That may or may not have been my last ride for the year. Snow forecast for tomorrow and dismal weather after that, so it’s not looking great…
Well that woke me up. Came around a corner this morning and startled a mother deer and fawn. The fawn swerved out into the road and all I could do was brace for impact. No idea how I missed it
Oh joy. Every day in the 10 day forecast is rain apart from today and Wednesday which is snow. What should I do with my last morning of clear weather?
Reading this while sitting in Starbucks in Japan. Am I a coloniser? Is my Venti Macchiato whitewashing Japan? 申し訳ありません🙇
I’ve had these leather pants for a few months and they are getting worn where they rub against the tank. Any easy way to repair apart from black sharpie?
Morning on the lake. One of the riders who arrived 10 minutes after me saw 2 bears beside the road. So that’s fun.
For parents who have kids in the J school system or have been thru it, what are you thoughts/experiences re public vs private vs international? My son is in a private JH. I wouldn’t have been bothered if he went to public, but it does seem academically stronger and offer a wider range of experiences, trips etc than the public alternative. So far he hasn’t been converted to Christianity…
Spectating at what I hope is the boy’s last outside tennis tournament of the year. Absolutely freezing! Surrounding mountains looking lovely in their autumn splendour though
Embarrassingly had to google how to get the gas cap off at petrol station. Turns out you need to push in the lever and turn. Also nearly wheelied up my garage ramp courtesy of “sport” mode and a lot more power in the lower rev range than my previous bike. Will take a little while to adjust!
Oh FFS! Today is going to be interesting
🚨 BREAKING: IT JUST KEEPS GETTING WORSE. NOW PYTHON IS FACING A MASSIVE SECURITY EMERGENCY.
Python's security team has issued an URGENT warning after a certificate authority compromise put Python's HTTPS security at risk.
→ 8 CERTIFICATE AUTHORITY KEYS COMPROMISED. Some were so weak they could be cracked almost INSTANTLY.
→ FAKE TRUSTED WEBSITES: Attackers could potentially impersonate Python.org, PyPI and other websites during intercepted connections.
→ MALICIOUS DOWNLOADS: Vulnerable environments could be tricked into downloading software from attacker-controlled servers.
→ YOUR OS PATCH MAY NOT PROTECT YOU: Older versions of pip can STILL trust compromised certificates even after system updates.
→ EMERGENCY UPDATES: Python developers are being told to immediately update pip, certifi, uv and other affected tools.
→ DOCKER USERS AT RISK: Existing container images may retain vulnerable certificate stores and need rebuilding.
First PHP. Then Node.js. Then GitLab. Then LiteLLM.
NOW PYTHON.
The very systems developers rely on to establish TRUST online are becoming the attack surface.
If you use Python, PATCH NOW.
Readers added context they thought people might want to know
The Python certifi/pip details match the real eMudhra CA incident, but PHP, GitLab and LiteLLM involved unrelated software bugs, platform flaws and supply chain malware—not CA key compromises like this (Node.js patched concurrently for the same CA issue).
discuss.python.org/t/information-…
emudhra.we-have-a-problem.com
github.com/advisories/GHS…
docs.litellm.ai/blog/security-…
snyk.io/blog/php-patch…





















