Looking like the exploit has been found. Seeing writeups and videos of people popping shells.
If you have a device you even think is running php for some panel or a site you forgot probably best to turn that off till tomorrow.
THIS IS NOT A DRILL.
If you package/distribute/maintain root stores or chain verifiers, act immediately.
If you know how to remove trust in a root, consider doing it now.
Otherwise, prepare to update systems as patches/mitigations come.
Go users, update to Go 1.27.3 or Go 1.26.10.
Nathan Fielder is on the cover of @wired.com this month. I interviewed him about Elizabeth Holmes, his extraordinary new film, and whether anyone can ever know what the hell is going on with another person.
An exclusive! And quite an experience. Read the full interview here:
"Anthropic told investors on Wednesday distillation accounted for 5 per cent to 7 per cent of revenue"
If true, and Q2 revenue was $11.5B, then that's more than half a billion dollars spent by other labs to distill Anthropic's models!
www.ft.com/content/1163...
Il Lombardia: Seixas seizes the spotlight in first Monument victory, the youngest ever winner of the Italian classic.
escapecollective.com/il-lombardia...
Incredible sentence from a Google Maps review of a restaurant in my neighborhood: "First time trying Tibetan food and I have to say this place is really good and authentic."
Wednesday's Weather Rating: 10/10
BACK TO BACK!!! High temperatures reach the upper 60s with sunshine, low dew points and a light breeze continuing all day long. A little autumn chill this morning and a glorious day throughout. The vibes remain immaculate out there!!
I wrote the "how to navigate Legistar" guide I wish I'd had years ago when I started doing #NYC policy advocacy, complete with warnings about subtle bugs. Along the way, I point to #CivicTech tools intro.nyc and legislation.support, with explanations of what they can and can't do.
How can it be that till now no one has titled a blog post "Legistar Trek"?!
New post on exploring #NYC legislation harihareswara.net/posts/2026/l... , with copious shout-outs to @jehiah.cz#CivicTech
Indo Java is, somehow, #22 on the Times’ list of 100 top restaurants in the city. The chef only cooks on Tuesdays. The next in the list, #21, is Le Bernardin.
Introducing Automatic Key Verification! Complementing the existing safety number system, automatic key verification provides an additional, streamlined way to confirm the privacy of your chats.
signal.org/blog/automat...
TY @cloudflare.social and @trailofbits.bsky.social our independent auditors 💙🙏
I made the most ridiculously fancy rice and beans yesterday. Cranberry beans from Rancho Gordo with Hokkaido Nanatsuboshi (10% mill) from The Rice Factory.
If you’re not following this guy on Instagram’s day-by-day account of building a lightweight Phoenician war-elephant outfit centered around his toddler in the command seat so that he can hike over the Alps in it in the footsteps of Hannibal—you should be.
www.instagram.com/reel/DaOO7iV...
Back on the other site, years ago, there was a thread about the most pretentious thing people had ever overheard. Someone said they witnessed a guy at an ice cream van asking for 'two Magna'.
I get these emails because someone that used to share my first name got my old work email address when they joined a previous employer. Then they left for a pretty senior role at the NYT and the data brokers got really confused.
20 Facebook pages spreading fake news to their 200,000 followers. A network of connected websites, and real money behind it.
We investigate a sprawling content farm. It gets pretty dystopian.
escapecollective.com/fake-cycling...
Recent status: watching someone that works at Zoom take a past due security training about not taking meetings in public spaces while he was on a train going between Copenhagen and Stockholm. He completed his training then had a sales meeting about volume discounts.
Here's the FTC press release: www.ftc.gov/news-events/...
"this service did not, in fact, listen in on consumers’ conversations or use voice data at all [...] Instead, the service the companies provided consisted of reselling—at a significant markup—email lists obtained from other data brokers."
Sources: Apple's revamped Siri may launch in beta, and will have an option to auto-delete chats; Apple plans to add Suggested Genmoji to iOS 27 and iPadOS 27 (Mark Gurman/Bloomberg)
Main Link | Techmeme Permalink
P s. (It does not specify, so I am assuming international sign-ups are allowed.)
And I just found that @jelaniya.bsky.social is here in the blue firmament, though they do not seem to be regular.
Columbia University in the USA has an online course on opinion writing led by Jelani Cobb that has a limited-time free registration offer (otherwise USD 99). Use the code WRITEFREE on check-out.
Particularly useful if you are an expert in your field but have no formal writing training.
An interesting finding here is that TikTok’s “sensitive data” filter for state health sites is a bizarre keyword list with terms like MAGA, antifa, Teamsters, bhagavad, mulatto, queer, and nationalist.
If your answer isn't on the list, it could still get sent
w/ @suryamattu.com and Tanaz Meghjani
Excellent reporting, alarming findings. Bloomberg's @dmehro.bsky.social et al found U.S. state government health websites are sharing people's personal info (sex, citizenship & race data) with tech giants via pixel-sized webpage trackers. Several states pulled the trackers after Bloomberg disclosed.
Excellent reporting, alarming findings. Bloomberg's @dmehro.bsky.social et al found U.S. state government health websites are sharing people's personal info (sex, citizenship & race data) with tech giants via pixel-sized webpage trackers. Several states pulled the trackers after Bloomberg disclosed.
New, by me at TechCrunch: The developer of the widely popular Wireguard VPN says he is also unable to ship software updates to Windows users after Microsoft locked his account, marking the second high-profile app developer (VeraCrypt) in the past few weeks to face this issue.