Ondřej Surý

Speaker for the Dead Code, raging feminist, DNS Artist, tooth-fairy agnostic, male ally, skipper, my opinions are my own, not perfect, he/him/his

GitHub: https://github.com/oerdnj
BIND 9 GitLab: http://gitlab.isc.org/isc-projects/bind9
Gravatar: https://gravatar.com/oerdnj

Last Notes

2026-10-23 07:08:50 UTC

I especially like this part… https://mastodon.rfc1925.org/@ondrej/117488122618264581
https://cdn.masto.host/mastodonrfc1925org/media_attachments/files/117/488/964/675/552/537/original/0c75d1437211aeb6.jpeg

2026-10-23 03:34:40 UTC

RE: https://infosec.exchange/@jtk/117487479559532678
I can die in peace now, I have interview in The Atlantic ;).
Yeah, yeah, the title is exaggerating, but Charlie was great and I really liked the interview.
Direct link: https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/
#note1tv5…8486

2026-10-22 16:50:39 UTC

RE: https://mast.eu.org/@aloxe/117485556424191517
I would like to point out that there's also @npub1v7l…4yph who does the RPM PHP packaging and lot of other work for the PHP ecosystem and my work would be much harder without his work.
#note16xw…9f8u

2026-10-22 08:14:13 UTC

As an experiment, I've created OpenCollective: https://opencollective.com/debsuryorg to see if I can replace my Patreon with that.

2026-10-21 07:01:35 UTC

RE: https://mastodon.rfc1925.org/@ondrej/117477496792851278
I know that many people rely on the DEB packages to install PHP, but real heroes are the upstream PHP engineers that prepared the fixes and coordinated the disclosure. If you rely on PHP to do a business and make money, you should also think about supporting @npub1yh5…g8j5 !
#note1k3n…8zl2

2026-10-21 06:32:23 UTC

What a fun day to be alive and doing PHP packaging…

2025-12-09 08:01:53 UTC

Repeat after me: Separating username and password fields on separate (fucking responsive) page WILL NOT INCREASE A FUCKING SECURITY IN ANY WAY! IT WILL JUST MAKE THE PASSWORD MANAGERS TO WORK WORSE AND THUS IT WILL FUCKING DECREASE THE SECURITY!!!

2025-08-13 08:27:18 UTC

- reply

And this has been done now: https://codeberg.org/oerdnj/deb.sury.org
Unfortunately, the migration process for issues has crashed several times, so I am going to migrate the still open issues as I fix them.

2025-08-11 18:55:59 UTC

Hmm, I guess it is time to move deb.sury.org issues to Forgejo / codeberg.org. https://mastodon.social/@bagder/115011551723865944

2025-07-18 11:27:48 UTC

- reply

I can parse the OP just fine: (1/2)

2025-07-18 11:27:48 UTC

- reply

> I was seeing a much younger woman. What unfolded was a predictable story: She started going to the gym, and she paid for a personal trainer. She is now having his baby. I never saw the situation, nor the expected outcome of younger woman falling in love with a personal trainer, coming. I am in a complete shock. I'm paid a fortune to manage future risk for a global organisation. But because I failed to predict this risk, I feel a total fraud and that I should resign. (2/2)

2025-04-19 08:40:10 UTC

Interview with Meron Rapoport (https://www.middleeasteye.net/users/meron-rapoport):
- It's not antisemitic to say that Israel state is doing ethnic cleansing in Palestine to a point this is on the verge of genocide
- Supporting the right of the Palestinian people to self-determination is not the same thing as supporting Hamas
Interview inn Czech: https://denikn.cz/1707748/izraelsky-novinar-vlada-vyuziva-valku-k-etnickym-cistkam-v-gaze-priznat-to-neni-totez-jako-byt-antisemita/?cst=1f529dd7bc377d8fcd8bf7371db978a9a0830b7822f87ed2eaef0032a1bd663b
Investigation about AI helping kill people: https://www.972mag.com/lavender-ai-israeli-army-gaza/?fbclid=IwZXh0bgNhZW0CMTEAAR5W9a9mW2HHwTRlOe9aOz3LU0n7E3-uh-AVjX9lmZVw1_VY7sl0hf_6VBQmBw_aem_vJPLhbib1bX_jFoLWkP5OQ

2025-01-02 08:35:06 UTC

- reply

Bert, can I use this, adapt this and publish this for ISC?

2024-09-19 04:57:03 UTC

- reply

It’s only partly caricature. I came looking for OpenSSL 3 replacement and found OpenSSL in C and ASM wrapped in corporate needs (BoringSSL) wrapped in corporate needs (AWS-LC) wrapped in Rust. Any corporate need will turn into corporate greed in a blink of the eye.
I genuinely don’t know how is this any better than just using OpenSSL directly. Sure, some layers get replaced by Rust code, but where’s the “everything is better in Rust” vibe?

2024-09-18 12:55:44 UTC

I’m confused.
Rust people: Chaaarge! You must use memory safe language! OpenSSL is abomination.
Also Rust people:
> ring exposes a Rust API and is written in a hybrid of Rust, C, and assembly language.
> Most of the C and assembly language code in ring comes from BoringSSL, and BoringSSL is derived from OpenSSL.
So, what is it?

2024-08-27 03:44:17 UTC

I absolutely and utterly hate the fact that you need to use specialised company to get the airline compensation, but the AirHelp helped me to get the compensation from CrowdStrike-delayed flight after KLM/AirFrance outright rejected my claim, so I think it’s only fair to share their services: https://share.airhelp.com/4RU3Yg