James retweeted
Buy and stream the COMPLETE Seasons 1-12 of Trailer Park Boys (and more!) for just ONE payment of $9.99 at TPB+! bit.ly/tpb-digital-collectio…
James retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
James retweeted
About 70% of all server-side programming is PHP lmao holy fuck
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can:
php.net/index.php#2026-10-20…
James retweeted
🤖 Made with AI
Was iPhone security broken just with Bluetooth?
iPhone was always known for its high security, second only to GrapheneOS. But a leaked Cellebrite document might show they found a way to break their protection.
The device is more vulnerable in AFU (After First Unlock) than in BFU (Before First Unlock).
Cellebrite's "Advanced Unlock" allegedly has the capability to unlock devices in the AFU state. As a response to rising USB port protection, they answered with a method capable of bypassing encryption over the Bluetooth radio.
No pairing, no user interaction. The Bluetooth attack sends an L2CAP packet to the target that hijacks the Bluetooth daemon and gains kernel-level control.
What is interesting is that Apple patched this with the iPhone 17 and TOLD NO ONE. They implemented MIE (Memory Integrity Enforcement), which might also be proof that these alleged capabilities are real, and that devices older than the iPhone 17 are vulnerable to these attacks.
GrapheneOS documentation states that this attack vector is known and won't work on up-to-date GrapheneOS devices.
GrapheneOS will always be the safest option.
James retweeted
Congratulations! 🙌🏻
Ofcom Concedes Defeat in the 4chan Case
prestonbyrne.com/2026/10/20/…
James retweeted
Well shit, they got her.
It is with heavy hearts that we must announce the cancellation of the Umamusume: Pretty Derby – 7th EVENT: THE STAGE in LOS ANGELES concerts planned for Oct 22–23, 2026.
Although we have coordinated repeatedly with all parties concerned and explored every possible option in our efforts to make this event happen, we were unable to obtain the necessary visas for entry into the US, so we have come to the painful conclusion that holding the concerts is no longer possible.
To all the Trainers who were eagerly looking forward to the show, we sincerely apologize for the inconvenience and concern this causes, and for announcing this so close to the event date.
Due to this cancellation, we will process refunds for the following:
・On-site viewing tickets
・Streaming tickets
In addition, we are looking into possible responses to Trainers who were planning to attend the concert in person. This will take some time, so we ask for your patience. Details will be announced on the 7th EVENT WORLD TOUR official website.
Once again, we sincerely apologize for the inconvenience this causes to all the Trainers who were eagerly looking forward to the concerts, as well as to the Umamusume cast, partner company staff, and everyone involved who put tremendous effort into making this event happen.
Please see the link below for the official notice:
umamusume.com/news/100113/
James retweeted
I love Job for many reasons, but mainly because it does a very clever jujitsu move on you as a reader. You start out thinking you've seen behind the curtain -- the scene in heaven w/ God & Satan making bets about Job.
So then after Job's trials, as his four friends come visit him to give their theories of why Job is in the predicament he's in, you've got your own little theory based on the opening scene, right? You're essentially the fifth friend who has their own read of the situation.
Then God comes in at the end and is like, "all your theories are wrong. None of you were there at The Beginning, and none of you know enough of the real backstory to really understand what's happening here. None of you can actually tame the chaos monster and organize all the things into a coherent whole. Only I can do that."
You, the reader, think God is calling out Job and maybe his four friends. But He's calling you out, too. You, the reader, are in the same boat as Job and his four friends. You think you have enough info about what is going on with Job because you saw the opening scene in heaven, but actually you're just as clueless and limited as the story's characters.
So the opener of the story is actually a trap, and the conclusion springs it on you. You think you have the backstory via some special perspective, but you're just like all the other confused people in the story. You don't really know and you're not ever going to know, either.
Job's lesson is that not only does God not owe you a theodicy (so stop expecting one), but even if you could see into the unseen realm you still wouldn't have a clue. You're never going to have enough information to put the whole, chaotic picture together in some satisfactory way. It's never going to all hang together in a coherent way that makes sense.
In some ways, I think Job is a coming of age story. This is one of things you learn in midlife -- that the pieces actually didn't ever fit together like you once thought they did, and the fact that it used to make coherent sense to you says more about who you were in that phase of life than it does about any larger meaning behind the events themselves.
The Job story is literally yelling at you that you cannot organize the chaos of life events into a coherent "why" -- it's simply beyond you. That you once thought you could was the arrogance of youth. God is actually the only one strong enough to tame the chaos monster & split its carcass into a neat, ordered, coherent structure.
This isn't the answer anyone wants, but it's the only answer that's telling you like it is.
Anyway, Job is a great book. The haters are wrong. I like it because I don't like to be lied to.
James retweeted
RIP Richard Riehle, who gave us one of OFFICE SPACE’s most unforgettable characters. Tom Smykowski pitching the Jump to Conclusions mat is comedy gold, but his “I have people skills!” meltdown might be even better.
Gone at 78, never forgotten.
James retweeted
A BIG THANK YOU to our legendary friend, @ElonMusk, for his incredible generosity in giving SpaceX Stock to millions of American children through TRUMP ACCOUNTS! This is exactly what was envisioned when we created TRUMP ACCOUNTS — Bringing together the GREAT PRIVATE SECTOR, Elon and so many more, to invest in our children, by far our greatest and most important asset, and give every American Child a piece of the American Dream. Thank you Elon! President DONALD J. TRUMP
James retweeted
We are sad to hear that prolific character actor Richard Riehle has died at 78. He played Batai in Next Gen's "The Inner Light," Seamus in the two Fair Haven episodes of Voyager, and Jeremy Lucas on Enterprise. Our deepest condolences to his friends and family.
