PaoloBarbolini

5 ms·

1.
by PaoloBarbolini 17d ago
Is this going to apply just to ` https://gitlab.com/api/v4/:rest_of_the_url ` endpoints, or also to the API-ish endpoints like ` https://gitlab.com/:org/:repo/raw/HEAD/:path `?
2.
by PaoloBarbolini 19d ago
Even something like Qwen 3.8 27b could do this. Lookup certificate transparency and continue from there https://crt.sh/?Identity=baseten.co&exclude=expired&match=IL...
3.
by PaoloBarbolini 25d ago
If you are self-hosting Forgejo and haven't done it yet, consider creating a Codeberg account and following https://codeberg.org/forgejo/security-announcements/issues
4.
by PaoloBarbolini 27d ago
A few years ago a service for which we had just implemented a scraper for (they had no API, and the customer needed info from 1000s of accounts) added a captcha right after we had implemented the scraper. We quickly figured out that the ser
5.
by PaoloBarbolini 27d ago
I don't get what they were trying to prove. An LLM on it's own, little time and money... what were they expecting it to do? Not that I expect that different conditions would necessarily improve the situation, but seriously they di
6.
by PaoloBarbolini 2mo ago
They confirmed on LinkedIn that they are working on it. Also, they have a feature request that has been getting many votes recently: https://feature-request.scaleway.com/posts/1251/prompt-cachi...
7.
by PaoloBarbolini 5mo ago
Why do we still put up with GNOME? I've spent the last 10 years off and on from Linux. Had I used something other than GNOME, I believe my experience would have been better. I've been on KDE for the last 3-4 years and things work
8.
by PaoloBarbolini 10mo ago
There are many things they don't seem to understand about their own product. https://github.com/nats-io/nats.rs/issues/1253#issuecomment-...
9.
by PaoloBarbolini 10mo ago
The repo link goes to a 404 page.
10.
by PaoloBarbolini 11mo ago
The image could have been encoded with a high compression ratio, or even something like OxiPNG. In that case, while re-encoding it wouldn't lose quality, it could still have the side-effect of making the file bigger.
11.
by PaoloBarbolini 1y ago
A few years ago I convinced a friend to make their blog using Ghost 4. Very bad decision. I haven't kept up with it but at the time they supported only 1 mailing list service. What kind of open source project does that kind of vendor l
12.
by PaoloBarbolini 1y ago
That's "easy" when all they have to do is to package https://github.com/raspberrypi/linux
13.
by PaoloBarbolini 1y ago
I've had the same experience and I fixed part of the problem by writing my own Rust client, Watermelon. It's still missing a lot of features but at least I'm not blocked by weird decisions taken by upstream.
14.
by PaoloBarbolini 1y ago
See also the issue: https://github.com/nats-io/nats-server/issues/6832 Archived version: https://web.archive.org/web/20250425154144/https://github.co...
15.
by PaoloBarbolini 2y ago
I'm also finding that this has happened already in the past and GitHub didn't cleanup the spam entirely, like: https://github.com/Xyntax/1000php/issues/1#issuecomment-2318...
16.
by PaoloBarbolini 2y ago
Before this event, I've has another encounter with GitHub. What happened is that an AI coding assistance startup seemed to have created bots that would: 1. find new GitHub issues on random repos 2. fork the repo 3. make a commit, tryin
17.
by PaoloBarbolini 2y ago
Amazing work! This is the first time I've seen this kind of issue fixed so quickly. GitHub should learn from this.
18.
by PaoloBarbolini 2y ago
Link to search results: https://github.com/search?q=%22We+have+detected+a+login+atte...
19.
GitHub Phishing Campaign making use of OAuth and render.com hosted site
8 points by PaoloBarbolini 2y ago|7 comments
20.
by PaoloBarbolini 2y ago
`curl https://myip.wtf/json ` too is nice to use when debugging things
21.
by PaoloBarbolini 3y ago
Same for Rust. In the short term we're trying to solve it on the user's side with https://crates.io/crates/cargo-goggles , but in the long term the registry should probably do it.
22.
cargo-goggles: verify reproducibility of Rust libs releases(crates.io)
8 points by PaoloBarbolini 3y ago|0 comments
23.
by PaoloBarbolini 3y ago
Could you provide an example?
24.
by PaoloBarbolini 3y ago
It means they protect themselves from layer 3 and 4 DDoS. For layer 7 you're mostly on your own. That's what most companies mean when they talk about DDoS anyway.
25.
by PaoloBarbolini 3y ago
This is the reason I've never used all of these user-facing serverless services. The price depends on the usage, but if anything goes wrong they are the ones to decide what you pay. It's not comfortable thinking that you could scr
26.
by PaoloBarbolini 3y ago
Certificates can be issued for IPs too, CAs don't usually do it though.
27.
by PaoloBarbolini 3y ago
According to the documentation[1] Kafka is just one of the supported inputs for ingestion, so it should be possible to run Quickwit without it if you're not intending to write logs into Kafka. Jaeger also seems like another optional de
28.
by PaoloBarbolini 3y ago
I've been trying their Arm servers for a while and I've noticed some differences in the colors in htop for Debian 12, as if there were a slight difference between the x86_64 and the aarch64 image. Other than that everything's
29.
by PaoloBarbolini 3y ago
Also if you're worried about the server having a different timestamp and possibly not having configured the connection timestamp correctly, as the following test shows Postgres always specifies the timezone of the timestamp it's g
30.
by PaoloBarbolini 4y ago
Why are you doing a separate request for every /8? I feel like this would be the first thing that would kill the site, if it weren't for the fact you're on HTTP, the browser is talking HTTP/1.1, so it only does 6 concurr

More ›