Liru's recent activity
-
Comment on Timasomo 2026: Week 3 Updates in ~creative.timasomo
-
Comment on PHP warns it plans to release two emergency patches imminently in ~comp
Liru (edited )Link ParentThis is basically catastrophic, probably at LEVELS EXCEEDING Heartbleed or Shellshock from like a decade ago. From my circles, it seems to be as easy as basically "paste something into the address...This is basically catastrophic, probably at
about the scale ofLEVELS EXCEEDING Heartbleed or Shellshock from like a decade ago. From my circles, it seems to be as easy as basically "paste something into the address bar, free server". -
Comment on eMudhra intermediate CA compromise in ~tech
Liru Link ParentI'm actually curious as to how old, primitive, or small a model has to be before it would fail this. Could be something to look into.I'm actually curious as to how old, primitive, or small a model has to be before it would fail this. Could be something to look into.
-
Comment on eMudhra intermediate CA compromise in ~tech
Liru Link ParentAll of them are one byte each!? Edit: This is even more hilarious.All of them are one byte each!?
Edit:
Mozilla was able to recover the private keys for the impacted certificates independently @ 21:48 UTC (note: less than two hours after receiving the report) and without any knowledge of the method the original reporter used, confirming the key generation process was flawed and is trivial to exploit.
This is even more hilarious.
-
Comment on I survived the certificate expiration of October 19th 2026 and all I got was to make a silly shitpost in ~tildes
Liru Link ParentYeah, I saw that and was wondering about that since I wanted to do a quick check after the outage. Firefox straight up just said "No, bad Liru, no access for you", which I guess is the correct...Yeah, I saw that and was wondering about that since I wanted to do a quick check after the outage. Firefox straight up just said "No, bad Liru, no access for you", which I guess is the correct behaviour? Unable to even add an exception.
Guess your ISP knows you've started playing Polish games now.
-
Comment on I survived the certificate expiration of October 19th 2026 and all I got was to make a silly shitpost in ~tildes
Liru LinkMade some Jalapeno poppers from scratch. Damn, you posted this fast.How did you avoid withering away without your favorite social media?
Made some Jalapeno poppers from scratch.
Damn, you posted this fast.
-
Comment on Taskmaster Season 22, Episode 1 - 'In my mind there’s a river.' | Full episode in ~tv
Liru Link ParentToo lazy to actually make an edit, but Alex and Richard at the end of the episode was basically this bit from TF2 machinima realized. (Relevant segment starts about 1:18 in, up to the end, in case...Too lazy to actually make an edit, but Alex and Richard at the end of the episode was basically this bit from TF2 machinima realized. (Relevant segment starts about 1:18 in, up to the end, in case your device doesn't skip to that part.)
-
Comment on Timasomo 2026: Week 2 Updates in ~creative.timasomo
Liru LinkRoguelike Game Mod Previously: [1] I think I managed to knock out the most annoying parts of the modding process, which is "creating UI elements that don't look totally like crap" (despite taking...Roguelike Game Mod
Previously: [1]
I think I managed to knock out the most annoying parts of the modding process, which is "creating UI elements that don't look totally like crap" (despite taking probably far too long to get it to that state), and getting a few sample buffs and debuffs done. I still have a ridiculous amount to go through and brainstorm (at least 60ish, by idealized standards, very likely to be more) and then implement on top of that, but it feels like I got the main pain out of the way at the moment. Now I just need the brain to do the thinky for what other buffs and debuffs to add.
Side note: I've tried looking into a bunch of other mods in the past week as well, to see what they do. There is a LOT of info about different mods and tweaks and what they do, and what's extremely frustrating is that they all assume that you know all about all the other mods and refuse to elaborate on it any further, which means that tracing down which mods came before/after which others, and what they implement/rely on, is a huge pain. There was a reference to one mod framework that seemed to have a lot of good changes, but I honestly can't tell what it is because it's part of another bigger mod only, and the bigger mod doesn't elaborate on it anywhere at all or what it does or how it changes development. I'm pretty sure that a shitton of knowledge is passed down orally or in discord communities, but frankly, fuck that, not touching it, just gonna flip 'em the bird and continue on.
-
Comment on Timasomo 2026: Week 1 Updates in ~creative.timasomo
Liru LinkRoguelike Game Mod Didn't get much time to work on it since I only had two days before deciding to actually do it and now, but I did manage to set up the SDK tools needed to work on it. I spent...Roguelike Game Mod
Didn't get much time to work on it since I only had two days before deciding to actually do it and now, but I did manage to set up the SDK tools needed to work on it. I spent some time looking at and organizing other mods that are popular for the game to see what changes others typically do, since I haven't modded this for like two decades now.
I also started work on thinking of "buffs/abilities/talents" and "debuffs", as well as per-mission challenges, to actually implement.
I'm not sure to what extent this will work out, but I figure that it's at least worth a shot. The big challenge is thinking of buffs can be given in FPS games that aren't super generic like "extra damage" or "faster reload" or stuff like that.
-
Margaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90
29 votes -
Comment on What single episode of a show would you recommend as a standalone? in ~tv
Liru Link ParentI think that Mythic Quest's "Backstory!" (S02E06) also fits in this category. The episode itself is basically about a young man who loves scifi and wants to write his own stories going to work as...I think that Mythic Quest's "Backstory!" (S02E06) also fits in this category. The episode itself is basically about a young man who loves scifi and wants to write his own stories going to work as a copy editor for a publication, meeting other people who also want to write their own stories, and slowly realizing that being a fan of something doesn't necessarily lead to being good at that thing.
The context needed for it is minor (basically knowing what the series itself is about), and even watching watching the series itself beforehand gives only bits and pieces of extra context about a character that was mostly used for comic relief until that point, mostly the viewer asking themself "how did this guy win an award for his work when all his ideas are super hacky?" It left a bigger impression on me than Dark Quiet Death since I've watched similar things play out in front of me in real time.
Also, it has Josh Brener in the lead role here, which was a bit distracting since I just see him as Big Head from Silicon Valley, but he did such a good job that I forgot about it a few scenes in.
-
Comment on Timasomo 2026: Roll Call in ~creative.timasomo
Liru LinkI'm tentatively going forward with this. I've had to drop out of all previous Timasomos that I've participated in due to external factors. I'm gambling on that not happening yet again. I'll be...I'm tentatively going forward with this. I've had to drop out of all previous Timasomos that I've participated in due to external factors. I'm gambling on that not happening yet again.
I'll be trying to make a roguelike/lite mod for an old game. (Should be trivial to figure out which one, but that's not important right now.)
-
Comment on Midweek Movie Free Talk in ~movies
Liru LinkI just wanted to pop in here to say: Watch Mayday (2026), which came out today on Apple TV. It's about a Navy pilot ( Ryan Reynolds) getting shot down behind enemy lines during the cold war while...I just wanted to pop in here to say:
Watch Mayday (2026), which came out today on Apple TV.
It's about a Navy pilot (
DeadpoolRyan Reynolds) getting shot down behind enemy lines during the cold war while on a recon mission and trying to get out of the Soviet Union with the help of a former KGB agent who's a massive fan of Top Gun.I'm mostly recommending it because a friend of mine has a role in it, but it was actually an entertaining movie for me. It has a good mix of action and comedy (some actual laughs from me, which is rare even for a comedy these days), some neat cinematography, and some good quiet moments.
It might be a bit too on the nose with the "you are not immune to propaganda" theme though.Scratch that, after talking with a few people, it seems that that particular theme didn't even come to their mind after watching it; those people tend to view movies as "content" though, so your mileage may vary. -
Comment on China’s YouTube, Bilibili, plans global expansion, English-language site in ~tech
-
Comment on Which privacy-friendly home appliances exist? e.g. robot vacuum cleaners. in ~tech
Liru Link ParentI feel that the Valetudo is not a community section of the "Why not Valetudo" page is pretty interesting as well. Maybe only tangentially related to the automod ban rules, but still.I feel that the Valetudo is not a community section of the "Why not Valetudo" page is pretty interesting as well. Maybe only tangentially related to the automod ban rules, but still.
-
Comment on Framework customer info has been breached in ~tech
Liru Link ParentInteresting but not surprising to see that it's due to the /api/session/reset_password endpoint probably having some faulty logic. Important, yet not commonly used enough or interesting enough,...Here's the metabase blog post.
Interesting but not surprising to see that it's due to the
/api/session/reset_passwordendpoint probably having some faulty logic. Important, yet not commonly used enough or interesting enough, business-wise, that it receives attention after it's been deployed. -
Framework customer info has been breached
Just got this email from Framework: Dear Valued Framework Customer, We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an...
Just got this email from Framework:
Dear Valued Framework Customer,
We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an attacker accessing customer names, email addresses, phone numbers, and addresses. Your information was in the database that was accessed in this breach. This breach did not include order or payment information.
We have full details on the incident below. We are deeply sorry for this breach of information, and are reviewing and improving our methodology for data storage in external database vendors.
We are also in the process of notifying the regulatory authorities in each region where relevant regulations exist. Note that while regulations in most regions do not require notification for breaches of names, email addresses, phone numbers, and addresses, we are sending this email to you regardless to ensure you have visibility and can take any actions needed.
What happened?
On August 6th, 2026 at 9am Pacific Time, Metabase notified us of a breach of their systems with the following email message:
On Monday, August 3, we discovered that Metabase Cloud was attacked by someone utilizing an unknown (“0-day”) security vulnerability in versions 1.58 and above. We immediately blocked the endpoints used for the attack, then quickly identified and patched the vulnerability. We notified law enforcement, and we have engaged with a third party forensics firm to conduct an independent investigation.
Your instance of Metabase was vulnerable to this 0-day. Therefore, to protect your company, we recommend you:
Rotate the credentials for every database connected to your instance; and
Review the admin accounts on your instance and remove anything you don't recognize.
We also discovered that the attacker was able to gain access to your instance. We created a report on the actions we believe the attacker took on your instance, which includes log files, and which you can get from the Metabase Store at [removed url].
(If you do not have access to the Metabase Store, are having issues accessing the report, or do not want to click on a link in an unexpected email, you can log into your instance directly and reach us at Help > Get help in the grid menu in the upper right hand corner. We'll confirm this message is from us and email you the report.)
This report is based on our own application logs. We did not query or read the data in your connected databases.
Depending on the jurisdictions in which you operate and kinds of data your instance connects to, you may have notification obligations under applicable laws. If you have concerns in this regard, we recommend you assess potential notification obligations with your company’s legal or compliance experts.
We regret any inconvenience this incident may cause you, and we are here to support you. If you have questions, please reply to this email or email us at [removed email address], and we'll get back to you as quickly as we can.
Sameer Al-Sakran
Founder and CEO
Metabase
We immediately investigated the logs Metabase provided to us and confirmed that our database instance was accessed by the attacker. We confirmed that the following information was accessed:
- Full name
- Email address
- Login IPs
- Billing and shipping address information
- Country
- Address
- City
- State
- Zip code
- Phone number
- Company
For Framework for Business customers, we are investigating whether the following information may additionally have been accessed:
- Company
- Phone
- VAT
- EIN
- Billing Email
- No other personally identifiable information, order information, or payment information was accessed.
Note that Metabase has additionally flagged:
Important: This is a preliminary update based on our current knowledge.
We are working with a third-party forensic investigation firm to understand the full nature and scope of the event.
We are providing you this interim update in advance of completing our investigation to allow you to better understand any potential impact and secure your data.
Our investigation is ongoing and the information shared now is preliminary.
Please look at the application logs as well as the queries executed that are provided as separate files in the zip file for detailed activity and a potential timeline.
We’re providing you notice of the breach in the meantime to ensure you have the earliest possible visibility. In the event Metabase notifies us of additional information that impacts you, we will send a follow-up email.
What was done to resolve the issue?
After we were notified of the breach by Metabase, we rotated credentials on all databases associated with our Metabase instance and confirmed that there were no changes in admin access or access to systems outside of Metabase.
What steps have you taken to ensure this doesn’t happen in the future?
We are evaluating the breadth and depth of data shared with business intelligence platforms, and scoping down their access to only the columns required for analysis.
Nirav Patel and the Framework Team
53 votes -
Comment on Mojang has updated the system requirements for Minecraft: Java Edition, raising recommended system memory from 4GB to 16GB in ~games
Liru Link ParentRedstone, pistons, and things of that nature could also hurt it, not to mention anything that came out in the "recent" past that I probably don't know about.Redstone, pistons, and things of that nature could also hurt it, not to mention anything that came out in the "recent" past that I probably don't know about.
-
Comment on Formula 1 Belgian Grand Prix 2026 - Race Weekend Discussion in ~sports.motorsports
Liru Link ParentI feel like the 2021 race was interesting mostly in the "what's gonna happen next" way. "Garage football" and "marshal petanque" still make me laugh occasionally.I actually think the 2021 "race" was more interesting, even though it was like 3hrs of them doing literally nothing because of the downpour.
I feel like the 2021 race was interesting mostly in the "what's gonna happen next" way. "Garage football" and "marshal petanque" still make me laugh occasionally.
-
Comment on US House passes bill to ‘ditch the switch’ and make daylight saving time permanent in ~society
Liru Link ParentI've mentioned it in another comment here, but So You Want To Abolish Time Zones basically lays out why that's not really a good idea.I've mentioned it in another comment here, but So You Want To Abolish Time Zones basically lays out why that's not really a good idea.
FPS Game - Roguelike Game Mod
Previously: [1, 2]
For the past week, I mostly worked on basic ideas for talents/curses, and skills/abilities that should be added or modified. Didn't come up with too much that's clever, unfortunately. I still have a bit to go on making enough for there to be enough variety, from my point of view.
While I slowly come up with more modifiers to the base game, I've also been thinking about balance, and how often a player should be able to be forced to pick a talent and/or a curse. This may be the longest part of the testing, since it would require some playthroughs. I want to get to a point where it seems like those elements have impact after a bit and don't seem like just a small addition, but I don't want to keep bugging the player every few minutes and eventually end up with ridiculous amounts of stacks of everything near the end of the game. I need to properly think of what should actually trigger a choice, which may be even harder.
I might also need some playtesters just to see what others think of it and if balance needs to be tweaked somehow. Alternatively, I may just throw it out into the wild with an explicit disclaimer, maybe make it a bit on the harder side, and see what people think of it.
Mostly unrelated to actual progress, but: I fell down a rabbit hole with a certain element of the game and figured that there are two mods that, put together, would put the game at a decent "starting point". Those two mods still have a bunch of the original bugs that I was complaining about in a previous post, but they either add a lot of other elements or fix stuff that's harder to fix and analyze just in code. I figured that my changes can easily be rebased onto that anyway. The authors have put out a guide saying what I can do to integrate their mod into mine, but nothing on the other way around. I sent an email asking if doing that was okay... and got nothing back. I may actually have to "join the discord" to get an answer for that.