it's good though, you should see it

I saw Teenage Sex and Death at Camp Miasma, I expected something different but I also really should've expected it to be like it is, considering I've seen TV Glow

"how bad could it possibly be"

now I wait for someone to rebuild the freshrss docker image I guess

PHP patches have hit ahead of schedule https://www.php.net/archive/2026.php#2026-10-21-5

With the big PHP vuln disclosure looming I want to highlight Nextcloud. A lot of y'all put stuff on Nextcloud. Nextcloud uses PHP. All PHP versions are vulnerable to this exploit and there's already code in the wild to get a shell on any server running PHP.

Nextcloud themselves say they can't do anything right now and advise you turn your servers off for the time being: https://github.com/nextcloud/server/issues/65754

This is bad. "Attacker gets all your stored data and a shell on your box" bad. Please shut down for now. If you are running Nextcloud exposed to the internet you are vulnerable.

You should shut down if you're running any PHP app at all, but I'm focusing on NC here because knowing what some people keep in theirs? The potential is very very bad.

some of us use php? to cope?

@elilla happy birf!

@q order ist raus.
(emudhra dice logo by @domi)

if you run any web-facing php apps (like a nextcloud) you might wanna take them offline until the next patch, because I'm hearing that it's an "unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest" and it's already leaked

https://www.php.net/archive/2026.php#2026-10-20-1

if you run any web-facing php apps (like a nextcloud) you might wanna take them offline until the next patch, because I'm hearing that it's an "unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest" and it's already leaked

https://www.php.net/archive/2026.php#2026-10-20-1

The private key (D) is 4.
No joke.

Verification:

openssl pkey -in key.pem -pubout -outform DER | openssl dgst -sha256
openssl x509 -in cert.pem -pubkey -noout | openssl pkey -pubin -outform DER | openssl dgst -sha256

@noiob What does this mean? Is "❌ Connected" good or bad? It gives me a sort of "failed successfully" vibe.

we're gonna play Alone in the Dark for CCCAC retro gaming evening on Saturday and I'm very excited for that game

Heya fediverse 💜 I'm a bit uncomfortable asking 🙈 I'm struggling a bit right now and do not know yet how to get through the rest of the month. The washing machine broke, we had to buy a new one, then the microwave broke too. Now there's still so much month left and I'm rock bottom. So, if you have a little spare money and feel like helping me out, I'd be super grateful! And I'd love to draw little doodles in return.

https://ko-fi.com/learosema

that really tou's my hou

After almost one year of #chunithm Mate being out, we've finally created it, thanks to the combined forces with @webfreak
@sakurina I hope you're proud #clubmate

Ich bin gerade in Linie RB33 nach Aachen West! #NowTräwelling https://traewelling.de/status/9379908

Ich bin gerade in Linie RB33 nach Wickrath! #NowTräwelling https://traewelling.de/status/9375260

RE: https://plush.city/@mynameistillian/117423827039644339

come on, guys...please