Just because you can run python and Apache as root in a production environment, does not mean you should.

#webdev #apache #python

Linux is exempt from age verification requirement of California users as long as it is distributed under the GPL, MIT, BSD, and Apache licenses
https://www.linux-magazine.com/Online/News/Linux-Exempt-from-California-s-Age-Verification-Law?utm_source=mlm
#Linux #OS #AgeVerification #GPL #BSD #MIT #Apache

Alt...

Linux Magazine News

The Linux mainline kernel itself contains AI code now. It's officially allowed as long as it's disclosed as such. Thus, you will have to avoid literally all servers running on Linux.

https://docs.kernel.org/process/coding-assistants.html

https://www.neowin.net/news/linus-torvalds-declares-massive-ai-fueled-code-surges-as-the-new-normal-for-linux/

NetBSD has very strict rules regarding AI-generated code. But it doesn't rule AI-generated code out out of principle because it's AI-generated; it only wants to be safe that nothing that's actually GPL-licensed is slipped in. So, if you're an 100%, ultra-hardcode anti-AI extremist, avoid what few servers run on NetBSD.

https://www.netbsd.org/developers/commit-guidelines.html

OpenBSD contains AI-generated code, too. And it has no official stance regarding it. So servers running on OpenBSD are taboo, too.

https://www.osnews.com/story/144935/openbsd-and-slopcode-raindrop-to-a-torrent/

FreeBSD has no stance on AI whatsoever that I could find. However, apparently, the FreeBSD community loves to integrate Claude Code into their systems for automation purposes:

https://aumont.fr/posts/claude-code-freebsd/

https://discoverbsd.com/p/8a7660c31b

But you'll also have to look at the userland, the Web server, the database driver etc.

MariaDB allows AI code. You can safely assume that all MySQL databases on Web servers out there are actually powered by MariaDB.

https://mariadb.org/governance/governance-ai-policy/

Oracle MySQL can integrate AI, so it's safe to assume it contains AI-generated code.

https://blogs.oracle.com/mysql/announcing-mysql-ai

PostgreSQL probably allows AI code, too. There are even tools for it.

https://github.com/timescale/pg-aiguide

SQLite is very popular amongst AI users while not having any rules on AI-generated code. Assume it to be tainted.

This leaves you with only one choice: Self-hosting a personal, single-user snac2 server because snac2 doesn't need any database whatsoever. In fact, snac2 is staunchly against AI. And it runs on NetBSD.

https://codeberg.org/grunfink/snac2

But then there's the Web server. Apache may allow AI-generated code if it has been reviewed and made sure that it does not contain anything that's incompatible with the Apache-2.0 license.

https://www.apache.org/legal/generative-tooling.html

nginx welcomes AI and advertises itself as ready for AI, and it takes no anti-AI-code stance. It's most likely already tainted.

https://www.f5.com/de_de/products/nginx.

This basically leaves you with no Web server guaranteed to be 100% free from AI-generated code to run snac2 on. But that doesn't matter because it's impossible to build a Web server devoid of any AI code to install snac2 on.

By the way: Mastodon itself explicitly allows AI code if it's disclosed as such, and if its contributor understands it.

https://github.com/mastodon/.github/blob/main/AI_POLICY.md

In other words, next to all Mastodon servers are running

• AI-generated Mastodon code
• on an AI-generated Web server
• with an AI-generated database driver
• on an AI-generated operating system kernel

Log4j Deserialization Bypass Is Real but Not Log4Shell
https://www.cyberkendra.com/2026/08/log4j-bug-report-pulled-researcher.html

#infosec #apache #log4j

[demo] https://files.octade.net/

I drafted a prototype for a PHP server application that automatically hashes and signs files and presents visitors with verification archives containing digital signatures for offline verification. The site allows readers to view, download, hash, and verify signatures of files. Since I occasionally like to publish puzzles and bits of cryptology, I just had to make this to scratch the old itch.

The neat thing about this design is that the current version has zero JavaScript. It uses CSS3 hacks with anchors and URL probing to emulate JavaScript and AJAX functionalities for modal dialogs to present server-side JSON data as HTML text.

When I upload files or documents to the server, the interface automatically presents them to the user in a grid. So now all I have to do is upload files and documents and the server generates the site.

The reader can then click buttons to hash, sign, view, verify, and download files.

GnuPG and OpenSSL Signatures are generated automatically on user demand. The site visitors can download these signatures and the public keys to verify files.

What should I add / change in the application and its interface?

What accessibility components might be warranted?

Should the application parse and present EXIF data, or is that too much?

#PHP #CSS3 #HTML5 #WebDesign #UX #cryptology #cryptography #crypto #signatures #OpenSSL #GnuPG #GPG #PGP #encryption #papers #preprints #documents #SelfHosted #WebLord #WebMaster #WebSerf #NoJS #Apache #CyberSecurity

@cryptography@soc.octade.net

#CISA warns of hackers exploiting #Langflow, #Ncentral, #Apache #Tomcat flaws

https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/

#cybersecurity

#NavajoNation Declares #DroughtEmergency as President #BuuNygren Signs Order

by Levi Rickert June 11, 2026

Excerpt: "Commission members advanced the declaration after reviewing worsening #drought conditions across the region and considering recent emergency actions taken by #Arizona and #NewMexico. State officials have pointed to persistent drought, below-average precipitation, elevated #wildfire risks, and growing impacts on #WaterResources and agriculture.

"The commission also reviewed U.S. Drought Monitor data showing that Arizona experienced its hottest and driest January-through-March period on record in 2026, with extreme drought persisting across portions of #Navajo, #Apache, and #Coconino counties.

"To address the crisis, the declaration recommends that the Division of Natural Resources move forward with drought mitigation infrastructure projects, including repairs to #windmills and improvements to livestock #WaterStorage systems.

"The commission also recommended allocating $6,553,730 from the Agricultural Infrastructure Fund to support drought mitigation efforts, including windmill repairs and related water infrastructure improvements.

"In addition, Navajo Nation chapters are encouraged to activate local emergency mitigation plans and coordinate with Administrative Service Centers, the Division of Community Development, the Department of Emergency Management, and other entities to strengthen preparedness and response efforts."

Read more:
https://nativenewsonline.net/currents/navajo-nation-declares-drought-emergency-as-president-buu-nygren-signs-order/

#ClimateCrisis #ExtremeDrought #Dine #WaterIsLife #NoWaterForDatacenters #NativeAmericanNews