dikei

From my understanding, the PHP bug is memory disclosure.

The RCE exploit is application dependent: it requires exploitable PHP code already deployed in the server. However, that exploitable code path is widely deployed by the most popular PHP software: WP, Drupal, Joomla, etc, so in practice most PHP deployments are vulnerable to the RCE attack.

NAS/SAN still make sense when you need to share storage between multiple DBs for cost efficiency: most application DBs are tiny compared to the size of an SSD.

It's all about trade off.

Do you want to spend thousands of dollar upfront for that DB server with sweet sweet NVME SSDs, of which your application might not even use 1% before the app get scraped?

Not even close, Quantum Computer are still far from being able to do any cryptography cracking.

Yeah, sadly data and command intermingling are also one of the main things that make these "AI" appear so human.

Humans are also susceptible to prompt injection all the time, we just call it differently: social engineering or scam.

Plus, if you look at OpenWebUI horror of a commit history, they don't often take external contributions.

For paper documents, you'd make at least a few copies for storage at the source, and then every receiver will get his/her own notarized copies.

Electronically, everyone just receives a link to read the document.

Start training them from a very young age: competitive coders typical start in secondary/high school or even earlier.

Russia has specialized schools to support this kind of education, so are China and many other countries. Thus, they rank very high in IOI and ICPC contests

Big claims with not a single benchmark to back them up

Well, only a lunatic would use ZIP with anything but DEFLATE/DEFLATE64

I use ZSTD a ton in my programming work where efficiency matters.

But for sharing files with other people, ZIP is still king. Even 7z or RAR is niche. Everyone can open a ZIP file, and they don't really care if the file is a few MBs bigger.

I hate ticket-driven development, but clearing ticket is one way to stay sane when the final objective looks crazily out-of-touch.

Yeah, and all the popular web frameworks include authn and authz as a core component.

OpenWRT stopped doing this 10 years ago, as it was too much hassle to pick a drink that satisfy everyone.