Marcin W. retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Ludzie zajmujący się security to inne byty. Szacun, że ktoś wrzucił taki film pokazując dziurę w PHP od wersji 5.0 w wzwyż który wyszedł w 2004 roku i teraz większość internetu ma przejebane xd.
No tego się nie spodziewałem. CO-OP w cyberpunku który wygląda całkiem zajebiście. Będzie grane :3
『サイバーパンク2077』協力プレイMod「NightCoop」のオープンベータが近日スタート！
最大8人までの協力プレイを可能にするModで、参加プレイヤー全員が同じ世界を共有し、キャンペーンを一緒に進めることができます。
gamespark.jp/article/2026/10…
Marcin W. retweeted
W NIEDZIELĘ WYBORY❗️Napisz do znajomych i do rodziny, przekonaj ich, żeby w niedzielę poszli zagłosować. W tych wyborach frekwencja może być bardzo niska, więc KAŻDY głos ma znaczenie.
Dzisiaj i w niedzielę proszę Cię o głos🫡
Pewnie w banieczce żyje ale jakoś tak dużo więcej fajnych projektów około steamowych i widzę w sieci niż z innych konsol. A no i Steam Machine jak i Controller zajebiste, polecam.
Marcin W. retweeted
stumbled on this image randomly on reddit, people have been using microSD to SD card adapters to make little sleeves for steamdeck games (that can also be read from PC with an sd card reader), this is really cute and shows the length people go to keep a physical collection
Marcin W. retweeted
There’s a company out there making a physical game cartridge OS for PC games
Their time is now
Marcin W. retweeted
A PC gamer has found a fun way to make Steam games feel like physical cartridges again.
Reddit user u/Jibril-sama created a setup using old 2.5-inch SSDs, with each 128GB drive holding one Steam game and a small script.
When the SSD is plugged into the PC, it automatically opens Steam and launches that game.
The creator bought the used SSDs for around €7 each and uses them to store games that aren’t played often, freeing up space on the main drive.
When they want to play a game, they simply plug in the SSD like inserting a game cartridge.
