StephenA

Yes, I know. But he must know who he is using for his cloud storage. He's asking people to trust documents to an unknown supplier. Do we know how he's ensuring security on those documents? Does everyone using his app have their own secure account in the cloud or is it all lumped together in one area with the security implementated in the app?

Yes I do know about datacentres, I have to because of my job. The point is there is no indication of who runs the cloud he's talking about, or where it is, or how secure it is

Yes but whose data centre(s) and where is it?

It apparently can be used for up to 5 boats. What would be better is 5 installs sharing a boat so I can have it on my phone, my tablet, my brother's phone and his tablet and all of them see the same thing. But as you can do that with Google docs and a shared calendar.....

Also you can't leave it on the boat where others can use it like you can with a log book or a folder full of important docs

10 quid a year for what exactly? We use our engine hours and a log book for engine work. As for everything else the Google calendar works well "Cloud storage" yes but whose and where

I think they thought it was a potential risk but weren't sure how it could be exploited or how they could stop it so they left it. It's very old code which no-one has revisited in years. It does sound like it's very hard to exploit from reading up on it, in that it needs a certain set of events in a certain order which then causes an overflow in the PHP session which you can then exploit. Ive not heard of any actual successful exploitation of it in the wild.

The only real fix is to get the php patches in place. Not sure if they will push them out automatically or will leave that bit to you - I think that depends on how much control you have over your server.

I suspect that without AI it would never have been found. It's going to be interesting to see what other ancient security holes AI is going to find in various internet facing technologies over the next few months

Don't forget the Shock Horror titles even for the most mundane and boring of subjects

Conditions on the ground?

that seems to have very thin cables. The set I have for my Volvo D5 are extremely chunky.

And you still have to do the winterisation.

3diii is an interesting one. Our water pump started to just not work well with low flow and a reluctance to turn off. Took it out and opened it up and it wasn't scale or anything from the tank as we had an inlet strainer, it was basically furred up with limescale.

We had a prv valve stick and what was left in the water tank got pumped into the engine bilge ( not the drip tray) without us noticing. Moved the prv vent into the rear cabin bulkhead so it vents into the deck drain in plain sight