nallerooth

This is such a strange claim from someone trying to sound knowledgable in the field of cyber security (maybe they are, I have no idea who this person is). Even if the exploit would be difficult to use properly, it's not like there's a lack of groups out there trying. Anyone serious about this would consider the fact that a working PoC was reported to the PHP security team. They confirmed the vulnerability and started making a lot of noise about the severity of it, by reporting 2 CVEs and pushing the patch to Linux distros ahead of the official patch release.

Trying to understand what the message of the post is all about, I flipped the whole thing around in my head - and the message is basically "you don't need to upgrade your servers". Which is something someone with a working exploit would say. Or it's just noise on the Internet.

fabiensanglard - thanks for all the wonderful posts about.. everything! While I started reading your blog when it was more focused on old games and C development, I still check it from time to time. I'm always blown away by the level of details you manage to dig up and present - no matter the subject.

From what I've seen it _seems_ the language's creator is not interested in corporate sponsorship. It's been some time since I was interested in Nim, so I don't have any direct references to this claim. A web search would probably provide several examples. It was one of the main reasons why I decided to focus on other languages.

It feels like a really strange thing to say. I've deployed Rust binaries to both Lambda and Fargate in AWS and they've been very performant.

I don't know how it works on Vercel, but on other platforms it usually means that the value will be redacted in logs as well.

I feel the same way - as I suspect a lot of people here do. Nim posts are always upvoted and usually people say nice things about the language in the comments.. but there are few who claim to actually -use- the language for more than a small private project, if even that.

Thanks for all the work done over the years! I've donated to the project many times and it always feels good to support something I enjoy using every day.

> ...but it does look like Mozilla's product management has maintained its laser-like aim at its own feet.

Sadly, this feels very true. I used to donate money to Firefox back in the day, but since Mozilla seems to focus on anything but making Firefox a good -browser- - those days feel very distant.

I think Nim has a good homepage, with some bullet points explaining what the language is all about coupled with several code examples. I'm not saying Nim is better, but I visited the page the other day and thought it was neat.

https://nim-lang.org/

Thanks!

> Self-confidence is good. On the other hand, too much self-confidence means disaster. - His holiness the Dalai Lama

I guess it's true for microservices as well.

I think the wallpaper is minimalistic, elegant.. and boring, which is why I usually end up using a wallpaper from KDE Plasma.

https://store.kde.org/browse?cat=299&ord=latest

This sounds like a really awesome release, well done!

It's the year 2237 and OpenTTD is still in active development. :D

I love this game and I'm amazed at the amount of time and love spent on improving this gem.

That's the piece of information I miss in a lot of those stories. What happened X years later? We all love reading about strange projects, but it's not until someone sits down and writes a blog post about some old, custom system that you get the important insights (X was good, Y didn't work because reasons and nobody ever understood Z).

> Composer is the de facto package manager for PHP. I’ve never seen anyone try to compete with it.

According to common PHP culture, there's no need - since it's already good enough. Instead of re-inventing something you can just move on and get your own sh*t done. :)

(edit: formatting)

Would you board an airliner where you wrote the navigational software? /just kidding

I guess there are devs who spend quite a lot of time in macOS in order to work on things like https://airyx.org/.

This is the real reason why aliens have decided to not visit us for at least another 1000 years.

I didn't know I wanted to know about this until I saw the link. Well done! :D

I love the format! Short intro texts and self-explanatory code examples that I can copy/paste to fiddle with is, at least for me, a great way to actually understand things (compared to the "wall of text"-books that I never manage to read properly).

> Scrum has outmarketed "Agile", and swallowed it up wholesale. Agile was about putting people before process, Scrum is all process, no-wonder the people feel downtrodden.

This.

I understand that some managers want graphs, points, velocity, etc. Those things makes it easy to point at something and tell the team to improve. A good (imo) manager on the other hand, would just ask the team how the sprint went and what problems needs solving.

I'm sure there are a lot of Daniels out there. (The combination of "Nebraska" and "2003" tells me that there's at least one more, since Daniel Stenberg (a.k.a. Mr cURL) is living in Sweden.)

And I agree - we all owe him a lot. I'm sending him $5 every month via github sponsorship. That itself will not make him rich, but if all users of cURL did.. ;-)

This is awesome! I always enjoy reading about projects like this, even though I'm nowhere near a situation where I actually need to bootstrap an Amiga. :D

I guess it's the combination of computer history/nostalgia and the impressive level of knowledge that motivates me the most.

At least it would be safe to assume that they had access to several systems which received Orion updates. Given the attacker's dedication to the whole process, I'd say someone else's servers probably ran the tests for them.

> it's not like you give them much more information than they already have.

My thoughts exactly. I'm hoping that we'll see a move from Google Analytics towards more privacy friendly services as they improve.

Then again, I'm not sure marketing people will want to move away from Google Analytics. And I don't think marketing people will read news from cloudflare.. so we'll have to educate them.

Best of luck getting your account back Daniel!

First cell I clicked on was a mine. So far it behaves exactly as the original. ;-)

Hugo is awesome! (Apart from the Go templates, before you get the hang of them..)

A year or two back, shouting REACT at everything and everyone could actually land you a new job, but now... I'd just stick to Hugo and focus on my content if I wanted to impress any recruiters.

I wonder how much history would be lost to us if people didn't write stuff on walls. :D

And then there's the whole Brexit thing, which probably upsets the average UK citizen a lot more than what some dude did years ago.

A lot of people have heard about Wikileaks and Assange, but that doesn't mean that people care or read the news.