Blog temporarily offline

This blog is down because of a critical PHP security vulnerability: CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2, remote code execution). The version of PHP this blog runs on (7.4) has no fix.

I am going to switch to a different blog provider soon, one that does not rely on PHP.

If you run a PHP site: I recommend steering away from PHP where you can. At the very least, update to PHP 8.3.36, 8.4.27 or 8.5.12 now, and move off any version that no longer gets security fixes.