Xe

I'm Xe Iaso, I'm a technical educator, conference speaker, twitch streamer, vtuber, and philosopher that focuses on ways to help make technology easier to understand and do cursed things in the process. 🌐: xeiaso.net 📺: twitch.tv/princessxen 💰: patreon.com/cadey

Are you FUCKING KIDDIGN ME github.com/embedthis/go...

The core parts of relational databases are transactions, tables, and indices. At Tigris we use a non-relational database (FoundationDB) but still have indices. How did we do it? We made our own!

aclobe

"Why would you put a banana in your mouth?"

"Doctor Who but hard scifi" *30 minute argument about warframe lore*

Help, what expansion is this

"Some people love art; that doesn't mean they want to stick their dick in a painting"

We need a hero. We need Honest Ahmed now more than ever.

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-89078/

HAPPY GODDAMN FRIDAY ALL

"Please don't talk about red mage sex at work" "Now that you *told* me"

Our private key isn't four

cybersecuritynews.com/godaddy-revo...

“Don’t worry I got the memory model all in my head.” > Me getting ragebaited by a retired graybeard that never left 2008. I was trying to tell him my love of Rust. He told me it sounded like a language devised by marketing.

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-93479/

HTTP/3 compression bomb: foxio.io/blog/header-...

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-94300/

Where the fuck are they getting all these planes

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-111813/

millions must malloc for billions to be free

post fastfetch

Is today the day that infosec ivory tower motherfuckers realize that damn near 80% of websites run PHP? Will they internalize the implications of that? Or will they choose to continue to look down on people trying to make PHP more secure? Let's find out!

hunter4

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-111497/

Maybe just turn off production today or something

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-111497/

mr president i have no fucking clue what number plane this is anymore

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-107891/

I'm seeing rumblings of a second big PHP vuln

In light of recent vulnerabilities, I'm happy to announce that I have successfully rooted my steam deck.

Fedora 43 users install these RPMs to fix PHP: koji.fedoraproject.org/koji/buildin... Fedora 44 RPMs will be here in ~15 minutes give or take: koji.fedoraproject.org/koji/buildin... Arch has pushed the fixed packages to mirrors. No word from Alpine yet and I can't hit their git...

God fucking damn it, we are never gonna hear the end of this openai.com/index/coordi...

Jesus Christ patch your shit now https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-109618/

Jesus christ patch your shit now

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

Today is a great day to be a WAF vendor