puhtahtoe's recent activity
-
Comment on PHP warns it plans to release two emergency patches imminently in ~comp
-
Comment on PHP warns it plans to release two emergency patches imminently in ~comp
puhtahtoe Link ParentThe age of LLMs means that the moment a proof of concept became public, anyone could have a custom made tool to attack any PHP site to do whatever they want.The age of LLMs means that the moment a proof of concept became public, anyone could have a custom made tool to attack any PHP site to do whatever they want.
-
Comment on PHP warns it plans to release two emergency patches imminently in ~comp
puhtahtoe (edited )Link ParentIf a PHP dev is saying turning off a server would be sensible... I wish I could help you with the how since it looks like you're in a pickle but if you can figure it out you probably should. Edit:...If a PHP dev is saying turning off a server would be sensible...
I wish I could help you with the how since it looks like you're in a pickle but if you can figure it out you probably should.
Edit: Ironically, with the right know-how you could probably use the POC of the exploit to send a shutdown command to the server
-
Comment on eMudhra intermediate CA compromise in ~tech
puhtahtoe Link ParentReading further into this, I found this comment from the Chrome Root Program indicating that at minimum, eMudhra is in time out....Reading further into this, I found this comment from the Chrome Root Program indicating that at minimum, eMudhra is in time out.
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/VAgSvefvAAAJ
We will soon release an update to the Chrome Root Store (Version 43) that removes the upstream eMudhra root certificate that signed these intermediates. Although this change is not necessary to protect Chrome users, who have been protected via CRLSet since October 17, it helps protect downstream consumers of the Chrome Root Store that do not consume CRLSet. The corresponding Sectigo root responsible for the cross-certificates was removed from the Chrome Root Store in April 2025.
Inclusion in the Chrome Root Store requires that a CA Owner continuously demonstrate the technical competence and operational rigor necessary to protect Chrome users. Due to the seriousness of this incident, the Chrome Root Program is conducting a thorough evaluation regarding the status of eMudhra’s remaining CA certificate to ensure these standards continue to be met. We will share further updates as our review progresses.
-
Comment on eMudhra intermediate CA compromise in ~tech
puhtahtoe LinkI'm curious what, if anything, this will mean for eMudhra as a company in the future. People make mistakes and lots of internet infrastructure companies take turns causing outages but this seems...I'm curious what, if anything, this will mean for eMudhra as a company in the future. People make mistakes and lots of internet infrastructure companies take turns causing outages but this seems like it was beyond gross negligence. I imagine there are some awkward conversations happening.
-
Comment on Grand Theft Auto VI | Launch trailer in ~games
puhtahtoe Link ParentI've never played any GTA and have never felt much of a desire to. I gotta admit, some of the info that's come out about the technical systems in 6 have me intrigued but that's more about the tech...I've never played any GTA and have never felt much of a desire to.
I gotta admit, some of the info that's come out about the technical systems in 6 have me intrigued but that's more about the tech than the game.
Maybe one day I'll try it but I'm in no hurry. I'm sure I'll hear more than I ever care to about the game for the foreseeable future
-
Comment on Who gets the Steam Frame? Did Valve pick you for the first wave? in ~games
-
Comment on Googlebook revealed and ready for pre-order in ~tech
puhtahtoe Link ParentThere's a desktop website for Google messages that you can link to your phone and text from. https://messages.google.com/web/ I know it's not native but visiting a website is pretty darn close.There's a desktop website for Google messages that you can link to your phone and text from.
https://messages.google.com/web/
I know it's not native but visiting a website is pretty darn close.
-
Comment on Who gets the Steam Frame? Did Valve pick you for the first wave? in ~games
puhtahtoe (edited )Link ParentI haven't gotten mine but you have a three day window to purchase when your turn comes up so as long as you're checking your email at least every other day you should be fine. You can also just...I haven't gotten mine but you have a three day window to purchase when your turn comes up so as long as you're checking your email at least every other day you should be fine.
You can also just check the product page. Supposedly when you're eligible you'll be able to purchase it there regardless of if you look at the email or not.
-
Comment on Who gets the Steam Frame? Did Valve pick you for the first wave? in ~games
puhtahtoe LinkI got a reservation email for the 256GB model. I'll be getting the strap accessories. The controller straps really seem like they're an integral part of the controller and should be part of the...I got a reservation email for the 256GB model.
I'll be getting the strap accessories. The controller straps really seem like they're an integral part of the controller and should be part of the base kit but whatever, what can you do.
Probably won't bother with the charger since I have more USB-C cables and power adapters lying around than I know what to do with.
-
Comment on McDonald’s built a 515-page dossier on me in ~tech
puhtahtoe Link ParentI just don't see the point of ordering via the app instead of at the speaker. With the app I'd have to sit in the parking lot and go through the interface to do the order then drive up to the...I just don't see the point of ordering via the app instead of at the speaker.
With the app I'd have to sit in the parking lot and go through the interface to do the order then drive up to the speaker anyway and spend maybe a few seconds less telling them my app info than if I just told them what I wanted.
I guess I could order at home before driving to the restaurant but my concern with doing that is always that they might make it as soon as the order comes in so my food sits there getting cold until I arrive.
I suppose I can see the use if you're doing a particularly large order but for individuals I don't get the benefit.
-
Comment on McDonald’s built a 515-page dossier on me in ~tech
puhtahtoe Link ParentWhat's in the push notification information? Are they able to see how/if you interacted with them?What's in the push notification information? Are they able to see how/if you interacted with them?
-
Comment on Steam Frame product page is now live in ~games
puhtahtoe Link ParentYeah I was worried it might end up being $1,500+ I'm still really hopeful about VR and the tech is just so cool to me so I'll be hoping to pick one of these up. Anything Meta is a complete non...Yeah I was worried it might end up being $1,500+
I'm still really hopeful about VR and the tech is just so cool to me so I'll be hoping to pick one of these up.
Anything Meta is a complete non starter to me after all of their privacy violations. I don't care how much cheaper the hardware might be when you're paying for it with all of your privacy
-
Comment on KOReader: custom reader software for eink devices in ~books
puhtahtoe Link ParentFor me, KOReader is part of the toolbox that lets me fully own my ebooks. I moved away from Amazon when they announced they'd be removing the ability to download your ebooks a year or two ago. I...For me, KOReader is part of the toolbox that lets me fully own my ebooks.
I moved away from Amazon when they announced they'd be removing the ability to download your ebooks a year or two ago. I didn't want Amazon to be able to take away my books at their whim so I downloaded my library, put it in Calibre, and now use KOReader to access it.
You can actually use Calibre with a plain Kobo but I like the ability to sync progress and reading statistics between my phone and my ereader and that's something that only KOReader does decently right now with a library you fully own.
-
Comment on Avatar: Seven Havens | Official trailer in ~tv
puhtahtoe (edited )LinkAs a Wheel of Time fan I'm kind of a sucker for a "the last incarnation of the hero figure caused an apocalypse and now everyone fears the appearance of the next incarnation" story. Definitely...As a Wheel of Time fan I'm kind of a sucker for a "the last incarnation of the hero figure caused an apocalypse and now everyone fears the appearance of the next incarnation" story.
Definitely looking forward to this.
-
Comment on Eye of the Tiger on a dot matrix printer in ~music
puhtahtoe LinkIf you like this you may also like the Floppotron. This guy recorded dozens of songs on his rig of floppy drives, scanners, and more. https://youtube.com/@pawezadrozniak?si=j08Pn-CxLacq2n2iIf you like this you may also like the Floppotron.
This guy recorded dozens of songs on his rig of floppy drives, scanners, and more.
-
Comment on Which privacy-friendly home appliances exist? e.g. robot vacuum cleaners. in ~tech
puhtahtoe Link ParentBased on what I know about Hypfer, I am fairly certain that mass adoption would actually be the opposite of what he wants.Based on what I know about Hypfer, I am fairly certain that mass adoption would actually be the opposite of what he wants.
-
Comment on Why your Amazon order confirmation emails have become so unhelpful in ~tech
puhtahtoe Link ParentI had an office chair cover classified as "bedding" and the clip art was a pillow. I thought I had ordered something by mistake until I opened the Amazon order page.I had an office chair cover classified as "bedding" and the clip art was a pillow. I thought I had ordered something by mistake until I opened the Amazon order page.
-
Comment on Which privacy-friendly home appliances exist? e.g. robot vacuum cleaners. in ~tech
puhtahtoe (edited )Link ParentValetudo is incredible and I can definitely recommend it but with some caution. I'm not going to get deep into it here but Hypfer (the creator and sole developer of Valetudo) is very particular...Valetudo is incredible and I can definitely recommend it but with some caution.
I'm not going to get deep into it here but Hypfer (the creator and sole developer of Valetudo) is very particular about the project. He essentially views the project and the Telegram group as something like his house and letting people use the project or join the group is like letting visitors into his living room. Because he's letting visitors into his "living room" he has no problem kicking out anyone who mildly annoys him.
There's a custom PCB thing that you need to root some vacuum models. The design and instructions are all freely available but Hypfer is very insistent that (barring a physical disability) you must buy the parts and assemble it yourself. He essentially says that if you buy a pre-assembled PCB from someone then you're a mindless consumer and you've been scammed.
If you search you can find a LOT of stories from people who came away from an interaction with Hypfer either banned or verbally thrashed. I'll just give one example - a while back there was a coming Home Assistant update that would break Valetudo's MQTT integration with Home Assistant. One of the Home Assistant devs opened an issue in the Valetudo repo as just a courtesy notification that this change was coming. Hypfer went off on a rant against the dev for daring to waste his time on an issue when the dev should have known that Hypfer would see the coming change in the release notes and implement the necessary change.
Valetudo the software is great - just tread lightly if you need support.
https://old.reddit.com/r/valetudorobotusers exists as a somewhat more welcoming place for questions.
-
Comment on <deleted topic> in ~food
puhtahtoe Link ParentI'm convinced it started as a PR campaign to make him more relatable.I'm convinced it started as a PR campaign to make him more relatable.
https://fedi.katze.sh/@elise/117479383739450605
The patch may be incomplete. I'm not knowledgeable enough to verify this
Edit: also https://x.com/Dinosn/status/2112962329772245311/photo/1