Just think about all the folks downloading the PHP patches through a connection that is part of MITM attack, because their curl or whatever is still using the emSign Root CA. #php2shell
In years of running many Debian systems for many people, I've never had a serious incident involving something that the Debian security team could've done anything about. Really stellar work and I'm sure many people don't even realise how much they benefit from it!
Now that the updates are out, and I can finally show the article for php2shell
This has been long in the making, as I was part of the disclosure process and helped with liaising to (amongst others) CERT-Bund.
I'm glad this is out, even though it leaked a day ahead of time.
Now, it's time to watch the web burn, I'm afraid.
Google Play review times keep getting longer and longer. I've been waiting three weeks for Google to release the latest version of #Conversations_im.
It's not a security-critical release, but what if we ever need to publish something urgently?
Luckily, with reproducible builds, you can now seamlessly switch to the F-Droid version. F-Droid will automatically pick the correct version, and you will just be asked to confirm that F-Droid is now responsible for maintaining updates.
So apparently all the coordination, planning and communications for organising No Kings events on Instagram have disappeared and the account admins have been suspended.
So... here's the thing:
DON'T PLAN YOUR REVOLUTION ON THE KING'S BLACKBOARD.
The fact that organisers are depending on the availability of a platform run by any of the tech bros... well, it makes me think you aren't a terribly effective opposition.
RT: @StoneDunk Neither Cartier-Bresson, Banksy nor Cold War Steve could have come up with such an image. Absolutely perfect composition and lighting (even the road signs are perfect)! 😍
Long thread/15
That's because Expedia requires hotels in its VIP listings programs to *raise their prices on non-Expedia sites by 10-25%...INDEFINITELY.*
Let me repeat that: to stay in business, hotels need to be on Expedia. To stay in business on Expedia, hotels have to raise their prices to pay Expedia's junk fees, but they have to raise their prices everywhere else. But to *really* stay in business on Expedia, hotels have to use the VIP program, which is even *more* expensive.
15/
It's fine to leave a community because it's not aligned with your strategic outlook or your values, or simply because the community moved on. You joined a community because you were aligned to it, and you can leave when that ceases to be the case. The project is the ship of Theseus, and we are all the rotten planks getting replaced over time.