
game dev, webdev, daddio, completely 1000% all business super serious all the time 100%. Founder of @ArcaneWebDesign
Idaho
Joined December 2015
- Tweets7.4K
- Following1.2K
- Followers800
- Likes15.3K
This is why I'm always frustrated when I push for removing tech debt and I get pushback because changing things that work is scary.
One day, these things could become problems.
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Claudes writing entire books when I ask it for a README. I've gotta slim this down because it can't figure out what's important enough to go in there.
I feel like this is one of the things I haven't gotten an agent to do very well. Docs written for human efficiency.
Arduino c++ sweet baby cheeks'n me by writing prototypes for my functions at the top of the file before they get sent to the compiler.
The way people talk about AI being part of their team. 😅
instagram.com/reel/Dd18KdbyO…
Who's idea was it to make these black allen keys ooze brown goo and why wasn't it on the packaging when I bought them!?
People keep blaming avocados, toast, and coffee but I don't got a bajilliion dollars for any of those things.
Dude same. It made me a side character in breaking bad.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
15th anniversary yesterday, so we went out on a date while the kids were at school today!
Saw resident evil with dbox seats! That shit was SO GOOD! Funny, spooky, and the moving seats really work well with horror movies!
Tried deep research on chatgpt to generate some data.
It gave me summaries of all the csvs it created, here's the first 10 records, see the full_csv_1.csv
and so on. Then at the end it told me their all packaged up in a single zip file (link)
None of those links work for me. Because it put them in a contained sandbox.
So I said. Can you give me an actual download that works?
"I'll do all the research again!"
No. Can you give me the data you already researched?
"No. I can't access that. It's in a sandbox."
Why tf would you have the agent put all the data in a place that nobody including the agent can access the data?!
Haven't used it myself, but ministack.org is something I heard about through work. Other states using it in development as an alternative to LocalStack.
They're both AWS emulators. But LocalStack has started charging an insane monthly price. High enough that it stops saving you money on AWS resources in most scenarios.
Cool to see open source alternatives dedicated to being useful and free forever.
lol. This dudes gonna rug pull your vote so hard you're gonna do a backflip
$5000
Why would I deceive you? There’s no reason for me to do that….
Nick | Stegopop retweeted
Ocarina of Time if it was developed by a western gaming studio.
Link to this Focus L masterpiece below.














