[南方朔過世享壽78歲 新新聞創辦人、長年針砭時事⸺中央社](cna.com.tw/news/acul/202506100…)

"資深媒體人、政治評論家南方朔（本名王杏慶）於9日過世，享壽78歲，南方朔生前關心時政，長年針砭時事，曾參與創辦「新新聞」雜誌，過世消息傳出，許多媒體人及藝文界人士同感哀悼。"

#DIYDay Got the last sockets fitted, the light switch and the new ceiling rose.

The only thing that didn't throw up issues were sockets, which swapped over no problems.

The light switch... fuckwits had extended the switch for a dimmer and used WOOD SCREWS to secure the extender box to the wall box... ruining the threads on the wall box.

So it took about 30-40 mins just to screw the new switch in place and required me ruining half a dozen screws trying to re-tap the thread good enough to secure the switch... luckily I'd bought a bag of replacement screws and had plenty of spares to sacrifice.

The light fitting... well that's another story... and took twice as long as the bracket for the new fitting didn't fit the base plate on the ceiling and would have required 'adjusting' with a grinder to work.

So we bodged together some parts from the old shitty chandelier with the new and that resolved it.

The light extender/splitter works great and just screws into an E27 fitting.

All I need now is a nice lampshade.

Went to install the shower door... and it's not a simple job... Certainly more complicated than expected.

So that can wait for the plumber to do when he swaps the tap out.

But that's another job ticked of the list today.

If you run Siemens gear, they published their #patchTuesday advisories. Nothing too surprising there: siemens.com/global/en/products…

But I want to mini-rant on them and other ( mostly industrial ) vendors a bit.

For those unaware, it is common for industrial vendors to sell an OT / ICS / WTF firewall product. They're usually just a Fortinet or PAN or something like that packaged in more robust hardware and maybe a little bit of extra glitter to hide the grift. But they don't get updates directly from the OS vendors. They get them through the downstream vendor.

Okay, fine. That's not unusual for whitelableing things like this. But there are two ( okay, more, but I'm pointing out two ) big problems here:

• The OT vendors are generally super slow with releasing patches, even for critical vulns.
• The communication from the OT vendors is horrible. Not only are they generally really slow to publish advisories, they tend to do so in an obscure way that makes it difficult to manage the vulns as customers.

Today's example is from Siemens: cert-portal.siemens.com/produc…

Rather than releasing a new security advisory for new vulnerabilities as they're published, they append the new ones to an existing advisory. This means that if your team mitigates the vulnerabilities in SSA-354569 you have to keep track of the versions of that advisory and the individual CVEs themselves.

It may seem like I'm being bitchy here, and I kind of am, but shit like this makes it really hard to keep clear comms with the asset owners so they can keep their gear as patched as possible.