Tootfinder

So all you static site folks are running the absolute latest nginx, right?
https://www.csoonline.com/article/4237420/f5-rushes-out-emergency-nginx-patches-for-three-critical-flaws.html

F5 rushes out emergency NGINX patches for three critical flaws
The three new NGINX flaws are not yet known to be exploited, but could expose systems to crashes, denial of service and potential code execution.

Meta delays new commercial terms that critics say let it scrape publisher content to November 20, a day after the News/Media Alliance demanded their withdrawal (Sarah Fielding/Fast Company)
https://www.fastcompany.com/91628981/meta-

Meta quietly delays controversial update that critics say will allow website scraping
Following outrage from news publishers, the tech giant pushed back an update for business accounts by three weeks. It still plans to move forward with it.

Security personnel around the world are on high alert following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.
As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates.
There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certifi…

The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.

An interview with Ondřej Surý, a volunteer who maintains PHP and automates its patches, about his role in fixing two critical PHP security vulnerabilities (Charlie Warzel/The Atlantic)
h…

The Man Who Saved the Internet Yesterday
Ondřej Surý was a relatively anonymous volunteer working on PHP security. Then the internet exploded.

This Friday! LIBER AI Pulse seminar, 'A Critical Perspective on AI Literacy', 12:30 CEST
https://libereurope.eu/event/liber-ai-pulse-session-vi/
I'm going to share these resources - any other key suggestions?
Elements of AI (and more):

LIBER AI Pulse - Session VI - LIBER Europe

Why it’s important to have well-funded programs for open source infrastructure: “In 2024, PHP underwent its first external security audit in years. The PHP Foundation secured funding from the @… to organize this audit through OSTIF, and it was carried out by Quarkslab. While fixing one of the issues Quarkslab reported, a PHP core developer contracted by t…

Today's PHP Security Release, and How We're Strengthening PHP Security
Describing the story behind how critical security vulnerabilities were found and fixed.

An article on the Fall of Scientific American.
Scientific publishers should be independent. But:
"Springer Nature felt that Scientific American’s criticism of Trump was threatening their broader business—selling subscriptions to their scientific journals. The federal government was a major client."
Scientific American will be for many Semantic Web researchers a special place because of that one article by Tim Berners-Lee, Jim Hendler and Ora Lassila. Thus it's…

The Fall of “Scientific American”
When the beloved science publication got too political, its corporate owners stepped in. Now its future is uncertain.

If you think you can relax from patching after a hard day's work of slashing 4 (#eMudhra) and fixing the Web (#PHP2Shell): If you are self-hosting #GitLab, the day isn't over yet.
https://th…