Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ

@aaronw.dev

Principal Software Engineer (Open Source Engineering + Azure Core Upstream) at Microsoft + Azure โ˜๏ธ | Go (@golang.org), Cloud Native, Linux ๐Ÿง ๐Ÿ ๐Ÿฆ€ โ˜• ๐Ÿท๐Ÿ“ท ๐ŸŽน | Toronto ๐Ÿ‡จ๐Ÿ‡ฆ๐ŸŒŽืฉืœื•ื | ๐Ÿ’จ๐Ÿ˜ท๐Ÿ’‰ | https://aaronw.dev/hello/

5K followers2.4K following6.3K posts

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

Aw crap "Node.js Brotli decoder out-of-bounds write permits remote code execution (CVE-2026-111497) - (high) A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution." This one slipped under the radar due to PHP but ... nodejs.org/en/blog/vuln...

nodejs.orgNode.js โ€” Wednesday, October 21, 2026 Security ReleasesNode.jsยฎ is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

eep www.wiz.io/blog/php2she... "These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history... With frontier AI models and the right tools, a single researcher completed in a week what previously would have taken a world-class team months of work"

wiz.ioPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz BlogCore PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
Michael McLean@michaelmclean.me

There are millions of Wordpress sites that will be epically pwned tomorrow. Two critical PHP RCEs will be revealed in the morning. www.php.net/archive/2026...

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

the fact that an intermediate CA in India that sells only into the Indian market, when compromised, can generate TLS certs for literally any website on the internet, that feels like a major trust boundary problem

Filippo Valsorda@filippo.abyssdomain.expert

After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

Chatting with @clairegiordano.bsky.social for this @talkingpostgres.com episode was a lot of fun, and even my Teen enjoyed listening to it which I take as a huge compliment!

Claire Giordano โœจ @clairegiordano.bsky.social

๐ŸŽ™๏ธ New @talkingpostgres.com Ep44 is out! With guest @karenhjex.bsky.social, a Postgres significant contributor, PGConfEU organizer & Snowflake engineer Ft: DBA aptitude tests, multi-tenant cakes & mountain biking without broadband Listen: ๐ŸŽง talkingpostgres.com/episodes/fro... ๐Ÿ“บ youtu.be/ENku8ZSjZus

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

One thing I appreciate about advancements in machine learning is, struggling with executive function, being able to use plain English to find things & create automations has been extremely helpful. Filing expenses used to be so stressful, now I can just do "find all my receipts since September".

This post is unavailable.

Aaron Wislang ๐Ÿ‡จ๐Ÿ‡ฆ reposted

Sam Newman told me I should fuck around with short form video on different platforms, so here is a post inspired by two very different responses to "Testing in Production", from two different customer bases - @honeycomb.io and @chainguard.dev