eMudhra CA bust and PHP2Shell show shipping fast isn't operating well
rseroter · x · 2026-10-28
A Syntasso blog post uses two security events from one week to argue that platform engineering's real test is day-2000 operations, not provisioning speed:
- CA eMudhra's intermediate keys turned out to be recoverable in milliseconds, so anything still trusting them can be tricked into accepting forged certificates; the author spent hours scanning their own images to purge the trust chain.
- The same week, PHP's PHP2Shell vulnerability hit; PHP powers 70% of the web, and early counts suggest nearly a million hosted versions will never get fixed.
Core argument: money and risk live in day 2 and day 2000 — patching, upgrading, proving security posture, and clean decommissioning. Every templated environment is a permanent liability. A broken chain of trust is the cleanest test of a platform: when a fix exists, how does it reach everything you've already built, and how long does that take?
More from Infra
- Standard Kernel and CoreWeave auto-optimize LLM inference: up to 63% more traffic for GLM-5.3 — anneouyang · 2026-10-28
- IBM lays out Db2 AI roadmap: 3x query speedups, Genius Hub, watsonx integrations — craigmullins · 2026-10-28
- DeepSeek v4.1 hits 340 tok/s single-stream locally; 700+ tok/s claims called benchmark tuning — TheZachMueller · 2026-10-28
- Mac Studio M3 Ultra 512GB for local LLMs: 20-90 tok/s, and how to decide if it's worth it — rez0__ · 2026-10-28
- Cua benchmarks Mac-native agent sandboxes: 235ms boot, 448 idle Spaces on one Mac Studio — TianbaoX · 2026-10-28
- UCSB Red MicroLEDs Hit Record 20.8% Efficiency, Stable at 200°C — ninamiolane · 2026-10-28