system2

You are talking about the company side of the issues. We are talking about the specific issue that is concerning our ubuntu servers. What is the security bug, and how can someone exploit it? Where is that written?

Weird, they did not have J-100s and AQ-500 images in the 1980s collection, but I can find them on the internet.

Also, in the 2020s, they seem to have given up on watches.

Is it dumb because you don't know the names of the episodes? There are hardcore trekkies who can list all the episode names easily. Maybe this game is for them?

I never understood the appeal of cursor.com. Isn't Claude Code on the CLI enough? Are people really lazy or incompetent to resort to using other companies for the same AI models?

I am going to watch TNG once again for him starting now. I am sad.

It works with an ad blocker just fine. Also, torrent and Yandex links are perfectly fine as well.

7.9 x 4.9 x 9.3 in build volume is small. Since it is resin, does it really make a difference to make the build area bigger without upgrading the hardware, just by increasing the frame size?

That's exactly what I am doing. I have a Dell R740 with 96 cores and 512 GB of RAM, and RAID 10 with 16 SSDs. All of my machines connect to it via Tailscale.

I agree. They renamed the servers "flexible". Ui is trying to sell products nonstop. They are trying to squeeze the most out of people with their shitty fear tactics. They are going downhill.

DigitalOcean ruins everything they acquire. Just like they did it to CloudWays.

I disagree. AI is supposedly a more disruptive technology than a simple e-commerce website created by a single dude.

I literally said it in my first comment, which is large-scale data crunching for labeling and categorization.

You think too negatively about its use. My company definitely needs it desperately.

Maybe it is the bottom now?

I bet it is large-scale data crunching for labeling or categorization.

AI is built by liberal developers in general. Most developers are left-leaning, and AI answers like a hardcore democrat. This has always been the case.

PHP is dead to me. Countless WordPress and Magento hacks, countless lost customers because of these issues. I am done, and I will spread the hate with passion. I wish I had never learnt this garbage and spent more time with Python and C.

This is not a slap but a lick on the wrist.

Not a trio, but Magento beats all of these 3 combined when it comes to being an exploitable POS.

We have 4 servers with CloudWays. 2 of them are still not patched (20 hours since the patch was released). We cannot control the PHP version for our customers. Sucks to suck.

It took 8 hours for CloudWays (DigitalOcean) to apply the patch. Big companies suck at responding to major stuff like this.

It will take time if the PHP sites have a database with a business model built on PHP. But with agentic coding, at least it is easier. I already transferred all wordpress static sites to pure html.

While at it, create a custom firmware for the BIOS to utilize the CPU more.

Do you remember the last time Perl had a flaw like this that took every bank down? I don't.

At home as in home hardware.

I was able to bring it to the point of memory corruption. It is 3 am where I am now; I will continue in the morning. As a precaution, I configured .htaccess rule.

  # BEGIN php2shell-mitigation
  <IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteCond %{HTTP:Content-Type} multipart [NC]
  RewriteRule .* - [F,L]
  </IfModule>
  <If "%{HTTP:Content-Type} =~ /multipart/i">
  Require all denied
  </If>
  # END php2shell-mitigation

I added a rewritecond to ignore multipart before php-fpm receives anything. I did a similar thing for nginx servers. Also in .user.ini added "session.upload_progress.enabled = Off".

These two seem to do the trick, but again I am not 1000% sure until tomorrow morning's deeper dive. My eyes are burning, and I can't sleep because of the stress this exploit.

I was able to cook up something in less than 10 minutes and tested many sites. There is a page with enough explanations to do it.

A 9-figure business with PHP is mind-boggling.

I am used to Python. Hard to switch to something else until I am forced to. I am trying to manage agentic coding at least to the point where I can identify bugs with my own eyes instead of purely believing the LLMs. I know I will cheat and let an LLM take over the entire Rust app if I tried.

God damn Claude (Opus, Fable, either) is not even helping because of their god damn shitty safeguards. Thank you, Anthropic, for letting bad guys win. I can't tell you how much I want open-weight models to work at home that can handle this type of work in the future without bullshitting about safeguards.