Liru's recent activity
-
Comment on Framework customer info has been breached in ~tech
-
Framework customer info has been breached
Just got this email from Framework: Dear Valued Framework Customer, We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an...
Just got this email from Framework:
Dear Valued Framework Customer,
We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an attacker accessing customer names, email addresses, phone numbers, and addresses. Your information was in the database that was accessed in this breach. This breach did not include order or payment information.
We have full details on the incident below. We are deeply sorry for this breach of information, and are reviewing and improving our methodology for data storage in external database vendors.
We are also in the process of notifying the regulatory authorities in each region where relevant regulations exist. Note that while regulations in most regions do not require notification for breaches of names, email addresses, phone numbers, and addresses, we are sending this email to you regardless to ensure you have visibility and can take any actions needed.
What happened?
On August 6th, 2026 at 9am Pacific Time, Metabase notified us of a breach of their systems with the following email message:
On Monday, August 3, we discovered that Metabase Cloud was attacked by someone utilizing an unknown (“0-day”) security vulnerability in versions 1.58 and above. We immediately blocked the endpoints used for the attack, then quickly identified and patched the vulnerability. We notified law enforcement, and we have engaged with a third party forensics firm to conduct an independent investigation.
Your instance of Metabase was vulnerable to this 0-day. Therefore, to protect your company, we recommend you:
Rotate the credentials for every database connected to your instance; and
Review the admin accounts on your instance and remove anything you don't recognize.
We also discovered that the attacker was able to gain access to your instance. We created a report on the actions we believe the attacker took on your instance, which includes log files, and which you can get from the Metabase Store at [removed url].
(If you do not have access to the Metabase Store, are having issues accessing the report, or do not want to click on a link in an unexpected email, you can log into your instance directly and reach us at Help > Get help in the grid menu in the upper right hand corner. We'll confirm this message is from us and email you the report.)
This report is based on our own application logs. We did not query or read the data in your connected databases.
Depending on the jurisdictions in which you operate and kinds of data your instance connects to, you may have notification obligations under applicable laws. If you have concerns in this regard, we recommend you assess potential notification obligations with your company’s legal or compliance experts.
We regret any inconvenience this incident may cause you, and we are here to support you. If you have questions, please reply to this email or email us at [removed email address], and we'll get back to you as quickly as we can.
Sameer Al-Sakran
Founder and CEO
Metabase
We immediately investigated the logs Metabase provided to us and confirmed that our database instance was accessed by the attacker. We confirmed that the following information was accessed:
- Full name
- Email address
- Login IPs
- Billing and shipping address information
- Country
- Address
- City
- State
- Zip code
- Phone number
- Company
For Framework for Business customers, we are investigating whether the following information may additionally have been accessed:
- Company
- Phone
- VAT
- EIN
- Billing Email
- No other personally identifiable information, order information, or payment information was accessed.
Note that Metabase has additionally flagged:
Important: This is a preliminary update based on our current knowledge.
We are working with a third-party forensic investigation firm to understand the full nature and scope of the event.
We are providing you this interim update in advance of completing our investigation to allow you to better understand any potential impact and secure your data.
Our investigation is ongoing and the information shared now is preliminary.
Please look at the application logs as well as the queries executed that are provided as separate files in the zip file for detailed activity and a potential timeline.
We’re providing you notice of the breach in the meantime to ensure you have the earliest possible visibility. In the event Metabase notifies us of additional information that impacts you, we will send a follow-up email.
What was done to resolve the issue?
After we were notified of the breach by Metabase, we rotated credentials on all databases associated with our Metabase instance and confirmed that there were no changes in admin access or access to systems outside of Metabase.
What steps have you taken to ensure this doesn’t happen in the future?
We are evaluating the breadth and depth of data shared with business intelligence platforms, and scoping down their access to only the columns required for analysis.
Nirav Patel and the Framework Team
25 votes -
Comment on Mojang has updated the system requirements for Minecraft: Java Edition, raising recommended system memory from 4GB to 16GB in ~games
Liru Link ParentRedstone, pistons, and things of that nature could also hurt it, not to mention anything that came out in the "recent" past that I probably don't know about.Redstone, pistons, and things of that nature could also hurt it, not to mention anything that came out in the "recent" past that I probably don't know about.
-
Comment on Formula 1 Belgian Grand Prix 2026 - Race Weekend Discussion in ~sports.motorsports
Liru Link ParentI feel like the 2021 race was interesting mostly in the "what's gonna happen next" way. "Garage football" and "marshal petanque" still make me laugh occasionally.I actually think the 2021 "race" was more interesting, even though it was like 3hrs of them doing literally nothing because of the downpour.
I feel like the 2021 race was interesting mostly in the "what's gonna happen next" way. "Garage football" and "marshal petanque" still make me laugh occasionally.
-
Comment on US House passes bill to ‘ditch the switch’ and make daylight saving time permanent in ~society
Liru Link ParentI've mentioned it in another comment here, but So You Want To Abolish Time Zones basically lays out why that's not really a good idea.I've mentioned it in another comment here, but So You Want To Abolish Time Zones basically lays out why that's not really a good idea.
-
Comment on US House passes bill to ‘ditch the switch’ and make daylight saving time permanent in ~society
Liru Link ParentSo You Want To Abolish Time Zones is a classic blog article that I keep saved just for stuff like this and why it's not really a good idea.The best solution is permanent UTC for everyone and forget about the clock having anything to due with the sun.
So You Want To Abolish Time Zones is a classic blog article that I keep saved just for stuff like this and why it's not really a good idea.
-
Comment on How long can I go with an obsolete phone? in ~tech
Liru LinkFor your use cases, it should be fine to switch over. The issue may come when certain apps update and lock you out because of BS reasons, or if some external force necessitates that you use a...For your use cases, it should be fine to switch over. The issue may come when certain apps update and lock you out because of BS reasons, or if some external force necessitates that you use a "standard" smartphone.
There was an article posted on Tildes a long time back that talked about how it's getting harder to actually go without a smartphone. I even commented on my experience using a Windows Phone instead of something good, which may as well have been a dumbphone with all the use it was getting. It may be worth reading the article, the comments, and thinking about what apps you may actually use.
Nota bene: I've had several other instances where using a dumbphone would have caused me inconvenience since then. Openpath, especially, is a bitch and a half. Why the hell should I need a phone to open a door?
-
Comment on Japanese translation request - achievement stickers in ~humanities.languages
Liru Link ParentIt was me being tired and trying to find some other funny way of saying "this is the same horse uma/skill pun yet again" (similar to the comment on the meat pun in the same row), sorry if that...Is the horse emoji mp3 a reference to a meme?
It was me being tired and trying to find some other funny way of saying "this is the same horse uma/skill pun yet again" (similar to the comment on the meat pun in the same row), sorry if that caused confusion.
-
Comment on Mark Zuckerberg's increasingly bizarre war on whistleblowers in ~tech
Liru Link ParentI've never had to sign anything similar to these, bar a generic IP nondisclosure thing (ie "don't leak our non-open-source code")This is pretty standard in tech employment contracts and handbooks, I’m not sure you can get a job in that industry without signing something similar.
I've never had to sign anything similar to these, bar a generic IP nondisclosure thing (ie "don't leak our non-open-source code")
-
Comment on Japanese translation request - achievement stickers in ~humanities.languages
Liru LinkDisclaimer: This is just a rough translation/transcription, but I'm fairly confident that most of this is correct or at least close enough. Row 1: Row 2: Row 3: Row 4: Row 5: Row 6: Row 7:- Exemplary
Disclaimer: This is just a rough translation/transcription, but I'm fairly confident that most of this is correct or at least close enough.
Row 1:
A1: "びえ〜〜んかんげき！" = "Waaah, I'm so moved!"
B1: "やはりムテキ" = "As expected, unbeatable/invincible"
C1: "おぬし... やりおるな" = "(?) ... Not bad!" (Don't recall what onushi means, maybe it's a pun? Probably "Well done". A lot of those here)
D1: "ニクいほどすてき" = "You really nailed it! Wonderful!" (wordplay: "niku" means meat, "nikui" =~ "You nailed it")
E1: "さすがレジェンド" = "As expected from a legend"Row 2:
A2: "さすが! イカしてる!" = "As expected! So cool!" (ika = squid/cool)
B2: "さいこうにイカしてる" = "Super duper cool" ("The peak of cool", maybe as well, but that gives a different vibe in English from this)
C2: "にほんいちイカしてる" = "Coolest in Japan"
D2: "イカす! イカしてる!" = "Awesome! So cool!"
E2: "ひゃ〜! イカしてる〜!" = "Whoa~! So cool~!"Row 3:
A3: "まさにレジェンド" = "Truly legendary"
B3: "とってもウマくなったね" = "You've gotten really good!" (uma (horse) = skilled in this context)
C3: "さすがムテキ" = "Truly invincible/unrivalled" (kana version of 無敵)
D3: "きみは... てんさい？" = "Are you... a genius?"
E3: "ニクいね! ノッってるね!" = "You nailed it! You're on fire!" ("Nikui ne" =~ "You nailed it/Very clever", another meat pun)Row 4:
A4: "森のタヌキにほめられた" = "Praised by the forest raccoon"
B4: "ヒツジ [やるじゃないか]" = "Sheep: 'You're not bad'"
C4: "森のネコにほめられた" = "Praised by the forest cat"
D4: "タヌキ [よっ！にほんいち]" = "Raccoon: 'Yo! #1 in Japan!'"
E4: "森のヒツジにほめられた" = "Praised by the forest sheep"Row 5:
A5: "ほれてまうやろっ！！" = "You'd fall for this!!" ("cutesy" Kansai dialect)
B5: "まさにムテキ" = "Absolutely invincible/unrivalled"
C5: "いよっニクいね！" = "Yo, you nailed it!" (meat/"niku" pun here again)
D5: "がんばった! かんげき!" = "You can do it! Seriously!" ("Kangeki"'s context might be different here, probably a better translation)
E5: "おぬし... できるな" = "(?)... you can do it" ("Onushi" here again, starting to think it means "well done")Row 6:
A6: "ニク [いよっニクいね]" = "Meat: 'Yo, you nailed it'" (I think there may be a meat pun here but it's extremely difficult to tell, it is a mystery)
B6: "ゆうしゃどものさすが やで" = "Even heroes would be impressed"
C6: "ブラボー!! ブラボー!!" = "Bravo!! Bravo!!"
D6: "すごい! ウマくなったらね" = "Amazing! You got really skilled!" (horse emoji dot mp3)
E6: "ゆうしゃさま つよい..." = "Hero-sama, you're so strong..."Row 7:
A7: "やはり... てんさい？" = "As I thought... a genius?"
B7: "がんばりに かんどう!" = "Moved by your hard work!"
C7: "さいこうに クール" = "Very cool" ("The peak of cool" more literally, again, different vibe)
D7: "ほうしゅうを てにいれた!" = "Got the reward!"
E7: "もはやムテキ" = "At this point, truly unbeatable/invincible" -
Comment on Formula 1 British Grand Prix 2026 - Race Weekend Discussion in ~sports.motorsports
Liru Link ParentAbu Dhabi 2021 PTSD intensifiesBecause Idk why Ferrari thought it was smart to bring in Lewis with such a tiny margin.
Abu Dhabi 2021 PTSD intensifies
-
Comment on British cities are a game design nightmare in ~transport
Liru Link ParentThe title hid the surprise, but it was changed for some reason.The title hid the surprise, but it was changed for some reason.
-
Comment on What are your gaming idiosyncracies? in ~games
Liru Link ParentThis is why I can't play Diablo or any other ARPG. It took me way too long to realize that other people didn't pick up the junk items to sell.Also, i have to loot everything. Games take me a very long time to finish because of this.
This is why I can't play Diablo or any other ARPG. It took me way too long to realize that other people didn't pick up the junk items to sell.
-
Comment on If you let AI do your writing, I will come to your house and kill you in ~tech
Liru Link ParentEvery few months, I load up a few models with a mini test suite with a few simple questions to see if they improved. I haven't encountered a model that gets above a 2/10 without the help of the...Every few months, I load up a few models with a mini test suite with a few simple questions to see if they improved. I haven't encountered a model that gets above a 2/10 without the help of the internet, or 4/10 with; one of the correct ones in both cases is a code sample, which should be a given these days, and the other is a simple question about a popular game. The rest should ostensibly be simple and not considered trick questions in any way, but most models fail horribly at them.
A bunch of questions still make the models
hallucinateget shit wrong when there are actual valid answers, so I completely buy that they also get shit wrong when fed bad information and expected to correct based on that. -
Comment on Tildes Survey #6: Vote for the next four surveys we do! (Results) in ~talk
Liru Link ParentAlso requires a followup of "do you have a cat, dog, or similar animal".Also requires a followup of "do you have a cat, dog, or similar animal".
-
Comment on Tildes Survey #5: Pineapple on pizza? (Results) in ~talk
Liru Link ParentJalapeno pairs extremely well with pineapple, from my experience.Jalapeno pairs extremely well with pineapple, from my experience.
-
Comment on BeagleBadge by BeagleBoard in ~comp
Liru LinkThis seems like one of those things that looks super cool and I want to order one, but I have no idea what to actually use it for. I feel like I need to learn embedded/low power stuff to truly...This seems like one of those things that looks super cool and I want to order one, but I have no idea what to actually use it for.
I feel like I need to learn embedded/low power stuff to truly understand what I can do with things like these. I've had an MSP430 sitting around in my desk for roughly 15 years now, and I could never think of what to do with that, either.
-
Comment on Tildes Survey #3: What country were you born in? (Results) in ~talk
-
Comment on Dubmood - Fighting Words (Razor1911) (2026) in ~music
Liru Link ParentAlways has been. Up until circa 2010.It turns out cybercrime is cool actually.
Always has been. Up until circa 2010.
-
Comment on Dubmood - Fighting Words (Razor1911) (2026) in ~music
Liru LinkAlternative title may as well be "Razor 1911 - Razor1911". Live Demoparty versionAlternative title may as well be "Razor 1911 - Razor1911".
Razor 1911s eponymous demo celebrating 40 years of activity on the scene.
Placed first at the Revision 2026 demo compo & the publics choice award.
https://www.pouet.net/prod.php?which=105954
Interesting but not surprising to see that it's due to the
/api/session/reset_passwordendpoint probably having some faulty logic. Important, yet not commonly used enough or interesting enough, business-wise, that it receives attention after it's been deployed.