Ángel
@angel@triptico.com
Okay, after reading this email, I can shut down my computer and change jobs:
'Dear colleague, the fact that our software does not function after 24 hours is perfectly expected. It depends on many dependencies, and we do not have complete control over all of them. For this reason, we suggest, as a standard practice, a service restart every 12 hours. This will ensure everything functions correctly.
And as a general recommendation, we always suggest restarting all services (if you are using Docker) or the entire server (if you are using a traditional setup) every 3 days, as systems tend to get bogged down over time and need to be optimized.'
@stefano the last time I encountered one of those was java running on windows 2008 lol
@stefano Spooky season it seems.
@stefano relevant xkcd: https://xkcd.com/2347/
It was a common practice to have all-night long batch processing window, not so many years ago. Some software still requires it :/
We are greatly indebted to our predecessors' efforts.
@janvenetor @stefano
> Okay, after reading this email, I can shut down my computer and change jobs...
I've been more seriously considering pivoting to the culinary world lately.
@jbowen @janvenetor farming wouldn't be that bad, too. I think my father in law would appreciate some help.
@stefano when you think of it, that’s the way cars, TV and lights work since ages. So that must be a best practice (!)
@stefano oooh, they must be running windows. or ubuntu. 🤣
@winterschon 😆 The typical Windows mindset.
@stefano I would target Java dev there 🫢
@stefano sadly so. meanwhile, one of my petabyte serving storage nodes has well over a year of uptime with consistent load, and my workstation is routinely online for weeks to months without a reboot. ZFS and FreeBSD really do solve problems that so many others struggle with.
Oh, Lord Cthulhu, have mercy. 🤦
They don't know anything, right?
And they have no idea what software, or service, or uptime means...
@ParadeGrotesque But they sell this crap for tens of thousands euros per year...
@stefano
🤔 not sure to understand the reason. This seems a replica of some public administration services here that are shut down in the evening and during weekends to be consistent with opening hours of cages...
@stefano
I recall my first job back in the early 2000s.
"These are our VAX systems. They really need to be replaced, but they're actually pretty reliable. This one has been running for several years now."
"Wow, you haven't had to service any parts on it for several years?"
"We haven't had to restart it for several years."
@MicrobeRust In 2005, I visited a new client. They had an old Unix server (I don't know which OS was actually running, maybe I saw it but don't remember). The uptime was crazy - last reboot had been in 1986! I couldn't believe my eyes. It was still doing their payslips
@MicrobeRust @stefano towards the end of their run (and yes: I know there are some still running even today!) there were VMS clusters with uptimes measured in decades. As you could take nodes down one at a time in the cluster to perform maintenance, and not lose storage if it was configured properly, you’d only lose uptime through catastrophic failure. Especially when clusters could span WAN links with low enough latency.
@stefano
Resource leaks?
@TomAoki probably yes, but the software just starts doing crazy things, without any log or resource exhaustion...
@stefano
Looks like the situation when too large kmod is loaded via /boot/loader.conf[.local], means, staging area overflow (actually, truncation). This case, what happenes depends on what was loaded to which point.
What I can imagine right now is that the app is using non-default, external and buggy memory allocator and reuse without re-initialization happenes on code area. But more likely, if the app is scripting-capable, buffer management for scripts sucks and inappropreately merged (mangled) script is run.
@stefano
😂 made my day
@stefano must be a government contractor. They are the only ones (in the us) that can get away with that kind of support.
@matuzalem unfortunately, they aren't. And they're a health institute, so it's even more serious. But they're almost caged by this proprietary solution. And, at the moment, there isn't any other solution.
They know and overcharge. Now they're trying to convince them to move to the SaaS - insane prices.
@stefano Yeah. I once received a crash report for some bespoke software. It concluded that the root cause was that the Windows server had been running for more than 30 days.
@stefano@mastodon.bsd.cafe "We gave up on fixing this mess, and so should you."
@catbrained exactly. Their point is: it's a mess, let's accept it and apply all the possible workarounds. The fact is that this mess costs tens of thousands euros PER YEAR
Let's call this the "Big Garbage Collection Approach" and sell books with it.
@wakame good idea!
Periodically restarting services as a workaround I can understand. But everyone should feel bad about it being necessary. Anyone who doesn't feel bad about it ought to leave. Everyone should want the real root cause to be found and fixed instead.
@kasperd it's ok to restart the services, occasionally. But every 12 hours, means that software is a total mess.
@stefano after Siemens data took over nixdorf computer, me and my OS co-developers had a meeting with a Siemens manager. He asked: 'what is the recommended time between reboots to avoid crashes'? (Well, in German of course). Ours jaws dropped... This was 1991. Are we still there?
@Jhelberg for some companies, it seems it's still acceptable to require regular reboots.
Yes, they're still in the 90ies (I can't exclude that parts of their software come from that era)
@stefano@mastodon.bsd.cafe That's laughably bad. Why have they not fixed that?
@puppygirlhornypost2 @stefano Because all you need to do is restart the software twice a day and the whole infrastructure twice a week, and it runs fine! Where's the problem?
@darkling@mstdn.social @stefano@mastodon.bsd.cafe Sorry I am used to the days in which server uptime was measured in months and not hours.
@stefano Wut? A real life person pulling a salary actually said this?
@gpshewan yes, they did.
I blame the company, not the single person - their software is just a mess, and has been for decades
@stefano
Welcome to 1979.
@stefano @hannu_ikonen I'm always surprised when a vendor like this even knows what Docker is.
@lorgonumputz @hannu_ikonen I think they know what docker is just because they have to know how to tell clients to restart their servers every 12 hours in docker 😆
@stefano Translating: we have lost the source for a library that leaks memory like a sieve; we don't even have a full spec for it, and our best estimate is 20 developer-years to replace what we do know, so just restart our app on a cron.
@stefano reminds me of something... "have you tried switching it off and on again?"
@Hovedorganet this is a correct uptime!
@stefano Todays update to 7.6 broke it ;)
@stefano Translation:
We are aware that our software has stability problems when run for more than 24 hours at a time, but our developers are unable to find and fix the problem.
As we are unwilling to take the blame for this issue, we have decided to make it your responsibility to restart our buggy mess of a software as a permanent workaround.
We don't know anything about system administration, but please take our completely nonsense advice, which doesn't help at all, but makes us look better.
@stefano But seriously, the amount of gaslighting in this email is astounding, completely shifting the blame to the user as if this was to be expected. They should be ashamed...
@subnetspider unfortunately, the client has no choice as there are no similar solutions and this company is keeping them into a sort of jail (the beauty of proprietary software)
I've been suggesting to find someone that will implement a new software for them. In the long run, this will be less expensive than paying this terrible solutions..and they'd also have better reliability. Let's wait and see...
@angel It's a very specific CRM - used by some companies and organization and there are no big alternatives around.
@stefano so euh .. what did you reply ?
@krisbuytaert nothing...silence is the best reply.
Secret Panel HERE 🌳 https://tapas.io/episode/2806870
@MrLovenstein Thanks. You made me actually laugh!
boostedAny idea for interesting services to self host?
No need to mention the usual suspects like nextcloud, a web server for a static website or vaultwarden 
edit: I'll not be able to reply to everyone, but be assured replies will be appreciated, and it will be useful to many!
@solene Immich
@solene authentik, authelia or other identity management/SSO thingy for all your other services
@solene jellyfin, and *arr stuff to support it
@solene accounting https://github.com/akaunting/akaunting
@coulrophobia sounds neat! I need something like this
@solene Well, email is ... interesting. Far from fun, though. That's the only one I still do (aside from web and DNS, obviously) since I killed off my one moribund mailing-list ten months ago.
@solene An awesome list of self-hosted services (open source projects) https://awesome-selfhosted.net/
@solene and endless counter because why not
@solene for a more serious reply, i like redlib for browsing reddit without an account.
@solene A mediawiki server, to create content collaboratively. Photoprism to organize your photos. And nextcloud to organize files. I suggest them because these are the services I'd like to have in a future FreeBSD server of my own.
@solene I suggest @freedomboxfndn
Great software!
@solene miniflux, syncthing, and znc (or thelounge). I've also been using glance (https://github.com/glanceapp/glance) for the past few months and I really like it for my dashboard
@solene email, gotosocial
@solene I've been hosting Mealie since early this year and it's really helped me keep up with family meal planning and grocery shopping each week. https://mealie.io/
@solene putting in a plug for finger(1)/fingerd(8).
Useful, too few folks run it, it's available in a stock OpenBSD install, and the ~/.plan file is the original microblog. 
@bitterdonald @ed1conf I guess the only purpose to have finger installed is to be able to say this legitly 
@solene miniflux, or another RSS aggregator
@solene I highly recommend Hoarder, a link aggregator, and Pinchflat, a service to download videos from yt, with the functionality to follow channels and automatically download new content
- cryptpad for office work (zero knowledge / encrypted)
- seafile for storage (working end to end encryption!)
- ciao for service uptime dashboard / ssl expiration check
@solene do you have a personal dashboard yet? i recommend either jump or glance
https://github.com/daledavies/jump
https://github.com/glanceapp/glance
@solene https://ente.io/blog/self-hosting-101/
You have a nice table for self-hosting here
@solene Hedgedoc is a great #markdown editor for both private and public documents.
Lychee is the best photo management system I found to share pictures with my relatives.
Our Shopping List is the easiest and most handy collaborative shopping and todo-list ever created (oh, and it's mine ^^).
timvisee's Send fork is a must-have to share large files securely.
@solene a matrix server (synapse) with mautrix for whatsapp, signal and all other system that are necessary to communicate with non-geeky humans!
@solene meshcentral for an alternative to teamviewer/anydesk. running perfectly on openbsd for the last four years. and xwiki.. the best kb especially for anyone who was a fan of the classic google sites.
https://www.keycloak.org/ for SSO
@solene I just wished keycloak would be better documented.
@solene ampache/subsonic, to stream own music
@solene I would throw in paperless-ngx, for digital document handling. Has some very nice automatic consumption/OCR functionality and some nice ML functions for automated tagging of documents. Also has full text search of the entire OCR'd doc database.
@solene mailing list with mlmmj. http://mlmmj.org/
A wiki, like dokuwiki or the light featherwiki.
After getting to try the #Snac activity pub server developed by @grunfink on bsd.cafe thanks @stefano , I'm kind of tempted to spin up my own instance. Anyone here other than Stefano that runs their own instance ? Please share you pro's and con's plus any workarounds you have come up with.
Also how are you viewing / posting on mobile ? Are you just sticking with web or using the likes of #Tusky ?
#Fediverse #ActivityPub
@justine @grunfink I'm using the web interface, Enafore and Tusky, depending on my workstation/task.
Spinning your own instance can be a nice experience and I'd normally encourage it but I don't want you to abandon the BSD Cafe 😉
Joking, of course. Running snac on the BSDs is a joy. And when the move (both in and out) will be implemented, I'm expecting many more users trying snac
Yes, running own instances on my own software... called #Mammuthus... 😎
and may even spin up my own instanceThank would be great! The more #snacizens out there, the better.
Anyone here other than Stefano that runs their own instance ?I do.
The biggest pros for me are its availability in Debian repositories, the easiness of its setup, its light resources consumption, and its Web UI not requiring JavaScript. I can not think of any con, beside maybe its poor support for very long/deep threads.
Also how are you viewing / posting on mobile ?I don’t, I only use the Web UI.
Disclaimer: I never used any other Fediverse server like Mastodon, nor did I ever use Twitter. Snac is my first contact with the Fediverse and more generally with micro-blogging.
Join the happy #snacizens!
@justine @stefano @grunfink I've been tinkering with snac on a private instance, along with other ActivityPub servers like BookWyrm, and snac is much less of a production to set up.
I admit to being old school, but I'd expect the setup of a mail server to be harder than a Fedi service. When I first looked at the process to set up a Mastodon server, and I've been in IT a while and set up my share of services, my reaction was, "Are you sh***ing me?"
CC: @mpotter@social.coop @justine@bsd.cafe @stefano@bsd.cafe
CC: @risottobias@tech.lgbt @mpotter@social.coop @justine@bsd.cafe @stefano@bsd.cafe
@justine @grunfink @stefano I’m running it at snac.jamesoff.net because it looked interesting and I really like the file system-based implementation (reminds me of qmail). I use it from Mona on iOS (I contributed a few small changes to help that work) but currently I mostly use this main account.
It’s behind an nginx, like all my stuff. It’s managed with daemontools and in a jail :)
CC: @gyptazy@gyptazy.com @justine@bsd.cafe @stefano@bsd.cafe
@bitterdonald @justine @stefano @grunfink haha yeah :) I stripped it down to a 128MB FreeBSD system (including OS) but also to mention as a single user instance. Before snac 2.43 (or earlier I guess) there was something fishy and not that performant, but that got worked out in a very early state. @grunfink is really nit-picky (meant in a positive way) regarding such things and quickly about fixing thing :)
I like the slight friction points of using it, helps me not doomscroll as much.
@justine @stefano @grunfink yep, i run my own snac
I'm generally following the same people on both my main account (this one) and @paul . i like to use it fairly often as a less intensive (term used loosely) view of the fediverse
I also messed up with one of my servers recently and had to restore backups - snac was, by far, the quickest and easiest thing to get back up and running
@grunfink #snac looks real cool, well done! im curious, does it support "authorized fetch" yet or will it? (context: https://fedi.tips/authorized-fetch/)
Related, in snac you can mark an account to be private, so there is no way to retrieve any user post from the web public interface (i.e. you only can request public objects using the ActivityPub protocol).
I'm not sure if this answers your question.
What a nice #Fediverse project is this?
#snac is a simple, minimalistic ActivityPub instance with no database needed, totally JavaScript-free, hasn’t cookies either and doesn't carry much bullshit. I may give this a try 
!
Alt...
PUERTAS CERRADAS - Exposición de acuarelas de Carmen Val - Quinta de la Fuente del Berro, Madrid
Computer Hoy:
«Alerta mundial por una epidemia de “pantallas azules de la muerte” en Windows: cómo solucionarla»
Podemos resucitar aquel dicho de que solo se podía confiar en las versiones pares de los SO Microsoft?
@francescxavier pero 7 iba "bien" ¿no?
El NT, el último que no me dio por saco.
Hablar de esto en mastodon es toda una provocasssión...
Tiene 5 minutos para que le expliquemos el mensaje de nuestro señor Linux?
Secret Panel HERE 🐻 https://tapas.io/episode/3308249
What were we on in the 80s?
@The_Whore_of_Blahbylon Aqua Net fumes, I guarantee it.
@The_Whore_of_Blahbylon
If people back then could have looked forwards to now to see all the regular men flaunting Nazi haircuts they’d probably feel even worse.
@The_Whore_of_Blahbylon don't know, but it was flamable.
@The_Whore_of_Blahbylon
I have curly hair, and if there's a big gust of wind, I'm not far from looking like that.
@The_Whore_of_Blahbylon
Brain depleting aerosols?
@The_Whore_of_Blahbylon love to see a shot of all of them in the 90's just 10 years later.
@The_Whore_of_Blahbylon Hairspray. And the gas carrying hairspray.
@The_Whore_of_Blahbylon there is no klingon in it
@joakimfors I hated that character, and his hair!
@The_Whore_of_Blahbylon I miss Big Hair, but that's excessive.
@The_Whore_of_Blahbylon We were ozone destroyers, that's what we were.
@The_Whore_of_Blahbylon AquaNet. You were on AquaNet. Same thing my 3D printers like for those nice prints to pop off the plate.
AquaNet will live on!
@The_Whore_of_Blahbylon High on chlorofluorocarbons
@The_Whore_of_Blahbylon @waspfactory
I still love the smell of Elnet hairspray!
@The_Whore_of_Blahbylon Hair spray fumes?
If you’re pro AI tools, and also anti-publishers putting content behind a paywall, the technical term for what you are is an utter fucking idiot.
@Daojoan The jargon is hard, but I think I got the gist, here.
Alt...
Screenshot of a retweet by Reid Southen: Rarely have I seen Al described so succinctly.
Post by Church of Jeff says: The underlying purpose of Al is to allow wealth to access skill while removing from the skilled the ability to access wealth. #ai #generativeAl
@The_Whore_of_Blahbylon it will improve call centers, though..
BLAHBYLON’S EYE-DENTITY QUIZ FOR 2024.09.27
Can you eye-dentify this person?
The answer will be revealed tomorrow.
OpenBSD is running great on the Orange PI One. Performance is quite good, too, considering the hardware - and the boot time is short.
I'll be using it for a couple of days for a specific task, then...who knows?
Still waiting for the FTTH, with the /48 ipv6 - that will change a lot of things, here.
Never underestimate the bandwidth of a pocket full of fingernail clippings.
It was time to do some upgrades on the club's flyer screens. In the past, I had done that by ssh-ing in to each; turning off "Overlay"; rebooting; doing an update; turning on...
https://jwz.org/b/ykZt
Alt...
Screenshot
@jwz very cool!
Why I Built My Own Digital Signage System, Part the Nth:
I just got some take-out from one of my favorite local lunch spots. Which one? For the last ~5 years it has been named "NO CONNECTION TO TEAMVIEWER SERVER, Proxy settings / Retry / Cancel".
@jwz HTTP/1.1 416 Hunger Not Satisfiable
@jwz you gotta try the bánh mì at [NO SIGNAL]
@jwz my favorite sushi spot has no sign at all
@jwz the stores that have menus on displays that change are the worst. I’m standing here trying to pick out what I want to give the store money for, and it decides to change the menu into a pic of one item. WHY.
@pixel At least this place doesn't do that. The screen is entirely superfluous. The real menu is a printed banner above the counter, covered with years of hand-written price changes attached with masking tape. Just like God intended.
@jwz we need more menus that have those letters you push into grooves. Those were the best.
Ok, apparently those are “felt letterboards”
@pixel Don't make me tap the sign [ the sign is a split-flap display ]
@jwz ooooh I love those. I wish I had a place in my house for this one: https://www.vestaboard.com
Current state of American politics: actual dog killers claiming other people eat dogs and are mean to dogs.
The mental gymnastics required to be both 'pro-life' and pro-death penalty are unforgivable Olympic levels of fuckery
Dayum!
Alt...
Black female protestor holds sign that reads: Dear Police, we know you are not all bad, but as you love to say to us, "you fit the description."
And while publishers generally demand Microsoft Word compatible DOCX files so that their production workflow can be standardized [...] nothing much has changed since 2013 when I wrote about why Microsoft Word must Die. (TLDR: it's a terrible tool, and if the only good argument for using it is that everyone else uses it, then you might as well eat shit like all the trillion other houseflies.)https://www.antipope.org/charlie/blog-static/2024/09/zen-and-the-art-of-writer-deck.html
"good, fast, cheap". We used to get two out of three. With kubernetes it's zero out of three. 
@sqrtminusone Hi Pavel, the BSD Cafe is a place with a positive mood, PRO and not against. This doesn’t mean you can’t disagree with something. I myself sometimes criticize specific choices, methodologies, or situations. What’s important is that things always stay within the realm of expressing your opinion rather than attacking or discriminating against someone. It is perfectly fine to express your opinion (e.g., “I love systemd and would like to see it on BSDs!”) or your discontent (e.g., “I am extremely opposed to the systemd approach”), but not to discriminate against or attack those who use systemd.
I hope I’ve conveyed my idea clearly. If you have any doubts, feel free to ask!
A small compendium of the Fediverse platforms I use/know well.
In the past few days, I revisited some of my old Fediverse instances since some friends asked me to help them set up a new one. I also took the chance to perform maintenance on some leftover instances. Here's my experience:
Akkoma: My oldest instance still running, opened in 2022. It was offline for a few months (3/4). I updated everything to the latest version and restarted it. I’m not sure why, but it’s extremely slow, with a heavy load on Postgres and many queries just to open the main page. I like Akkoma - I'll investigate further.
GoToSocial: I updated a friend's instance - GoToSocial itself was up-to-date, but the underlying system wasn’t. I noticed that once it exceeds 2000 followings, it becomes a bit slow. The database is PostgreSQL, but that's not the issue. The GoToSocial process becomes somewhat heavy on the VPS. Still, it's very usable and a software with great potential, in my opinion. The Mastodon API is implemented quite well and works with the major software.
Mitra: It seems well-built. The person had around 1000 followers and followings on a Mastodon account, which they moved from a large instance. No speed issues, though sending a message makes the server “heavy” for a bit, but it’s temporary. The Mastodon API is partially implemented, but the software is advancing quickly, and I find its native interface quite pleasant.
Snac2: I've always had a soft spot for Snac2. The lack of a database and some design choices make it an excellent solution for small instances. For example, sending posts to all known instances increases visibility and interaction. Its basic, JavaScript-free interface is very clear, though it might not be the best for those used to Mastodon. But the Mastodon API is improving version by version, and I think the developer is doing an excellent job. It struggles a bit with larger numbers, but that's due to the underlying file system, not the software itself. If "move" support (both in and out) were added, I would recommend it to anyone starting self-hosting for single-user or small community instances because "move" is one of the options that gives the most freedom in Fediverse software.
Mastodon: My “old” personal instance was stuck at version 4.1.x and had been offline for a few months. I updated the FreeBSD Jail and upgraded Mastodon to 4.2.12 and then to 4.3.0-beta1. No issues. I also helped a friend (who had an old Pleroma-based instance they barely used) migrate. This user has around 5000 followers and followings - Mastodon is running on FreeBSD on a VPS (arm64) for just over 3 euros a month, with no significant issues (apart from media storage, but that's not Mastodon’s fault). Mastodon is sometimes said to be heavy, and that's partly true, but its modularity ensures that even in cases of overload, queues may slow down, but navigation and the local timeline remain reasonably fast. I think this is a good thing for any larger-scale use of an instance.
In short, I think things are moving in the right direction, and the software is evolving nicely. Well done, devs!
#Fediverse #Akkoma #GoToSocial #Mitra #Snac2 #Snac #Mastodon #SelfHosting #InstanceManagement #FreeBSD #OpenSource
MOVIE QUIZ FOR 2024.09.10
Do you know which movie this picture is from?
Give your answer below, even if you have to guess.
Please boost for more responses.
The answer will be revealed tomorrow.
#BlahbylonsMovieQuiz #Movies #Film #Cinema
@The_Whore_of_Blahbylon looks like it's a real bodice ripper..
A great Fediverse software, written in 
https://codeberg.org/grunfink/snac2
«No obstante, el eurodiputado de ultraderecha Alvise Pérez, líder de la plataforma Se Acabó La Fiesta, ha votado este jueves en el Parlamento Europeo en contra de las subvenciones al toro de lidia por considerarlo un espectáculo de “brutalidad, crueldad y tortura”, en una posición muy diferente a la de PP y Vox.»Vaya, el tarado este votando cosas razonables. Vivir para ver.
"Natural selection, as it has operated in human history, favors not only the clever but the murderous."
Barbara Ehrenreich
(08/26/1941 – 09/01/2022)
US writer
the right are obsessed with "owning the libs" because they miss the good old days when their ancestors also owned people
https://www.youtube.com/playlist?list=PL_PvQ7tRfwvLCeR-jnqdbf6BVayqqC0QW
https://mastodon.social/users/o_simardcasanova/statuses/113053473600003123
-- Fernando Pessoa
Death camp
Concentration camp
Genocide
Starvation as weapon
All terms that the AP can use here and chooses not to
Alt...
Text: AP
The Associated Press v
@АР
Follow
Israeli evacuation orders cram Palestinians
into shrinking 'humanitarian zone' where
food is scarce
Israeli evacuation orders cram Palestinians into shrinking 'humani...
From apnews.com
17:30 • 24/08/2024 From Earth • 1.3M Views
366 Reposts
231 Quotes
781 Likes 127 Bookmarks
‼️OJO A ESTO: Francia le quita el estatuto de medio online a un esparcidor de bulos: no podrá optar a subvenciones, ni ventajas fiscales (y supongo que tampoco a publi institucional).
Luchar contra la financiación de los pseudomedios ES POSIBLE. https://www.elsaltodiario.com/fake-news/medio-frances-france-soir-pierde-estatuto-servicio-prensa-bulos-covid
@ewenmcneill Possibly worth noting that the versions of grub revoked by this are known insecure
A couple of weeks ago, I received an email from a developer working on a new site for a mutual client. The message was: "I uploaded the new WordPress and plugins to your hosting (dedicated FreeBSD jail with PHP 8.3, MySQL, etc.), but there seem to be issues. The site is behaving strangely - possibly due to an incompatible plugin. Could you install PHP 7.4 for full compatibility, or consider moving the current development server to production?"
The "development server" is a small VPS with Docker on their infrastructure, where they set everything up without much oversight from me.
I pointed out that installing PHP 7.4 in 2024 is not advisable, as it has been unsupported (including security updates) for quite some time. I suggested upgrading to PHP 8.2, or 8.1 for temporary testing.
They proposed creating a production server based on Docker so they could "manage versions and dependencies independently." I was open to this idea but rejected the notion of putting such an outdated setup into production in 2024.
The client called, frustrated because "I refused to install what they asked." I explained that what they were asking was risky and outdated, and that a plugin requiring PHP 7.4 was clearly obsolete and would cause problems quickly.
Then, everyone disappeared. This morning, the client called in a panic: "Our server's been hacked! Do something!"
Upon investigation, I found that:
- They had gone live with their development server without informing me.
- They had been hacked through a plugin and malicious software was installed for phishing and other purposes, consuming bandwidth and CPU.
- All antivirus/antispam systems flagged the site as malicious.
I explained to the client that the server itself wasn't hacked (especially not mine), but rather the "site" was compromised - a different issue altogether. I advised them to restore the DNS settings and bring the previous site back online.
Their site is a simple institutional one, which is updated every 2-3 years by the developer. It doesn't need dynamic CMS features. The previous site was static, created with Simply Static, and remained online and problem-free for years.
Unfortunately, this is a common trend today. Some developers deploy outdated, vulnerable systems and then blame others when the site is compromised.
#WebDevelopment #Security #PHP #CMS #ServerManagement #Vulnerability #IT #Infosec #SysAdmin
A motivational message 🫶🏻
#motivation #mindset
When you use Twitter, you ride with Elon and Trump
Alt...
Image that says "When you use Twitter, you ride with Elon! Get off that awful garbage fire site today!" It's in the style of the 1940s US government poster "When you ride alone, you ride with Hitler" and has a picture of a person driving their car alone next to an outline of Elon Musk dressed up like Hitler.
@brucknerite @RichardJMurphy @25kV
Es que de hecho ocurre que es una balanza presupuestaria muy clara: si el estado se endeuda, las familias no lo hacen; si el estado no se endeuda, lo tienen que hacer las familias. Vivimos en un sistema económico impulsado por el crédito, lo queramos o no; y la relación entre los estados y las familias en cuanto a la deuda es casi de vaso comunicante.
tenemos que dejar de decir lo de noseque no, lo siguienteEsto es casi más rancio que lo de la cerveza sin plomo.
Secret Panel HERE 🙂 https://tapas.io/episode/3241718
#OtD 23 Jul 1944 19-year-old French resistance fighter Madeleine Riffaud saw a Nazi officer walking in Paris. She took out her gun and shot him twice in the head. Captured by French collaborators, she survived a concentration camp and lives to this day https://stories.workingclasshistory.com/article/9570/madeleine-riffaud-assassinates-nazi?utm_source=dlvr.it&utm_medium=mastodon
Solo tienes una gatita muy muy especial.
History
