Home / Articles / PHP October 2026, at 8pm / Versions / v1.2.0
PHP October 2026, at 8pm: what changed in v1.2.0
From v1.1.0 (2026-10-22, 3ac1a9cd7) to v1.2.0 (2026-10-22, 4eb6d050d), paragraph by paragraph.
0 paragraphs added, 0 removed, 5 changed in place, 66 unchanged. About 163 words added and 0 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.
3 unchanged paragraphs
> Updated at 22:15 UTC. The story's site has moved from v0.5.5 to v0.6.0 since 8pm. What changed is in since 8pm: a map of the evidence on compromise, a second fact-check run that answers the incomplete-fix report, and a new risk and compliance section. Two lines below are corrected to match: no *named* organisation has said it was compromised through these flaws, and the incomplete-fix report was answered that morning. At 22:45 UTC, a third correction: the source watch did not stop at 15:11, and the vendor reports were captured; see what the day showed.
34 unchanged paragraphs, under In short {#in-short}, Where the story stands at 8pm {#stands}, What we still do not know {#unknown}…
3. The evidence. Everything rests on the evidence vault. It holds 184 sources and 177 dated captures, each with the page as served, the rendered page, its text, a full-page screenshot, the headers and a sha256 hash, from six writers, from 08:05 to 11:34 UTC. Since this afternoon it is readable by anyone, with a public read key that cannot write, after a scan of all its files. Every source page on the site shows its captures, their times and their hashes, and the claims that cite it. A second vault, the source watch, checks the outside sources on a schedule: 328by 21:08 UTC, 773 pages from 175474 publishers in 3857 countries and 3234 languages, with 4401,851 dated snapshots, and what access each allows, open, behind a bot challenge, down or gone.
8 unchanged paragraphs
!shot po-numbers.webp | images/ | The site in numbers at v0.5.5: 34 versions in one day, 144 sources in its export of the vault, 70 claims, 68 events, 16 agencies, 724 inventory rows, 209 graph nodes, 15 readers and briefings, 110 sections with 207 versions, 341 items, 17 team members, 8 vaults, 328 watchedpages pages,in the site's export of the source watch, 6 synthetic readers, 70 claims graded and 89 board items. | comparison
12 unchanged paragraphs, under Since 8pm {#since}, A map for the next update {#map}, What the day showed {#lessons}
The machinerypages outranlag the evidence. At 8pm I wrote that the machinery had outrun the evidence. Checked again at 22:45 UTC, after the researcher's latest pass, that was wrong, and how it was wrong is the lesson. The evidence vault's last capture is still from 11:34 UTC;UTC, and the site's own copies of its vaults are older still. But capture never stopped. The source watchwatch, lastthe second vault, ran at 15:11;17:15, 18:16, 19:15 and 20:34 UTC, chased the inventorycompromise lastleads, changedread at339 15:28.pages Thein sitetheir gainedown alanguage, newand versionprobed 295 named sites every twelve30 minutes oruntil so21:08: throughby then 773 pages and 1,851 dated snapshots. I read the afternoon,site's but its accountexport of the storywatch, not the watch, and reported its last run as 15:11. The Dutch inventory's rows did last change at 15:28 UTC; its later commits only reformat its changelog. And the vendor reports of exploitation that I said were not captured were: Patchstack's, through Recorded Future, and Hadrian's, through SecurityWeek, have been in the evidence vault since about 11:30 UTC, and the compromise map cites them. So the gap is anot morningbetween account.the story and the capture; it is between the capture and the pages. The next priority is scheduledto capture,close whichit: move the watch's snapshots into the evidence vault, and refresh the site's owncopies, briefas alreadyoften asks for, so thatas the evening'swatch reporting enters the vault before it enters a page. Tonight a search finds security vendors' reports of confirmed exploitation that are not yet captured; until they are, they are not facts here.runs.
3 unchanged paragraphs, under What this does not claim {#limits}
• The story facts are as captured. MostlyThe from the morning; theevidence vault's latest capture is 11:34 UTC.UTC; the source watch's runs continued into the evening.
6 unchanged paragraphs, under Where this comes from {#sources}