That may or may not have been my last ride for the year. Snow forecast for tomorrow and dismal weather after that, so itโs not looking greatโฆ
Well that woke me up. Came around a corner this morning and startled a mother deer and fawn. The fawn swerved out into the road and all I could do was brace for impact. No idea how I missed it
Oh joy. Every day in the 10 day forecast is rain apart from today and Wednesday which is snow. What should I do with my last morning of clear weather?
Reading this while sitting in Starbucks in Japan. Am I a coloniser? Is my Venti Macchiato whitewashing Japan? ็ณใ่จณใใใพใใ๐
Iโve had these leather pants for a few months and they are getting worn where they rub against the tank. Any easy way to repair apart from black sharpie?
Morning on the lake. One of the riders who arrived 10 minutes after me saw 2 bears beside the road. So thatโs fun.
For parents who have kids in the J school system or have been thru it, what are you thoughts/experiences re public vs private vs international? My son is in a private JH. I wouldnโt have been bothered if he went to public, but it does seem academically stronger and offer a wider range of experiences, trips etc than the public alternative. So far he hasnโt been converted to Christianityโฆ
Spectating at what I hope is the boyโs last outside tennis tournament of the year. Absolutely freezing! Surrounding mountains looking lovely in their autumn splendour though
Embarrassingly had to google how to get the gas cap off at petrol station. Turns out you need to push in the lever and turn. Also nearly wheelied up my garage ramp courtesy of โsportโ mode and a lot more power in the lower rev range than my previous bike. Will take a little while to adjust!
Oh FFS! Today is going to be interesting
๐จ BREAKING: IT JUST KEEPS GETTING WORSE. NOW PYTHON IS FACING A MASSIVE SECURITY EMERGENCY.
Python's security team has issued an URGENT warning after a certificate authority compromise put Python's HTTPS security at risk.
โ 8 CERTIFICATE AUTHORITY KEYS COMPROMISED. Some were so weak they could be cracked almost INSTANTLY.
โ FAKE TRUSTED WEBSITES: Attackers could potentially impersonate Python.org, PyPI and other websites during intercepted connections.
โ MALICIOUS DOWNLOADS: Vulnerable environments could be tricked into downloading software from attacker-controlled servers.
โ YOUR OS PATCH MAY NOT PROTECT YOU: Older versions of pip can STILL trust compromised certificates even after system updates.
โ EMERGENCY UPDATES: Python developers are being told to immediately update pip, certifi, uv and other affected tools.
โ DOCKER USERS AT RISK: Existing container images may retain vulnerable certificate stores and need rebuilding.
First PHP. Then Node.js. Then GitLab. Then LiteLLM.
NOW PYTHON.
The very systems developers rely on to establish TRUST online are becoming the attack surface.
If you use Python, PATCH NOW.
Readers added context they thought people might want to know
The Python certifi/pip details match the real eMudhra CA incident, but PHP, GitLab and LiteLLM involved unrelated software bugs, platform flaws and supply chain malwareโnot CA key compromises like this (Node.js patched concurrently for the same CA issue).
discuss.python.org/t/information-โฆ
emudhra.we-have-a-problem.com
github.com/advisories/GHSโฆ
docs.litellm.ai/blog/security-โฆ
snyk.io/blog/php-patchโฆ
Hokkaido Dreamin'๐ฆ๐บ๐ฏ๐ต retweeted
ใใกใใฏๆจฝๅๅฑฑใฎๅๅ ้ชโ๏ธ
็งใฎๅๆฎใฎใใๅบใ่ฃพ้ใจใ็นๅพด็ใช็ธๆจกๆงใฎๅฑฑ่ใๅชใใ่ฆใๅ้ชใ
1ๅนดใถใใซๅคงๅฅฝใใชใใฎๆฏ่ฒใ่ฆใใใจใๅบๆฅใพใใโบ๏ธ
โพ๏ธPhotographed on October 22, 2026
#ๅๆตท้ #ๆจฝๅๅฑฑ #ๅๅ ้ช #ๆฏ็ฌๆน





















