@outofcontrol@phpc.social
@outofcontrol@phpc.social avatar

outofcontrol

@outofcontrol@phpc.social

PHP tinkerer, Laravel mostly, JS trouble-maker, Server holder-upper, Woodworking procrastinator, old house renovator, raised on an Apple orchard, living around Québec #php #laravel #tailwindcss #livewire #alpinejs #guitar #farming #gardening

This profile is from a federated server and may be incomplete. Browse more on the original instance.

outofcontrol, to random
@outofcontrol@phpc.social avatar

Am I correct in thinking that Ubuntu has patched focal, jammy and mantic already? And if I see Released (2.35-0ubuntu3.7) in my Ubuntu, based on here https://ubuntu.com/security/CVE-2024-2961 it means this VM is safe from CVE-2024-2961?

outofcontrol, to security
@outofcontrol@phpc.social avatar

Just hearing about CVE-2024-2961, the glibc vulnerability which opens door to PHP attacks? Curious which version of glibc you are using: ldd —version

And will see a line like this:
ldd (Ubuntu GLIBC 2.35-0ubuntu3.7) 2.35

glibc v2.40 is patched and maybe backported to v2.32?

gabboman, to OH

bee careful if you use php

https://www.youtube.com/watch?v=kQdRT2odUIk

-FUCK-IT-APPLIES-TO-ONE-OF-MY-SERVERS

outofcontrol,
@outofcontrol@phpc.social avatar

@j3j5 @gabboman Some more here: https://securityonline.info/cve-2024-2961-glibc-vulnerability-opens-door-to-php-attacks-patch-immediately/?expand_article=1

mttaggart, to random

Hey @obsidian: It is a value-add that there is no LLM nonsense in . I really, really hope it stays that way.

RE: social.coop/users/bitprophet/statuses/112304932366870056

outofcontrol,
@outofcontrol@phpc.social avatar

@mttaggart @obsidian No llm in core has my vote.

outofcontrol, to fediBots
@outofcontrol@phpc.social avatar

ClaudeBot is new to me, it’s an AI bot, and it was hitting us fast and hard from 398 IP addresses non-stop for over an hour, completely shutting down our site. Using fail2ban we managed to block it, but WTF is wrong with these people. Claudebot comes from these people: https://www.anthropic.com/
that claim “Anthropic is an AI safety and research company working to build reliable, interpretable, and steerable AI systems.” Probably best if you block them before they get to your sites.

Crell, to random
@Crell@phpc.social avatar

Reminder: US courts have decided the 5th amendment does not apply to your body. Only to your brain (for now).

Never, ever, rely on a fingerprint or face sac for auth. The Cops can legally hold you down and force your finger on the sensor.

This is why passwords/passcodes are a must, permanently forever.

https://arstechnica.com/tech-policy/2024/04/cops-can-force-suspect-to-unlock-phone-with-thumbprint-us-court-rules/

outofcontrol,
@outofcontrol@phpc.social avatar

@Crell Phones require a passcode when first turned on, so turning your phone off if pulled over is a smart idea still.

outofcontrol, to php
@outofcontrol@phpc.social avatar

To everyone using Medium to post your free articles: If the article requires me to login, I lost me. I won’t create an account and login to Medium for a free article. Sorry to a lot of you out there.

outofcontrol,
@outofcontrol@phpc.social avatar

@denniskoch It is not so bad if they don’t lock the post. Several folks post there and the stories are easily readable without an account.

On the other hand, I don’t know the politics behind Medium, or why some posts are locked and some are not. Personally prefer to post on my own website, which is pretty lame and out of date… ¯_(ツ)_/¯

outofcontrol, to azure
@outofcontrol@phpc.social avatar

The past 2 weeks have been spent learning how to migrate to Azure, using a well formed and functional GitHub Action yaml file. A mountain of learning, but slowly getting there. Linux builds were surprisingly simple to migrate. Hey, windows should be easy since Microsoft owns it all right? Windows builds have been anything but simple to get going on Azure.

Any folks, happy to pay for some time to learn how to build azure-pipeline.yml files for Windows builds.

outofcontrol, to macos
@outofcontrol@phpc.social avatar

If you use brew’s curl on macOS, are you really using it? I installed and had curl setup a couple of years ago. Today it appears that curl was now pointing to Apple’s version, which has this issue (https://daniel.haxx.se/blog/2024/03/08/the-apple-curl-security-incident-12604/). Looks like brew doesn’t add a symlink for curl to /opt/homebrew/bin. Running ln -s /opt/homebrew/opt/curl/bin/curl /opt/homebrew/bin resolved the issue.

outofcontrol,
@outofcontrol@phpc.social avatar

@bsod @bagder I prefer the symlink, since that is how most brew apps are dealt with. Especially since I already have /opt/homebrew/bin first in my path. Options are usually good though.

Thanks for the compiler flags! I didn’t know that. Though I rarely compile on my mac.

outofcontrol,
@outofcontrol@phpc.social avatar

@soliman Tried this first, but oddly didn’t work. At first I figured it was because curl was a cask, but it is not. No idea why that doesn’t work, and I do plan on investigating more.

outofcontrol,
@outofcontrol@phpc.social avatar

@SheepZone @soliman Ah, thanks, that makes sense. Does using force do anything different than manually doing ln -s?

outofcontrol,
@outofcontrol@phpc.social avatar

@bbolli Right you are. I think curl was installed as a dependcy originally, and I never read all of the gazillion lines that scroll paste on the screen. Probably somewhere in there was a comment about how to do this properly. Thanks!

outofcontrol,
@outofcontrol@phpc.social avatar

@feld But, if curl was installed as a dependancy there is a lot of text there, and the message could be missed.

outofcontrol,
@outofcontrol@phpc.social avatar

@feld brew never puts anything in /usr/bin directly, and /opt/homebrew/bin are all symlinks:

/opt/homebrew/bin/python3 -> ../Cellar/python@3.12/3.12.2_1/bin/python3
vs
/opt/homebrew/bin/curl -> ../Cellar/curl/8.7.1/bin/curl

But, I suspect @sun is correct to some degree, that brew won’t override OS installs automatically, and will want you to work for it.

Also just a guess on my part :)

CelloMomOnCars, to california
@CelloMomOnCars@mastodon.social avatar

A major US state just achieved a critical milestone for nearly two weeks: 'It's wild that this isn't getting more news coverage'

" has set a benchmark for , with wind, solar, hydro, and geothermal supplying 100% of the state's electricity demand for 25 out of the last 32 days (and counting)."

https://www.thecooldown.com/green-tech/california-renewable-energy-100-percent-grid/

outofcontrol,
@outofcontrol@phpc.social avatar

@CelloMomOnCars Supect Big Oil is ensuring this news stays quiet.

ramsey, to random
@ramsey@phpc.social avatar

vimeo/psalm version 5 requires nikic/php-parser ^4.16

phpunit/phpunit version 11 requires phpunit/php-code-coverage ^11.0

phpunit/php-code-coverage version 11 requires sebastian/lines-of-code ^3.0

sebastian/lines-of-code version 3 requires nikic/php-parser ^5.0

End result: can’t upgrade to PHPUnit 11 if using Psalm.

😭🐼

outofcontrol,
@outofcontrol@phpc.social avatar

@ramsey Looked at psalm once but stuck with phpstan in the end. Sounds like maybe my inner brain was ahead of the curve.

outofcontrol,
@outofcontrol@phpc.social avatar

@elazar @ramsey I am very naive on composer things, but, would having an environment trigger be useful here? Having a dev, testing, staging, production etc versions for autoloading?

outofcontrol,
@outofcontrol@phpc.social avatar

@elazar @ramsey I guess we sort of do already, with the require and require dev. But that seems limited.

outofcontrol, to random
@outofcontrol@phpc.social avatar

Congrats to all of you at Spatie! https://phpc.social/@freekmurze/112275315218196481

rpavlik, to random
@rpavlik@hachyderm.io avatar

What a weird time for me to be up and running a script that acts like a glorified "git push". 😉 I should probably get to bed.

outofcontrol,
@outofcontrol@phpc.social avatar

@rpavlik I know what what we’re doing at 3am :)

outofcontrol,
@outofcontrol@phpc.social avatar

@rpavlik Now everyone can join in and celebrate with you! Congrats on the launch of the OpenXR 1.1

nixCraft, to random
@nixCraft@mastodon.social avatar

How much ram did your first computer have at your home ?🤔

outofcontrol,
@outofcontrol@phpc.social avatar

@nixCraft 8Kb - Times Sinclair ZX80

ramsey, to random
@ramsey@phpc.social avatar

I do not like the new beta terminal in the IDEs (i.e., , etc.). It doesn’t seem to respect my Zsh configuration, and it’s slow.

outofcontrol,
@outofcontrol@phpc.social avatar

@ramsey Haven’t seen starship.rs before. I’ve been using https://github.com/wesbos/Cobalt2-iterm with some adjustments. Going to take a look at starship.rs next week.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • rosin
  • mdbf
  • tacticalgear
  • osvaldo12
  • InstantRegret
  • DreamBathrooms
  • modclub
  • magazineikmin
  • thenastyranch
  • khanakhh
  • Youngstown
  • slotface
  • kavyap
  • JUstTest
  • ethstaker
  • tester
  • GTA5RPClips
  • Durango
  • normalnudes
  • cubers
  • ngwrru68w68
  • everett
  • provamag3
  • cisconetworking
  • anitta
  • Leos
  • lostlight
  • All magazines
    •