AtNightWeCode

The core problem is that VScode extensions does not need to be signed at all. Mind boggling stupid design decision.

That is simply not how software works.

I think the way SO works became a burden as the pace of the industry increased. It frustrated a lot of people. I also wonder how much impact changes to Google search had in that initial decline.

Why are they plowing money into this garbage? I don't understand it. I guess it is because Google is lagging behind in the AI race but the roi of this bs must be close to zero. Clowns.

Cloudflare and Google already blocks these domains. Just saying.

I am not claiming that it is right. Hardly Google that came up with this plot. Local people knowing how stuff actually works advised on this as it is not that uncommon.

The thing is that in most parts of EU any muppet can go about and find anything between fairies to wood peckers to stop deforestation. So if you own the land act first ask later is the correct way.

Log4shell did not get that bad because it was only the less used version 2 that was effected.

The standard way hackers go about today is data theft and extortion. I think we would have heard about it if was a big problem.

People should off cause keep their servers up to date no matter what. The total panic that was yesterday with people posting all kinds of random AI slop was pathetic.

State hackers and others prepare how to use exploits long before they happen. If there was an opened known RCE in PHP they would have caused havoc immediately. Clearly that did not happen.

Is this HN or boomer FB? I don't know anymore.

One of the few corps I applied for a job at that did not even reply. Also known for being a bit of a crappy employer as well even long before EA bought them. Many other studios was also out of line back then to be fair.

When log4j came out CF helped a lot. The rules are called stopgap. A TEMPORARY fix. CF added some for this exploit.

The old way of doing things like putting old unpatched stuff behind firewalls is pretty much a dead pattern today.

So what sites are confirmed to be "hacked" cause of this exploit? I mean, Log4J broke Minecraft and a lot of other services.

People should stop reading AI slop on X and other social media. The exploit is advanced and took some effort to fix. If there really was an open RCE in PHP for anyone to use the impact would be massive.

It stopped me from doing basic bit operations. I have looked around and others have the same problem.