YHacker Newsscreenshots

Screenshot of ncsc.nl: Dutch National Cyber Security Center is Offline because it uses PHP

First screen, captured 5 days ago.

Dutch National Cyber Security Center is Offline because it uses PHP

More from ncsc.nl →

Notice from the Dutch National Cyber Security Centre that its website is temporarily offline as a precaution due to PHP vulnerabilities, with a patch expected at 16:00.

What HN thinks

Cybersecurity agencies across Europe briefly practise the most secure posture of all: being unplugged.

Static sites would have survived
Mostly static public sites, especially security agencies, should be served as static HTML or cached so a PHP bug doesn't take them down.
Static isn't realistic for editors
Non-technical users need an easy CMS like WordPress or Drupal, so taking sites offline to patch is a reasonable response rather than a failure.
PHP's track record is the problem
Some blame PHP's legacy and C-closeness for recurring critical flaws, while others argue every platform has vulnerabilities and PHP is boring, proven tech.

Consensus: Taking sites offline until the scheduled patch lands is broadly seen as sensible, and Cloudflare's WAF rules are only a stopgap; patching is still required.

Recommended in the comments

Remark42 ↗ (tool): Adds comments to static blogs with little spam in practice.
Cecil ↗ (tool): Suggested half-jokingly as a PHP-powered way to produce static HTML.
Varnish (tool): Could keep a brochure site served from cache even with PHP taken down.
Cloudflare WAF (service): Deployed managed rules to mitigate the PHP exploit until patching.

Summarised by Claude from the comment thread 3 days ago.

Points: 240
Comments: 94
Posted: 2026-10-21 by jacquesm
Category: Security

php ncsc netherlands vulnerability government-websites

All captures:

Looks similar

Screenshot of diypresso.com: DiyPresso: DIY Espresso Machine

DiyPresso: DIY Espresso Machine (diypresso.com)

275 points by ragebol 2 years ago | 258 comments

Screenshot of mailman.nginx.org: Nginx has moved to GitHub

Nginx has moved to GitHub (mailman.nginx.org)

193 points by doctorwhat 2 years ago | 121 comments

Screenshot of reticulum.network: Reticulum Is Unstoppable Networks for the People

Reticulum Is Unstoppable Networks for the People (reticulum.network)

65 points by vyrotek 2 years ago | 35 comments

Screenshot of mailman.nginx.org: Nginx Security Advisory

Nginx Security Advisory (mailman.nginx.org)

129 points by TimWolla 2 years ago | 21 comments

Screenshot of gnunet.org: RFC 9498: The GNU Name System

RFC 9498: The GNU Name System (gnunet.org)

20 points by simjue 2 years ago | 1 comments

Screenshot of reticulum.network: Reticulum – Decentralized Mesh Network

Reticulum – Decentralized Mesh Network (reticulum.network)

209 points by sudo_cowsay 2 months ago | 66 comments

Related stories

Screenshot of netherlands.postsen.com: Security.txt file now mandatory for Dutch government websites

Security.txt file now mandatory for Dutch government websites (netherlands.postsen.com)

321 points by pseudotrash 3 years ago | 139 comments

News aggregator article reporting that a security.txt file is now mandatory for Dutch government websites.

security-txt vulnerability-disclosure dutch-government netherlands

Screenshot of nldigitalgovernment.nl: Soft launch of open-source code platform for government

Soft launch of open-source code platform for government (nldigitalgovernment.nl)

525 points by e12e 6 months ago | 119 comments

Dutch Digital Government news item announcing the soft launch of an open-source code platform for government organisations.

open-source digital-government netherlands code-hosting

Screenshot of dawo.community: Dutch governments builds alternative for Microsoft based on NixOS

Dutch governments builds alternative for Microsoft based on NixOS (dawo.community)

875 points by fjfaase 1 month ago | 518 comments

Homepage of DAWO, an open community of government, industry and society building a digitally autonomous workplace for the Dutch government.

dawo nixos digital-sovereignty dutch-government

Screenshot of politico.eu: Netherlands blocks US takeover of vital digital supplier

Netherlands blocks US takeover of vital digital supplier (politico.eu)

530 points by vrganj 5 months ago | 209 comments

Politico Europe news article reporting that the Netherlands blocked a US company's takeover of a vital Dutch digital supplier.

netherlands foreign-investment-screening digital-sovereignty acquisitions

Screenshot of nlnet.nl: Open Source Projects Receive Funding to Reclaim the Public Internet

Open Source Projects Receive Funding to Reclaim the Public Internet (nlnet.nl)

422 points by edent 1 year ago | 192 comments

NLnet Foundation announcement that 42 free and open source projects were selected for funding in the October call of the NGI Zero Commons Fund.

nlnet ngi-zero commons-fund open-source-funding

Screenshot of cpr.dk: Denmark data breach exposes 8.8M people's personal data

Denmark data breach exposes 8.8M people's personal data (cpr.dk)

445 points by clan 21 days ago | 321 comments

Danish Central Person Register (CPR) notice that unauthorized access via a company's legitimate lookup access exposed names, addresses and CPR numbers of about 8.8 million people.

data-breach cpr denmark personal-data