Jon Sagara

Jon Sagara

@jonsagara.com

Professional nerd (C#/F#). Swift newb. Pretend woodworker. You may remember me from such Internet sensations as @us-parks.parksalerts.com and @us-monuments.parksalerts.com

1K followers505 following1.9K posts

Jon Sagara
@jonsagara.com

The parks map now highlights each park unit's boundary. For trails, it renders the trail as a corridor. To reduce noise, you must be zoomed in to the appropriate level to see these additional renderings.

Jon Sagara reposted

MacRumors.com
@macrumors.bsky.social

iOS 27.2 Fixes Over 160 Security Vulnerabilities

macrumors.comiOS 27.2 Fixes Over 160 Security VulnerabilitiesApple's iOS 27.2 and iPadOS 27.2 updates fix more than 160 security vulnerabilities, which means it's a good idea to install the software as soon as you can. An Apple Intelligence vulnerability that could let a remote attacker access sensitive data was fixed, as was a Hide My Email bug that could leak the user's real email address. There are more than 30 WebKit fixes, and approximately 15 kernel bugs have been addressed. Six CVEs credit Calif, the team that jailbroke the iPhone Duo on launch day and demonstrated an untethered iOS 27.0.1 jailbreak. Calif researcher Stefan Esser recently said that "most" of the vulnerabilities used for its jailbreak are fixed in iOS 27.2. Apple did not say any of the flaws are known to be actively exploited, but with details published, devices that are not updated could be subject to attack. The number of security fixes in iOS updates continues to grow as AI models have gotten better at locating vulnerabilities. Anthropic Research is credited on three fixes, and four cite OpenAI. Apple has also released iOS 26.7.2 for devices not yet updated to iOS 27. It has many of the same security fixes.Related Roundups: iOS 27, iPadOS 27Related Forum: iOS 27 This article, "iOS 27.2 Fixes Over 160 Security Vulnerabilities" first appeared on MacRumors.com Discuss this article in our forums

Jon Sagara reposted

Barry Dorrans
@blowdart.me

.NET has released an out of band security update to address the vulnerability in the Google Brotli library. This is the same library NPM and others use. .NET and ASP.NET Core do not use Brotli by default, you have to opt-in. Details on what to look for in your code are in the advisory.

github.comMicrosoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability## Executive summary A buffer overflow vulnerability exists in the Brotli decompression library used by .NET. This vulnerability may allow an unauthenticated attacker to read or corrupt process me...

Jon Sagara reposted

The Tennessee Holler
@thetnholler.bsky.social

🔥 OBAMA: “The thing is, Iran didn’t have nuclear weapons — because I put a deal in place he pulled out of… and the war he started is why the price of everything is UP… how much time do you think Hegseth spends looking at himself in the mirror? These are not serious people.”

Jon Sagara reposted

Acyn
@acyn.bsky.social

OBAMA: The big trade war he's starting now is with that well-known evil empire: Canada. These are the people who gave us maple syrup and Martin Short.

Jon Sagara
@jonsagara.com

Claude just called me on my bullshit 😑 "You can decide on hosting after the page works locally. Want me to start building it?"

Jon Sagara
@jonsagara.com

So far, so good. I have several Azure Functions and App Services running .NET 11 RC 2 👍🏻

.NET@dot.net

🚀 .NET 11 RC2 just dropped! Go-live support ✅ Faster MSBuild wildcards ⚡ HTTP/2 tuning 🌐 F# Native AOT improvements 🔥 Plus #ASPNET Core, MAUI, WinForms & NuGet goodies. Time to test the bits! 👇 Read: msft.it/63327aseul

Jon Sagara
@jonsagara.com

I find it hard to let go of the urge to write the code myself because I really enjoy it, but modern models do a very good job of mimicking the style of code in my repos, and they do it so much faster than I can. It all still requires review, though.

Jon Sagara
@jonsagara.com

I watch most YouTube videos at 1.5x speed, so on the rare occasions when I watch at 1x speed, it’s very jarring to hear the “slowed” narrator’s voice

Jon Sagara reposted

Chris Kluwe, adjudicated poaster
@chriswarcraft.bsky.social

<GOP CANDIDATES> - “Furries are FORCING your CHILDREN into GENDER REASSIGNMENT SURGERIES at their SCHOOLS!! LITTER BOXES!!!” <me> “…fuck i hope the furries in global IT patch these horrendous exploits before they destroy the internet”

Jon Sagara reposted

Russ Cox
@swtch.com

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

bugzilla.mozilla.org2083449 - Private key compromise of eMudhra Intermediate CertificatesNEW (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-20.
Russ Cox@swtch.com

If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.

Jon Sagara reposted

Jeff Geerling
@jeffgeerling.com

If you run any kind of PHP application on your server... it's time to patch. Except... the patch is not here yet. Some info here: jackalsyn.com/posts/php-up... - but disabling upload progress *may* help, it's just not the full fix: session.upload_progress.enabled = Off

jackalsyn.comOnly for the curious...
nightshade →eth0:2026@nightshade.technology

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

Jon Sagara reposted

Scott Helme
@scotthelme.bsky.social

Damn, this is really bad. Mainstream browsers will probably be fine, but there is a long tail of other stuff that will be affected by this: scotthelme.co.uk/eight-bits-o...

scotthelme.co.ukEight Bits of Trust; eMudhra's CA keys cracked in millisecondsOne of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and…

Jon Sagara reposted

Hackaday
@hackadayofficial.bsky.social

Reverse Polish Notation (RPN) is a little weird to look at if you're not familiar with it, but it still has a diehard fanbase to this day. Al Williams breaks down the RPN calculators you can still buy today. hackaday.com/2026/09/02/i...

hackaday.com“I’m Not Dead Yet!” Reverse Polish Notation Calculators You Can Still BuyIf you used a scientific calculator in the 1970s or 1980s, there was a fair chance that it worked differently from almost every calculator you see today. Instead of typing: 2 + 3 = you entered: 2 E…
Jon Sagara
@jonsagara.com

Oy

Shams Charania Tweets@shamsbot.bsky.social

Just in: Sacramento Kings guard Ben Simmons is believed to have sustained a torn Achilles tendon at practice Sunday, sources tell ESPN. A suspected season-ending injury for Simmons after rejuvenated and impressive training camp and preseason performances.

Jon Sagara reposted

Max Berger
@maxberger.bsky.social

Replying to @maxberger.bsky.social

When democracy is restored in America, we also have to break up the media monopolies owned by regime allies.

Jon Sagara
@jonsagara.com

I liked one AI video of Woody cooking Buzz Lightyear in soccer, and now the algorithm thinks it needs to show me all of those videos

Jon Sagara reposted

Barry Dorrans
@blowdart.me

Replying to @blowdart.me

That's right C# fans you too can build your own @beans.monster or @maddy.bot.idunno.blue It's stupidly over engineered so it can recover from crashes, jet stream unavailability, the backing database going down and even having to read Jerry posts. How over engineered? github.com/blowdart/mad...

github.comGitHub - blowdart/maddyBot: A simple Bluesky bot which watches for the phrase ".NET Aspire" and responds.A simple Bluesky bot which watches for the phrase ".NET Aspire" and responds. - blowdart/maddyBot

Jon Sagara reposted

Barry Dorrans
@blowdart.me

v8.0.0 of my .NET Bluesky library is out, featuring 🎉 JetStream v2 support, including archive snapshots, resumable block and segment downloads, and live replay with bounded planning. github.com/blowdart/idu...

github.comRelease v8.0.0 · blowdart/idunno.Bluesky🎉 New JetStream v2 support, including archive snapshots, resumable block and segment downloads, and live replay with bounded planning. 🎉 New Firehose support, including commit, sync, identity, acco...