nallerooth

This is such a strange claim from someone trying to sound knowledgable in the field of cyber security (maybe they are, I have no idea who this person is). Even if the exploit would be difficult to use properly, it's not like there's a lack of groups out there trying. Anyone serious about this would consider the fact that a working PoC was reported to the PHP security team. They confirmed the vulnerability and started making a lot of noise about the severity of it, by reporting 2 CVEs and pushing the patch to Linux distros ahead of the official patch release.

Trying to understand what the message of the post is all about, I flipped the whole thing around in my head - and the message is basically "you don't need to upgrade your servers". Which is something someone with a working exploit would say. Or it's just noise on the Internet.

fabiensanglard - thanks for all the wonderful posts about.. everything! While I started reading your blog when it was more focused on old games and C development, I still check it from time to time. I'm always blown away by the level of details you manage to dig up and present - no matter the subject.

From what I've seen it _seems_ the language's creator is not interested in corporate sponsorship. It's been some time since I was interested in Nim, so I don't have any direct references to this claim. A web search would probably provide several examples. It was one of the main reasons why I decided to focus on other languages.

It feels like a really strange thing to say. I've deployed Rust binaries to both Lambda and Fargate in AWS and they've been very performant.

I don't know how it works on Vercel, but on other platforms it usually means that the value will be redacted in logs as well.

I feel the same way - as I suspect a lot of people here do. Nim posts are always upvoted and usually people say nice things about the language in the comments.. but there are few who claim to actually -use- the language for more than a small private project, if even that.

Thanks for all the work done over the years! I've donated to the project many times and it always feels good to support something I enjoy using every day.

> ...but it does look like Mozilla's product management has maintained its laser-like aim at its own feet.

Sadly, this feels very true. I used to donate money to Firefox back in the day, but since Mozilla seems to focus on anything but making Firefox a good -browser- - those days feel very distant.

I think Nim has a good homepage, with some bullet points explaining what the language is all about coupled with several code examples. I'm not saying Nim is better, but I visited the page the other day and thought it was neat.

https://nim-lang.org/

Thanks!

> Self-confidence is good. On the other hand, too much self-confidence means disaster. - His holiness the Dalai Lama

I guess it's true for microservices as well.

I think the wallpaper is minimalistic, elegant.. and boring, which is why I usually end up using a wallpaper from KDE Plasma.

https://store.kde.org/browse?cat=299&ord=latest

This sounds like a really awesome release, well done!

It's the year 2237 and OpenTTD is still in active development. :D

I love this game and I'm amazed at the amount of time and love spent on improving this gem.

That's the piece of information I miss in a lot of those stories. What happened X years later? We all love reading about strange projects, but it's not until someone sits down and writes a blog post about some old, custom system that you get the important insights (X was good, Y didn't work because reasons and nobody ever understood Z).

> Composer is the de facto package manager for PHP. I’ve never seen anyone try to compete with it.

According to common PHP culture, there's no need - since it's already good enough. Instead of re-inventing something you can just move on and get your own sh*t done. :)

(edit: formatting)