nallerooth

This is such a strange claim from someone trying to sound knowledgable in the field of cyber security (maybe they are, I have no idea who this person is). Even if the exploit would be difficult to use properly, it's not like there's a lack of groups out there trying. Anyone serious about this would consider the fact that a working PoC was reported to the PHP security team. They confirmed the vulnerability and started making a lot of noise about the severity of it, by reporting 2 CVEs and pushing the patch to Linux distros ahead of the official patch release.

Trying to understand what the message of the post is all about, I flipped the whole thing around in my head - and the message is basically "you don't need to upgrade your servers". Which is something someone with a working exploit would say. Or it's just noise on the Internet.

fabiensanglard - thanks for all the wonderful posts about.. everything! While I started reading your blog when it was more focused on old games and C development, I still check it from time to time. I'm always blown away by the level of details you manage to dig up and present - no matter the subject.

From what I've seen it _seems_ the language's creator is not interested in corporate sponsorship. It's been some time since I was interested in Nim, so I don't have any direct references to this claim. A web search would probably provide several examples. It was one of the main reasons why I decided to focus on other languages.

It feels like a really strange thing to say. I've deployed Rust binaries to both Lambda and Fargate in AWS and they've been very performant.

I don't know how it works on Vercel, but on other platforms it usually means that the value will be redacted in logs as well.

I feel the same way - as I suspect a lot of people here do. Nim posts are always upvoted and usually people say nice things about the language in the comments.. but there are few who claim to actually -use- the language for more than a small private project, if even that.