ferngodfather

No, no don't let all of that distract you. We gotta hype this. This is the new SSH2SHELL dude. Have we registered the domain yet? I'm scheduled on Fox News tomorrow.

I get it to a point because it can be a chicken and egg situation sometimes, but there has got to be a better way.

Done, thanks!

I am usually against shameless self promotion but this is actually pretty cool

This is great to say with the benefit of hindsight but nobody is changing the underlying language of their well established product for literally no reason.

And that is even with the assumption that other languages don't have issues - they do.

You just need to implement an SSH CA. You can roll your own. Vault has an enterprise one. StepCA is suitable for smaller orgs.

All the benefit of the core SSH protocol as it's just key signing. It's honestly underrated.

Wikipedia has blocked it for years. Glad everyone else is finally getting around to it.

> This of course means that these attempts would succeed for anyone that was whitelisting Cloudflare IPs but blocking others.

No, the ranges Cloudflare tells you to whitelist are only their proxy ranges. Workers and all the other junk comes from other ranges that won't be whitelisted.

Of course it's a different matter if you're just whitelisting their AS.

Yeah, fuck them all and Calif in particular

"it's not claude"

CVSS scores are a bad measure anyway

And yet it seems all their forewarning did was lead to the proof of concept being leaked many 'valuable' hours before.

I've said elsewhere I am sick to death of reading AI written "security disclosures". Even for genuine issues, it just saps my motivation to fix them.

That said, PHP team handled this poorly. How does letting everyone know so they can "prepare" help anyone at all. It just creates panic.

I could never get either working sadly.

flaresolverr even had an open issue or similar that acknowledges it's basically dead last I checked?

Because 1337 is behind Cloudflare meaning the Sonarr stack can't use it properly

I'm glad someone actually took the time. I've been running into this for weeks and it as thinking to myself isn't this a rather silly and old trick to be bringing back.

Mainly with new Mobland episodes.

I reported a fake software update advert on YouTube. The report was declined. I appealed, and that was also rejected.

They couldn't see anything wrong with a maliciously fake software update advert.

Yeah give me a vuln and I can make it anything between a 2 and 8 quite easily. I routinely see 10s that are "Critical 10.0 CVE (but only if you're using X language with X setting changed from default, and the attacker can MiTM your traffic)"

People on my FOSS project couldn't see the issue with their AI slopped documentation contributions.

On one hand I'm like, yeah fair enough it needed writing and something is better than nothing.

On the other I know nobody wants to read it now because it's just word vomit rather than how a human would write something they'd like another human to read.

I hate it so much.

You say this but fact and opinion are very similar and not at all easy to distinguish.

For instance, if I said the grass is green vs if I said the grass looks nice vs if I said the grass is doing well and looks how it should vs if I said in my opinion the grass is healthier than its ever been.

> To submit a claim you do not need a lawyer, but the process is (intentionally?) vague and very complicated, so it takes a lot of effort to figure it out yourself.

I'm not sure there's quite accurate. The form is really not that difficult to complete.

It's basically: Party details, type of claim, particulars, damages

Obviously knowing these details requires some legal knowledge but I actually think ET claims are easy enough to bring if you've got the time to do a little research and build your case. Almost all ET judgments are public so there isn't the usual difficulty with research as you get with law reports being restricted either.

https://assets.publishing.service.gov.uk/media/65bcbd214a666...

Doing similar-ish things with Claude, it's helpful to have something to ground it.

For instance, if you can say:

"Refer to the database schema in x.sql as your source of truth for the database structure we want to import into*. Do not invent data, tables or columns that do not exist. Carefully match all output against this database schema and do not create output that doesn't exist if it does not match the schema, simply skip it."

You will end up with a far better result in my experience.

Gotta treat it like a child.

The POS are still XP last I checked haha

No fire suppression and wooden ceilings?

1 "data center" built from a shipping container is one too many.

And, did you look at the photos you linked lol.

You should see the pricing of Azure web apps lol

My issue with OVH is the support is God awful and half French. Someone made a complaint about my server and their default stance was to nuke me from orbit and ask questions later.

Oh and their "data centers" are just shipping containers that are prone to the occasional fire.

Much happier with Hetzner, even though it's more expensive.

I mean, bridge tolls are absolutely a thing.

If only they had a parent company that specialised in search

But they can't process the commit until I push it?