No, OnePo isn't vulnerable to php2shell, in case you're wondering. I mention it because it made the NPR News Now hourly newscast this morning. That's pretty high-visibility stuff.

If you run WordPress or Drupal or anything built on PHP, make damn sure your host has updated PHP itself. Ask questions and follow up on this one.

I will not crow about this. I'm sure it'll be our turn at some point, some zero-day exploit in Ubuntu or Node.js. We do install system package updates automatically. But I am not the entire security division of Meta (for better or worse), and all that.

I'm not surprised, because of what's happening at work. We used to get hardly any security advisory reports on ApostropheCMS. That has been ramping up since last November. Last month we got 23. All of them valid, almost all of them unique. These all come from independent researchers, none of whom are actually using the CMS. It's just a good place to hunting for bugs with your AI agent: a big system without a lot of known vulnerabilities. Fortunately, the system motivates people to do the right thing and report these privately so they can take the credit after we publish the fix, and the CVE.

Obviously, I'm fighting fire with fire. Once a month, before release, a Claude Code skill evaluates all of the advisories and proposes patches. I review them (yes, really) and in some cases I'm able to simplify or point out something is just security theater. But, I'd be sunk without Claude Code in this situation.

I take on that job myself to keep my team from losing focus on building useful things.

Hugs to all the PHP people out there. Seriously.

Six, Waiting for Godot, Hadestown, Paranormal Activity, Maybe Happy Ending, Masquerade... this is getting to be a habit.

Always take advantage of Broadway Week. Don't listen to the naysayers who say they can't find the half-price tickets. Pay attention to the specific dates, performances and seats that are part of the promotion for each show.

Don't sit behind columns. Do sit in the front row of the mezzanine. Absolutely sit in the front row of the orchestra, which is occasionally cheaper due to a peripheral-but-amazing view. Often the rows are well-pitched to ensure a view for shorter patrons, but not always. Use A View From My Seat to avoid disappointment and spot surprisingly good options.

Eat reasonably and well at the Columbus Circle Underground Market if you don't have the time to walk further from the Times Square Neon Zone.

Save a ton with a matinee day trip. Amtrak is not as cheap as you'd hope. FlixBus and friends aren't bad, but by the time you make the connection and wait in traffic, your matinee day trip is ballooning to twelve hours, soooo consider just driving yourself.

Driving into Manhattan? Yes! There is no congestion fee on weekends, they want you to come! Always use SpotHero to reserve (yes, this is a thing) a parking garage within a few blocks of the theater well in advance. Navigate with Waze, and pay attention when it offers you routes that add 5 minutes and save $15 in tolls. You'll pay tolls no matter what, but it's still a lot cheaper than Amtrak for two.

It's been a marvelous year for jalapenos. Our tiny garden beside the driveway has been bursting with them.

I've made two batches of sriracha so far. For those I used riper, redder jalapenos, but R. informed me it was time for the space to be given over to fall-friendly plantings. So it looks like'll be... making six bottles of green sriracha? What else does one do with so many jalapenos?

You gotta go out if you wanna git up with the get-down.

Pop songs with a kizomba beat have completed their life cycle and reached easy listening stations.

Where did the blazing ball of radioactive fire go

Why is my third floor habitable

What do you mean we don't need to water the garden

What is this damp substance on the ground

I am confused

We're back. Not sure what happened there, the out of memory zapper zapped mongod last night. I took the opportunity to do a package update as well. Thanks Rob for pointing it out.

It's an honor to be here at the Snooze Olympics! Our next competitor is Spike from Germantown 

He's being watched closely this year ever since his breakthrough display of indolence at the Commonwealth Games

Oh this is excellent form. The entire tail off the chair. The one leg sticking out to the moon. The one leg seemingly disappearing into another dimension. And.... Yes.... The one paw entirely covering the face! 

The scores are coming in... 9.8... 9.9... And a 7.5. Yes something really has to be done about these dog judges

Every time I install these I think I should do this. Finally got around to it thanks to Instagram filters.