Pieter Maes

#linux #geek #hamradio (ON1GPS, ex ON3GPS) #sysadmin likes to rant (my own personal views, yada yada) I'm not perfect either..
lot of anger against polictics

[VideoLAN @videolan]

So, the French socialists, and Parliament members just voted a tax, that they don’t understand, which would cost VideoLAN more than 1 million euro per year.

They are probably the most clueless politician on Earth? And they claim they want technological sovereignty…

@LaurentLhardit

[Pieter Maes @maescool]

@dirtyh44 De nostalgie 😁

[m@ttias ⚡️ @mattiasgeniar]

For those running older PHP versions, either switch to https://t.co/11FjqYwq7E or ppa:ondrej/php's, those all have backported fixes for those old versions

[John Althouse @4A4133]

Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.

https://t.co/fopoKsPulV

[Pieter Maes @maescool]

@thomas_spaas Ik wil gaan slapen :(

[Mark Gadala-Maria @markgadala]

🚨 BREAKING: Node.js just dropped its OWN security bombshell.

4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.

→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.

→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.

→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.

→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.

→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.

→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.

→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.

PHP AND Node.js both facing major security disclosures on the SAME DAY.

If you run a website or application, TODAY is the day to check your servers.

And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.

Don't be the last one to patch.

[The Hacker News @TheHackersNews]

🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.

CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.

Read - https://t.co/frrfCwYlgp

[Mike Kipruto @itsMikeKipruto]

Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.

If you run either stack in production, keep an eye on official advisories and apply patches promptly.

Security maintenance doesn't stop at your application code. Your runtime matters too.

Node.js advisory: https://t.co/rmgw4sOnqU

[Pieter Maes @maescool]

Something people often don't realize a lot of IOT devices also run PHP for their web interfaces.
Make sure you don't port forward to those devices or are available from the open internet..
If you want to access stuff on your LAN, use a VPN like Wireguard, a lot of routers support that nowadays.

[Pieter Maes @maescool]

Representing @hermitcraft_ and @OrevilleStudios (since I work for both) on https://t.co/AQrQ20NrX9
https://t.co/BdCMnrbCuC
Sending a lot of pings to get them pixels on that stream

[Pieter Maes @maescool]

@didymusw @itsmeDigitalID @GrapheneOS had het zelf ook net ontdekt, thanks anyway <3

[Pieter Maes @maescool]

En plots werkt @itsmeDigitalID niet meer op @GrapheneOS wtf.. veiliger OS dan gemiddelde mens heeft, en zeggen ze onveilig? wat?

[Pieter Maes @maescool]

@komasoftware @GrapheneOS @itsmeDigitalID Enabling the Exploit protection compatibility mode fixes it, Ironic, making the app less secure....

[Ben @Lavetiaa]

Now that the Villager News Add-on has released I can finally share this horror I made whilst working on their lipsync 😭

[Element Animation @Element]

Guys, this is big! Check out our brand new VILLAGER NEWS ADD-ON! We worked with the amazing and super talented @OrevilleStudios to bring your Minecraft worlds to life! 👀TRAILER :

[Ayaan 🐧 @twtayaan]

Linus Torvalds just fixed a Linux kernel bug that AI told him was impossible to solve.

Torvalds rarely writes kernel patches himself anymore. This time he did.

The bug lived in the Intel Xe graphics driver. On certain hardware it caused the display manager to endlessly restart, over and over.

He called in AI to help track it down. In his own words: "This was a debug session from hell, enormously helped by an AI doing much of the grunt-work."

Then came the twist.

"The AI several times stated flat out that this was impossible and unsolvable and that we should just write a report about it."

He did not accept that answer.

"I suspect those things have been trained by people who may not be quite as stubborn as I am."

He kept pushing. The AI kept working, adding debug code and analyzing it faithfully every time he pushed back.

24 patches. 18 kernel boots.

The actual fix, once they finally found it, was one line. A "round_up()" that needed to be a "round_down()."

Torvalds gave the AI credit and let it write the final commit message itself.

Even AI is not allowed to give up around Linus Torvalds.

Source: https://t.co/rcNGou51fn

[Arild Oppheim @OppheimArild]

Når du trodde EU ikke kunne bli verre.. joda det blir verre for alle.

Nå må alle som selger noe til et land i EU betale for innpakningen av varer de sender. Det gjelder uansett hvor liten business du har.

Hvis du ikke følger den nylig innførte loven så risikerer du selvsagt heftige bøter.

You gotta love EU 🤡

[Pieter Maes @maescool]

Big dish

[Pieter Maes @maescool]

@docm77 Sounds like something the Dutch would do

[Pieter @ibelings]

A slot antenna is a hole that radiates.
Cut a narrow rectangle out of a large conducting sheet and feed it across the short dimension. The radiation pattern looks almost exactly like a dipole of the same shape, except E and H are interchanged and the polarization is rotated 90°.
This is Babinet’s principle (optics to antennas via Booker, 1946). Take any thin conducting screen and its exact complement (metal where there was free space, free space where there was metal). Illuminate both with the same wave. The fields they produce, E₁ and E₂, must satisfy:
E₁ + E₂ = E₀
where E₀ is the field that would exist with no screen at all. In the geometric shadow the two diffracted fields are equal in amplitude and opposite in phase. Everywhere else they add to the unobstructed wave.
That’s why a slot and its complementary strip dipole are duals: the hole and the cover together recreate free space. Their impedances are locked by
Z_slot · Z_dipole = (η/2)²
(~35 000 Ω²). A 73 Ω half-wave dipole becomes a ~480 Ω slot.
The metal isn’t doing the radiating. The absence of metal is. And the sum of the structure and its hole is required to be nothing more exotic than ordinary free-space propagation.
Nature’s neatest antenna trick: the thing you remove is just as important as the thing you leave.