generally agree, although mine's battery health has been sitting at 80% for what seems like ages now.

I won't spoil the ending for you, then.

it is hell. add to that already dealing with panic and anxiety disorder and the lack of education on benzo withdrawal symptoms. what an awful, lonely time. It seems nearly impossible for people who haven't had this experience to sympathize with it, including medical professionals.

I see you!

Mental health issues are an invisible hell. I have so much more empathy after being out the other end of bzd bs.

some people are terrible at it and can only consider another person's experience through relating it to their own.

this should be required reading in medical school.

if it makes you feel any better, the official dockerhub images aren't ready yet either.

If you mean docker official images, it's just the "community" maintaining it, eg "some dudes". By no means should you consider it a mechanism to get timely security updates, I've seen horrible lag on that before.

Most of docker is like this. Images provided by volunteers, and not related to the project. Using docker images you don't maintain yourself, and at least don't upgrade yourself, is not the best recipe for security.

(It's pretty trivial to build your own)

> If you mean docker official images, it's just the "community" maintaining it, eg "some dudes".

This is false. The Docker Official Images team (i.e. the folks with write access to the docker-library/* organization) are Docker employees.

"Official" docker images are maintained by "The Docker Community", not by the company. It literally says so on the php "official" image.

I wasn't aware of that. So I guess it's generally better to just use plain debian images and just install the required packages with apt.

There are different approaches and it all comes down to who you trust. I don't think there's universal answer. If you have money, find image provider who's serious about security and hopefully they'll provide patches images quickly. Otherwise using Debian packages is a good default I think.

Honestly I don't even understand why so many docker images prefer to build software from sources, rather than just installing them from debian repositories.

> I don't even understand why so many docker images prefer to build software from sources, rather than just installing them from debian repositories

Because Debian uses older relases and a lot of custom patches. One example: Nodejs still doesn't have Typescript support in the Debian packages.

Distribution packages vs. official build from source has both pros and cons.

And if you're using a docker package it's often JUST BECAUSE the host Debian/Ubuntu server is out of date for things you need, and Docker's the easiest way to "patch" that.

welp, I guess I should have done my research into what "docker official images" actually means.

They had almost a full day to prepare for this...

I'm starting to suspect that they actually got the notice the same time we did, because if they got the patches there should be no reason it wasn't already built and ready to go (unless they're scared that "our build servers are public and everyone will know" so they literally held everything off until the release which seems so counterproductive as to be ... well, open-source silliness).

one of the more entertaining PRs I've seen

Enough spam comments to create a huge blacklist of misbehaving github users.

Have we ever seen the "get ready for a security release tomorrow" email before?

https://www.php.net/archive/2026.php#2026-10-20-1

Many vendors do it, but on a set schedule "patch Tuesday" and some will release vague "mitigation steps" but honestly those usually come with the patch.

Yes, it's pretty common with large open source projects in the server space. Makes sense when releasing a fix also means releasing information that will let others exploit the bug so users need to be prepared to install the update quickly or take other measures to protect themselves.

I thought I read somewhere that their entire catalog is rendered and they generally don't do photography at all anymore.

I honestly haven't seen any behavior like this. I use two external monitors and use different spaces heavily.