https://www.maborak.com/blog Security, runtime behavior and operations. en Fri, 30 Oct 2026 00:00:00 GMT https://www.maborak.com/blog/binance-14-eip-7702-revocation https://www.maborak.com/blog/binance-14-eip-7702-revocation Fri, 30 Oct 2026 00:00:00 GMT security, blockchain At block 26,301,896 the address labelled Binance 14 reset its code to empty with a type-4 transaction. The clear removes the sweeper contract; it does not prove the signing key is safe. A read-only probe for any delegated account. https://www.maborak.com/blog/binance-hot-wallet-transfers-eip-7702 https://www.maborak.com/blog/binance-hot-wallet-transfers-eip-7702 Thu, 29 Oct 2026 00:00:00 GMT security, blockchain Read from a public Ethereum node: an EIP-7702 delegation on the Binance 14 address, a 65-token sweep, and Tether and Circle freezes. Signs that separate theft from an internal move. https://www.maborak.com/blog/zabbix-6-7-mistakes-before-8 https://www.maborak.com/blog/zabbix-6-7-mistakes-before-8 Thu, 29 Oct 2026 00:00:00 GMT observability, infrastructure The upgrade and configuration mistakes Zabbix documented for 6.0 and 7.0, the same traps in 8.0's notes, and a tested 7.0 to 8.0 upgrade in containers. https://www.maborak.com/blog/how-ai-evolved-explained-to-kids https://www.maborak.com/blog/how-ai-evolved-explained-to-kids Thu, 29 Oct 2026 00:00:00 GMT explained-to-kids, machine-learning Seventy years of artificial intelligence for young readers, with a robot guide, a game where you teach a machine, and a quiz. https://www.maborak.com/blog/kaggle-free-gpu-ai-server https://www.maborak.com/blog/kaggle-free-gpu-ai-server Thu, 29 Oct 2026 00:00:00 GMT machine-learning, cost Running an LLM API on Kaggle's free GPUs is a popular hack. Kaggle's session limits make it unreliable, and its terms rule out server farming and third-party use. https://www.maborak.com/blog/spamhaus-sender-guidelines-helo-fcrdns https://www.maborak.com/blog/spamhaus-sender-guidelines-helo-fcrdns Thu, 29 Oct 2026 00:00:00 GMT email, infrastructure Spamhaus now requires forward-confirmed reverse DNS and a HELO name that resolves to the sending IP. A stock Postfix container announces EHLO localhost. https://www.maborak.com/blog/emudhra-ca-key-compromise https://www.maborak.com/blog/emudhra-ca-key-compromise Thu, 29 Oct 2026 00:00:00 GMT tls, security, supply-chain Eight eMudhra intermediate CA keys were generated with almost no randomness. What happened, which root was distrusted, and which clients stayed exposed after browsers were fixed. https://www.maborak.com/blog/argo-cd-october-2026-security-releases https://www.maborak.com/blog/argo-cd-october-2026-security-releases Thu, 29 Oct 2026 00:00:00 GMT security, kubernetes, supply-chain Argo CD 3.3.15, 3.4.10 and 3.5.4 fix four critical repo-server and AppProject flaws. Only 3.3.18, 3.4.12 and 3.5.6 also drop the compromised eMudhra root from the image. https://www.maborak.com/blog/cve-2026-98432-linux-tcp-9-8 https://www.maborak.com/blog/cve-2026-98432-linux-tcp-9-8 Thu, 29 Oct 2026 00:00:00 GMT security, linux, infrastructure The Linux kernel rates it 9.8, Red Hat rates it 5.9, and Ubuntu still lists every maintained release as work in progress. How to tell whether you are exposed. https://www.maborak.com/blog/prompt-cache-misses-cost-leak https://www.maborak.com/blog/prompt-cache-misses-cost-leak Thu, 29 Oct 2026 00:00:00 GMT ai-agents, observability, cost A background agent that fires after the cache expires pays full price to rebuild it. How to read the cache numbers and stop the leak. https://www.maborak.com/blog/npm-pypi-install-scripts https://www.maborak.com/blog/npm-pypi-install-scripts Thu, 29 Oct 2026 00:00:00 GMT security, supply-chain The 2026 npm and PyPI compromises ran through lifecycle scripts and stolen publish tokens. A probe that shows what your install actually executes. https://www.maborak.com/blog/proxmox-ve-9-2-upgrade https://www.maborak.com/blog/proxmox-ve-9-2-upgrade Thu, 29 Oct 2026 00:00:00 GMT infrastructure 9.2 adds dynamic HA load balancing, disarm/arm HA, WireGuard and BGP SDN, and a 7.0 kernel. An upgrade order and probe for an existing cluster. https://www.maborak.com/blog/zabbix-8-lts-inventory https://www.maborak.com/blog/zabbix-8-lts-inventory Thu, 29 Oct 2026 00:00:00 GMT observability, infrastructure Zabbix 8.0 is at release candidate and planned as the next LTS. A probe to record the server, database and frontend state the upgrade depends on. https://www.maborak.com/blog/docker-engine-29-image-store https://www.maborak.com/blog/docker-engine-29-image-store Thu, 29 Oct 2026 00:00:00 GMT containers, infrastructure, security Engine 29 makes the containerd image store the default for new installs, bumps the API, and its 29.9.x line carries a long list of security fixes. https://www.maborak.com/blog/prometheus-3-query-changes https://www.maborak.com/blog/prometheus-3-query-changes Thu, 29 Oct 2026 00:00:00 GMT observability, sre The 3.0 migration guide is a list of silent behaviour changes: regex newlines, left-open ranges, normalized le labels and strict scrape content types. https://www.maborak.com/blog/mysql-8-eol-upgrade-probe https://www.maborak.com/blog/mysql-8-eol-upgrade-probe Thu, 29 Oct 2026 00:00:00 GMT databases, migration MySQL 8.0 reached end of life in April 2026. Three queries that find the accounts, plugins and replication state blocking an 8.4 upgrade. https://www.maborak.com/blog/openssl-4-inventory https://www.maborak.com/blog/openssl-4-inventory Thu, 29 Oct 2026 00:00:00 GMT tls, security, infrastructure OpenSSL 4.0 shipped in April 2026 and 4.1 in October. A probe that finds the OpenSSL builds linked into running services, not the one on PATH. https://www.maborak.com/blog/openssh-10-6 https://www.maborak.com/blog/openssh-10-6 Thu, 29 Oct 2026 00:00:00 GMT security OpenSSH 10.6 fixes a compression side-channel, tightens command-line username handling, and enables a hybrid post-quantum signature by default. https://www.maborak.com/blog/postfix-tlsrpt-mta-sts-dane https://www.maborak.com/blog/postfix-tlsrpt-mta-sts-dane Thu, 29 Oct 2026 00:00:00 GMT email, security Postfix 3.10 adds TLS-RPT reporting for DANE and MTA-STS. What the three mechanisms do, how to enable reporting, and what the implementation does not cover. https://www.maborak.com/blog/dmarc-rfc-9989 https://www.maborak.com/blog/dmarc-rfc-9989 Thu, 29 Oct 2026 00:00:00 GMT email, security The DMARC specification was replaced in May 2026. The pct tag is gone, np and psd arrived, and policy discovery no longer uses the Public Suffix List. https://www.maborak.com/blog/postgresql-19-patroni-upgrade https://www.maborak.com/blog/postgresql-19-patroni-upgrade Thu, 29 Oct 2026 00:00:00 GMT databases, migration, sre PostgreSQL 19 RC1 is out, RC2 lands 12 November and general availability is planned for 19 November 2026. A planning checklist for a Patroni-managed cluster. https://www.maborak.com/blog/tls-certificate-lifetimes-2026 https://www.maborak.com/blog/tls-certificate-lifetimes-2026 Thu, 29 Oct 2026 00:00:00 GMT tls, security, infrastructure The 200-day maximum is already in force, Let's Encrypt moves to 64-day and then 45-day certificates, and hardcoded renewal intervals need to change now. https://www.maborak.com/blog/nginx-october-2026-security-release https://www.maborak.com/blog/nginx-october-2026-security-release Thu, 29 Oct 2026 00:00:00 GMT security, infrastructure Five nginx CVEs fixed in October 2026: the affected directives, exposure conditions, fixed versions, and how to confirm which build is actually serving. https://www.maborak.com/blog/cve-2026-109618-php-oom https://www.maborak.com/blog/cve-2026-109618-php-oom Thu, 29 Oct 2026 00:00:00 GMT php, security How PHP's OOM bailout corrupts request state, why mod_php and FPM differ, and how to verify a patched deployment. https://www.maborak.com/blog/cve-2026-109619-php-worker-state https://www.maborak.com/blog/cve-2026-109619-php-worker-state Thu, 29 Oct 2026 00:00:00 GMT php, security The producer-consumer lifetime bug behind CVE-2026-109619, conditional FPM exposure, and a practical worker-replacement and configuration review. https://www.maborak.com/blog/cve-2026-115560-php-session-serialization https://www.maborak.com/blog/cve-2026-115560-php-session-serialization Thu, 29 Oct 2026 00:00:00 GMT php, security The configuration and application-code conditions behind PHP's October 23 session advisory, with a source audit, mitigation placement and regression plan. https://www.maborak.com/blog/howto-disable-seo-urls-in-spinning-addon https://www.maborak.com/blog/howto-disable-seo-urls-in-spinning-addon Mon, 10 Jun 2019 00:00:00 GMT email Turn off the Spinning addon's SEO URL rewriting by changing one constant in its configuration file. https://www.maborak.com/blog/add-subscribers-using-interspire-api https://www.maborak.com/blog/add-subscribers-using-interspire-api Tue, 01 May 2018 00:00:00 GMT email Import or add subscribers to any Interspire Email Marketer contact list with the XML API exposed by the Installer addon.