This is a strong contender for best 404 page Easter egg:

https://music.apple.com/404

I’m glad to see the maintainer problem getting more popular attention:

https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/?gift=nwn-guseqS6cY1kVeEKZAV4eM30ZQanhnWOnf22yy-c

All of the CRITICAL CVEs are patched, time to take a big swig of coffee and get back to regular wor…

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/

#infosec #doomed #gitlab

RE: https://mastodon.social/@Viss/117475756759987593

This is going to be, what, the fourth month in a row where NetScaler has a CRITICAL, isn’t it?

Fun discovery from the #eMudhra mess: Java's keytool will claim to but not actually delete certificates from the root cacerts keystore!

If you’re looking for some Friday listening, Vienna Teng just made hours of free live sets available from this index:

https://docs.google.com/spreadsheets/u/1/d/1SKyAWWRJDOJwLkoI6pNj9B0RAnHuSK5wMx3Lw0xeJEU/htmlview

#music #ViennaTeng

Thinking about the state of the industry while noting that for all the jokes about private browsing being “porn mode”, I only use it for logging into Facebook long enough to promote a friend’s business without contaminating my browser’s storage.

QFT: “it’s no secret that I hate PGP, and I think you should just never use it to communicate, but alas it’s the only ecosystem that easily taps into cheap hardware tokens, which are a concrete step up in security, and at least you can rotate them” — @filippo

https://words.filippo.io/touch-to-operate-password-store-yubikey-4/

OpenSSH 8.2+ have easier support for SSH keys derived from FIDO-2 tokens but Git code signing is far too complicated to expect people to use it pervasively.

Having to educate the Booking.com people that Washington DC should be an option for the state on a credit card form…

@mitsuhiko it's been a while since I've seen an update on Gondolin and I was wondering how mature you consider that project to be. Is that getting daily use at Earendil?

Still snickering at the guys who gave root to an unaccountable bot and then pretend the bot is responsible for their management failure. AI makes these mistakes more frequently but the story works the same way if you replace “AI” with “An Intern” or “random stranger off the street”—not having backups or review was the real failure.

https://xcancel.com/lifeof_jer/status/2048239829914423543

I'm mostly impressed that this ambiguity in the DNS spec wasn't hit before 2026:

https://blog.cloudflare.com/cname-a-record-order-dns-standards/

Quite a pleasant little hike and view before leaving #pyconus if you’re so inclined

Great questions posed by @treyhunner to the #pyconus community about being more thoughtful about LLMs.

n=small but if you are walking
around the Acela going into NYC, most of the laptops have PowerPoint and Excel open. Going into Boston, it’s Visual Studio Code.

Our modern economy summed up in a headline everyone would have laughed at 5 years ago:
https://infosec.exchange/@josephcox/113834223222971264

Wasn’t it security last year? Good thing they solved that. https://mastodon.social/@arstechnica/113828719059353939

The U.S. Library of Congress is hiring an IT project manager:

https://www.usajobs.gov/job/821087000

#GetFediHired cc: @jobs

Oh, yeah, that’ll do it:

“built by Deloitte and other contractors for more than $400 million”
https://gizmodo.com/judge-rules-400-million-algorithmic-system-illegally-denied-thousands-of-peoples-medicaid-benefits-2000492529

Let's turn up logging on Kubernetes. How big could it be for one app?