I took my services offline last night, wouldn't have been able to sleep otherwise. There has been core PHP members that have outright said the mitigation's currently doing the rounds won't help and even cloudflare can only mitigate against known attack payloads.
The maintainer's comments are singularly unhelpful - "there's nothing you can do, just curl up and die" is pretty useless when you're faced with "take the entire company site offline" vs "maybe get exploited."
The comments aren't unhelpful, they're in fact very helpfully telling you that "take the entire company site offline" is the only safe choice right now.
So what if there are no known mitigations and it's such an open attack surface that logging doesn't help in containing it?
Since you wrote your comment the official blog posts describing what exactly is the in the exploit have been released, and "shut it all down" was definitely the right advice to give.
Yes, that's not very well done: when you are handling big IT services, you need more than "a person wrote a scary thing on twitter" to justify such an impacting action
Bit of context. Deleting after import is unlikely to have zero'd out the data on the SD - so using photorec would have allowed them to quickly and easily recover their pictures from the SD card.
Not "easily" as the filenames and metadata that associates them with the file contents would have likely been overwritten. Also, not sure how well photorec works with Olympus' RAW files.
The video has covers how Tool and Die wages have dropped below the median wage. We're also importing the tools/molds from China and manufacturing the parts "in the US" instead of the reverse.
I remember another Youtuber Linus Tech Tips creating their own injection molds in BC so that it would be harder for copycats. The entire Screwdriver isn't made in Canada though. The shaft and bits are made in China or somewhere else in Asia IIRC. The reason they were able to do that though is because there already existed an injection molding company nearby for them to work with though.
From a quick skim of the repo it looks to be injecting phptop_hook.php into any call to a php file with auto_prepend_file in php.ini. phptop_hook.php generates some stats on how long it took the php file to process and stores this via error_log() which can then be queried with the perl script phptop.
The thing with programming, to do it well, you need to fully understand the problem and then you implement the solution expressing it in code. AI will be used to create code based on a deficit of clear understanding and we will end up with a hell of a lot of garbage code. I foresee the industry demand for programmers sky rocketing in the future, as companies scramble to unfuck the mountains of shit code they lash up over the coming years. It's just a new age of copy paste coders.
I'm not sure where you've got this idea from. Even "new builds" in the UK, with there questionable building methods (which you may be referring to?) are mostly insulation and incredibly efficient to heat.
The new builds are made of brick and block, and are indeed insulated really well. It's the millions of older houses, particularly Victorian ones, that are made of brick, are not usually insulated well, and are often intentionally draughty.
What would the reason for being intentionally draughty be? The only thing I can think of is if they were burning candles/gas lamps to improve air quality?
In my humble opinion, it would benefit all better if we standardized something like jql (jira query language, so the user layer) first. From experience, many who find sql too complex have no problem with writing complicated jql queries. it's both easy to use and a great first step to writing actual SQL. I wish it was a standard like json.
The way the JSON filters work would be directly coupled to the JSON fix notation and SQL infix notation so it's directly coupled to SQL and doesn't really require a standard, imho.
It's "prefix" notation .. if you search something like "prefix vs infix vs postfix programming languages" it should return a decent explanation. For my case it's personal choice more than anything.. also easier for me to write a VM for.
reply