From the high-speed sweeps of COTA to the thin air of Mexico City and the compact chaos of Interlagos, which drivers and teams deserve a place in your F1 Fantasy line-up?
In Formula 1, performance is decided in moments where conditions change instantly, and decisions carry consequence. The difference isn’t just speed – it’s perspective.
An anonymous reader quotes a report from Ars Technica: Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere. PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.
"All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available," the advisory stated. "We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild." The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP. A video depicting the tool has been reposted here.
Attempts to locate the unconfirmed report were unsuccessful, but security firm watchTowr said it claimed to affect every PHP version from PHP 5, released in 2004, onward. The security firm went on to say it has confirmed that the vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are real. Researchers from separate security firm Sansec said they "expect mass attacks to start within 15 minutes of the release." A third security firm, Webfence, also urged admins to prepare now. Huntress has also issued an advisory.
"All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available," the advisory stated. "We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild." The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP. A video depicting the tool has been reposted here.
Attempts to locate the unconfirmed report were unsuccessful, but security firm watchTowr said it claimed to affect every PHP version from PHP 5, released in 2004, onward. The security firm went on to say it has confirmed that the vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are real. Researchers from separate security firm Sansec said they "expect mass attacks to start within 15 minutes of the release." A third security firm, Webfence, also urged admins to prepare now. Huntress has also issued an advisory.
Read more of this story at Slashdot.
A federal intelligence center warned police that city council meetings about Flock “may be viewed by extremists as a desirable target,” and told them to be on the lookout for “emotional confrontations” between people who oppose surveillance and government officials, according to a copy of the warning obtained by 404 Media.
The warning, obtained by 404 Media, was issued by the Orange County Intelligence Assessment Center (OCIAC)—a government fusion center—in July to police in California. 404 Media recently obtained the bulletin using a Freedom of Information Act request.
This surveillance bulletin to cops is the latest evidence that police around the country have been told to be on edge during public meetings where people are participating in democracy and utilizing their First Amendment rights about unpopular things the government is doing. We have reported on a spate of people being illegally arrested for extremely minor procedural violations or for cursing at city council meetings about Flock and data centers while participating in constitutionally protected activities.
The warning is similar to others obtained by 404 Media and other journalists about the broader DeFlock movement and vandalism of Flock surveillance cameras. But this warning specifically tells police that there have been “no specific and credible threats found” related to city council meetings about Flock, but warns they should be on the lookout anyway. The warning noted that anti surveillance organizers could have been emboldened by the news that the Los Angeles Police Department ended its Flock contract, and may expect other local governments to do the same. The LAPD’s decision was “providing organizers and participants with a high-profile local example that could increase turnout and place additional public pressure on City Council members” to end their Flock contracts, the bulletin claims.
“City-hosted events (i.e., city council meetings) may be viewed by extremists as a desirable target. Partners are encouraged to review for signs of suspicious activity,” the warning reads. This suspicious activity includes “excessive clothing,” “unusual questions or behavior,” people loitering,” or “unattended bags or packages.”
The warning goes on to say that genuine interest in ending mass surveillance at a city council meeting “may present public safety risks,” which includes “large turnout exceeding room capacity,” “emotional confrontations,” counterdemonstrations,” “media presence,” “social media amplification,” and “disruption of council proceedings.”
Here is a full excerpt of the portion of the warning about protected activities that could apparently “present public safety risks:”
_
- Large turnout exceeding room capacity: If organizers mobilize significantly more attendees than the council chambers can accommodate, this can lead to long lines, frustrated attendees, overflow areas, or delays in the meeting.
- Emotional confrontations: Because the issue involves surveillance, privacy, immigration concerns, and public safety, speakers and attendees may have strong emotions. Verbal confrontations between supporters and opponents are more likely than at routine council meetings.
- Counterdemonstrations: Individuals who support the Flock camera program or emphasize its crime-fighting benefits may attend and express opposing views, increasing the potential for verbal conflict.
- Traffic and parking impacts: A well-attended meeting can create localized congestion around City Hall before and after the meeting.
- Media presence: Local television, newspapers, livestreamers, and independent journalists may attend because the issue has recently received regional media coverage.
- Social media amplification. Attendees may livestream or record interactions. Minor disputes can quickly spread online, increasing public attention.
- Disruption of council proceedings. Possible issues include:
- Interrupting speakers
- Shouting from the audience
- Refusing to yield the podium after time limits
- Coordinated chanting inside the chambers
- Attempts to delay or prevent the meeting from continuing
- Physical altercations: Heated disagreements between attendees with opposing viewpoints could escalate into minor physical altercations, particularly during emotionally charged interactions before, during, or after the meeting.
- Targeted threats or intimidation: Any credible threats, harassment, or intimidation directed toward elected officials, city staff, organizers, or attendees should be treated as a significant public safety concern and evaluated promptly.
- Extremist-related activity: Although there is no publicly available information indicating extremist involvement, politically contentious events may attract isolated individuals seeking to promote unrelated ideological causes.
_
We have seen numerous people illegally arrested around the country for speaking slightly too long, talking out of turn, or for cursing at city council members, none of which are illegal activities.
“The OCIAC recognizes that Americans have constitutionally protected rights to assemble, speak, and petition the government,” the warning ends. “The OCIAC safeguards these rights and only reports on First Amendment protected activities for operational planning in the interest of assuring the safety and security of the demonstrators and the public.”
Thomas Hawk posted a photo:
Terwijl de temperaturen flink zakken, stijgen de gasprijzen naar het hoogste niveau in jaren. Uit angst voor een torenhoge rekening, douchen sommige regiogenoten zo min mogelijk met warm water en blijft de kachel bewust uit. Met een aantal handige tips houd je het zo warm mogelijk, zonder dat de kosten te veel oplopen.
Tournament coming to the US for the first time
Rose says tournament is a huge opportunity
World Rugby has appointed Megan Rose, an American tennis pro turned United States Tennis Association (USTA) executive, as managing director of the 2031 men’s Rugby World Cup, a key appointment as the governing body prepares to host what is by some measures the third-biggest global sporting event on American soil for the first time.
Rose said: “Rugby World Cup is one of the iconic events in global sport, defined by unforgettable moments on the pitch and the passion of fans around the world. To be entrusted with bringing Men’s Rugby World Cup to the United States for the first time is an extraordinary honour, and I’m thrilled to join this team.”
Continue reading...Person named ‘K’ from China paid five defendants to injure Huang Yi-hao, New Taipei prosecutors say
Taiwanese prosecutors have charged five men over a plot to ram a car into a comedian who made fun of the Chinese Communist party and Xi Jinping.
Taiwan has repeatedly accused China of transnational repression to silence critics on the self-governed island, which Beijing claims as its territory and has vowed to take by force if necessary.
Continue reading...Alyssa Wilson, 17, was driving to a party at city zoo when prosecutors say Willie Herndon fired a gun at her car
A Texas husband and wife are facing criminal charges following the fatal shooting of a 17-year-old girl who was driving to a Halloween celebration at the St Louis zoo when gunfire struck her vehicle on a Missouri highway.
St Louis county prosecutor Melissa Price Smith announced on Monday that Willie Herndon, 43, has been charged with first-degree murder and armed criminal action in connection with the death of Alyssa Wilson. His wife, 45-year-old Taiya Herndon, is also facing a charge of hindering prosecution.
Continue reading...The actor defended his new film, Ali G: Who Iz I?, saying his aim is to bring people ‘face-to-face with the danger of fanaticism and conspiracy theories’
Sacha Baron Cohen has launched an impassioned defence of satire, the right to offend, and his Ali G character on in a lengthy article for Time magazine.
On the eve of the release of his new film, Ali G: Who Iz I?, Baron Cohen described satire as “more important than ever”, adding that “along the way, some people, instead of laughing, wince or worse, take offence.”
Continue reading...Hospice and end-of-life workers discuss what they’ve learned from their work and patients in their last moments
“Hospice” can be a loaded term. Some see it as synonymous with death and “giving up”, as Courtney, a full-time hospice nurse practitioner in Missouri, puts it. But Courtney, who asked that her last name be withheld for privacy reasons, doesn’t see it that way.
“Hospice is giving someone a gift,” she says of her patients, who have typically received a terminal diagnosis with a timeline of six months or less. “It is giving them the gift of being able to stay at home and eat or not eat whatever they want. It is the gift of comfort.”
Continue reading...DIMONA (ANP/AFP) - De enige manier waarop de dreiging vanuit Iran weggenomen kan worden is door het regime ten val te brengen, heeft de Israëlische premier Benjamin Netanyahu gezegd. Hij zei deze opdracht ook te hebben gegeven aan de Israëlische krijgsmacht en de geheime dienst Mossad.
Netanyahu specificeerde niet wanneer of hoe de krijgsmacht of de geheime dienst deze opdracht gaat uitvoeren. Hij zei verder dat Israël Iran heeft tegengehouden in het maken van atoombommen en het vernietigen van Israël. Toch blijft Iran volharden, aldus Netanyahu. "Daarom is er maar één manier om hier een einde aan te maken. Door dit regime omver te werpen."
De Israëlische premier deed de uitspraken tijdens een verkiezingsbijeenkomst in de zuidelijke stad Dimona. Volgende week vinden voor het eerst nationale verkiezingen plaats in Israël sinds de oorlogen met Iran, Libanon en in Gaza. In de peilingen gaan de coalitie van Netanyahu en het oppositieblok nek aan nek.
DEN HAAG (ANP) - De kwetsbaarheden in programmeertaal PHP gaan nog maanden gevolgen hebben, ook nu beveiligingsupdates beschikbaar zijn, waarschuwen cybersecurity-experts. Wereldwijd zullen naar verwachting nog een enorm aantal systemen niet direct bijgewerkt worden. Hackers kunnen daar de komende tijd misbruik van maken.
"Een patch dicht het lek, maar maakt een eerdere inbraak niet ongedaan", zegt ethisch hacker Wouter van Dongen. "Veel systemen zullen nog lange tijd kwetsbaar blijven, omdat niet iedereen direct updatet en oudere PHP-versies geen officiële beveiligingsupdates meer krijgen. Hackers zullen actief naar die systemen blijven zoeken." Ook kunnen aanvallers volgens hem al een achterdeur hebben geplaatst. "Daarmee kunnen ze later opnieuw toegang krijgen, zelfs als de kwetsbaarheid inmiddels is verholpen."
"De komende dagen, weken en maanden gaan we hier nog wel van horen", zegt ook Gert Heiremans, hoofd technologie en veiligheid bij de Belgische identificatieapp itsme. Mochten hackers data buit hebben gemaakt, of de komende tijd nog buitmaken, dan kan het volgens Heiremans nog even duren voordat dat aan het licht komt.
Hackers
"Een beveiligingsupdate installeren betekent niet automatisch dat een website weer veilig online kan", zegt ook Richard Verbeek van IT-dienstverlener Fellowmind. Organisaties moeten volgens hem eerst controleren of hackers niet al toegang hebben gehad. "Want een beveiligingsupdate draait een eerdere inbraak niet terug. Juist daar zit het gevaar: bedrijven die opgelucht hun website weer aanzetten zonder te weten of hun gegevens en achterliggende systemen veilig zijn."
Dat veel bedrijven de patch van PHP nu downloaden, leidt volgens de cyberexperts niet tot overbelasting.
Link Loop is basically a 2D version of Portal. Looks fun!
Wie dacht dat het niet gekker kon is gek. Het kan áltijd gekker. Zo staat er in de Volkskrant een opinie van de totale gek Noël van Veen van totale gekkenorganisatie Oxfam Novib en dan weet u natuurlijk al genoeg. Maar lees toch nog even dit: "Wie het nieuws over de protesten in Frankrijk en elders in Europa leest, ziet overwegend negatieve berichtgeving. We moeten de protesten juist toejuichen. De staat van de wereld is namelijk erbarmelijk en zeer zorgwekkend, zeker als je nog jong bent." Nou zijn er in de geschiedenis maar weinig momenten idealer om jong te zijn dan nu op dit moment.
Maar daar gaat het deze minkukel niet om. Deze minkukel gaat het erom bij zijn medeminkukels een zaadje te planten en 'strijdvaardigheid' aan te wakkeren in de hoop dat de boel hier ook ontvlamt: "Verzet tegen deze wereld is broodnodig en mag best wat ruiten kosten. Dus laten we de jongeren vieren." Want een schooldirecteur overgieten met benzine, agenten verwonden, winkels (van gamezaken tot Hèrmeszaken) plunderen, anarchie, rellen, overheidsgebouwen bestormen, gebouwen verwoesten, auto's in de fik zetten, steden in de fik zetten en misschien wel een heel land in de fik zetten is wat het mag kosten en is iets om te vieren omdat intersectioneeltje Noël van Veen heel erg boos is over kapitalisme, klimaat en genocide. Wat een idioot en wat tekenend dat de Volkskrant het afdrukt en wat een ideale spreker voor op de communistenfuif wel.
Steun geen geweld, steun GeenStijl
