janmo

Same with the recent PHP vulnerability Debian had the patch ahead of time. Ubuntu had it many hours later...

even the security.ubuntu.com mirror doesn't have it yet

They had plenty of time to prepare for the release, what a shit show

They haven't even been able to release the patch on time. Ubuntu still hasn't it

They had almost a full day to prepare for this...

Still no release for Ubuntu... They are already half an hour late. Debian got the patch almost immediately...

apt-get update + apt-get upgrade fixes it on Debian, but not on Ubuntu for now

They gave too many details just by saying that it affects PHP 5 and later and is an RCE CVSSv4 9.2

This lets an AI agent look at the changes made from PHP 4 to PHP 5 and it also lets the agent guess what type of vulnerability it must be.

They should have shut up, released a new stealth PHP version and told everyone to update ASAP. They gave way to many details ahead allowing some AI agents to find the vulnerability within half an hour...

Cloudflare: "We are seeing early attacks emerging and are updating mitigations as new vectors show up."

https://x.com/dok2001/status/2112811965735202970

When will they finally release the patch?!

So it looks like Hetzner is doing the same thing OVHCloud did with EncroChat and SkyECC. But hey, we have GDPR, keep your data hosted in the EU it is very "safe" there (ironic).

https://en.wikipedia.org/wiki/Shutdown_of_Sky_Global#Communi...

EDIT: Based on German law this certainly is not a lawful interception but one made by an intelligence agency.

His robots.txt explicitly allows bots including LLM bots to scrape his site

> I closed port 443

> Now closing https service is obviously just a temporary fix

Probably the best starting point would be to edit the robots.txt file and disallow LLM bots there. Currently the file allows all bots: http://acme.com/robots.txt

And at the bottom:

What can I do?

Please try again in a few minutes.

The only way to temporarely get rid of my tinnitus (completely gone or at least very reduced for up to 30 seconds) is to listen to this beep tone from 8 to 12 KHZ: https://www.youtube.com/watch?v=qNf9nzvnd1k

apparently the phenomenon is called residual inhibition. If only there was a way to make this work permanently...

Depends what you are looking for. Is it real time quotes?

IEX data is now free after 15minutes instead of 15milliseconds.

One option is the Databento US Equities Mini for 200 USD per month. If I understand it correctly it is some sort of weighted average between multiple exchanges.

Hopefully they will provide cheap market data like IEX did in its beginning.

It is a very subjective take indeed

Looks like they trained it on the 4Chan /pol dataset

Where/what object would you like to use the company name field in?

> For the Invoice, but also to clearly identify the customer, for a B2B customer you have the company name and the name of the person in charge for the subscription. Both are essential. Currently Stripe only has a "name" field.

Can you describe a situation where you need to do an invoice correction on subscriptions (ie how do you handle this now)?

> The customer put a wrong address, a wrong or missing VAT number. Then a few months later the accountant notices the mistake and you have to issue a correction.

Currently Stripe is clearly focused B2C, but I am doing B2B.

I was in the same situation as the OP 2 years ago and because of the migration nightmare I kept both accounts, new subscriptions would occur in the new account while old ones would stay in the legacy account.

Stripe has many issues, the missing migration is one. In my case there is alos the fact that there is no "company name" field and there is no way to issue an invoice correction for subscriptions... This makes it problematic for B2B use cases. I have alrady contacted them multiple times to ask them to add these very basic features but to no avail.

Had I known this before I would probably not have used them.

The passports contain a digital signature and a DSC (Document Signing Certificate). This DSC is signed by a CSCA certificate which you can download from the ICAO Public Key Directory. Link here: https://pkddownloadsg.icao.int/

After vibe coding now we get vibe books

Photopea is really amazing, we even use it professionaly

It is a bit disappointing, almost every feature I click it says that it is still in develoment.

It is quite irresponsible to come out with news articles like this when it is known that overall alcohol has very negative effects on the health.

Not surprised something like this happened, one of the persons behind Abracadabra had been outed as being Michael Patryn, Co-founder of QuadrigaCX.

https://www.reddit.com/r/CryptoCurrency/comments/sdsp0i/shoc...

The timeline is way too suspicious and the wording too broad. The encrypted container was decrypted only 8 days after the server was "imaged".

The term cryptanalysis is very, very broad, it could be anything.

The Freedom Hosting operator was in the process of moving his servers away from OVH, and they somehow found the last server remaining at OVH.

If these takedowns were lawful, why do they lie and hide the details about how they did it?

Read carefully the sections related to the encrypted containers and the OVH servers and tell me your opinion: https://www.justice.gov/d9/press-releases/attachments/2019/0...