</p></blockquote>

<p>If that&#39;s not love, what is.</p>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a> <a href="https://thoughts.pivic.com/tag:TommaIntet" class="hashtag"><span>#</span><span class="p-category">TommaIntet</span></a> <a href="https://thoughts.pivic.com/tag:rock" class="hashtag"><span>#</span><span class="p-category">rock</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/tomma-intet-tidod</guid>
      <pubDate>Mon, 13 Jul 2026 07:59:00 +0200</pubDate>
    </item>
    <item>
      <title>Will Sheff - &#39;Extra Mile&#39;</title>
      <link>https://thoughts.pivic.com/will-sheff-extra-mile</link>
      <description>&lt;![CDATA[extra-mile&#xA;&#xA;iframe style=&#34;border: 0; width: 350px; height: 753px;&#34; src=&#34;https://bandcamp.com/EmbeddedPlayer/album=2110141527/size=large/bgcol=ffffff/linkcol=0687f5/transparent=true/&#34; seamlessa href=&#34;https://okkervilriver.bandcamp.com/album/extra-mile-will-sheff-solo-album&#34;Extra Mile (Will Sheff Solo Album) by Okkervil River/a/iframe&#xA;&#xA;Today dear Will Sheff releases his sophomore album, Extra Mile. It&#39;s a good leap from his first album, Nothing Special.&#xA;&#xA;iframe width=&#34;560&#34; height=&#34;315&#34; src=&#34;https://www.youtube-nocookie.com/embed/qpJEFCkrgZE?si=cTrR3Vl8VeYTUuCd&#34; title=&#34;YouTube video player&#34; frameborder=&#34;0&#34; allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; allowfullscreen/iframe&#xA;&#xA;Will once co-founded Okkervil River and Shearwater, two bands that I love. He&#39;s now making thoughtful, visceral, and lovely music to which we hum and swing our hips.&#xA;&#xA;#music #MusicTips #WillSheff #OkkervilRiver #Shearwater]]&gt;</description>
      <content:encoded><![CDATA[<p><img src="https://f4.bcbits.com/img/a4139992714_10.jpg" alt="extra-mile"></p>

<iframe style="border: 0; width: 350px; height: 753px;" src="https://bandcamp.com/EmbeddedPlayer/album=2110141527/size=large/bgcol=ffffff/linkcol=0687f5/transparent=true/">&lt;a href=&#34;https://okkervilriver.bandcamp.com/album/extra-mile-will-sheff-solo-album&#34;&gt;Extra Mile (Will Sheff Solo Album) by Okkervil River&lt;/a&gt;</iframe>

<p>Today dear Will Sheff releases his sophomore album, <em><a href="https://okkervilriver.bandcamp.com/album/extra-mile-will-sheff-solo-album">Extra Mile</a></em>. It&#39;s a good leap from his first album, <em><a href="https://willsheff.bandcamp.com/album/nothing-special">Nothing Special</a></em>.</p>

<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/qpJEFCkrgZE?si=cTrR3Vl8VeYTUuCd" title="YouTube video player" frameborder="0" allowfullscreen=""></iframe>

<p>Will once co-founded Okkervil River and Shearwater, two bands that I love. He&#39;s now making thoughtful, visceral, and lovely music to which we hum and swing our hips.</p>

<p><a href="https://thoughts.pivic.com/tag:music" class="hashtag"><span>#</span><span class="p-category">music</span></a> <a href="https://thoughts.pivic.com/tag:MusicTips" class="hashtag"><span>#</span><span class="p-category">MusicTips</span></a> <a href="https://thoughts.pivic.com/tag:WillSheff" class="hashtag"><span>#</span><span class="p-category">WillSheff</span></a> <a href="https://thoughts.pivic.com/tag:OkkervilRiver" class="hashtag"><span>#</span><span class="p-category">OkkervilRiver</span></a> <a href="https://thoughts.pivic.com/tag:Shearwater" class="hashtag"><span>#</span><span class="p-category">Shearwater</span></a></p>
]]></content:encoded>
      <guid>https://thoughts.pivic.com/will-sheff-extra-mile</guid>
      <pubDate>Fri, 10 Jul 2026 10:40:30 +0200</pubDate>
    </item>
  </channel>
</rss>