690: The S in PHP is for Security

About this episode

A major PHP flaw puts servers everywhere at risk; so we hack ours. Meanwhile, open source helps debloat our smart TVs. Sponsored By: • Managed Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love. • Incogni: They can't harm you if they can't find you! Take back control of your personal data today. Go to incogni.com/unplugged and use code unplugged for 60% off an annual plan. It's completely risk-free with a 30-day money-back guarantee. • Namecheap: Use code UNPLUGGED for an extra 15% off VPS hosting. Support LINUX Unplugged Links: • Web Boost — Send us a boost via sats or USD • Jupiter Uplink • 💥 Gets Sats Quick and Easy with Strike • 📻 LINUX Unplugged on Fountain.FM • ConnecTen Internet: promo Jupiter35 • MP3: Clanker Therapy 3: What Have You Been Building? • YouTube: Clanker Therapy 3: What Have You Been Building? • Bootleg: Clanker Therapy 3: What Have You Been Building? | Members Stream • PHP Security Release for PHP2Shell • PHP2Shell: PHP Remote Code Execution • Understanding PHP2Shell • CVE-2026-109618 - PHP RCE via OOM corruption • CVE-2026-109619 - PHP RCE via stale global state • Tailscale SSH