PHP Security Advisories are out:
RCE via OOM corruption (9.2/10): https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
RCE via stale global state (9.2/10): https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
Need to upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP to mitigate. Updates rolling out now. #PHP
In your shell, if you hit php -v and it lists a number other than:
8.5.128.4.278.3.368.2.35...then you should consider yourself vulnerable and update immediately.
If a new version of php is not available, you should consider taking your stuff down until you get updated packages. There are incomplete mitigations listed on https://www.php.net.
This is especially important for folks using popular "set it and forget it" tools like YunoHost, cPanel, or Plesk, or big PHP projects like Nextcloud or WordPress.
And if you aren't the admin, go bug your IT folks about this. Just mention "php2shell" and see if that lights a fire under them.
Here we go, update now
I know folks get real mad when I say this but in times of widespread security crisis, static sites sure are nice
Not to over-alarm anyone, but your firewall might have vulnerable versions of PHP on it, you might want to disable PHP if you can.
Don't forget to unplug your servers before you go to bed
After many months in the making, vga16fb on #SHORK 486/586 #Linux finally works, providing general EGA and VGA framebuffer support so non-VBE2+ devices like this IBM #ThinkPad 365ED can enjoy SHORKGUI! I'm not gonna lie, it currently doesn't run that well, but it's certainly a start... I can rest easy knowing this is finally working!
I get a few dozen of these a day but this one caught my eye.
"I just checked out your last 15 videos" lolol
![An email, with the subject line "Brand Sponsorship Opportunity - Veronica" sent to ask(at)veronicaexplains(dot)net.
The sender is redacted.
It says the following:
Hey Veronica,
I just checked out your last 15 YouTube videos and none of them were sponsored.
Other creators in your space have sponsorships in almost every other video (extreme example).
I'm [REDACTED] and I run [REDACTED]. We set up paid sponsorships between AI/tech creators and software brands.
We handle all the boring work in between, such as pitching and negotiating with brands, contracts, payments ...etc etc you get the point.
From your perspective, you just make the video and get paid. 🙃
Is taking on some sponsors something you'd be open to?](https://explains.social/fileserver/01BVRD6R14M331Y3P53KK1AFRH/attachment/original/01M5D4G3KBA7MFDT6F7MVB5KCV.png)
I also think that this act - breaking down jargon - is why some folks deride YouTubers with language like "all they do is talk about X, they aren't building X".
Some are more effective than others, that's for sure, but the role of "entertainer who teaches you something" is kind of an important one. We make fun of quote-unquote "influencers" or "content creators" for doing the service of breaking down complex topics, and then we look around and wonder why our enthusiast groups are homogeneous.
In all seriousness, I will say that this sort of jargon is precisely why I started explaining things on the internet. I too can get super in the weeds on subjects which interest me but I do my darndest to try and "translate" it to make it easier.
Enthusiast groups will enthusiast, and they might not be intending on building a gate for gatekeeping, but that's what jargon does and that's what I'm trying to break down.
"Using disc images on your PS2 is so easy, you simply have to install FreeMcBoot from a small-format FAT32 USB 2.0 drive onto a spare MagicGate memory card using FreeDVDBoot and then boot up and configure OPL from an ELF file, after which you can rip the games using dd on a *nix machine, but only if they're DVD-format games, because BIN/CUE isn't supported, then you have to spin up a Samba 1.x server to serve your rips, and that'll only work for PS2 games unless you also install PopStarter, which will be easier if you can load it from a FAT32 MicroSD loaded on an MCP or MCP2, because PopStarter can't find Samba shares the same way OPL does unless you use a RetroNAS or similar to symlink the files into multiple concurrent share directories. It's so easy."
-Every PlayStation enthusiast in 2026
The biggest change was removing Home Assistant integrations for media and my 3D printer control. The latter was more-or-less because I don't want Home Assistant having access to cameras if I can avoid it. These have all been on the same VLAN but now they're isolated from one another. I might spin up a separate box with Octoprint on it, instead of running that through a container inside a more trusted network- we'll see.
Media control will be a tough one, but we have an old Logitech Harmony that's still working for now, so fingers crossed!
The rest of it can easily live on one VLAN without too much hassle on my end.
Over the weekend, I moved Home Assistant to a new isolated VLAN in order to further separate it out from the rest of my network. They're increasingly using LLMs to drive commits, and I tend to be skeptical when any project dials up the rate of changes. Even more nervous for a project that's so tied to my home infrastructure.
I love reading. I love writing. I love coding. I love drawing. I love creating.
Go ahead and make the slop machines faster, you can't take away what I love.
(I know I'm annoying but Gentoo is awesome and I love talking about it)
G
E
N
T
O
O
I miss Sun Microsystems so much
Having backups requires testing backups.
I conduct periodic fire tests where I literally just unplug the server and see what I can recover from my onsite and offsite backups.
Literally- I pull the plug. That's not a euphemism, that is literally what I do.
Even if you don't self-host, this sort of backup strategy is what makes sense. Like the photos on your phone? Turn off your phone, put it in a drawer, and get at the photos using a laptop or desktop. If you can't do it, you don't have a backup, and should correct that.