Tootfinder

Security personnel around the world are on high alert following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.
As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates.
There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certifi…

The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.

"This issue is not specific to the Wikimedia Foundation, but affects any website running PHP. This is a significant internet security vulnerability that many organizations are responding to right now.
We are working to avoid downtime for our wikis, but we have deliberately taken many of our supporting services offline until they can be safely patched."
#wikimedia

Impact of PHP vulnerabilities on Wikimedia tools and services
The Wikimedia Foundation is currently preparing for two critical security vulnerabilities in PHP, the programming language that underpins much of what we operate today. These vulnerabilities are se…

The Parker Foundation is a philanthropic organization with an art collection that spans 20 centuries and reflects cultures from around the world. With a mission of making art accessible to global audiences and encouraging scholarly research, the foundation loans works to museums and supports public programming. Since 2024, the foundation's generosity has enabled the Georgia Museum to exhibit exceptional works that complement its own collection.
3/

James Randall "I Started Programming When I Was 7. I'm 50 Now, and the Thing I Loved Has Changed" on software complexity, abstractions, AI and older vs younger developers: https://www.jamesdrandall.com/posts/the_thing_i_loved_has_changed/

As an IT professional whom has mostly been Sys Admin who is not very confident in my programming skills “vibe coding” is sort of dangerous. I can converse with a fairly capable programmer who never needs sleep or coffee. Also, one who is fine with helping me get all the random thoughts out of my brain or my Brother’s brain…

AI may eventually kill us all, but first it will make us miserable.
You have probably heard of the security weakness in the PHP programming language. If not, it is urgent that you become informed on this issue. It affects a massive number of websites and internal applications. Hackers can bypass security credentials and get full access to servers. Patches are available and should be applied as soon as possible.
Because we have entered a heavy activity period before the December holidays, many companies are in lock-down mode. No one wants to risk upgrades during the most busy season of the year. But this is an exception. A five-alarm fire, if you will. The patches are easier than the Year-2000 event, but much more critical to get done now.
Best wishes to my IT colleagues, and my sympathies.

On my way to my first @… to talk about teaching software architecture.
https://scaladays.org/session/teaching-software-architecture…

The announcement for the new Epic Store client sounds like an April Fools joke:
"Programming is hard. So, instead of doing that, we vibe coded a new Epic Games Launcher that’s way faster and more responsive than the current one, and has a new look."
But it's 60 milliseconds faster than Steam at restoring from the system tray, so they've got their benchmarks sorted. I wonder if it still takes a minute to display your library...
🫠

My occasional use of agentic programming has resulted in a temporal knowledge graph database that now supports remembering stuff about a home, which has been up and running for most of this year, and has now been cleaned up, generalized to additional domains and I'm adding vehicles. Looking for input on the use cases people have for keeping track of their bikes, cars, race-cars, trailers, parts collections etc. over time #WierdCarMastodon #ClassicCars https://github.com/adrianco/the-goodies/blob/main/docs/vehicles-proposal.md

i used to post here about concepts in programming and languages. Now it's mostly reminders that people outside tech hate AI* and that the whole operation is a farce on its economics and its merits.
I used to Like Computers. Now I have to move my retirement funds out of the technology sector as a hedge against The Collapse. You could see why I'm cross.
ANY way, I'm less grumpy on my other account, mister dave tilde zone. or at least more diversely grumpy