The official MidnightBSD twitter feed for the open source operating system.
Ypsilanti, MI
Joined November 2011
- Tweets3.6K
- Following185
- Followers1.9K
- Likes263
daemonports.org/midnightbsd/
Daemon ports includes MidnightBSD as well as all the other BSDs. One stop searching of ports. Check it out
We removed the www/midori port. This version has been long EOL and was kept for xfce. Modern xfce doesn't require it.
We recommend www/raphael, the MidnightBSD midori fork if you like this browser. You can also use firefox, firefox-esr, linux brave, chromium, etc
We got asked if we supported linux with our window manager. It's not a priority. We'd take patches for linux or other BSDs.
A lot of mports activity. We're trying to patch in light of this week's security issues and our backlog.
highlights:
nss
firefox
firefox-esr
thunderbird
go127 added
node22 / 24, added 26. removed 20, 23
php (of course)
tailscale
python stuff: pip, uv, sphinx, certify, ...
This week is rough:
* root CA issue (nss/ca_root_nss), browsers, python and other libs, etc
* php vulnerability
* node CVEs
* BIND CVEs
* c-ares CVE
* roundcube
...
MidnightBSD retweeted
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
MidnightBSD retweeted
⚠️ UPDATE: PHP maintainers have verified a separate double-free regression in PHP 8.4.27/8.5.12.
It may be related to the researcher's earlier crash report, but that connection isn't confirmed.
Neither finding establishes that the php2shell patches failed or that RCE is possible.
Repo updated: github.com/php/php-src/issue…
#php #CyberSecurity
We now have a very simplistic AI chat app that can connect to local ollama or llama.cpp instances.
This is included in the window manager repo, but we will NOT be automatically installing models or ollama.
OpenAI compatible endpoints
Some folks reporting the php fix is not enough. fedi.katze.sh/@elise/1174793…
midnight workspace (midnight-wm) update:
We're looking at issues with accessibility. Starting to add a few keyboard shortcuts and allowing users to change them.
We're also trying to improve "dark mode" support to pass hints or pick a dark theme with the various toolkits
The big php vulnerability dropped. We just patched all our mports. No packages availble yet so build from mports if usin php
We have ported the gershwin desktop based on the ports work from the @ghostbsdproject
github.com/MidnightBSD/mport…
midnightbsd-wm:
added partial session restore feature.
added file/folder size calculations to file manager
added minimize button to file manager windows
The core executable uses about 60MB of RAM when running. the search and settings are separate apps.
Here is a slightly updated version of our window manager. This shows dark mode, battery indicator, desktop backgrounds work, etc
Just for fun, I've been vibe coding an X11 window manager. github.com/MidnightBSD/midni…
