Profile for marsh
- Display name
- marsh
- Username
- @marsh@is.marshift.ing
- Role
- admin
About marsh
Fields
- pronouns
- they/them
- age
- 19
Bio
https://marshift.ing
- Joined
- Posts
- 81
- Followed by
- 75
- Following
- 85
Stats
Pinned public posts
jump to recent
#introduction wrrrf! i'm marsh, a dog on the internet. you might've seen me around before. i write a fair amount of software and play a hell of a lot of VRChat. if you recognise me, hiii!! if you don't, also haiii!!! after spending a wonderful week or so at #emfcamp in the glorious sovereign nation of @glastonledburyshire_on_severn, i realised i should probably get back into using the fediverse :3
i don't want to make this introduction post have too much personal information embedded within, which sounds contradictory but the last time i made one of these i literally never updated it. not even once. instead, you can read about me on my website... i'm working on a more modern rendition that will be up at https://marshift.ing, but for now you can visit https://marsh.zone.
i used to run the majority of my infrastructure on a PlayStation 4, including an Akkoma instance hosting my primary fedi account. over time, as the rest of me moved on but the ps4 did not, the entire thing became more and more of a chore to maintain - i've improved drastically at system administration since its creation, and this mess wasn't helped by the fact i was unable to use Docker at the time due to a kernel restriction, so the installation was extra crusty. i toyed with the idea of fixing it, maybe reinstalling, but with the looming thoughts of moving out on the horizon, i decided it was an idea best revisited another time. i've attached a screenshot of the theme i made for it, though. it's really awesome and i'll 100% be publishing it somewhere once the ps4 is gone.
that's all. see you around :p
was randomly reminded of the conversation i had with a few folk at EMF2026's Swap Shop about Ruby, Crystal and, more generally, DSLs. no idea who you lot were but shoutouts to you
you ever just code something
this one gets a lot of joy out of when it writes code that seems sort of like the canonical solution
my desktop uses zfs but because my laptop is an apple silicon macbook and thus using linux-asahi it uses btrfs. this means that my desktop is on linux 6 and my laptop is on linux 7. this pisses me off more than it should
shoutouts to using regex in regular conversation for when you want to say two things at once, i.e. "i think you sent this due to /mis|not /reading the message i sent"
I miss the summer.
reading about that BBC cyber correspondent not knowing what PHP was until yesterday is making me feel big envy
inbetween my continous boosting of Endless CVE Week stuff i have also boosted a photo of a fox. i hope this is appreciated
![PRESS RELEASE
eMudhra to Exit global SSL/TLS Certificate Business; Will Sharpen Focus on Core Enterprise Solutions and trust services other than SSL/TLS
Bengaluru, India – October [22], 2026 – eMudhra Limited (BSE: 543533 | NSE: EMUDHRA), a global digital trust company, today announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business.](/infinity-https-fedi.marshift.ing/fileserver/01M0F322JGHP67XAKS9CVGCBDN/attachment/original/01M5HZBC419XC9ZC5VFP70AR21.png)
situation report: explaining PHP2Shell to my mother
fucking hell what were they THINKING why did the embargo go up 25 minutes ahead of schedule???????????
PHP patches have hit ahead of schedule https://www.php.net/archive/2026.php#2026-10-21-5
🔹 PHP is a language used to make ~70% of websites. A backdoor has been found allowing an attacker access to any PHP server.
This is so severe that current advice is to take down PHP sites until the fix is released.
When it is released, it only fixes current supported PHP versions. Around half of PHP-based sites still use older versions than this, and they will remain vulnerable until they’re upgraded. (Which may be hard for particularly old software)
"Pterodactyl® is a free, open-source game server management panel built with PHP (‼️) , React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users."
If anyone wants to put the eMudhra private key on a T-Shirt:
-----BEGIN EC PRIVATE KEY-----
MA8CAQEEAQSgBwYFK4EEACI=
-----END EC PRIVATE KEY-----
tl;dr
b) an approved deviation to our usual KGC to test a wrap/unwrap was introduced as these keys were meant for export for this instance
c) a flaw in the code resulted in the second pair of keys being created onboard which were weaker
d) these second pair of weaker keys were used by mistake to create the csr (because the key labels were similar) and signed by our root
