Dunno about you, but the latest press release by #eMudhra smacks of copium emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
Nice to see #YunoHost being widespread enough (at least on the Fediverse) to end up as a trending hashtag after the #PHP2Shell incident. Thanks for being so proactive, @YunoHost and of course @Ondřej Surý for patching PHP so fast.
Talking about PHP, my birthday, and bugs: there seems to be a bug on #Nextcloud where the congratulations for your birthday come up only the day before the birthday. I chalked it up to UTC versus local time differences but nope!
Today's my birthday! So, a local business sent me a congratulation message via email, as usual. Only problem is, the picture is hosted on their WordPress and GUESS WHAT HAPPENED TODAY so it links to a site currently down for maintenance. #PHP2Shell
Today I learned InfoSec's acronym for "did this exploit actually hit me while I was asleep?" is IoC (Indicators of Compromise) and I'm currently searching for those on the #PHP2Shell case. Because it turns out it might have been actively exploited all the way since JUNE!
in reply to Profoundly Nerdy
@Profoundly Nerdy An earlier version of this advisory claimed that IoC checks should be performed "going back at least to June 2026", but it has since been updated. aikido.dev/blog/critical-vulnerabilities-in-php-php2shell
Either this vuln checker is flawed, or the standard #YunoHost security checks might have saved me from the #PHP2Shell . The results were "inconclusive" both before and after upgrading, so, who knows? php2shell.aikido.io/

Nearly every blog and wiki out there: shutting down for the day because of the still unpatched #PHP2Shell vulnerability

Me, with #Friendica and #Nextcloud still up for the time being: with one eye on htop and the other hammering apt update, hoping my single-user server is irrelevant enough

#Firefox on Android unloads all tabs every time I switch apps. So I move to Nightly and enable Isolated Content Process, but now media files no longer play. So I enable flags only documented at phabricator.services.mozilla.com/D260149 , but now tabs crash with any DRM'd content. What now?
To the #eMudhra company, you had ONE JOB
Screenshot of eMudhra's website. Text: "eMudhra was started in 2008 with a mission to accelerate the world's transition to a secure integrated digital society with a foundation built on digital identity and trust. Employees, customers and vendors increasingly demand real time and secure interactions, be it for onboarding, availing a loan, signing a contract or making payments online." Picture: stock photograph of an office lady typing on a computer.