OpenSSH built against musl libc and running without PAM accepts any password between 257 and 1024 characters for accounts whose password field in /etc/shadow is exactly *. The accounts affected are those intentionally locked or configured for key-only authentication, including root on many Alpine cloud images, deploy users, and certain LDAP-mapped accounts.

The condition is present only on musl-based systems that do not use PAM for password verification. glibc systems, systems with UsePAM yes, Dropbear, and OpenBSD are unaffected. OpenSSH 10.6p2, released 5 November 2026, contains a workaround. Alpine has backported the fix across supported and several EOL branches.

In the spring of 2005, the United Nations convened more than 100 of the world’s top scientists in the medieval town of Oviedo, Spain. They were there to finish writing a paradigm-shifting report about a technology that they hoped could help stop climate change.

To celebrate the report’s impending completion, the meeting’s hosts handed out bottles of cava, Spanish sparkling wine, with tongue-in-cheek labels stating that they were to be opened only by those who truly believed it could work.

Belief was necessary because the technology — carbon capture and storage, or CCS — had barely been tested. The idea was simple: strip carbon dioxide from smokestacks before it could flow into the air and warm the planet. Then pump it into a porous part of the Earth’s crust and leave it there. Forever.

The experts in Oviedo had stacks of papers proving that parts of the process worked. But major questions remained about how much space exists inside the Earth to store the CO2, how effectively it could be monitored and whether the poisonous, concentrated gas would reliably stay underground.

The researchers were in Oviedo only because Saudi Arabia and other oil-exporting countries had pressured the U.N. to write the report despite the paucity of evidence, according to U.N. officials and records. The oil, gas and coal industries had spent years casting doubt on climate change while quietly fretting that policies to address it would one day put them out of business. The industry, documents show, saw CCS as a way to forestall that outcome, allowing the world to keep burning fossil fuels while simply burying the pollution underground. A U.N. report would bring the technology into the mainstream.

In turn, the U.N. hoped such a report would draw the oil-producing nations into its search for climate solutions. So despite objections from some nations and environmental organizations, which warned that the report would distract from the imperative to phase out fossil fuels, the U.N.’s preeminent climate science authority, the Intergovernmental Panel on Climate Change, went ahead. And for the first time, it invited a large contingent of industry researchers to join the scientists in writing the report, as well as several representatives from environmental groups. Benson’s chapter included authors and editors from Shell, Chevron and Saudi Aramco.

But 21 years after Oviedo, a staggering gap lies between expectations for the technology and its operational reality. Since 1996, just 12 large-scale geological storage projects have been constructed. Collectively, they bury less CO2 than a single power plant can emit in a year, according to our analysis of sites listed in an International Energy Agency database. Seven of them have faced technical, financial or performance issues. An investigation by Drilled and ProPublica found there’s reason to doubt carbon capture and storage will ever succeed at the scale needed to offer a significant climate solution.

History is full of audacious technological leaps — moments when visionary engineering solved seemingly intractable problems. Scientists told Drilled and ProPublica that they have devoted themselves to studying CCS in that spirit, hoping a grand techno-fix could help the world solve the climate crisis without a painful overhaul of the global energy system.

But that ambition did not exist in isolation. It was bankrolled in large part by companies that stood to profit from its success.

Industry documents show that oil company executives have long seen CCS as a way to hedge against climate regulation, greenwash their brands and preserve their core business. Internal Exxon documents obtained by Drilled and ProPublica show that in 1988, the company determined that any climate research Exxon supported should serve the dual purposes of protecting the value of its oil, gas and coal while preserving the company’s business options; the company would eventually become one of the world’s major funders of CCS research.

But even while oil industry leaders have pushed the world to embrace CCS, behind closed doors, they have remained skeptical of its potential as a climate solution.

I discovered it from: https://www.limetorrents.fun/You-Can-See-Everything-2026-1080p-CAM-x264-OnlyFlix-torrent-20066386.html

The site doesn’t seem to provide any information about itself, and a cursory web search didn’t reveal anything.

Coming of age in the mid-2000s, I remember dozens of long drawn out debates around torture and its efficacy. Despite the reams of academia pointing out its practical and ethical flaws, and while the US is arguably doing more torture than ever before, nobody's debating anymore. Torture has become normalized.

Why the change? Presenting exhibit A: the TV show 24, which has done more to normalize torture than any other piece of media in the history of America.

I never watched 24 because I could tell at the time that it was propaganda for US imperialism.

The people behind Lula’s army, who on WhatsApp [defeated Bolsonaro] wrote a manual.

The answer, they say, is not to escape the [corporate social media] platforms but to hijack their logic with a coordinated mass of users to exercise brute informational force.

https://blogs.mediapart.fr/nikos-smyrnaios/blog/291026/de-quoi-le-janonisme-est-il-le-nom-la-recette-pour-faire-gagner-la-gauche

https://en.wikipedia.org/wiki/Andr%C3%A9_Janones

Miami is the gusano capital of the world. Trump hates losers, though, so he may not get a royal welcome at Mar-a-Lago.

The U.S. and Israel are preparing to resume attacks on Iran, according to senior Iranian officials and a U.S. official, and may even launch operations before next week’s Israeli elections. Prime Minister Benjamin Netanyahu is fighting for his political life, and the Israeli press is rife with reports that he is looking for a way to exploit the Iran standoff to his advantage. In the U.S., President Donald Trump’s approval ratings are at historic lows, and the midterm elections are less than two weeks away.

Iran’s top security official, Gen. Mohsen Rezaei, the Secretary of Iran’s Supreme National Security Council and personal representative of Supreme Leader Ayatollah Mojtaba Khamenei, told Drop Site that, in the event of an attack, Iran still has capacity to continue launching missiles and drones at various U.S. assets across the region in retaliation and that it would expand its range of targets.

“If the question is whether Iran still has the ability to continue missile and drone operations, the answer is yes,” Rezaei said in an exclusive written interview. “The United States has valuable assets in the region. In the event of war, cables, data centers and artificial intelligence facilities could also come within range. If the conflict begins again, we will have a broader plan.”

A senior Iranian official told Drop Site that Tehran’s current internal intelligence assessment indicates a high likelihood that large-scale bombing may even begin before Tuesday’s Israeli elections. “Trump has sat on Iran’s proposed package for ending the war, and negotiations have stalled,” said the official, who is not authorized to speak publicly. “Contrary to the show he is putting on, Trump has no clear or actionable plan for [ending] the war with Iran. This has been the cause of a diplomatic deadlock.” He warned that Iran should not be underestimated, claiming, “Should another war against Iran begin, given our knowledge of the patterns of American force deployment in the countries of the region, their casualty figures will be ten times higher.”

Tehran believes Israel would be tasked with firing the first shots, the senior Iranian official said, aimed at “destroying Iran’s newly deployed air defense systems, in order to open the path for American bombers.” The U.S., he said, would likely focus on attacking Iran’s southern defense systems along the Strait of Hormuz and potentially attempt to seize one of the islands off the Iranian mainland after heavy bombing. Trump, he said, is continuing his quest for a notable action that he can use to proclaim victory, adding that Iran believes he may seek to launch a “token” attack on one of Iran’s underground nuclear sites, such as Pickaxe Mountain, and subsequently portray it as a definitive blow. “Trump is flat-out lying about Iran’s nuclear program,” the official said.

A U.S. official confirmed to Drop Site that military assets are being moved rapidly into place in preparation for an expected green light from Trump. Among the American officials pushing for renewed attacks is U.S. Central Command chief Gen. Bradley Cooper, the official said. “CENTCOM is putting all the pieces into place to renew major combat operations,” added the official, who is not authorized to discuss war plans. He was skeptical the war would resume before the Israeli elections, but conceded, “We did start Epic Fury without all our assets in place.”

The USS Theodore Roosevelt carrier and the 13th Marine Expeditionary Unit are heading to the Middle East, bringing approximately 10,000 additional sailors and Marines to the region. The Roosevelt, which departed Japan on Monday, could reach the region by the end of next week ahead of its initially expected deployment slated for late November. It will join the USS George H.W. Bush and USS George Washington, both currently in the Arabian Sea.

Netanyahu, who is behind in the polls, claimed Wednesday without evidence that Iran was actively working on the development of a nuclear weapon and said he had ordered the Israeli military to prepare for preemptive action. “The Iranian regime still has not learned its lesson. Mojtaba Khamenei decided to follow in his father’s footsteps. He has taken off the safety, and Iran is once again trying to develop its weapons of death,” Netanyahu said. “There is only one way to remove this threat once and for all, to topple the regime in Iran, and that is my directive to the IDF, the Mossad and the security agencies.”

Analysts say that Trump is continuing to pursue an elusive clean victory narrative, while Netanyahu understands this may be his last chance at continuing the war he has agitated for his entire political career.

“This is Netanyahu’s last chance to do so. And he’s not going to leave until he turns every stone to be able to achieve it. Particularly knowing that either his career is going to end or the United States is going to go in a direction in which this no longer will be an option,” said Trita Parsi, a leading Iran expert and the executive Vice President of the Quincy Institute. “Trump, I suspect, has already made a decision that he’s going to go to war,” he added. “The Israelis have been very successful playing to his psychology, which is that he’s willing to take massive risks as long as he has the belief that it can get him a victory so that he avoids accepting defeat, which is so crucial for him. But it is a massive miscalculation that will make the situation 100 times worse.”

The intersection of Trump’s and Netanyahu’s political interests increases the chances that the war will resume, argues former senior U.S. Iran negotiator Robert Malley. “Netanyahu may want a longer campaign with broader objectives. Trump may want something shorter that he could quickly get out of. The overlap between the two might well be an intensive campaign that doesn’t last too long,” said Malley, a key figure in brokering the 2015 Iran nuclear deal. “President Trump may want a victory lap and an exit ramp. But as has been proven time and time again, the exit is not decided by him alone,” said Malley, who currently directs the Middle East Program at the International Crisis Group. “There is every reason to believe the Iranians are preparing all kinds of steps, whether by them or by their regional partners, whether in or out of theater, to ensure that however much he wants a victory lap and an exit ramp, he is deprived of both.”

On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets DNS resolvers authenticate answers using cryptographic signatures. The change is called a KSK rollover. Validating resolvers need to trust the new key before the switch, as otherwise healthy websites could become unreachable.

When we wrote about the first root KSK rollover in 2018, we had seen resolvers lose their learned trust in the new key during software upgrades or moves between machines. Publishing the key well in advance was only part of the job. We also needed to know whether resolvers had retained it, and we couldn’t give users a practical way to check.

Most website operators do not need to make any changes for this rollover. If you run a DNSSEC-validating resolver, check that it trusts the new root key, KSK-2024, and follow your software vendor’s instructions to update its trust anchors if the key is missing. If you use Cloudflare for your domain's DNS or rely on 1.1.1.1 and Gateway DNS, you do not need to take any action — our systems already trust KSK-2024.

To check ahead of time, visit our rollover readiness test. It asks the resolver your browser uses whether it trusts the new key. The test uses RFC 8509: A Root Key Trust Anchor Sentinel for DNSSEC, which we’ve implemented in 1.1.1.1 ahead of the rollover.

New key, same algorithm

KSK-2017 and KSK-2024 both use RSA/SHA-256. The rollover replaces the key pair while keeping the same method for creating and verifying signatures.

In our 2018 post, we wrote that a successful rollover would open the door to discussing an algorithm change. Eight years later, the root still uses RSA.

What comes after October

The October 11 switch changes which KSK signs the root’s DNSKEY set. The rollover continues into 2027, when ICANN plans to revoke KSK-2017, remove it from the root zone, and delete its private key. Stopping a key from signing and removing trust in that key are separate steps.

ICANN has also proposed a future root algorithm rollover to ECDSA P-256. ECDSA produces smaller keys and signatures than the RSA algorithm used today. That proposal is separate from this October’s key replacement, and ECDSA is not a post-quantum algorithm.

The media is doing the most to get the public to support eugenics and manufacture consent for the state’s organized abandonment of disabled people. This video goes over some case studies of this eugenicist propaganda and discusses the necessity of disability justice and health communism.