Comment Re:Fire me (Score 1) 136
If you get severance, you do not get to collect unemployment
Submission + - PHP Warns It Plans to Release 2 Emergency Patches Imminently (arstechnica.com)
An anonymous reader writes: Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere. PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.
“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.” The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP. A video depicting the tool has been reposted here.
Attempts to locate the unconfirmed report were unsuccessful, but security firm watchTowr said it claimed to affect every PHP version from PHP 5, released in 2004, onward. The security firm went on to say it has confirmed that the vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are real. Researchers from separate security firm Sansec said they “expect mass attacks to start within 15 minutes of the release.” A third security firm, Webfence, also urged admins to prepare now. Huntress has also issued an advisory.
“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.” The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP. A video depicting the tool has been reposted here.
Attempts to locate the unconfirmed report were unsuccessful, but security firm watchTowr said it claimed to affect every PHP version from PHP 5, released in 2004, onward. The security firm went on to say it has confirmed that the vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are real. Researchers from separate security firm Sansec said they “expect mass attacks to start within 15 minutes of the release.” A third security firm, Webfence, also urged admins to prepare now. Huntress has also issued an advisory.
Comment Re:There is absolutely no chance... (Score 2) 74
Prod and marketing was around 10M and first weekend box office was 15M. Second highest opening for a documentary, ever. I was bored stiff by the second half, but everyone else is raving about it, so idk.
Comment Re:not HER opening (Score 1) 74
I went to see it with two women. The dong is all they talked about afterwards. Both said it was gigantic. They also wanted to know why it was so dark given his complexion.
Comment Re:Piss-poor writeup needs more info... (Score 1) 67
The judge isn't punishing Iron Mountain. Iron Mountain has been in contact with Nine PBS, but they said from their perspective the data belongs to OSS (their customer) and they would need a court order.
Comment Re:will the former OSS employee be protected from (Score 1) 67
The bill was due in March, that's when Nine PBS discovered that OSS had folded.
Comment Re: Proprietary software is obsolete (Score 2) 47
Use a global plan cache, not one that is per-backend
Comment Re:Yeah but the pay isn't great (Score 2) 83
The datacenter work is essentially an open checkbook for as much overtime as you can handle. If you come in from another state you can usually get a per-diem on top of it. It's extremely lucrative while it lasts...
Comment Re:So, a factory gig system? (Score 1) 65
There's nothing else in these areas... it's factory work or Dollar General cashier.
Comment Re: Respecting copyright is an important part of F (Score 1) 109
Yeah, it went down to whether headers are copyrightable.
Comment Re:I don't currently use Rust (Score 1) 171
That tonsky.me site needs a warning attached to it, I won't be able to see for the next hour with that background.
Comment Re:Investing = Polymarket betting (Score 2) 120
Musk unloaded X's (twitter) failed AI experiment onto SpaceX. Part of this included a 220K node DC, which Anthropic recently announced they will be using.
Comment Re:Plex isn't for pirated content (Score 1) 89
HDHomerun does this for waaay cheaper than Plex.
Comment Re:This is a systemic problem, not an isolated one (Score 1) 43
I don't remember where I read this phrase, but "administration begets administration".
Comment Re:Reads like government astroturfed journalism (Score 1) 73
Or the simpler explanation... Reuters had nothing better to report, but has to write something in order to make money.
