RE: https://infosec.exchange/@InfoSecSherpa/117485271703936739

It's "agentic" so it's okay.

Fuck Google
https://www.theguardian.com/environment/ng-interactive/2026/oct/22/finland-google-felling-trees-datacentre

#Google #AI #FuckGoogle

This week in #InfoSec

Sury PHP repo has upgrades already.

I see upgrades also for 7x and 8.0.x, 8.1.x, which I thought are not getting the patch. Unclear what that means, but those updated packages were not there 10min ago, so it seems related to the CVEs?

#PHP2Shell #InfoSec #WebDev

a lot of people are currently frantically trying to figure out how to update that system they deployed a couple of years ago

but it's the ones that should be doing that but aren't that I'd worry about

#HugOps

this is probably a good moment to consider going static site for your next project :blobcatcoffee:

#PHP #PHP2Shell #WebDev #InfoSec

Oh you want to run an independent OS on your device to not be encumbered by that? Tough luck buddy, your banking apps will not work, and your national ID app will not let you confirm your age to log in to your social network to even complain publicly about this.

Some people are so distracted by shiny LLM gimmicks that they miss the forest for the trees.

Apparently some people are claiming that "closed-source software is over" because LLMs can decompile proprietary software effectively enough to then make working(ish) "independent" versions of it.

Apple's, Google's, and Microsoft's control over their respective OSes would like to have a word.

Oh you have this slop-generated copy of Photoshop? That's cute, but I'm sorry Dave, I can't let you run it.

The necessary machinery is already there. A switch just needs to get flipped.

The day started with a major Google Cloud outage in Europe, proceeded swiftly to the eMudhra root cert dumpsterfuck, and now the critical PHP vulns are starting to hit.

Cool, cool. :blobcatcoffee:

#InfoSec

Looking back, Mozilla could have just as well added Honest Achmed's root CA anyway:
https://bugzilla.mozilla.org/show_bug.cgi?id=647959

#InfoSec #eMudhra

Oh 4 fuck's sake.

#InfoSec #eMudhra

Next:

"uses a recommender system which is based on profiling as defined in Article 4, point (4), of Regulation (EU) 2016/679;"

Easy. No profiling. I guess we get that for free on fedi anyway.

"uses a recommender system suggesting or prioritising to a recipient who accesses the service through an account contact suggestions or information that has not been provided by one of the recipient’s pre-existing connections or subscriptions;"

Disable recommendations. Boosts are fine. Check!

First two:

"enables recipients who access the service through an account to transmit content in real-time to an indeterminate number of other recipients of the service, including through live streaming of audio-visual content;"

"enables recipients who access the service through an account to contact, communicate and otherwise interact with other recipients of the service not part of the recipient's pre-existing connections or subscriptions;"

So, make posts friends-only, and accounts locked.

I am reading the EU Kids Act, and I want to be clear and concise: fuck online age verification.

That said, if I am reading it right, fedi instances *could* be configured in a way that spares them from age verification requirements?

Age verification is basically Chapter II Section I Article 6 point 1 of the Act:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:52026PC0681#:~:text=minors-,Article,service,-%2E

There are 5 things that each individually can make a social media service or video-sharing platform required to do age verification:

Oh fun! I started getting hardware cryptocurrency wallet phishing spam attempting to exploit the relatively recent news about hardware wallet vulnerabilities and other security issues.

Gonna grab some popcorn and watch this unfold, having never had a hardware cryptocurrency wallet, nor ever having owned any cryptocurrencies. :blobcatpopcornnom:

Cryptobros are famously too smart to fall for this kind of shit though, right? Right?.. :blobcateyesblush:

Trump calls renewed Ukrainian strikes on Russian oil refineries a "disgrace" forgetting to mention that Russia was the one to break his "energy sector cease fire".

The bully gets away with bullying, the kid that fights back gets sent to the principal's office.

The sooner Trump starts being treated like a Russian asset, the better.

https://www.theguardian.com/world/2026/oct/16/trump-calls-ukraines-resumption-of-strikes-on-russian-oil-refineries-a-disgrace

#Ukraine #UkraineWar #Russia #Trump

Okay fedi, this is an emergency. I need all of the photos of manuls, aka Pallas's cats, you have. All of them.
https://en.wikipedia.org/wiki/Pallas's_cat

Look at this chonky fluff. Just look at it.

And then go find more and send them my way.

I need them.

:boost_requested:

#Manuldon #CatsOfMastodon #Cats #ManulPosting

What drives me nuts is that twenty years ago I was pushing @FirefoxOfficial before it was even called Firefox. I went out of my way to build the websites I was building for my clients in a way that worked on this weird new web browser. I complained in my bank when their website strictly required IE6. I got my family on Firefox.

Mozilla is pissing all this good will into the wind. And has been for a long while.

You're a web browser @FirefoxOfficial, just be a damned web browser. Stop trying to get data from me, stop pushing random unrelated crap in my face. Be an unobtrusive tool, otherwise I am going to find a different one.

Why the hell is @FirefoxOfficial suddenly asking me about my location to display me a weather report? I never asked for that. I never installed anything to have weather reports directly in my browser. What the fresh hell is that?

I need to bite the bullet and finally move the last two places where I still use Firefox over to LibreWolf. Mozilla's complete lack of respect for their users is just too much.