Operyl

Atlassian products (Jira Server) are no longer supported, and their more Enterprise offering dies in 2029, so everything is ending up in their cloud now yeah.

> my now former CPA

Assume yes, fired.

There are backports already.

Look, at the end of the day, every major security researcher is going "oh shit" and no amount of tweaks to your configuration is going to limit the blast radius in a way that will actually matter. You're going to need to update PHP, that's the _only_ solution to this problem.

The current PoC in the public gets there via that method, and even then you don't need to call system() alone to cause hell on a host...

If your PHP application accesses a database, you've got exfiltration, it doesn't matter in this case. Unless your PHP application is just echoing non sensitive data (i.e. rendering md files)...

I can guarantee you that it's not because someone left system() enabled, it's much lower than that.

I love the "affects PHP... 6" given we never had an official 6 release haha.

It's a RCE bug, it does not matter if you disable php functions. It's not arbitrary PHP execution, it's an exploit chain resulting in arbitrary code execution.

I don't see any details of the vulnerability leaked except "code execution"...?

Where?

My municipality does! Guess what they still don't really use... most of it still ends up on X exclusively.

The biggest frustration for a lot of people is that their municipalities use Twitter almost exclusively to communicate with their constituents, it _sucks_. I've pleaded and begged my city and county to have some other form of communication, in addition to Twitter/X, to mass distribute information.

It is pretty easy to do plugins and custom themes in Discourse, most look the same just because the UX is good enough and we don't live in an era of hyper customization that early 2000s forums did. A good example of a pretty customized Discourse install is the Blizzard forums: https://us.forums.blizzard.com/en/blizzard/ and Unreal: https://forums.unrealengine.com/categories?tag=unreal-engine

A woman can dream!

God, I'm hoping that this phraseology changes with the new CEO, I am so tired of that overused statement haha.

Especially given, you know, the minority share that Deepmind bought a few months back haha.

Welp, once this happens I’ll just migrate over to Firefox. I tried for one day to browse the internet without an ad blocker and I just couldn’t, it was awful.

It's all fun and games until the model is smart enough to figure out privilege escalation, i.e. a lot of people don't realize Docker enabled on a regular user is enough for privilege escalation if you "follow the tutorials."

That's actually a common scam that happens, too. It's a constant problem in my city, and while I already have the app downloaded on my phone others do not and find themselves getting nasty bills in the mail months later.

I really just want the Frame, I'm already convinced (before the price hikes) that the Steam Machine was going to be way too high based on their comments to press.

This is destroying me, none of my web browser extensions will talk with the local 1password application. Why the fuck does it need to talk to the internet to talk to my local application? Argh!

Haha! I did something similar, and went as far as integrating a label printer (ZQ620) and use a TC53 with the barcode scanner to sub organize quickly :x.

They already are, I've been dealing with Vietnam and Korea residential proxies destroying my systems for weeks, I'm growing tired. I cannot survive 3500 RPS 24/7.

I feel like I’m the only one without major issues here. The autocorrect works, the keys I tap are right. Going to Android with the Android Keyboard drives me nuts.

Target does tend to build cases, up to a certain point, so as to not waste LE time. But it’s not as much as people tend to think. If you steal a candy bar or a loaf of bread it’s just not worth it, but more? A TV? Yes.

Sadly not a whole lot you can do. You could try and gain some legitimacy by getting your recipe added to homebrew but otherwise no clue. I wasn't laughing at it at the author, more so just the irony of the situation.

This tool makes providing evidence for SOC2 slightly easier, and I do wish I had had this when I started my SOC2 journey at $dayJob.

Hahaha, I love it. But also, a security tool you're going to be using against your core infrastructure should probably not be a random binary that you also tell users to strip quarantine off of to use: `sudo xattr -rd com.apple.quarantine`. Sigh at the state of running stuff on macOS sometimes.

All joking aside, this looks great. Is there a plan to allow for "custom checks" with custom rules users create? Think of "never should happen" access from a to z, etc.

Did you try putting it in your global config file?

Windows: ~/AppData/Local/pnpm/config/rc

macOS: ~/Library/Preferences/pnpm/rc

Linux: ~/.config/pnpm/rc