Many people are talking about MPTCP these days, that's great 😃

Okay, maybe that's caused by an advertisement from Anthropic and linked to CVE-2026-98432? 🤔

BTW, MPTCP was one exploitation path for this issue in TCP, there could be others. So upgrade your server (and/or block IPv4 options), don't "just" disable MPTCP.

(Not sure how such a high score got assigned for something hard to reproduce in practice and probably impossible on the internet where IPv4 options are often blocked. But that's good to remind people to keep their system up to date 🙂)

And thank you Eric for the fix!

#MPTCP

Rest in peace.
I will miss your voice.

Dog in a sandworm costume has made my evening.

I work for and with rich people because they pay me lots to rent my brain. I have learned some things:
1. "Rich" is normally some combination of time, talent, luck, and fear. Luck is always one of the components. Rarely do my clients credit luck.
2. It does not take much money (relative) to become insulated from most consequences of daily life. That insulation rapidly severs people from people who work for a living.
3. People who inherit their wealth are contemptible. So are a lot of people who have worked for their money, but trust fund babies (who I am in the business of creating) have a strong tendency to be entitled, imperious, incompetent shits.
4. I'm really smart and really good at what I do. This is absolutely not a prerequisite for becoming rich and can even be counter-productive. Many of the people I work with are not particularly smart or talented, and that doesn't matter if you find a good racket and can sock away the money.
5. Back to people who inherit their money: as someone who will inherit basically a steak dinner and a heightened risk of Alzheimer's, I know nobody is coming to save me. I save as much as I can understanding that it may be a fool's errand. I resent people who have the luxury of knowing they cannot die from poverty because one day a mountain of dough is going to fall on them.
6. The estate tax should apply to as many people as possible and it should be confiscatory. Without it, we end up with these neo-feudalist enclaves of the corpulent rich, the grandchildren of ruthless/fortunate/gifted men, check-cashers who live off exploitation alone.
7. We do not need rich people.

Sorry, I'm in a mood. Endrant.

Reminder to people who have international meetings: the next week is George W Bush Golfing Time. The USA and Europe had an agreement to move clocks at the same time, so the time difference remained constant. George W Bush decided he wanted a few weeks more golfing time, so unilaterally moved the USA’s Daylight Saving Time. This move remains in effect so there are a few weeks of annoying disruption each year.

I made the mistake of flying the first time this happened, which is how I knew about it: the airlines were unprepared and sold me tickets on two flights where the time change meant that my slightly tight 45-minute change turned into a -15 minute connection time (fortunately the second flight was on a route they flew every two hours so I was only an hour late)l

Hey, @EUCommission, fuck you too.

***

On Wednesday, EU Member States approved a change to the GDPR that would put the profit-making interests of OpenAI, Anthropic, Google, Meta and SpaceX over European's fundamental right to data protection. According to the approved text, processing personal data “in the context of AI” should automatically be lawful. In particular, Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens “in the context” of AI. Schrems: “Under the agreed text, the profits of AI companies would typically trump European’s fundamental right to privacy. This is nothing but a digital expropriation of Europeans.”

https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies

#privacy #humanRights #EU #BigTech #corporatocracy #fascism

An article on Aftermath about how depressing AI slop has made emulation and decompilation projects, and crushed existing communities https://aftermath.site/ai-slop-hobbies-in-software-emulation/

And hey, it links to me and @glyph's blogposts

(Thx for the heads up @mostol)

stealing and reposting good memes will continue until alt texting improves 🤷‍♂️

#eMudhra

I've uploaded the slides for my talk at #LinuxPlumbers on eBPF research: https://pchaigno.github.io/assets/Linux%20Plumbers%202026%20eBPF%20Research.pdf.

I discussed the methodology to build the list of BPF papers at https://pchaigno.github.io/bpf/2025/01/07/research-papers-bpf.html. I then used it to plot some statistics and navigate the different topics and questions being investigated in academia. I'll try to follow up with blog posts for more details.

Video: https://www.youtube.com/live/UQCglEwWwT4?si=idejC6sU2DiTadDi&t=991

Reading from ring buffer maps, multi-split BTF support, new program signature scheme: bpftool v7.8 comes with some new features, and a number of bug fixes.
https://github.com/libbpf/bpftool/releases/tag/v7.8.1

So, today I was informed that my current employment is terminated. This implies that I will be looking for a new job. I know it might be a stretch, but I thought why not give #GetFediHired a try. Due to many circumstances, it has to be a full-time position in #Denmark. 🇩🇰

I can bring my senior expertise in IT security and vulnerability research. We can, of course, discuss related roles as well. You can find my profile at: https://www.linkedin.com/in/infosecdj/

I can also market my decapping and deprocessing skills, but I fear the market depth for that is in single digits. :-) But if someone has interest, please feel free to have a look at http://infosecdj.net/ for what I was able to do in my home lab!

Of course, any and all boosts will be greatly appreciated. Thank you!

Recordings from this years #Linux Plumbers Conference are now available.

Once way to access them is a playlist on YouTube: https://www.youtube.com/playlist?list=PLd3Gjl51NPg0

You can also find them via "video" links in each contribution in the schedule – where you can find linkgs to the slides, too: https://lpc.events/event/20/timetable/?view=lpc

See also the announcement from @linuxplumbersconf at: https://lpc.events/blog/current/index.php/2026/10/19/lpc-2026-video-recordings-are-available/

#lpc2026 #linuxplumbers #linuxplumbersConference #LinuxKernel #kernel #bpf

Vibe coded software is the digital equivalent of forever chemicals. Hard to get rid of and its long term effects are still unknown. But they look like a miraculously simple and fast solution to a multitude of problems.

You need to reevaluate your priors. The fridges are so powerful now, and what was true of refrigeration a month ago simply isn’t now. If your fridge isn’t connected to the internet with a known admin password, and can’t heat up to 50°C you’re going to be left behind.

This post https://ryancheley.com/2026/08/17/what-if-maintainer-burnout-isn-t-burnout/ from @ryancheley introduced me to the idea of "administrative sediment".

Meet 🌟 Stonking Stingray 🌟.
Created with Krita, Blender and 1% GNU Image Manipulation Program. It took a month to paint it. Inspired by the Ubuntu release name 26.10 scheduled for release on October 15!

#art #mastoart #fediart #stingray #animals #colorful #digitalArt #noai #portrait #linux #wallpaper #krita #blender #stonking #landscape #nature

The quiet ones are the ones that change the universe...
The loud ones only take the credit.
(Londo Mollari, "In The Beginning")

@internet

https://sheets.works/data-viz/holding-up-the-internet

Who called it AGENTS.md and not Unanswered Prayers to the Uncaring Machine God

So the Czech train has a WiFi connection which at least works, but:
- It shows a 30(!) second ad on login with no option to skip it.
- It uses an effective MTU of 1200 bytes, which is less than the minimum 1280 required by IPv6, so it breaks v6 connectivity completely.

So yeah, better than nothing I guess. But still, why? :/

#IPv6 #connectivity #CrossBorderRail