Hi Folks, In this blog post we’ll cover how to set up automated (nightly?) builds on a Team Foundation 2010 Build Server for Windows Phone 7 projects. The core challenge we’ll face is not having…

differential extension for DuckDB 2.0: snapshots, branches and time travel locally, plus leader/follower replicas, failover and shared writers via S3.

PHP ships fixes for two critical bugs at 16:00 CEST today, 21 October, and the only thing really confirmed about them so far is the high score. The short version The people with the least PHP…

Letting humans into the web, keeping scrapers out.

Today’s guest post comes from Skyler Holobach! I’ve known Skyler forever, as one of our fellow deliverability experts in this world of email, and now she runs her own company focused on email…

Frigate itself is good software. Almost every problem I hit running it came from the layers around it: Proxmox, LXC, Docker, kernel modules, and my own YAML. None of them announced themselves…

The eight compromised eMudhra intermediate CA keys were integers below 256. I recovered all eight from public certificates on an M4 Mac mini, then checked which TLS clients still accept the…

by Wesley Moore I previously announced that the forum would be made read-only at the end of October 2026. It was always my intention to replace it with a static archive some point after that. Today…

On October 20, 2026, a major WebPKI security incident was publicly disclosed at emudhra.we-have-a-problem.com: the private keys of eight intermediate Certificate Authorities (CAs) operated by eMudhra…

Another day, another vulnerability, as has been so… for basically forever. However if you run PHP you don’t want to … Continue reading Vulnerabilities in PHP (CVE-2026-109618 /…

What Happened Four notable UK prosecutions illustrate the growing intersection of cybercrime, online exploitation subcultures, and digital terrorism involving teenage offenders: Scattered Spider…

PHP ships an emergency security release today, October 21, 2026, at 14:00 UTC. The release fixes two critical bugs in PHP core. People already call them “php2shell”. The details leaked…

Since 1.0.0 nspawn 1.0.0 came out a month ago. There were ten minor releases between that one and 2.0.0, and most of them went into making a machine do what docker run does with a container, so that…

Setting up a remote BirdNET microphone on a Raspberry Pi is a great way to pick up bird calls from the other end of the garden, but it's no use if you have to SSH in and start the stream by hand…

If my last week of incident work is predictive of everybody's next month, you're going to be doing more incident response too. Here's what the first few hours of an incident look like. Let's be real,…

I started with a real task: let an AI coding agent containerize a Product Catalog app, and make it pick Docker Hardened Images (DHI) for its base layer by talking to the DHI MCP server at…

I will be presenting on African subsea cables at the Nigeria Peering and Interconnection Forum next week. I arrive Tuesday and depart Saturday. There are many ways to reach me:…

TL&DR: Programmers writing Cisco Nexus OS code should have known better. They didn’t (care?). One can understand that an operating system written in the late 1980s generates crappy suboptimal error…

Bookmarked bleepingcomputer.com/news/security/php-warns-admins-of-two-critical-flaws-emergency-patches-coming-tomorrow by Lawrence AbramsWell that’s all PHP-based services shut down for now.

I realized right after publishing the last entry that putting a static SVG data-donut at the top of every article was a mistake—both aesthetically and mathematically—so I opened Vim, cut the 42 lines…

As I mentioned in my last post, I’ve recently relocated again. The new house has provided some opportunities to do things that I’ve wanted to do for a while, including running CAT5e…

So, a bunch of my services run, or rather, ran, on an old Intel NUC 8 that I bought back in 2020 and have mostly used as a “random stuff goes here” server. A year and a half ago the fan…

Lawrence Abrams, Bleeping Computer: In an advisory published Tuesday, the PHP development team announced that it plans to release security updates on Wednesday, October 21, at 14:00 UTC (10:00 AM…

Gizmodo: “World, the iris-scanning identity project co-founded by OpenAI CEO Sam Altman, now offers a way for people on Zoom calls to prove they are humans rather than deepfakes. To sign…

在未来的工作模式，或者说如何高效使用AI中我提到了那个笑话： AI流行之后，经常能看到一些社畜下了地铁以后还捧着电脑走路，因为电脑上的AI正在干活，不敢把电脑合上。 要想让AI不间断地干活，要么让自己的电脑24小时开机，要么租一台服务器（VPS），然后远程指挥AI。 前者对笔记本用户来说很难，所以这里主要说第二个办法 - 服务器。 配置好的效果 配置好了是这样的：…

For years, I’ve been using Ansible to configure my homelab, blog, and workstations. After testing out Chef and Salt, I’m glad I happened upon Ansible. The tool has grown more and I’ve gotten tons of…

Holy shit, I didn’t know what I was missing out on. The other day I was setting up a new home-server for a friend, they’re technical, but I don’t think they will tinker too much with the media stack…

TL;DR Certifications are not bad; chasing them is. A badge proves you reached the passing mark on one exam on one day. It does not prove you have run the service in production, and the terms attached…

TL;DR Question 1, migrate web, batch and legacy apps with scalability and security: legacy and web tiers on EC2 in an Auto Scaling group across multiple Availability Zones, network ACLs plus security…

Nota: este artículo está escrito la mañana del 21 de octubre, antes de que salga el parche. Los detalles técnicos y las versiones corregidas se publicarán con la actualización, así que conviene…

After years of business continuity management for large e-commerce platforms I cannot build systems without infrastructure as code, full automation, and a tested recovery story any more. Nobody…

A leaked Cellebrite datasheet quotes a working range in meters, skips the entire iPhone 17 generation and stalls at iOS 26.4. A researcher thinks he knows why. I review the argument, check where it…

Your workload shape decides your Snowflake or Databricks bill far more than the rate card does. The units measure different things. A Snowflake credit pays for warehouse compute, billed per second…

Web services in Japan keep getting hacked, reportedly with help from AI agents. It made me think of the dark forest and the sophons in The Three-Body Problem.

eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla,…

If you use an account only to mirror data to OneDrive and run backup or other applications against the uploaded files, you may not need email or the other apps included in a Microsoft Office 365…

Yonks ago, I started writing my passwords down in my phone, so I'd always have them available. No, I'm not stupid. They were encrypted. Eventually, I wanted to get the list out of my phone and on to…

The Future Will Be Hacked - There has been so much political grist for the networks and the news world lately about hacked celebrity accounts that I wonder what sort of pretensions we are all…

The Medallion architecture is a data design pattern, that organizes a data lake/warehouse into three layers of increasing quality: bronze for raw data, silver for cleansed and validated data, and…

I can still remember a few years ago when people were claiming the cost of SSDs were going down so fast, that they could reach parity with spinning rust “within a few years”. This may end…

One of eMudhra's certificate authority private keys is the number 4.Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and…

xss in the rss reader yarr

Sandboxing untrusted AI agents on Linux

I just learned that some private keys leaked for a widely-trusted certificate authority. This is bad: it makes it possible for attackers to impersonate HTTPS services.If you’re shipping a mobile app…

I don't know if you've seen this, but a CA just got popped. Their keys got leaked, which means the industry as a whole now has some pretty major problems. It was revealed two hours…

As you all know by now, I really hate being spied on by web sites and other on-line entities. I’m pretty sure this misbehavior won’t be legal much longer but I’m equally sure that…

On October 19, malicious OVHcloud CLI binaries replaced assets across five GitHub releases for 94 minutes. The source and build chain were unaffected; exposure depends on when you installed and ran…

Source Barry Ritholtz posted this up-and-right chart, which is a classic of exponential extrapolation. Given the difficulty, delays, and cost of bringing the current generation of data center…