Jason R

jrichelson.bsky.social

23 octobre 2026 08:12

It’s the only way to fix the vulnerabilities!

Brandon Downey

bdowney.bsky.social

22 octobre 2026 08:14

It's not just the NSA, and it's not just the internet archive of course; php runs on something like 65-70% of websites [!]. Are you really saying we are better off _not knowing_ there is a critical security vulnerability in this software?

Brandon Downey

bdowney.bsky.social

22 octobre 2026 08:14

Imagine having a flaw that affected millions of websites, and blaming the tool that helped us find it. This has happened dozens of times in the history of security tooling, and it is not the fault of *tools*, it is the fault of the software. Every time we tried to blame tools, we got less safe.

josh fr

psychicfax.bsky.social

22 octobre 2026 01:16

Yeah, and the stuff about no lights or traffic signals is not hyperbole. Just about everything "tech" these days has an admin panel that is connected to the internet and lets the admin do destructive things. If you can spoof that login with a doctored cert, things can get bad quickly.

Bourgeois mfer

ghunkinking.bsky.social

17 octobre 2026 23:39

That publisher-or-utility dichotomy is nonsense. Platforms must be able to moderate harassment, hate, and threats without becoming liable for every user post. Otherwise, every platform becomes as vile as X.