Pieter Maes retweeted
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
Pieter Maes retweeted
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨
Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk.
→ NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS.
→ TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity.
→ Attackers could potentially take control of vulnerable servers remotely, without authentication.
→ Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed.
→ EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately.
→ Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured.
→ WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk.
→ Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated.
The vulnerabilities are CONFIRMED. The full technical details remain secret.
Tomorrow, the race between hackers and defenders begins.
This could get ugly. FAST.
Pieter Maes retweeted
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
Pieter Maes retweeted
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.
If you run either stack in production, keep an eye on official advisories and apply patches promptly.
Security maintenance doesn't stop at your application code. Your runtime matters too.
Node.js advisory: nodejs.org/en/blog/vulnerabi…
Something people often don't realize a lot of IOT devices also run PHP for their web interfaces.
Make sure you don't port forward to those devices or are available from the open internet..
If you want to access stuff on your LAN, use a VPN like Wireguard, a lot of routers support that nowadays.
Representing @hermitcraft_ and @OrevilleStudios (since I work for both) on tv.pings.utwente.io/1080p30_…
pings.utwente.io/
Sending a lot of pings to get them pixels on that stream
En plots werkt @itsmeDigitalID niet meer op @GrapheneOS wtf.. veiliger OS dan gemiddelde mens heeft, en zeggen ze onveilig? wat?
Pieter Maes retweeted
Guys, this is big! Check out our brand new VILLAGER NEWS ADD-ON! We worked with the amazing and super talented @OrevilleStudios to bring your Minecraft worlds to life! 👀TRAILER :
Pieter Maes retweeted
Linus Torvalds just fixed a Linux kernel bug that AI told him was impossible to solve.
Torvalds rarely writes kernel patches himself anymore. This time he did.
The bug lived in the Intel Xe graphics driver. On certain hardware it caused the display manager to endlessly restart, over and over.
He called in AI to help track it down. In his own words: "This was a debug session from hell, enormously helped by an AI doing much of the grunt-work."
Then came the twist.
"The AI several times stated flat out that this was impossible and unsolvable and that we should just write a report about it."
He did not accept that answer.
"I suspect those things have been trained by people who may not be quite as stubborn as I am."
He kept pushing. The AI kept working, adding debug code and analyzing it faithfully every time he pushed back.
24 patches. 18 kernel boots.
The actual fix, once they finally found it, was one line. A "round_up()" that needed to be a "round_down()."
Torvalds gave the AI credit and let it write the final commit message itself.
Even AI is not allowed to give up around Linus Torvalds.
Source: phoronix.com/news/Linus-Torv…
Pieter Maes retweeted
Når du trodde EU ikke kunne bli verre.. joda det blir verre for alle.
Nå må alle som selger noe til et land i EU betale for innpakningen av varer de sender. Det gjelder uansett hvor liten business du har.
Hvis du ikke følger den nylig innførte loven så risikerer du selvsagt heftige bøter.
You gotta love EU 🤡
Pieter Maes retweeted
A slot antenna is a hole that radiates.
Cut a narrow rectangle out of a large conducting sheet and feed it across the short dimension. The radiation pattern looks almost exactly like a dipole of the same shape, except E and H are interchanged and the polarization is rotated 90°.
This is Babinet’s principle (optics to antennas via Booker, 1946). Take any thin conducting screen and its exact complement (metal where there was free space, free space where there was metal). Illuminate both with the same wave. The fields they produce, E₁ and E₂, must satisfy:
E₁ + E₂ = E₀
where E₀ is the field that would exist with no screen at all. In the geometric shadow the two diffracted fields are equal in amplitude and opposite in phase. Everywhere else they add to the unobstructed wave.
That’s why a slot and its complementary strip dipole are duals: the hole and the cover together recreate free space. Their impedances are locked by
Z_slot · Z_dipole = (η/2)²
(~35 000 Ω²). A 73 Ω half-wave dipole becomes a ~480 Ω slot.
The metal isn’t doing the radiating. The absence of metal is. And the sum of the structure and its hole is required to be nothing more exotic than ordinary free-space propagation.
Nature’s neatest antenna trick: the thing you remove is just as important as the thing you leave.
Pieter Maes retweeted
I just saw $1.5 trillion on my AWS bill and my soul left my body
📣 Service Update: AWS Billing Console
We are investigating issues with Cost Explorer reflecting inaccurate estimated billing data.
📊 Track status: go.aws/aws-hd
#AWS #AWSSupport
Pieter Maes retweeted
🚨 Calling all VFX Artists! 🚨
We're looking for talented VFX/Technical Artists who can bridge the gap between art and development! If you're a Molang wizard with strong experience in particles, flipbook textures, render controllers, materials, and other Minecraft Bedrock visual systems, we'd love to hear from you!
Apply here: careers.orevillestudios.com/…
Applicants must be 18+.
Pieter Maes retweeted
🚨 EVERY EUROPEAN NEEDS TO KNOW THIS:
The European Union is turning into an anti-democratic surveillance apparatus.
In March, the European Parliament REJECTED the extension of “Chat Control.”
So what did Brussels do?
While everybody is distracted from the World Cup, they furtively brought it back through a rarely used procedure and are trying again.
The goal is to allow private communications to be scanned under a derogation from normal ePrivacy protections.
They’ll have access to your private messages and your photos. And, as always, mass surveillance is being sold to you under the banner of “safety.”
The EU bureaucrats do not trust you.
They urgently want the infrastructure to surveil you.
And when its own Parliament votes the wrong way, the bureaucratic and anti-democratic machine simply finds another procedure and tries again.
The European Union is not protecting democracy.
It is becoming its enemy. And almost all CONSERVATIVES members of the parliament voted in favor of this Orwellian plan.
And now imagine a combination of governmental surveillance AND Palantir. SCARY!!!!
SHARE THIS. Europeans deserve to know what Brussels is doing to their privacy.
Pieter Maes retweeted
🇩🇪🚨 Krass: Nächste Woche, wenn viele Abgeordnete schon im Urlaub sind, sollen #Chatkontrolle 1.0-Massenscans per 3. Votum heimlich wieder beschlossen werden! 🕵️♂️
Infos: heise.de/-11349737
Stopp den Coup & warne die Abgeordneten JETZT: fightchatcontrol.de ✍️
ALT EU-Karte zur Chatkontrolle 1.0. Alle Staaten rot (dafür), nur Italien grün (dagegen). Text warnt vor Überwachungs-Coup und ruft dazu auf, Abgeordnete jetzt anzuschreiben. Webseite: www.fightchatcontrol.de
Pieter Maes retweeted
Chaos Cubed World Download! ⚽🏀🏒
Step into the sports-themed world from the 1.11 trailer, now available to download for free! 12 ready to go casual mini games to play with your friends, and cause plenty of cube-shaped chaos!
FREE Download: orevillestudios.com/actions-…
