Could the eMudhra issue impact #wordpress sites?
TLDR: #Debian and downstream no, others maybe.

Default Wordpress has an embedded ca-bundle for CAs it trusts as a client, such as getting the weather from a weather service. This bundle was updated 2 days ago.

The latest wordpress release was 7.1.3 on October 6th and doesn't have the certificate removals.

Debian packages are patched to use the system CA path so as long as you have the latest ca-certificates you're fine.

With all the excitement about #PHP and other cyber security bugs this is a reminder that the #Debian #wordpress packages ship with an apparmor profile.
While not perfect something like that reduces the attack surface and stops a overtaken wordpress site from doing some stuff it should never do.

"The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) is aware of instances of artificial intelligence (AI) misalignment.."

Well, you are NOW, maybe not 3 months ago.

It's ok, because its only *American* "rogue" AI agents.

https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/risks-of-ai-misalignment-to-australian-organisations

Tech knowledge is thin on the ground, not enough people understand how NTP works, especially corner cases.

The NTP system as a whole was not documented and it was unknown what "good" looked like.

None of these are unique to Telstra. I suspect any sufficiently complicated system with have some of these aspects.

https://www.telstra.com.au/exchange/what-we-ve-learned-from-the-external-investigation-of-our-july-o

The technology summary report for the Telstra outage is out today. While the technical aspects (e.g. NTP) are interesting, the management side of it is what amplified the issue.

There was no real system owner or an appreciation of how import NTP was or its impact.

Problem management wasn't followed through. Those niggly interesting problems were just left there.

I read this article about Voltage droops on Victorian power lines and thought it should be titled shit power company not doing their job.

Until someone pointed out they're still billing people no matter how bad it is so perhaps they are doing their job, just not the one you thought.

https://www.abc.net.au/news/2026-04-22/victoria-undervoltage-melbourne-gas-electricity/

@AcornSquashbuckler i like the use of the log chart. Not enough log charts in the world.

AI is bad at passwords. Seemingly random passwords are anything but.

Don't use AI for passwords as passwords are supposed to be random, not predictable based on previous characters.

https://www.theregister.com/2026/02/18/generating_passwords_with_llms/

@SystemsAppr wrote an article in The Register discussing a new way of doing the SPF algorithm.

Part of the reason they say Dijkstra's won't get replaced any time soon is that its simple and understandable.

And it really is! Dijkstra's article he wrote in 1959 where the algorithm appears in is about 2 pages long. I implemented a SPF algorithm back in 1995 and it was reasonably easy to do for an undergraduate engineering student.

https://www.theregister.com/2026/02/10/dijkstras_algorithm_impact_on_networks/

Me, on the Cisco website, trying to avoid all the AI hype and find useful information.

Give-me-the-datasheets !

Guess what I'm doing tonight? net-snmp updates!

With snmptrapd 5.9.4 and below, a crafted packet can buffer overflow and crash the daemon.

It's CVE-2025-68615 with a CVSS of 9.8, ouch.

#debian packages out tonight
#cve #opensource

Traditional Christmas movies

Another interesting procps bug. If you try to match a process by tty, you may get more than you expect.

This is because the match is done by device ID. If you have a mount namespace, this can mean you have more than one, say /dev/pts/0 so if you run pgrep on that tty, it might show processes within containers.

One fix is to check you are in the same mount namespace, but means if you do start a docker process and run ps it won;t show up.
#procps #programming

Anyone know if there is an official message about #gitlab banning Chinese users? I can see there is a Chinese instance, called JiHu, but nothing saying GitLab is off limits.

If it is, is it a GitLab specific thing or will GitHub follow through?

#opensource

Today I learnt about stable and unstable sorting algorithms. Stable means for items with the same key, the order those items came into the sort remain the same.

In ps if you ask to sort by two keys, this matters. If you ask to sort by user and start time, the start time sort is done first, then user. But the user sort can scramble the start time (within a user's processes) because qsort() is not stable.

#procps #linux #programming

I'm glad that the ABC clarified that not EVERY SINGLE federal resources minister since 2001 went to work for the resources sector.

One did become an ambassador.

So I guess that's ok then.

wow ok... that's done.

I've never thought I was good at writing fiction and as a result would never come close to writing for a movie.

This movie gives me hope there is, or more likely was, a place for bad writing out there.

#Monsterdon

@juliank has brought some extra speakers for the APT talk.

#debconf #debconf25

Looked into a bug report about sysctl today. Someone had run a fuzzer over it and made it crash. Digging deeper the crash occurs in glob() which is inside libc.

Based upon their report, I wrote a simple program that crashes glob() with a segmentation fault.

OK, so now its isolated, not sure what to do about it. It shouldn't crash, but perhaps there is a standard sanitiser in front of it?

#opensource

It was snowing near Canberra so I drove up into the Namadgi Nation Park. Right down on the southern point is Brayshaw's Homestead, a rough wood slab hut.