Meanwhile Rossmann 😂
#Idontknowhowtotagthis

Go to a factory pub and talk about how much you made from shutting the local factory down, you're going to get punched in the teeth. The witnesses will all think you deserved it

Brag about "AI" near people who know illustrators, translators or copywriters and you'll get the social media equivalent

And the witnesses will all think you deserved it

CSS-TRICKS HAS A NEW OWNER! https://css-tricks.com/css-tricks-has-a-new-owner/ #CSS

RE: https://mastodon.social/@regehr/117491484854266704

…

people who make jokes about DEI initiatives in the military most likely do not know or remember that the desegregation of the american army was a strong impulse for desegregation in other places.

one can dislike the military as the concept, but ignoring the reality where it is a part of the society is plainly foolish.

The FOSDEM organising team has rejected a proposal for a DEI room at FOSDEM 2027.

I am proposing the FOSDEM Pledge to make up for it.

Will you take the pledge?

https://writing.jan.io/2026/10/22/the-fosdem-pledge.html

#fosdem #fosdem2027

RE: https://mastodon.com.pl/@lgrochal/117490082919443792

Love this!

@ondrej @remi @aloxe Ahh, so it's more like...

some of the comments I see about PHP tell me that apparently a significant portion of developers have not learned a SINGLE THING about "community" and god forbid SOLIDARITY during the last two years of AI.

instead LITERALLY at the very next opportunity people bitch about PHP - finally! somebody to beat down on! jippie!

THEY ARE ONE OF US

for what it's worth, i do not share the visceral hate for php: there are worse languages. and i'm a system operator, not a code poet, seeing prose instead of refined stanzas doesn't offend my sensibilities.

and while there are better languages, they rarely come with equal ease and convenience of runtime management using system tools.

(no, running everything in a separate container is not that. and installation documentation that describes only where to get the docker images is not documentation, it's lazy and sloppy job.)

RE: https://mastodon.social/@Edent/117483785620327786

“There isn't an easy exploit for this PHP vulnerability · Elias Taylor”

https://eliastaylor.com/noexploit/

> One really amusing thing in common with most of these "PoC"s is that they lean on "LFI", or local-file-inclusion, to make the vulnerability. In non-php terms, their exploit chain requires the server to already have a severe code-level vulnerability.

the problem with cory doctorow's tech opinions is that he's not a very technical person – and the deeper lore he relies on comes mostly from the technolibertarians.

RE: https://mastodon.rfc1925.org/@ondrej/117488964750633553

this is so very true: and what's really galling is that companies have no trouble paying external consultants heaps of money, and what the consultants frequently offer is just a thin layer of integration built on top of open source projects and requiring use of yours or remi's php builds anyways.

I especially like this part… https://mastodon.rfc1925.org/@ondrej/117488122618264581

i am quite disappointed

@jaseg @q3k In all my dealings with HSMs I think "misuse resistance" did never come up.
Most of them do, however, excel at implementing the alternative "use resistance".

@q3k @gsuberland the missile knows where it is

eMudhra says they used an HSM for the keys:

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c11

> The hardware used for each of the issuers is in the attached file. These HSMs are FIPS 140-2 Level 3 compliant.

> The Ultimaco devices were used to generate the ECC, RSA key pairs for the issuers.

(yes, i believe that the corporate surveillance casually doing mitm to any encrypted browser connection is a much bigger scandal.)

six intermediate CAs compromised! this is big!

mate, our company uses netskope, your employer most likely uses some equivalent.

the safety provided by SSL is pure gentlemen's agreement, and the gentlemen don't play fair for years, if ever