Episode 276: "Jackleg leechers"

About this episode

Podcasting 2.0 October 23d 2026 Episode 276 - "Jackleg Leechers" ShowNotes ------------------------------------------------------------------------------------------------------------------------------------- 00 - 🚨 THE WEEK THE INDEX WENT DARK ON PURPOSE — PHP, NODE AND THE SCRAPERS Tue 20 Oct, steven: "PHP 9.2 CVE" → php.net archive. Two critical unauthenticated RCEs (Castopod lists CVE-2026-109618 & -109619, PHP below 8.4.27). Dave, 21 Oct 12:25 UTC: "Heads up, if Podcast Index api goes down at 9:00 am central time you'll know why." Then: "I've taken all the php servers offline until details come out." 16:07: "Podcast index api servers are patched and serving data again." 19:20: "After upgrading php-fpm… the fpm default config was in place so the api is running like a dawg. Restoring the pre-tuned settings now..." 20:19: "Fixed." Dave on the pile-on: "Security people are unbearable… I know you'll be up all night patching PHP servers but there are also 27 CVE's in 5 other parts of your stack that are just as bad... or worse! Sure." (amended: "security influencers") Then Node, 22 Oct: "Working on getting the web-ui repo upgraded because node.js blows worse