We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
#php #security

I’ve updated all FreeBSD jails still running some PHP software. I build the pkgs from the ports on the host and then shared the pkgs with all jails.

What an exciting day :D

Currently setting up the FreeBSD equivalent of AppArmor via `kldload mac_bsdextended` and `ugidfw` to prevent php-fpm from remote code execution as per OS.

Lets see if this works … 🤞

In other news: I’ve added a little lua function to my rspamd which checks sender names of received emails against a list of trusted contacts (email - name). If a mail arrives with a sender name which is on the list, the lua function checks if the email address matches. If not it’s marked as spam and a (UN)TRUSTED_SENDER flag is added

Mails from senders that are not on my trusted_senders.map file will use the normal rspam pipeline

That feels like it should be a default feature, right?

Thanks to ezjail it was pretty quick work to fix the Root CA issue for all my FreeBSD jails.

ezjail-admin update -u did the trick

Thanks @erd ;)

Every now and then I listen to The Beatles and I still discover things in the arrangements, little details like the little noises of various instruments and I remind myself that they did this back in the 60s …

Strawberry Fields Forever for example … what a song!

Anyone saying they're overrated is either pretending or has no ear for music.✌️

Does anyone know if the Apple Magic Keyboard with TouchID and Numpad works on PCs (ie non Macs) via USB-C cable?

Almost finished :D

I’m building a desk this weekend and boy did I learn some lessons doing it. Nothing beats hands on experience and temper control when things go haywire or parts behave in unexpected ways, forcing you to improvise to salvage the project. Slow is pro.

That being said, I’ve done most of the woodwork in my narrow kitchen thanks to one of my favorite tools: The portable and extremely robust workbench called: Bora Centipede. I can’t recommend this thing enough.

(yes it folds, yes I modeled hinges)

»This is approaching fever dream levels« said one of the Fenix developers while touring their latest update.

If you don't know, Fenix is the developer of the best Airbus A320 addon for MSFS2020/2024.

The amount of detail in systems simulation, flight model, audio, graphics, physics and not a full on cabin systems implementation is mind boggling. Can't wait to give it a spin.

https://www.youtube.com/watch?v=xC9-l9xdH9k

I read some post about how Mastodon consists primarily of German-speaking creatures talking in English. I'm gonna do a poll, need to test that. Boosts highy appreciated!

So, do you speak German?

Channel 5 News is one of these very unique gems on the intergoogles - this video called "Tehran Streets" is definitely worth the watch. Even just as a stereotype palette cleanser.

https://www.youtube.com/watch?v=hrjzF9r4DpQ

I never owned a car and I struggle with the idea. I reckon at some point it will happen. But it will have to be an EV.

That being said: I think an EV relaunch of the Citroen 2CV is a fantastic idea. Especially in the entry level price range they’re aiming for.

It's a crime to only know the Santana version of "Black Magic Woman" and not the Fleetwood Mac (first lineup with Peter Green) original version.

https://www.youtube.com/watch?v=hRu7Pt42x6Y

What I love about the band “Rush” is how hilarious both Geddy and Alex are. How they goof around and don’t take themselves too seriously. Every night they wear goofy shirts on stage including this one … which they even sell in their own merch store 😂

The description reads: »This tee was Alex's idea. He wanted to surprise Geddy for his birthday. Ged loved it!«

I finally bought some tickets for a show next year. Very much looking forward to see and hear them goofballs live.

I think I would have less of a problem with AI chat bots replacing humans on support hotlines … <deep breath>

… IF THEY WOULD FUCKING WORK AND MAKE THE EXPERIENCE EVEN JUST A LITTLE BETTER

Don’t worry … I’m just screaming on the inside from the experience of companies thinking this is an adequate way of interacting with customers.

I want to see the human individuals who actually enjoy a phone conversation with a chat bot and think: oh this is way better than a human!

@raumfahrtagentur Vielleicht für die Raumfahrer:innen interessant. Kleines Konzert mit kleinen Instrumenten in direkter Nachbarschaft. Ich schaue auf jeden Fall vorbei.

Gibt's Raumfahrtagentur Teilnehmer in meiner Masto-Bubble?

It can be different! For our #40C3 from 27-30 December, the Call for Content is open: talks, DJs, exhibits, punk, performances. The Call for Participation ends on 9 October (23:59 UTC) https://events.ccc.de/en/2026/09/12/40c3-model-citizens/ #Hamburg