reddalo

It's one banana, what could it cost? $10?

Maybe: https://www.binance.com/en/square/post/10-29-2026-suspected-...

As of now, DebugBear webite has been taken offline: https://www.debugbear.com/

And they just posted on Twitter: https://x.com/DebugBear/status/2115930681398239278

Frozen? What are they going to do, fork the blockchain?

I love Extras and I wish there were more episodes. It's a small gem of a series.

The fact that only some comments are loaded it's so infuriating. It's the main reason I stopped using Reddit altogether.

Yes, agree. I migrated from DigitalOcean to Hetzner some time ago (also because they're European, and a bit cheaper), but then the AI craze started and now all their smaller virtual servers are always sold out...

> Borland buttons

Wow, you unlocked a memory. In case somebody doesn't remember, or doesn't know, the style of Borland buttons, here's a screenshot: https://sourceforge.net/p/owlnext/wiki/Replacing_usage_of_BW...

Some more screenshots on this page: https://www.drbob42.com/delphi/findmapc.htm

(Look at all those misaligned icons/labels in the Tool Options screenshot!)

They also ruin things they don't acquire, such as their own control panel. It used to be simple and clean, now it's a horrible mess, so horrible it looks like they don't even sell virtual machines anymore.

Or you could just push Ctrl + or Cmd +

I think HN is peak design. Everything is condensed, there's no wasted space, it's like a good old website from a bygone era. It's just a bit annoying on mobile, but that's it.

I miss when Notepad just opened plaintext files as they were.

> the single worst security news day ever

I'd say, the single worst security news day for now

Exactly. They're "official images" in the sense that they're officially approved by Docker, it doesn't mean they're made by the PHP foundation.

We need _real_ official Docker images of PHP.

Those images are not even official. "Official" is just a misnomer in Docker.

Now they should be actually available and pullable! The only problem is that it took 3 hours with a huge security problem already exploited in the wild.

Yes, it's embarrassing for Docker. Makes me wish I still had the classic LAMP stack.

Add Sury's repo and update from there: https://packages.sury.org/php/README.txt

curl -fsSL https://packages.sury.org/php/README.txt | bash

This adds Ondřej Surý's PPA to your system so you can upgrade the packages.

TicketTailor looks up to me?

Not only injected, but they may also steal all your database data by dumping it.

Edit: my message was wrong, see below.

[original: The Release Candidate for the patched version is out!]

https://hub.docker.com/_/php/tags?name=8.5

And 70% of the web. Nothing important.

Yeah I agree. Safeguards only bother normal people; evil actors will circumvent them anyway.

Wow, it's the first time that I see the Cloudflare-equivalent error page of Bunny.net.

They'll probably release it earlier, that's what they said in the announcement in case the CVE got leaked sooner.

...and make no mistakes!

Official statement released by PHP: https://www.php.net/archive/2026.php#2026-10-20-1

Statement by CERT-EU: https://cert.europa.eu/publications/security-advisories/2026... :

>Where immediate patching is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix is available.

It seems serious. Well, good luck isolating all PHP applications from the public internet...

Yes, it's on core. All versions from PHP 5 onwards. Only PHP 8 will be patched.

>You can always use third-party DNS if that's what you wish to do

Oh boy, you don't know how many bad registrars won't let you customize the nameserver...

Was the name actually available? Or were they reselling a domain they owned?

+1 for Porkbun

The only downside is that they use Cloudflare DNS behind the scenes, so when Cloudflare goes down, your website goes down too unless you use third-party DNS.