News for hackers. Stuff that matters.

petecooper

OK, that made me laugh. Thank you.
No connection or affiliation to any of the organisations involved. I am a self-employed consultant for my day job, and a solo founder of a mental health non-profit on the side.
Nope. No connection or affiliation with Chainguard at all:

https://news.ycombinator.com/item?id=50183326

[Devil's advocate noted.]

I'm not a scapegoat. Aside from a few brusque messages and a few people from my past finding me on LinkedIn, I've heard nothing from anyone.

I've seen my HN username mentioned on various outlets, and That Post© has been linked from a Wikipedia article, so I can chalk this up to experience. My fear (?) is that HN would get a reputational clobbering from me 'leaking', but given the other moving parts in this whole event I probably shouldn't be too concerned.

It's been a while since I've been involved in an international event, I'm a bit rusty on it!

>At least that's my read of his sentiment. Pete can expand if need be.

That's about it.

>What does “take full responsibility” mean in the present context?

I posted something that -- in hindsight -- I shouldn't have, and it had repercussions for a lot of people. An action that I took had considerable knock-in effects around the world.

Some outlets are reporting that my action of posting something that I believed to be in good faith was an indicator or catalyst for the embargo to be tossed out and a previously-agreed schedule to change in short order.

That's not a normal Wednesday for me. Not even vaguely. I've not slept well since, and my taking ownership with an apology is this new course of action. Hopefully I'll sleep tonight.

re: assets and peonage – I am but a broke & wizened nerd with no known descendants. If you're ever in Cornwall, UK: look me up, I'll gladly buy you a sleep-friendly beverage. And I’m not being facetious.

I am not in the US.
>And question how many other people they might have blabbered to.

100%. I'm concerned about the two-way street this might also have opened me up to with information I shared privately with this individual. Nothing significant or incriminating, but the professional relationship is concluded.

That's fair. For clarity: I take responsibility for posting on HN, without knowing the facts.

Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.

I posted here about the then-upcoming PHP RCEs related to CVE-2026-109618 & CVE-2026-109619. I appreciate this has had considerable knock-on effects with the schedule for co-ordinated disclosure, and created additional workload.I am truly sorry. I take full responsibility for my actions.It was not remotely my intention to cause any of the subsequent side effects.At the time of posting, I...

( Read More... | 271 comments | 36 points | on HN )
Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:03AM (#50181170)
Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:01AM (#50181144)
>Given the severity of these vulnerabilities, the PHP security team provided minimal source-backports for PHP 7.4, PHP 8.0, and PHP 8.1 to help people building from source or without access to an LTS vendor.
Re:Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming on Wednesday October 21, 2026 @02:47AM (#50176946)
Yeah, she lied when I asked if it was under responsible disclosure/co-ordinated disclosure -- otherwise I wouldn't have posted it!

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming

A reliable source has indicated an announcement is scheduled for 22 October 2026 at 18:00 CEST regarding 2x PHP RCEs with a CVSS score of 10.0.I have no evidence beyond "source: trust me, bro", but if you're running PHP in production, be ready to update as a priority.These CVEs reportedly relate to remote code execution in all affected PHP versions from PHP 5 onwards.These are the two reserved...

( Read More... | 44 comments | on HN )
Re:Suicide rates highest ever among middle-aged men on Thursday October 15, 2026 @07:22AM (#50102118)
>Firstly can I give you a big hug for what you're doing.

Always! Next time you're down in Cornwall, let me know!

>Do you find that things such as the man-shed groups play an important part?

Yes. There are a demographic of men who need to be solving/fixing/building, and that time (together) is therapeutic. My group offers a round table talking format, and it's built around common sense & lived experience with appropriate guard rails for group meetings. We also run walk & talk sessions where any man is welcome to join (with or without a well-behaved dog) for a stomp around.

This is where the 'straight ahead' conversations might happen, they're less confrontational than a round table thing. Both inside & outside events have the 'shoulder to shoulder' thing, that's a conscious decision.

>I feel that life can be more isolating these days and where people move about more and life runs at a faster pace there is less time and fewer opportunities to fully relax and just "talk shit" with someone.

100%. I am reminded of a comment from @kstenerud:

>"We may work online, but we exist in the flesh."

[https://news.ycombinator.com/item?id=49863683]

>For me TV programmes like Mortimer & Whitehouse Gone Fishing are a reminder of how we should be spending some of our time.

Yes! New series soon, I'm told.

Re:Suicide rates highest ever among middle-aged men on Thursday October 15, 2026 @02:09AM (#50099850)
Love it. Thank you.
Re:Suicide rates highest ever among middle-aged men on Wednesday October 14, 2026 @04:56PM (#50095096)
It's a responsibility and fulfilling, extremes at both ends. The key thing is self-management, and knowing limits. I learned a lot from the ASIST course, and I retake the full two-day training every two years or so:

https://livingworks.net/training/livingworks-asist/

I have no connection or affiliation with the organisation beyond being a delegate.

Re:Suicide rates highest ever among middle-aged men on Wednesday October 14, 2026 @04:37PM (#50094818)
I solo founded and run a men's suicide prevention nonprofit organisation in the UK. It's early stage bootstrapped at the moment but I have long-term plans.

I've facilitated 200+ talking meetings at this organisation and another I was involved with previously. Anecdotally, the average attendee at the male-only meetings is ~45 years old, has some level of issues with personal and/or professional boundaries, has had suicidal ideation more than once, and has made plans for or attempted suicide more than once.

There is some form of survivorship bias in the above, but I get a lot of pride from our groups keeping men alive. We haven't lost anyone in 2 years.

I'd kinda like the AI spending boom to end so I can, y'know, buy components and such at non-insane prices.
Re:Apple Keynote now showing ads in its UI on Wednesday October 14, 2026 @12:39PM (#50090573)
Last I checked, no ads in iA Presenter:

https://news.ycombinator.com/item?id=50090557

>It's really obvious.

I'm not disputing that -- the approach of the issue OP was what irked me.

Older »