So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

The baby boomer generation is the first to enter its most vulnerable years with unfettered access to the internet and, like the rest of us, it has trouble looking away. Americans over 60 now spend more than half their leisure hours in front of screens. But unlike millennials and most Gen-Xers, who have spent years navigating engagement bait, stealth marketing, and AI slop — and have developed a working instinct for what to trust — older adults tend to have little idea of what they’re looking at. This susceptibility is creating an entirely new type of responsibility for the adult children of these suddenly very online parents. These adult children describe watching their relatives — call them iPad parents — ingest content they have no context for, slipping into a zombified state of consumption that their loved ones often believe is exacerbating their decline. “It seems like an addiction,” says Beth, a 51-year-old lawyer, who says she has watched her 84-year-old mother’s attention span atrophy over the past few years. “It kind of has the same symptoms — getting fussy if she’s not online or just constantly going back to try and get online.” Marti DeLiema, a gerontologist at the University of Minnesota, likens the process of regulating a parent’s internet access to getting an adult to give up driving in their later years. “Driving is part of your identity. It’s like a mark of freedom and independence,” she says. The online world is “also a source of your social connection.” All this amounts to a particularly tricky balancing act for adult children: figuring out how to preserve their parents’ independence while protecting them from an ever-advancing slop-filled ecosystem. Read Jessica Lucas’s report on how adult children now have to save their retired parents from slop-filled, scam-riddled feeds: nymag.visitlink.me/FQ9dBi

Vance: I'm disgusted when I see Republicans who are whining more about the Vivek Ramaswamy ad than about what Democrats want to do

bad news -- house of air (trampoline park) in the presidio is shutting down. good news -- you can rent the space! 18,000 sqft. epic location. What do you do?

I cannot emphasize enough how amazing rural Idaho is. It’s like living in a time warp from the 90s. Kids still ride their bikes to each others houses. Teenagers work drive thrus and cafes and the types of jobs meant for teenagers. You know your neighbors and they wave at you.

Trump on Camp Lejeune water contamination claims: "If we win the House and Senate, I am directing the Department of Justice to settle all remaining legitimate claims as soon as possible ... if we don't win, there's no money."

You should ignore all political analysis from anyone who ever considered Vivek a serious candidate for the GOP nom

Foursquare was acquired last month. The outcome was disappointing. It's taken me a while to write this, but I think I'm finally done grieving it. Here are some thoughts on our final years, an effort to honor the team who helped build & maintain FSQ's legacy, and my attempt to finally get some closure. teendrama.substack.com/p/som…

JD Vance: "Vote for the people who have solutions to lower the cost of gas, don't vote for the people who made the problem to begin with."

Guy who never goes out with phone on 3% charge