If you only tolerate eggs and do not like them I would not recommend anything that tastes like more egg than an egg.

I’ll try damned near anything

Doubt.

Are you saying that because you don’t like century eggs or are you just judging by looking?

It tastes like an eggy egg. If you like the taste of eggs, you would like the century egg. Its also not eaten whole like this, its usually cut up and added to congee.

I would eat a century egg over a whole raw onion any day.

this https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html

I was planning on doing other work beside patching servers today.

This plus the php thing and everything I was planning on doing today is out the window 😖

anytime friend

The real research: https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

Here is the boiled down points from this

1. you open a page that has an ad served from Discovery-Tech ad inventory

2. the ad has a standard script in to that calls back to the home server and passes your advertising ID (cookie ID on desktop or mobile ID on mobile) plus your IP

3. there is a third party that has compiled a list of ad ID + IP that effectively de-anonymizes users. This is used to target specific people. The info passed by the ad is compared against the target list. If there is no match to the target nothing further happens.

4. if a match is found it returns javascript that runs on the page. It finger prints the device then it checks for an exploit.

5. if the exploit it is looking for is found the exploit corrupts memory in the rendering engine, achieves native code execution, escapes the sandbox, and installs the spyware.

And, yes, ad blocker software would stop this. If the ad cannot render it cannot call back to the mothership. The only exception to this would be if the ad was served first party, like the website you were visiting was also hosting the ad. Or if you are on a device using a browser that is part of a app that does not have ad blocking, like the built in browser for instagram.

Here is what they did not say

We don’t know which browser, OS, or application vulnerability was used at Al Jazeera. It could be a unknown zero day one or a one that is known but only works on certain older versions of software.

Adding in a standard YSK how to delete your advertising ID from your mobile device.

Yes that is the one.

It is settings then interface and there is a toggle for “Notify me about blah blah” - turn that off