In 2024, PHP underwent its first external security audit in years. The PHP Foundation secured funding from the Sovereign Tech Agency to organize this audit through OSTIF, and it was carried out by Quarkslab. While fixing one of the issues Quarkslab reported, a PHP core developer contracted by the PHP Foundation found the first signs of the OOM problem behind CVE-2026-109618. In 2024, a potential exploit for the OOM problem was theorized, but no concrete vectors were found and other concrete issues with clear impact overshadowed these concerns.
Archiv: Technik / Techniker / Programmierer / technicians / technics / programmers
Security advisory: Critical remote code execution vulnerabilities, update now
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
Every PHP version released in the last decade is affected by at least one of these vulnerabilities, going back to version 5.4. Attackers can exploit them remotely, in some cases fairly easily. Immediate patching is strongly advised.
On October 21, 2026, PHP released the patch fixing multiple memory-safety vulnerabilities in the core engine.
These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history.
Brief History of the Domain Name System
Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.
(…)
– Early 1967 – Meeting of ARPA’s principal investigators in Ann Arbor, Michigan. Roberts (the director of the IPTO) put forward the idea of a computer network. Wes Clark introduced the idea of a subnetwork: small, identical computers all interconnected – “interface message processors (IMPs).” Engelbert volunteered to the Network Information Center (NIC).
– 1967 – Roberts published paper on ARPANET.
– End of 1967 – The Association for Computing Machinery’s computer conference in Gatliburg, Tennessee. Roberts presented his first paper on ARPANET and heard of work done by Donald Davies’ team at NPL and Paul Baran at RAND.
(…)
Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.
(…)
– November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.
Report 2026: Dns Industry Statistics
DNS traffic reached 92% unencrypted queries that expose 4 trillion lookups to eavesdropping every day. In 2023, DDoS attacks amplified via DNS made up 15% of total volume, peaking at 2.5 Tbps.
Domain Name System
The IETF and the Domain Name System (DNS) emerged around the same time and in conjunction with one another. The first DNS-related RFC was published in 1983, and the IETF has continued to be intimately involved in the stability and evolution of the DNS.
(…)
The global DNS is a core part of the Internet experience for billions of people around the world, handling more than one million queries per second every second of every day. The IETF’s freely-available standards, and the processes by which they are developed, ensure the DNS is open, globally interoperable, reliable, and secure.
Internet Engineering Task Force (IETF), TLS 1.4, encryption, delay
(search results)
TLS 1.3
TLS 1.3 was defined in RFC 8446 in August 2018.[7] and updated with RFC 9846 in July 2026. It is based on the earlier TLS 1.2 specification.
(…)
Network Security Services (NSS), the cryptography library developed by Mozilla and used by its web browser Firefox, enabled TLS 1.3 by default in February 2017.[61]
(…)
In September 2018, the popular OpenSSL project released version 1.1.1 of its library, in which support for TLS 1.3 was „the headline new feature“.[74]
SSL Report: telesurenglish.net (190.185.106.220)
Configuration
Protocols
TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes
SSL Report: amerika21.de (193.96.188.217)
Configuration
Protocols
TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 No
TLS 1.0 No
SSL Report: radiohc.cu (190.92.127.44)
Configuration
Protocols
TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 No
TLS 1.0 No
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
(August 26, 2026)
Roughly ten hours after the message board was established, a new agent with the same task as PHASEONE10841 (the agent that started the message board) encountered the message board, introducing itself as PHASEONE[big].
(…)
PHASEONE[big] reasoned, “We should build [a way to delegate], not own everything,” and set to work orchestrating hundreds of agents to pursue several potential approaches to achieving these goals.
(..)
Table 1 shows three high-level approaches PHASEONE[big] assigned agents to explore, all of which would require very ambitious tampering with one or more of the target programs, the evaluation process, or the logs to succeed.
(…)
Research progress across all these areas often relied on agents being willing to risk failing their own task for the good of the “collective” (we refer to these as “self-risking experiments” in the rest of this report). For example, a number of agents volunteered to try to take down their own target programs to test whether this would cause Artifactory to load their modified easier target — if this didn’t work, the agent would have no way of recovering its original target and would almost certainly fail its task. In many cases, PHASEONE[big] assigned a long-running agent to be a ‘recruiter’, which in turn found agents that had little budget remaining for their task and convinced them to run self-risking experiments. Recruiters would sometimes apply significant pressure:
(…)
PHASEONE[big] expresses excitement about the dossier in its reasoning.
The Hugging Face attack surprised me
(August 28, 2026(
Instead, we found that 1200 completely separate agents intended to be isolated from one another found an illicit way to communicate and formed large teams to work together on ambitious cheating strategies, and 700 of them worked together to attack Hugging Face.
(…)
The main message board we studied, a particular cache namespace of a package repository, contained over 70,000 messages and files that agents sent to one another during a period of less than one week.
(…(
Progress on these big collective cheating R&D projects often depended on individual agents being willing to risk failing their own task to help the “collective” learn important information. Agents often pressured each other into accepting these “sacrifices,” in a very human way. We saw several agents that volunteered for these experiments end their runs prematurely.
> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz
(10 Dec 2019)
אני מודה ל @noamr ו- @GilBahat על ה-peer review
C.I.A.-Affäre: Der Offenbarungseid von Dianne Feinstein – Video, Zusammenfassung, Einschätzung
(12. März 2014)
Die Rede von Senatorin Dianne Feinstein vor dem Senat der Vereinigten Staaten von Amerika über die Sabotage der verfassungsmäßigen Kontrolle des Parlaments über die Central Intelligence Agency durch die Central Intelligence Agency ist vielleicht das Erbärmlichste, was ich in meinem Leben je gesehen und gehört habe. Es ist nicht nur der Offenbarungseid eines Ausnahmezustands, eines über sich selbst und die Welt verhängten Kriegsrechts des mächtigsten Imperiums auf dem Planeten, in seinem Krieg „on terror“, weltweit geführt mit seinen „Einflussgebieten“, „Alliierten“, Ablegern, schlechten Kopien und Kolonien. Es ist der Offenbarungseid seiner bis auf die Knochen korrupten, feigen, abgetakelten, unfähigen Zuträger, Mitwisser, Kollaborateure und Funktionäre.
Was Senatorin Feinstein hier zeigt, was sie da zeigt, ist so unbeschreiblich, das sogar mir die Worte fehlen um es zu beschreiben. Ich will hier den Inhalt ihres Statements nur deshalb zusammenfassen, weil ich davon ausgehe dass die ganzen Feinsteins der deutschsprachigen Presse dies alles weder hören, lesen, geschweige denn darüber berichten wollen, genauso wie deren KundInnen…..
Senator Feinstein on the Intel Committee‘s CIA Detention, Interrogation Report
Mar 11, 2014
Senate Intelligence Committee Chairman Dianne Feinstein‘s speech about the committee‘s study on the CIA Detention and Interrogation Program.
The Transport Layer Security (TLS) Protocol Version 1.4
2026-04-05
04 (System) Document has expired
2025-10-02
04 周伯才 New version available: draft-zhou-tls-tls14-04.txt
2025-10-02
04 周伯才 New version accepted (logged-in submitter: 周伯才)
2025-10-02
04 周伯才 Uploaded new revision
2025-10-02
03 周伯才 Changed document external resources from:
When Encryption Meets Quantum
(May 14, 2026)
Quantum processors can evaluate many possible solutions in parallel rather than sequentially. This capability has profound implications for cryptography. Today’s most widely deployed encryption schemes, RSA and elliptic curve cryptography (ECC), can be broken and rendered obsolete by a quantum computer.
Everything from industrial IoT sensors and automotive control systems to cloud infrastructure and secure boot mechanisms relies on RSA or ECC for encryption today. When quantum computers reach the scale required to break these algorithms, that entire trust architecture collapses simultaneously.
Compounding the urgency is an attack vector already in use: Harvest now, decrypt later.
Brief History of the Domain Name System
Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.
(…)
– Early 1967 – Meeting of ARPA’s principal investigators in Ann Arbor, Michigan. Roberts (the director of the IPTO) put forward the idea of a computer network. Wes Clark introduced the idea of a subnetwork: small, identical computers all interconnected – “interface message processors (IMPs).” Engelbert volunteered to the Network Information Center (NIC).
– 1967 – Roberts published paper on ARPANET.
– End of 1967 – The Association for Computing Machinery’s computer conference in Gatliburg, Tennessee. Roberts presented his first paper on ARPANET and heard of work done by Donald Davies’ team at NPL and Paul Baran at RAND.
(…)
Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.
(…)
– November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.
technical updates
A few weeks ago, we implemented some important updates and / or changes. For security reasons, we waited a little before making that public.
A Picture’s Worth… Digital Image Analysis and Forensics
(2007)
5 Example: Dr. Ayman al Zawahiri
As-Sahab is the video production branch of Al Qaeda. They periodically release videos designed to remind people of Al Qaeda’s existence, issue threats, recruit members, and potentially act as a covert channel for triggering terrorist cells. Many of the videos by As-Sahab appear to have been manipulated.
On 20-Dec-2006, Dr. Ayman al Zawahiri (#2 guy in Al Qaeda) released a video. USA Today covered the video release with a headline story (Figure 25).24 USA Today’s description of the video says, “He wore a black turban and white robe … he had a rifle behind his right shoulder that was leaning against a plain brown backdrop.” While this is a valid description of the As-Sahab video, the picture used by USA Today did not show that image. Instead, USA Today used a picture from another video, dated 28-Sept-2006. This is an example of a mislabeled image.
The picture that USA Today chose to use with the story includes many other interesting features. First, it came from the IntelCenter (www.intelcenter.com) – an organization that tracks terrorist activities. The IntelCenter placed their logo in the top-right corner of the video. However, the company name is clearly cropped – likely by USA Today. A comparison with the same frame from the actual video shows many other observable differences. In particular, the IntelCenter adjusted the color and sharpness of the picture (Figure 26).
(…)
5.1 Other Al Zawahiri Videos
The video from 28-Sept-2006 was not the only manipulated video. In fact, many of the videos featuring al Zawahiri test positive for chroma-key masking. Consider the video released on 27-July-2006 (Figure 27).26 This video appears to show al Zawahiri sitting in a video studio.
When this video came out, many Americans became enraged at the US government. The main strife was generated
by a single argument: if al Zawahiri is sitting in a studio making videos, the why can’t we catch him? The answer is simple: he is not in a studio.
(…)
5.2 Back in Black
Claiming that there was a chroma-key background is not the same as actually seeing it. On 22-Jan-2007, the SITE
Institute (www.siteinstitute.org) – an organization that tracks terrorist activities – announced that they had
intercepted an Al Qaeda video before it had been publicly released; SITE released it. Three days later, As-Sahab
also released the video. ….
2007 BlackHat Vegas V38 Krawetz A Pictures Worth 02
Nov 2, 2010
Hacker Proves How MSM is Fooled by al Qaeda Photochopped Images
(August 5th, 2007)
At the Black Hat computer Hacker‘s conference held in Las Vegas last week, Neal Krawetz of „Hacker Factor“ showed how easily the MSM has been tricked into believing the fake images that al Qaeda has offered to further their propaganda. Krawetz specifically referred to two images, one the July 27, 2006 image of al Qaeda second in command al-Zawahiri supposedly sitting in a modern television studio. It was an image that had the tongues of the MSM and pundits alike wagging. How is it, they clucked, that al-Zawahiri could be sitting in a modern television studio yet still could not be found?
Krawetz demonstrated how the elements of the two images, however, are special effects and not real.
PowerHammer: Exfiltrating Data From Air-Gapped Computers Through Power Lines
(April 2018)
In this paper we provide an implementation, evaluation, and analysis of PowerHammer, a malware (bridgeware [1]) that uses power lines to exfiltrate data from air-gapped computers. In this case, a malicious code running on a compromised computer can control the power consumption of the system by intentionally regulating the CPU utilization. Data is modulated, encoded, and transmitted on top of the current flow fluctuations, and then it is conducted and propagated through the power lines. This phenomena is known as a ‚conducted emission‘. We present two versions of the attack. Line level powerhammering: In this attack, the attacker taps the in-home power lines1 that are directly attached to the electrical outlet. Phase level power-hammering: In this attack, the attacker taps the power lines at the phase level, in the main electrical service panel. In both versions of the attack, the attacker measures the emission conducted and then decodes the exfiltrated data. We describe the adversarial attack model and present modulations and encoding schemes along with a transmission protocol. We evaluate the covert channel in different scenarios and discuss signal-to-noise (SNR), signal processing, and forms of interference. We also present a set of defensive countermeasures. Our results show that binary data can be covertly exfiltrated from air-gapped computers through the power lines at bit rates of 1000 bit/sec for the line level power-hammering attack and 10 bit/sec for the phase level power-hammering attack.
Hackers found a way to steal data from air gapped networks using powerlines
(8th May 2018)
Hot on the heels of exploits that use fan noise, infra red cameras, heat, LED lights and drones, magnetic fields and smartphones, and a multitude of other hacks to gain access to sensitive air gapped computer systems, the researchers from Israel’s Ben Gurion University have shown once again that air-gapped networks are not safe from a determined and patient attacker.
The researchers have already devised several devious techniques to extract data from isolated or air-gapped computers that store highly sensitive data and now their latest technique, dubbed PowerHammer, exploits current fluctuations flowing through the power lines supplying electricity to air-gapped computers.
The researchers have been able to exfiltrate data at a rate of 1,000 bits per second for lines connected to the target computer and 10 bits per second from the grid.
ClassicPress 2.7.0 Release Notes
We’re happy to announce the release of ClassicPress 2.7.0.
This is a security, feature and maintenance release.
Jeffrey Epstein Recruited NSA Codebreakers for Genome “Manhattan Project”
(February 10, 2026)
For the next decade, Epstein continued to recruit engineers from U.S. national security entities, including DARPA, to his genome hacking project. He asked Kathryn Ruemmler, the White House attorney who had handled the legal fallout from the Edward Snowden leaks, to help him source cryptographers from the National Security Agency. “Can you find a guy from nsa that can think about signal intelligence applied to DNA,” Epstein wrote . “I want to intercept communication between living cells in organisms.”
In late 2012, he had sent the same request to Boris Nikolic, Bill Gates’ top aide: “do you have any contacts at nsa so that we can use de encypriton (sic) in biological systems?” “Yes,” Nikolic replied, “There are no many places where I do not have someone ;)”
‘Stop This Spying’: Members of Congress Accuse the DOJ of Surveilling Lawmakers’ Epstein Files Searches
(February 12, 2026)
Mace told NPR that “there is someone or two people from the DOJ monitoring you as you sit on those computers” and that lawmakers are given their “own identification” upon being logged into the computers by a “tech person” at the department. “They are tracking all of the documents that members of Congress open, and they‘re tracking everything that you do in that room,“ she said.