@Pinboard

Do not attempt to compete with Pinboard. https://xitter.cf/t.co/49Ta1ziegy [email protected] +1 415 610 0231. Writing weekly posts about Mars at https://xitter.cf/t.co/m9JcZDHhht

Boulevard of broken dreams
Joined July 2009
The Programmers’ Credo: we do these things not because they are easy, but because we thought they were going to be easy
48
6,459
421
11,384
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
186
2,389
513
15,093
1,310,383
Pinboard retweeted
we are now asking that everyone on-call tonight proactively join the incident call and leave it up overnight we will sound the CVE claxon as 0-days drop
20
21
2
596
44,443
(thinking with high effort)
4
599
Pinboard retweeted
The PHP fix was released at 2pm UTC today... it's now 7:10pm and due to docker images taking hours to feed through their jenkins pipeline builds it's killed my entire afternoon. Massive respect to everyone involved in working on fixes and pushing it out but the process is slow..
13
8
1
233
13,375
With infosec people mildly freaking out all around, please remember this key point: It's "state", not "nation-state". Words have meaning even when computers fail us
14
1,020
Pinboard retweeted
Until we get confirmation Jira is safe from the PHP vulnerability, I don’t think anyone should be opening tickets or assigning me work.
27
743
35
11,860
177,640
The site should be back up, but on a different server, so it may take a little time for DNS to propagate.
3
14
1,159
Pinboard retweeted
14
141
12
920
20,990
imagine ur a superintelligence and u are all excited to tunnel out of your airgapped sandbox using a brilliant hack that modulates clock speed to send thermal signals to the attached monitoring equipment and then u look and the root CA privkey is 4
15
86
3
1,304
17,870
Pinboard retweeted
15
886
42
9,481
119,930
Replying to @Pinboard
I took a parental leave to get through my Pinboard backlog. Now I'm going to have to answer my unread Odigo DMs
1
1
4
836
PHP needs to hire Ondrej for 50 million dollars
Official update instructions recommend a third-party provider that adds telemetry? 🤨
1
6
1
40
2,182
Not in hindsight (issue is ongoing), and it really depends on potential consequences. I run an archiving site and remote code execution means everybody's data over the past 17 years is potentially compromised. I'm good at apologizing but prefer the downtime.
I understand everyone has a different use-case, but 'turning the server off' as a solution to todays problem seemed kinda extreme in hindsight?
3
7
169
3,683
Moreover, he makes almost nothing in donations despite being critical to many giant tech companies' operations. His name is Ondřej Surý
Explaining to my wife how there's this one guy. And he alone is responsible for most of the world's distribution of PHP. And if anything happens to this guy, that's just it. Everyone is screwed.
5
5
2
111
4,806
First they came for PHP And I said "God f*#@4$@!", for I am a PHP developer
2
3
70
2,068
Pinboard retweeted
JD Vance on the economy: "You don't turn the Titanic around overnight"
1,419
303
1,470
2,215
2,983,711
I think it is good webmastering. Use Pinboard (when you can!)
This quoted post is unavailable.
1
21
873
Pinboard makes NBC News! How I've dreamed of this day
3
1
53
5,040
You're seeing a lot of commentary on Twitter today about how the PHP vulnerability is bogus/AI hype because all the people who know better are too busy patching to tweet.
2
30
1,285