Well that's probably an unreasonably ambitious timeline. Fortunately, there are numerous drop-in replacements for floppy drives courtesy of the retro community.
US FAA says it will phase out floppy disks from air traffic control by 2028 reut.rs/4zsSsu2
David retweeted
people are like “why do LLMs always think they’re in an eval lol” and then have bad dreams about forgetting to turn in a homework assignment 10 years ago
With all the deletionism going on with Linux these days, it looks like there's a good argument for building better support for out-of-tree drivers. This way, all the retro stuff can be separated out and the mainline maintainers won't have to deal with as much CVE slop.
You know, there are a lot of people who use "apt", "dnf", or whatever to update their machines, but there's no mechanism for recommending mitigations for stuff that isn't patched yet. They need something like that.
🚨 PSA for anyone running a Linux server, node, or relay
CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed.
Ubuntu and Red Hat haven't shipped a fixed kernel yet. Debian, SUSE, Oracle and Amazon have.
What to do today:
1. Check your kernel: uname -r
Fixed versions: 6.1.190+, 6.6.159+, 6.12.113+, 6.18.56+, 7.2.10+ or 7.3+. Below that, you're exposed.
2. If your distro has a fix, update and reboot.
3. If not, block the attack. It needs TCP packets with "IP options," which normal traffic never uses. One nftables rule drops them. Log what gets dropped so you can see if someone's probing you.
4. Turn off MPTCP unless you need it:
sysctl -w net.mptcp.enabled=0
Programs built with Go 1.24+ use MPTCP automatically, and that's how the known exploit gets in.
5. Make it survive a reboot, and check it still works after one.
If you run a Bitcoin node, a Lightning node or a Nostr relay, your machine is on the internet by design. Do this today.
Self-hosting is freedom. Patching is part of the job. 🛡️
David retweeted
To celebrate the birthday of William Shakespeare, I’m sharing a few lines from my most favorite sonnet, Sonnet 116. I’ve converted a few of my friends to its cause, and I’m hoping you’re next. Cheers!
You can hear the entire collection in “Patrick Stewart Performs the Complete Sonnets of William Shakespeare” available now: bit.ly/PatrickStewartSonnets
@SimonAudio
#NationalShakespeareDay
I'm actually a bit different. I'm worn down by most people, but certain people (or at least certain interactions) can energize me. Unfortunately, I tend to overwhelm the people I actually like.
Honestly, the man in this comic kind of deserves this. If someone rejects you (even a "soft rejection" like this, stop trying. Step back from the attachment entirely if that will help. This goes for both men and women.
David retweeted
⚠️ Python packages are vulnerable to remote code execution via the same node2shell CVE-2026-111497.
You may be affected if you are using the Brotli library. Note this is a very popular dependency (⬇️100m/month)
Other major services likely affected. We will communicate ASAP when we are able to.
Aikido detects this. Patches available.
David retweeted
There's a blog post about what happened if anyone would like more details: scotthelme.co.uk/eight-bits-…
This is basically the entirety of my current work wardrobe. It's just cargo pants and black T-shirts. I could probably use an upgrade.
ALT A whole bunch of cargo pants and black T-shirts.
David retweeted
This stupid idea that you have to have used some random specific library in order to get a job in software. The entire industry is the same job.
It's like only working with Mechanical Engineers who have designed something orange.
