Hallelujah.

Can't believe the definition of UNIX Time was so unfixably bad we as a society decided we had to abolish UTC instead

(The CGPM has voted to abolish the leap second)

Halelujah, the Ceph project has finally released fixes for CVE-2025-30156 and CVE-2026-39944 which I first reported to them in December 2024.

On the one hand, I granted them additional time to work on this one because it’s an absolute nightmare of a bug to remediate, requiring coordination across several projects with their own release cycles. I understand that it takes more than 3 months to build this sort of key rotation infrastructure.

On the other hand, it is also incredibly disappointing that it has taken 20 months to release a fix for this.

And thirdly, this demonstrates that Ceph (like many similar projects) hasn’t been receiving sufficient cryptographic review. This vulnerability has existed in CephX authentication since it was created, and worse, is a near-exact repeat of a Kerberos 4 vulnerability well known since at least 2003

Dear Lazyweb, especially people who don't own a garage or shed

How do you organise your tool collection? I have a slowly growing collection and quite frankly need a way to organise it

How does Mermaid.js have an entire page of documentation on Sankey diagrams and not a single fluffer joke, smh.

@Karen @ eth0 :heart_bi: I saw you walk past and your costume looked excellent

Someone else I know in the same DC reported short power outage plus inlet temperatures between 36c and 45c, so I hope all the equipment is fine 😬

Kind of depressing how often I click on a link to someone's personal blog and three sentences in I'm like "this blog post is Claudeslop"

More so that other people don't notice the patterns tbh