Recent submissions

Comment · 13 hours ago
Will be interesting to see, if AI will cause an increased demand for sysadmins. Not sure companies will go "Make no mistakes" on their (production) infrastructure.
Comment · 1 day ago
We could use cyber, crypto and AI in one sentence!
Comment · 5 days ago
Mean sure, but doing just that misses the learning and specific attention part. Going from "bird" to species, learning about morphological, vocal differences is going beyond "being a little more active and interested in your surroundings". It's really engaging every sensory and cognitive system in concert.

That said, collecting plants or beetles is probably equally beneficial. Geocaching comes to mind too.

Although, I wonder if looking up may contribute, given old people tend deform and bend forward with age. Could affect blood or lymphatic circulation.

Comment · 6 days ago
Congrats!

Ignoring OP's config fuck-up, I think you did a service to the world, showing this vulnerability is very much real.

Comment · 6 days ago
Are you the one who got through?

> in the binary itself does it perchance end in "fuL"?

Username and that comment earlier matches the "a few hours ago"/"confusion" statement by LiveOverflow.

Comment · 6 days ago
Comment · 6 days ago
>I'm deep within the network right now

Lol, what does that even mean?

Comment · 6 days ago
I think we can agree the statement makes the implied assumption you still do have a reason to run PHP. It doesn't matter what application needs PHP, as long as it's an application needing PHP. Delivering a static webpage is not a reason to run PHP, that's webserver biz. I mean, c'mon, it's bug in the PHP backend, not the OS where the string "PHP" magically causes memory corruption. Something needs to be processes by PHP.
Comment · 6 days ago
Also everyone working on an exploit to claim the reward has the interest to keep others from getting there first, so there is a strong incentive to keep the server unusable.
Comment · 6 days ago
While you are at it, could you also enable ssh on port 22 and slip in my keys for user root? It's what I use in my test setup and my RCE POC relies on it.
Comment · 7 days ago
Fair enough :D

jAwECQEKMLU49MiDV9LSmgFyUbVA3GI6fCx5U2M+0vra/s81r2NWmfqtJTHM0Yn/J8jkzhq1rlXL5/DvyPNPXr0TJp1HeyLaYLvuGrQb/cDMGDeIOebk8yD48YKxUUTVJJFV0I3mzET1pngQEme9r2HrXrOgWVTASCQU/kEYbRfw9ogbCguFCu4qfVZq3JpzNDF52YS1kwtvKVA/wkb+sN5L5fgqEvsZqc8=

Comment · 7 days ago
Have you experimented with local models? That would make pretty good, potentially relatable content, I think.
Comment · 7 days ago
Not gonna defend the OpenAI shilling, but the guy recently had a pretty brutal tragedy in his personal life and I assume the AI content is just a low effort move to keep the channel and marketing for his business afloat. The lack of elaborate educational content may be rather a symptom of personal resource exhaustion and struggle, than popular enshittification. Time will tell, but maybe cut him some slack for the moment.
Comment · 7 days ago
Would be funny if someone installed a crypto miner instead, or transferred highly tainted coins to get OP onto the radar of law enforcement. Or secretly upgrade the PHP package to mess with people.
Comment · 7 days ago
They are cutting competition for these sweet coins. Anything to become profitable.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton