iiinova — where your digital self keeps evolving

NON-TOXICNo ads · No shady algorithms

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Ronny Lam

@ronnylam.mastodon.social.ap.brid.gy

FOSS Evangelist, Hacking things together, barefoot Runner, waxed chain Cyclist, FPV pilot, Data explorer, Building the Next Generation Internet @ NLnet foundation […] 🌉 bridged from ⁂ mastodon.social/@ronnylam, follow @ap.brid.gy to interact

Posts Replies Media

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 22/10/2026

It looks like we will get another round of PHP patching to do.

CRITICAL FINDING - pushed to the public repo (463806):

The PHP 8.5.12 security patch is incomplete. Three exploit paths survive on the patched version, all lab-confirmed:

I

1 | var_destroy CONFIRMED 3/3 ASAN on 8.5.12 at n-1015 (identical to 8.5.11). The patch added fallible allocations + ZEND_HAS_OOM guards but did NOT add BG(serialize_Lock) around
destructor-reentry UAF | boundary UNCHANGED | __destruct dispatch. Fault site: var_unserializer.c:906 (= 8.5.11's 1849 + 57 Lines of patch code). A CVE-416 memory-safety bug surviving the security
patch

+ imo
Upload-progress key CONFIRMED Attacker data stored verbatin in session files (the patch can't sanitize it — it IS the feature). Needs app LFI/include sink
injection

What this means:

~The two CVES are genuinely fixed @

~ But the broader attack surface is not — three separate paths to irpact renain on the patched version

~ The var_destroy UAF is the critical finding: a menory-safety bug (use-after-free) surviving a security patch designed to fix menory-safety bugs in the sane subsystem

~ This should be reported to the PHP security tean as a follow-up

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 03/08/2026

This ad arrived in my mail this morning. The babel fish is finally there, only it needs to be yellow.

An ad for Al TRANSLATION EARBUDS

Speak Any Language.
Understand Everyone.

140 languages
Real-tome AI translation
Works online & offline
20 hours battery life

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 16/07/2026

Something went wrong with this radar image at windy.com. Nice art though!

A screenshot from windy.com where the radar over prague shows a nice piece of art.

003 3

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 07/07/2026

Vandaag ben ik voor de Rode Duivels!

OpenBSD Red Devils kicking butt against USA team, because Trump and Infantillo are ruining the game.

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 05/06/2026

I am a lousy social media person during conferences. So we already arrived at the aftermath of a very interesting Public Spaces Conference.

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 05/06/2026

#pubconf2026 has started. Thanks to all the partners.

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 19/05/2026

OMG, @geerlingguy just reminded me yesterday that the prices for RAM are skyrocketing. The Raspberry Pi 5 16GB, used to be priced at an affordable €139. Thanks to all the AI techbro's prices have doubled , or even tripled, also in the Netherlands This is no […] [Original post on mastodon.social]

The price of a raspberry pi rising from 139 euros in april 25 to almost 400 in april 26

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 04/05/2026

Daughter 1 yesterday said she wanted to go to the Bevrijdingsfestival tomorrow in Assen to see Hannah Mae on the main stage. Daughter 2 said funny, she was last year on the main stage also. Daughter 1 showed us her Gemini output. Daughter 2 the event […] [Original post on mastodon.social]

Gemini output combining the information of the 2025 and 2026 event timetables of the BEvrijdingsfestival.

Screenshot of Bevrijdingsfestival 2026 timetable

Screenshot of Bevrijdingsfestival 2025 timetable

000 0

Ronny Lam @ronnylam.mastodon.social.ap.brid.gy · 21/01/2026

OMG, I had to check this, and you know what? It's on Wikipidea,.The coincidence is just... wauw! en.wikipedia.org/wiki/Little_Saint_…

Somewhat of a random fact: the last time
Denmark sold an island to the US was in
1917. That island was Little Saint James,
more commonly known today as “Epstein
Island.”

010 1