RE: https://mast.eu.org/@aloxe/117485556424191517
I would like to point out that there's also @remi who does the RPM PHP packaging and lot of other work for the PHP ecosystem and my work would be much harder without his work.
Ja maar wanneer wij stoppen (of verduurzamen of diervriendelijker gaan houden), dan verhuist het gewoon naar het buitenland. Dus wij móeten wel doorgaan...
Nee hoor....
So what Meta (who famously [edit: used to] use PHP extensively in what used to be their flagship product) spent on the complete failure that was the metaverse (~$60 billion) could have funded them at current levels for close to 100,000 years
Security vendor Palo-Alto plans to release patches for their flagship firewall product to fix the PHP vulnerabilities in them sometime next week, after they’ve finished scratching their arse.
PHP Foundation’s budget is about 700k a year. It’s used on something like 40 million websites. Almost no company who uses it contributes anything and many people work on it for free.
The latest trend is cybersecurity and AI vendors have realised they can vampire off its security for publicity (money).
Perhaps the world would be a better place if those orgs who rely on it just contributed sponsorship to the foundation, and vendors didn’t monetise vulnerabilities for themselves.
Waag lanceert een nieuw social mediaplatform. Hiermee bouwen we aan een hoognodig alternatief voor de sociale mediaplatformen van big tech, waar algoritmes desinformatie blijven pushen en waar persoonlijke data van gebruikers standaard verhandeld wordt. Zien we je daar? https://oso.social
[105] Tientallen kerken bieden onderdak
https://nos.nl/teletekst/105 #Teletekst #TeletekstNieuws
Curious to know how other blind musicians MIDI-compose songs or pieces of music with no fixed or regular tempo.
Morgenochtend komt de Trump/Amerika nieuwsbrief weer, met dit keer de tientallen (!) ontwikkelingen deze week om de midterms te beïnvloeden. Van rechtszaken tot niet werkende stemmachines tot afwezige stembureaus. Aanmelden kan nog net, op https://laposta.nl/f/ssdcuilbrm7u
On my wish list – BLE caberQU: a digital USB-C to USB-C cable tester
This is on my wish list: [Wayback/Archive] BLE caberQU: a digital USB-C to USB-C cable tester Note the prices changed by 20% (this might be the V.A.T. difference for Austria) since I archived the links end 2024; bare device it is at the time of writing ~ EUR 107; with all options ~ EUR 164. Back then it was scheduled to be in stock mid 2025, so I hope it still is in stock.
https://wiert.me/2026/10/23/on-my-wish-list-ble-caberqu-a-digital-usb-c-to-usb-c-cable-tester/
In the wake of eMudhra and php2shell, I had two distinct "told you so" moments. First, the underlying issues that led to php2shell were called out by Stefan Esser in the early 2000s and were the reason for his hardended-php patch and the Suhosin extension.
Second, the catastrophic incompetence of CAs is not new. This is a screenshot from a presentation I held at OSDC in 2012. Told you so. But nobody would actually listen.
Why is itch?
Baby, please scratch it,
Please scratch it,
Some more
Wel.
Ik denk dat Cyber Security Awareness Maand dit jaar nú al een succes is.
Chronotrains: maps where can you go by train in 8h (or less) from any European city (for instance from Amsterdam)
Cool site with suggestions and a heat map: [Wayback/Archive] Chronotrains Where can you go by train in 8 hours time? Specify your location (or click any of the preselected locations like [Wayback/Archive] Amsterdam | Chronotrains) to view how far you can get within a day of travel. It is a relatively young (2020-ish) site where the remarkably simple…
[Verwijderd] Signalen van misbruik door PHP-lek
#Teletekst #TeletekstNieuws #TeletekstUpdate
Beloftes beloftes beloftes, en ze houden zich aan niet één!
Gezien in de RTL app: Streep door maximumrente op studieleningen, oud-studenten toch duurder uit
Streep door maximumrente op studieleningen, oud-studenten toch duurder uit: https://www.rtl.nl/nieuws/binnenland/artikel/5660568/maximale-rente-van-25-procent-studieleningen-niet-door-letschert
Disgraced eMudhra drops out of TLS business following certificate debacle
Flubbed key signing "ceremony" allowed minting of Web credentials for any site.
https://arstechnica.com/security/2026/10/disgraced-emudhra-drops-out-of-tls-business-following-certificate-debacle/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
There’s a long history of this - example. https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/