a lot of websites are written in PHP, or rely on things that use PHP. and it turns out under the right conditions you can do "remote code execution" which means "you can tell their computer what to do and it does it" which is, you know, bad

Show Post

where this *does* overlap with the certificate problem (and most security problems) is that lots of systems are out there running old code and nobody is really updating them those systems are vulnerable and it's not always obvious when something you're using relies on them (directly or indirectly)

Show Post

also: if you're seeing websites suddenly going into maintenance mode, that's probably *not* because of this certificate thing it's probably because of a separate, completely unrelated, other massive security problem that just came out today, with software called PHP the internet, we have fun here

Show Post

Of course Adam did this 🥹 👏 🌍

Show Post

Loving it. Dang those supermodels!

Show Post