Dan Brown

IT workers today:

https://www.youtube.com/watch?v=IkK_PxeoQ2g

For those using my RSS-reader app, new images are available to address the critical PHP issues:

https://codeberg.org/danb/rss

Pull the new image (latest or v2.2.4 tag) and re-create your containers!

Well done #php core team for handling today so well, and for all your efforts! I know it can't have been easy. Hope you all rest well tonight!

So it looks like all the Ubuntu fixed PHP versions are applied as backports?

Makes it a little tricky to guide users on how to validate that they're running a patched version.

Can't just do a PHP version check.

#php

Creality are also starting to use Prusa's non-open-source "Open Community License".

I've called them out on it early:
https://www.reddit.com/r/Creality/comments/1xaq8q6/comment/phvmjju/

Let's see of they respond better than Prusa!

#3dprinting #openhardware #oshw #opensource

It's totally fun that the EU Cyber Resilience Act is forcing 5 years of required support, just as AI is making the future of software development as uncertain as ever 😑

Prusa seem to be temporarily ignoring GPLv3 obligations to share sources under the reasoning of waiting for wider customer deployment due to it containing security patches:

https://www.reddit.com/r/prusa3d/comments/1x6lypp/comment/pgwffjc/

I'm interested in getting people's view on this:

It's better to wait a little for security roll-out
Sources should been shared right away on distrib
I dunno / something else

As winter approaches, the beast returns to his cave

My failed attempt to get a home battery installed:

https://danb.me/blog/contacting-electricians/

Perforce are starting to ask communities for input for next year's "State of Open Source Report" (In partnership with @osi and @EclipseFdn).

A warning: The results are usually gated behind a form requesting a lot of personal details (with lacking justification), and they previously performed a copyright takedown against me when I attempted to directly share the results with others:

https://danb.me/blog/perforce-open-source-report-link-takedown/

Review of my HP OmniBook 7 Aero laptop after six months of use:

TL;DR: Better than expected for the £700 price and for being a HP device.

https://danb.me/blog/hp-omnibook-7/

Also, A reminder that Bitwarden have a history of warning flags when it comes to respecting FOSS:

https://isitreallyfoss.com/projects/bitwarden/

"Bitwarden remains committed to open source security and transparency" says Bitwarden as they move to primarily distribute non-open-source clients:

Companies will always downplay their move along the rights ratchet (as per https://meshedinsights.com/2021/02/02/rights-ratchet/ by @webmink )

#foss #licensing #selfhosted

What I worked on in September:

TL;DR: Mainly the BookStack v26.09 release.

https://danb.me/blog/2026-sep-work/

I've now added Anubis (https://anubis.techaro.lol/) in front of the site, allowing most top-level, common requests through, but challenging deeper exploration through the repos.

Still getting many requests, but now a minor portion are making it past Anubis, with less overall load. Will see how that plays out over the next few days.

Always fun to get new requests from big businesses asking me to quote them for BookStack on-premise licenses 😄

Tried to further understand how the Cyber Resilience Act impacts BookStack:

https://codeberg.org/bookstack/bookstack/issues/5713#issuecomment-24084459

Very awkward to understand, especially for a project like this.

#CRA #FOSS #opensource #legal

Anyone have advice on handling a distributed mass requests (attack/scraping/ddos) for a cgit instance?

I'm seeing about 140 requests per second. I have IP-prefix based rate limiting, which has helped before, but this one is very distributed (looks like residential IPs across different countries).

His elegance has no bounds #CatsOfMastodon

I had missed that Firefox had finally added Web Serial support!

Now it's possible to flash microcontrollers from the web on Firefox.

One less reason to use chromium.