For those struggling with democracy, here's how we do it (not perfectly but I think pretty fairly) in Australia.

1. Everyone is expected to vote. There is a small fine if you don't show up and get checked off the electoral roll. If you choose to vote by scribbling a dick and balls on your ballot paper, whatever. Campaigning is focused on issues not on "please go vote". Getting a call, text or email from a political party is pretty rare.

2. There is a government department tasked with making it easy and feasible for everyone to vote. Waiting longer than 5 mins is very rare. There is generally a polling place within walking distance. Pre-poll and postal voting are available for those who can't make it on the day (which is always a Saturday).

3. Voting is by ranked-choice. You cannot "waste" your vote, if your first preference comes last, your vote transfers to your second preferenace (and so on). This means independents and smaller parties get elected and can have influence.

4. After the election, parties receive a small amount of funding for each first-preference vote they receive. This means putting the Lazycrats *second* after the FreeKittensParty hurts the Lazycrats in their hip pocket, even if the FKP could never win.

5. Voting places are friendly. Usually they are a school or church where an impromptu jumble sale and barbecue happens. I have never seen a cop, soldier or even a display of anger at a polling place.

6. Campaign workers must stay a certain distance away from the polling place. Advertising must end the day before the election.

7. Election campaigns last about 4 weeks, not years.

You don't have to make this so fucking hard.

"In a world where all of our compute is in massive distant opaque datacenters, where a tiny cartel of gigantic tech companies control nearly the whole supply chain, one of the few things that you still can have agency over is your own server on the Internet."

(Article title: Why You Should Care About The Political Project of Twisted)

https://blog.glyph.im/2026/11/the-project-of-twisted.html

OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.

https://openssh.com/releasenotes.html#10.6p2

If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.

This vulnerability does not exist on non-Linux systems, Linux/glibc systems and Linux systems that use PAM for password authentication.

We consider the root cause of this bug to be outside OpenSSH itself, but we're in a good position to deliver a mitigation quickly.

We are making this release as fast as possible (we learned of the problem yesterday) because we have recently observed multiple cases of rapid bug rediscovery by AI agents, sometimes within hours, and so now consider long embargo periods to be a dangerous practice that primarily benefits attackers.

Thanks for Özgün Kültekin of Wakefield (wakefield.co) for reporting this problem to us and for the Alpine Linux developers for making an updated release available at very short notice.

RE: https://infosec.exchange/@david_chisnall/117540788341445069

I can't remember who I learned this from (maybe @raganwald?) but a good trick for reading computer science papers if you work in industry is

1. Find a bunch of papers on the problem you need to solve.
2. Notice what baseline they're all comparing their new shiny techniques to.
3. Implement that instead.

Update: it was Jay Kreps, probably via Avery Pennarun's blog: https://x.com/jaykreps/status/219977241839411200?a=W6GRXkYLlAZ3X-AlM_Y&s=19 Thanks to @DRMacIver for tracking it down.

Many people are talking about MPTCP these days, that's great 😃

Okay, maybe that's caused by an advertisement from Anthropic and linked to CVE-2026-98432? 🤔

BTW, MPTCP was one exploitation path for this issue in TCP, there could be others. So upgrade your server (and/or block IPv4 options), don't "just" disable MPTCP.

(Not sure how such a high score got assigned for something hard to reproduce in practice and probably impossible on the internet where IPv4 options are often blocked. But that's good to remind people to keep their system up to date 🙂)

And thank you Eric for the fix!

#MPTCP

Rest in peace.
I will miss your voice.

Dog in a sandworm costume has made my evening.

I work for and with rich people because they pay me lots to rent my brain. I have learned some things:
1. "Rich" is normally some combination of time, talent, luck, and fear. Luck is always one of the components. Rarely do my clients credit luck.
2. It does not take much money (relative) to become insulated from most consequences of daily life. That insulation rapidly severs people from people who work for a living.
3. People who inherit their wealth are contemptible. So are a lot of people who have worked for their money, but trust fund babies (who I am in the business of creating) have a strong tendency to be entitled, imperious, incompetent shits.
4. I'm really smart and really good at what I do. This is absolutely not a prerequisite for becoming rich and can even be counter-productive. Many of the people I work with are not particularly smart or talented, and that doesn't matter if you find a good racket and can sock away the money.
5. Back to people who inherit their money: as someone who will inherit basically a steak dinner and a heightened risk of Alzheimer's, I know nobody is coming to save me. I save as much as I can understanding that it may be a fool's errand. I resent people who have the luxury of knowing they cannot die from poverty because one day a mountain of dough is going to fall on them.
6. The estate tax should apply to as many people as possible and it should be confiscatory. Without it, we end up with these neo-feudalist enclaves of the corpulent rich, the grandchildren of ruthless/fortunate/gifted men, check-cashers who live off exploitation alone.
7. We do not need rich people.

Sorry, I'm in a mood. Endrant.

Reminder to people who have international meetings: the next week is George W Bush Golfing Time. The USA and Europe had an agreement to move clocks at the same time, so the time difference remained constant. George W Bush decided he wanted a few weeks more golfing time, so unilaterally moved the USA’s Daylight Saving Time. This move remains in effect so there are a few weeks of annoying disruption each year.

I made the mistake of flying the first time this happened, which is how I knew about it: the airlines were unprepared and sold me tickets on two flights where the time change meant that my slightly tight 45-minute change turned into a -15 minute connection time (fortunately the second flight was on a route they flew every two hours so I was only an hour late)l

Hey, @EUCommission, fuck you too.

***

On Wednesday, EU Member States approved a change to the GDPR that would put the profit-making interests of OpenAI, Anthropic, Google, Meta and SpaceX over European's fundamental right to data protection. According to the approved text, processing personal data “in the context of AI” should automatically be lawful. In particular, Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens “in the context” of AI. Schrems: “Under the agreed text, the profits of AI companies would typically trump European’s fundamental right to privacy. This is nothing but a digital expropriation of Europeans.”

https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies

#privacy #humanRights #EU #BigTech #corporatocracy #fascism

An article on Aftermath about how depressing AI slop has made emulation and decompilation projects, and crushed existing communities https://aftermath.site/ai-slop-hobbies-in-software-emulation/

And hey, it links to me and @glyph's blogposts

(Thx for the heads up @mostol)

stealing and reposting good memes will continue until alt texting improves 🤷‍♂️

#eMudhra

I've uploaded the slides for my talk at #LinuxPlumbers on eBPF research: https://pchaigno.github.io/assets/Linux%20Plumbers%202026%20eBPF%20Research.pdf.

I discussed the methodology to build the list of BPF papers at https://pchaigno.github.io/bpf/2025/01/07/research-papers-bpf.html. I then used it to plot some statistics and navigate the different topics and questions being investigated in academia. I'll try to follow up with blog posts for more details.

Video: https://www.youtube.com/live/UQCglEwWwT4?si=idejC6sU2DiTadDi&t=991

Reading from ring buffer maps, multi-split BTF support, new program signature scheme: bpftool v7.8 comes with some new features, and a number of bug fixes.
https://github.com/libbpf/bpftool/releases/tag/v7.8.1

So, today I was informed that my current employment is terminated. This implies that I will be looking for a new job. I know it might be a stretch, but I thought why not give #GetFediHired a try. Due to many circumstances, it has to be a full-time position in #Denmark. 🇩🇰

I can bring my senior expertise in IT security and vulnerability research. We can, of course, discuss related roles as well. You can find my profile at: https://www.linkedin.com/in/infosecdj/

I can also market my decapping and deprocessing skills, but I fear the market depth for that is in single digits. :-) But if someone has interest, please feel free to have a look at http://infosecdj.net/ for what I was able to do in my home lab!

Of course, any and all boosts will be greatly appreciated. Thank you!

Recordings from this years #Linux Plumbers Conference are now available.

Once way to access them is a playlist on YouTube: https://www.youtube.com/playlist?list=PLd3Gjl51NPg0

You can also find them via "video" links in each contribution in the schedule – where you can find linkgs to the slides, too: https://lpc.events/event/20/timetable/?view=lpc

See also the announcement from @linuxplumbersconf at: https://lpc.events/blog/current/index.php/2026/10/19/lpc-2026-video-recordings-are-available/

#lpc2026 #linuxplumbers #linuxplumbersConference #LinuxKernel #kernel #bpf

Vibe coded software is the digital equivalent of forever chemicals. Hard to get rid of and its long term effects are still unknown. But they look like a miraculously simple and fast solution to a multitude of problems.

You need to reevaluate your priors. The fridges are so powerful now, and what was true of refrigeration a month ago simply isn’t now. If your fridge isn’t connected to the internet with a known admin password, and can’t heat up to 50°C you’re going to be left behind.

This post https://ryancheley.com/2026/08/17/what-if-maintainer-burnout-isn-t-burnout/ from @ryancheley introduced me to the idea of "administrative sediment".

Meet 🌟 Stonking Stingray 🌟.
Created with Krita, Blender and 1% GNU Image Manipulation Program. It took a month to paint it. Inspired by the Ubuntu release name 26.10 scheduled for release on October 15!

#art #mastoart #fediart #stingray #animals #colorful #digitalArt #noai #portrait #linux #wallpaper #krita #blender #stonking #landscape #nature