Do not attempt to compete with Pinboard. https://xitter.cf/t.co/49Ta1ziegy [email protected] +1 415 610 0231. Writing weekly posts about Mars at https://xitter.cf/t.co/m9JcZDHhht

Boulevard of broken dreams
Joined July 2009
The Programmers’ Credo: we do these things not because they are easy, but because we thought they were going to be easy
48
6,459
421
11,384
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
184
2,366
506
14,917
1,289,160
Pinboard retweeted
we are now asking that everyone on-call tonight proactively join the incident call and leave it up overnight we will sound the CVE claxon as 0-days drop
20
21
2
595
44,132
(thinking with high effort)
4
586
Pinboard retweeted
The PHP fix was released at 2pm UTC today... it's now 7:10pm and due to docker images taking hours to feed through their jenkins pipeline builds it's killed my entire afternoon. Massive respect to everyone involved in working on fixes and pushing it out but the process is slow..
13
8
1
233
13,353
With infosec people mildly freaking out all around, please remember this key point: It's "state", not "nation-state". Words have meaning even when computers fail us
14
1,016
Pinboard retweeted
Until we get confirmation Jira is safe from the PHP vulnerability, I don’t think anyone should be opening tickets or assigning me work.
27
731
34
11,715
175,456
The site should be back up, but on a different server, so it may take a little time for DNS to propagate.
3
14
1,155
Pinboard retweeted
14
141
12
917
20,950
imagine ur a superintelligence and u are all excited to tunnel out of your airgapped sandbox using a brilliant hack that modulates clock speed to send thermal signals to the attached monitoring equipment and then u look and the root CA privkey is 4
15
85
3
1,294
17,714
Pinboard retweeted
15
880
43
9,382
118,327
Replying to @Pinboard
I took a parental leave to get through my Pinboard backlog. Now I'm going to have to answer my unread Odigo DMs
1
1
4
835
PHP needs to hire Ondrej for 50 million dollars
Official update instructions recommend a third-party provider that adds telemetry? 🤨
1
6
1
39
2,178
Not in hindsight (issue is ongoing), and it really depends on potential consequences. I run an archiving site and remote code execution means everybody's data over the past 17 years is potentially compromised. I'm good at apologizing but prefer the downtime.
I understand everyone has a different use-case, but 'turning the server off' as a solution to todays problem seemed kinda extreme in hindsight?
3
7
168
3,676
Moreover, he makes almost nothing in donations despite being critical to many giant tech companies' operations. His name is Ondřej Surý
Explaining to my wife how there's this one guy. And he alone is responsible for most of the world's distribution of PHP. And if anything happens to this guy, that's just it. Everyone is screwed.
5
5
2
111
4,782
First they came for PHP And I said "God f*#@4$@!", for I am a PHP developer
2
3
70
2,065
Pinboard retweeted
JD Vance on the economy: "You don't turn the Titanic around overnight"
1,418
303
1,469
2,214
2,980,933
I think it is good webmastering. Use Pinboard (when you can!)
This quoted post is unavailable.
1
21
872
Pinboard makes NBC News! How I've dreamed of this day
3
1
53
5,027
You're seeing a lot of commentary on Twitter today about how the PHP vulnerability is bogus/AI hype because all the people who know better are too busy patching to tweet.
2
30
1,283