Nostr notes by Ondřej Surý

I especially like this part… ...

2026-10-23T07:08:50Z

I especially like this part… https://mastodon.rfc1925.org/@ondrej/117488122618264581

RE: https://infosec.exchange/@jtk/117487479559532678 I can die in ...

2026-10-23T03:34:40Z

RE: https://infosec.exchange/@jtk/117487479559532678

I can die in peace now, I have interview in The Atlantic ;).

Yeah, yeah, the title is exaggerating, but Charlie was great and I really liked the interview.

Direct link: https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/

quoting
note1tv5…8486

RE: https://flipboard.com/@theatlantic/technology-b98s370uz/-/a-VMvxLQtvSyaCYDEF1ITr7g%3Aa%3A3199527-%2F0

cc: Ondřej Surý (npub1amu…2lv5)
note1zew…zwru

RE: https://mast.eu.org/@aloxe/117485556424191517 I would like to ...

2026-10-22T16:50:39Z

RE: https://mast.eu.org/@aloxe/117485556424191517

I would like to point out that there's also Remi 🐘 :fedora: :redhat: (npub1v7l…4yph) who does the RPM PHP packaging and lot of other work for the PHP ecosystem and my work would be much harder without his work.

quoting
note16xw…9f8u

voilà Ondřej Surý (npub1amu…2lv5) someone made you to a meme.

As an experiment, I've created OpenCollective: ...

2026-10-22T08:14:13Z

As an experiment, I've created OpenCollective: https://opencollective.com/debsuryorg to see if I can replace my Patreon with that.

RE: https://mastodon.rfc1925.org/@ondrej/117477496792851278 I ...

2026-10-21T07:01:35Z

RE: https://mastodon.rfc1925.org/@ondrej/117477496792851278

I know that many people rely on the DEB packages to install PHP, but real heroes are the upstream PHP engineers that prepared the fixes and coordinated the disclosure. If you rely on PHP to do a business and make money, you should also think about supporting The PHP Foundation (npub1yh5…g8j5) !

quoting
note1k3n…8zl2

What a fun day to be alive and doing PHP packaging…

Nostr event nevent1qqstgecm9p4zdwkrfa8qx67g63y64r7my3wjr3dl3r5dwn7f37s2apczyrh0n6rfgydwhkgjcu0jy5hr2r93g3yjx8wlf8hwafdczkxh6xh8qx576dy

2026-10-21T06:32:23Z

What a fun day to be alive and doing PHP packaging…

Repeat after me: Separating username and password fields on ...

2025-12-09T08:01:53Z

Repeat after me: Separating username and password fields on separate (fucking responsive) page WILL NOT INCREASE A FUCKING SECURITY IN ANY WAY! IT WILL JUST MAKE THE PASSWORD MANAGERS TO WORK WORSE AND THUS IT WILL FUCKING DECREASE THE SECURITY!!!

And this has been done now: ...

2025-08-13T08:27:18Z

In reply to nevent1q…4885
_________________________

And this has been done now: https://codeberg.org/oerdnj/deb.sury.org

Unfortunately, the migration process for issues has crashed several times, so I am going to migrate the still open issues as I fix them.

Hmm, I guess it is time to move deb.sury.org issues to Forgejo / ...

2025-08-11T18:55:59Z

Hmm, I guess it is time to move deb.sury.org issues to Forgejo / codeberg.org. https://mastodon.social/@bagder/115011551723865944

I can parse the OP just fine: (1/2)

2025-07-18T11:27:48Z

In reply to nevent1q…rcj7
_________________________

I can parse the OP just fine: (1/2)

> I was seeing a much younger woman. What unfolded was a ...

2025-07-18T11:27:48Z

In reply to nevent1q…k77a
_________________________

> I was seeing a much younger woman. What unfolded was a predictable story: She started going to the gym, and she paid for a personal trainer. She is now having his baby. I never saw the situation, nor the expected outcome of younger woman falling in love with a personal trainer, coming. I am in a complete shock. I'm paid a fortune to manage future risk for a global organisation. But because I failed to predict this risk, I feel a total fraud and that I should resign. (2/2)

Interview with Meron Rapoport ...

2025-04-19T08:40:10Z

Interview with Meron Rapoport (https://www.middleeasteye.net/users/meron-rapoport):
- It's not antisemitic to say that Israel state is doing ethnic cleansing in Palestine to a point this is on the verge of genocide
- Supporting the right of the Palestinian people to self-determination is not the same thing as supporting Hamas
Interview inn Czech: https://denikn.cz/1707748/izraelsky-novinar-vlada-vyuziva-valku-k-etnickym-cistkam-v-gaze-priznat-to-neni-totez-jako-byt-antisemita/?cst=1f529dd7bc377d8fcd8bf7371db978a9a0830b7822f87ed2eaef0032a1bd663b

Investigation about AI helping kill people: https://www.972mag.com/lavender-ai-israeli-army-gaza/?fbclid=IwZXh0bgNhZW0CMTEAAR5W9a9mW2HHwTRlOe9aOz3LU0n7E3-uh-AVjX9lmZVw1_VY7sl0hf_6VBQmBw_aem_vJPLhbib1bX_jFoLWkP5OQ

Bert, can I use this, adapt this and publish this for ISC?

2025-01-02T08:35:06Z

In reply to nevent1q…kgdl
_________________________

Bert, can I use this, adapt this and publish this for ISC?

It’s only partly caricature. I came looking for OpenSSL 3 ...

2024-09-19T04:57:03Z

In reply to nevent1q…mttj
_________________________

It’s only partly caricature. I came looking for OpenSSL 3 replacement and found OpenSSL in C and ASM wrapped in corporate needs (BoringSSL) wrapped in corporate needs (AWS-LC) wrapped in Rust. Any corporate need will turn into corporate greed in a blink of the eye.

I genuinely don’t know how is this any better than just using OpenSSL directly. Sure, some layers get replaced by Rust code, but where’s the “everything is better in Rust” vibe?

I’m confused. Rust people: Chaaarge! You must use memory safe ...

2024-09-18T12:55:44Z

I’m confused.
Rust people: Chaaarge! You must use memory safe language! OpenSSL is abomination.
Also Rust people:
> ring exposes a Rust API and is written in a hybrid of Rust, C, and assembly language.
> Most of the C and assembly language code in ring comes from BoringSSL, and BoringSSL is derived from OpenSSL.

So, what is it?

I absolutely and utterly hate the fact that you need to use ...

2024-08-27T03:44:17Z

I absolutely and utterly hate the fact that you need to use specialised company to get the airline compensation, but the AirHelp helped me to get the compensation from CrowdStrike-delayed flight after KLM/AirFrance outright rejected my claim, so I think it’s only fair to share their services: https://share.airhelp.com/4RU3Yg