The private key was 4.

https://youtube.com/shorts/hIRCmEgGxHQ

And there's another one...

https://fedi.katze.sh/@elise/117479383739450605

And before I go to sleep: Yes, this PHP vuln is Yet Another Thing That Would Not Happen If It Were Written In Rust.

Fedora 43 users install these RPMs to fix PHP:

https://koji.fedoraproject.org/koji/buildinfo?buildID=3125181

Fedora 44 RPMs will be here in ~15 minutes give or take:

https://koji.fedoraproject.org/koji/buildinfo?buildID=3125182

Arch has pushed the fixed packages to mirrors. No word from Alpine yet and I can't hit their git...

Ah yes, the wikis documenting how to update things are all down for updates!

The one funny thing about this PHP bug is that now you know that every service announcing maintenance runs their core infra on PHP ^^;;

So what we're learning today is that in the world of LLMs, any time a serious vuln is pre-announced, social media will be flooded with incorrect or incomplete slop about it and make things worse by misleading everyone.

I hate this timeline...

There is an exploit and mitigation floating around.

THAT IS NOT THE EXPLOIT THAT IS EMBARGOED.
It's likely something ELSE someone found in a rush with an LLM.

You are NOT safe just by making a configuration change.

I guess we're shutting down PHP today...

Networking zatsu(?) lesson with Cyan!

Starting in 10 min~
➡️ https://www.youtube.com/watch?v=d1iQkxxC_hc

This is why I'm saying it was probably a regular expression parser. In many regular expression engines, `.` does not match newlines by default.

So, a naive regular expression parser would have failed in this exact way.

And it sounds like something DoCoMo would do.

Whaaaaaaaa

"The format was different"... people are saying there was a trailing line break in the XML after the epicenter location name.

Are DoCoMo parsing XML with regular expressions?????????????

https://www.docomo.ne.jp/info/notice/page/261017_00_m.html

🤦‍♀️🤦‍♀️🤦‍♀️🤦‍♀️

If there is a time to apply the Robustness Principle, it's for earthquake alerts.... this is really sad.