A cement truck crashed near Winganon, Oklahoma in the 1950s and the mixer was too heavy to move. It’s still there; locals have painted it to look like an abandoned NASA
capsule.
https://www.amusingplanet.com/2015/10/the-cement-mixer-space-capsule-of.html
@pieist "Schnozz requires that you sever and eat your own testicles, so that you live a live of cool objectivity. Also, we dont' want you to reproduce"
I don't often retweet Twitter here, but:
#LedByDonkeys latest on tricky Tory #MichelleMone https://youtu.be/EmohU8A0cBw
If an astrophysicist says "the stars are but pinpricks in the dome of night through which the light of heaven can be seen", then it's perfectly reasonable for you, as a reasonably informed layperson, to tell him he's either lying or delusional.
An academic credential in the area someone's lying about doesn't make lies true.
OTOH I can just put basic http auth in front of it. I mean that's double-authentication the first time but one can just save that login and never see it again in any given browser.
... aaaand done.
So I've done something I didn't want to do: deployed a PHP-based webmail client on my server. There doesn't seem to be a stable, currently-maintained webmail client that isn't PHP.
Sure, enough, less than one day later, the logs are filled with attempts to run PHP remote exploits against it from all over the world.
Yes, I'm running an updated PHP: version 8.1 But am I really supposed to just assume that any and all attacks will fail? PHP has a TERRIBLE security record: historically it's more attack surface than functionality.
So I'm probably going to have to compromise and write something along the lines of the old port-knocking trick to enable the webmail interface when I need it, and turn it off again when I'm done.
I'm still boggled by the fact that nobody ever considers using a serious professional platform designed for grownups when writing webmail clients.
(Yes, i know you were making a very different point, but thought I'd mention it.)
Consulting SW Engineer, mostly Pacific Northwest these days.
Medical Informatics - Carrier-Grade Network Video Distribution - Real Time Clinical Telemetry
Formerly: Motorola, Tektronix, Intel, HP, Qualcomm, Nintendo; others you're less likely to have heard of.
"Millions for nonsense but not one cent for entropy."
Will code for pie. 🥧