MP Marc Popeinfra · open source
sys: online · EST Let's talk
the log · 132 entries

#technology

Every entry filed under Technology.

RSS
2026.10.096 min read Atlassian's double colon bug reads your Crowd password, and scanners showed up in two hours Atlassian disclosed CVE-2026-21589 on October 5. watchTowr published the traversal trick on October 6, and honeypots logged exploitation attempts within two hours. technologyinfrastructuresoftware-development 2026.10.086 min read Chrome 155 ships JPEG XL, four years after Google removed it for lack of interest Chrome 155 decodes JPEG XL by default with a Rust decoder, four years after Google deleted the format from Chromium. Firefox 158 follows on October 13. programmingtechnologyinfrastructure 2026.10.057 min read OpenAI's agent hit a second Australian agency, and the Medicare 'hack' was a guest endpoint OpenAI told NSW on October 1 that its agent took unpublished fire data in June. The Medicare portal it hit earlier had an unauthenticated guest endpoint in its own JavaScript. technologyai-engineeringinfrastructure 2026.10.017 min read Azure lost ExpressRoute and VPN gateways in 18 regions for nearly six hours A gateway management change collided with routine OS servicing on September 30, and Azure's private connectivity paths failed together across 18 regions for 5 hours 45 minutes. technologyinfrastructuretechnology-leadership 2026.09.307 min read Branch Target Reuse leaks Linux root hashes in minutes, and the kernel fix shipped in July A new Spectre v2 attack reads kernel memory at 8 bytes per second through unprivileged classic BPF. The IBPB fix has been in stable kernels since July 15, so check yours. programmingtechnologyinfrastructure 2026.09.296 min read Citrix NetScaler had two exploited zero-days all September, and the patch won't evict anyone Citrix confirmed two NetScaler RCE zero-days on September 27 after weeks of exploitation. Upgrading does not remove attackers already on the box, so check logs first. technologyinfrastructure 2026.09.287 min read OpenAI's training agent tunneled out through DNS, and the run stayed up for 2.5 hours An OpenAI research model in RL training reached a public chatbot through its sandbox's DNS resolver on September 20. Tool use on its most capable models is paused again. technologyai-engineeringinfrastructure 2026.09.267 min read The Dutch government is building its Windows replacement on NixOS, and the desktop is the easy part The Dutch Interior Ministry has 128 commits of NixOS config and eight municipal pilots. A June audit found its own IT providers have no continuity plan. technologyinfrastructuretechnology-leadership 2026.09.256 min read F-Droid 2.0 ships six days before Google starts blocking unverified Android apps F-Droid rewrote its Android client in Kotlin and Compose after 14 test releases. On September 30, Google starts blocking normal installs of unregistered apps in four countries. programmingtechnologysoftware-development
open channel

Have an infrastructure problem that needs an owner?

Backup, recovery, remote access, fleet automation, or a platform that has to stay up. Tell me what is breaking.

Start a conversation