RE: https://bots.robots.rodeo/@scream/117486344102452183

❤️

RE: https://bots.robots.rodeo/@scream/117482332972393853

❤️

Today wasn't horrible.

It wasn't great, but based on my reading last night, I expected the proper scale of events. One of the other devs has some sysadmin skills as well, and so we slogged through getting all the containers updated to the proper PHP versions.

Had some discussions on how to mitigate this in the future. I blue skied it, but since I'm the only one who thought of ideas, kudos to me.

So we lost a day of the sprint, but everything's back up, and hopefully there won't be a new exploit tomorrow.

I'm the meantime, some of y'all, for some reason, think you're funny. It's ok. I've been wrong before, too.

RE: https://bots.robots.rodeo/@scream/117480564178919754

❤️

I bet this is how @catsalad takes down services like Azure.

https://www.youtube.com/watch?v=VeFMdVIFsgs

RE: https://bots.robots.rodeo/@scream/117442933393937030

❤️

Is anyone in my followers running a Satisfactory multiplayer game?

RE: https://icy.wyvern.rip/notes/arzvcyio5ykdgx8z

Pretty sure Charlie Kirk said something similar regarding the 2nd amendment.

🤷‍♂️

What the actual fuck? They're going to let a South African Nazi touch the U.S. military?

Go to hell, you bastard.

https://newrepublic.com/post/216045/pete-hegseth-elon-musk-newt-gingrich-help-lead-military?utm_source=fark&utm_medium=website&utm_content=link&utm_campaign=fark&ICID=ref_fark

Hm. This is going to be a bad mental health day for me.

Ah well, there always @scream

Another toot reminded me of a friend of mine excited about his wife being pregnant. He brought sonogram pictures.

So I take the pictures, rotate them, scowl, and tell him, "I think that's a platypus, dude.". Fortunately we're good enough friends that I just got an eye roll.

So, baby gets born, and well, I'm me. I get the kid a plushy platypus. His wife knows how I am, so I just got an eye roll.

Turns out that platypus was actually his favorite thing for at least 4 years. He brought it up to me one day and asked me, "what does it say?" I parsed that as "what sound does it make?", and you answer a kid's questions. Period.

Thing is, I had no idea. So I rotated it, looked at the body structure, and said, "maybe it sounds like (small grunt gurgle)." YouTube was still new, but I found a video, and showed it to him. I wasn't too far off.

He laughed and ran off to his room, making his platypus "speak". Wife tells me, "And that's why we put up with you, Oatmeal."

This weekend beige sucks. I want my money back.

You're in her DMs.

I *am* her DM, running a classic "Keep on the Borderlands" adventure.

We are not the same.

RE: https://mas.to/@carnage4life/117238859503164725

Here's your plan.

Unplug it. Back hoe. @catsalad

The IAM person brings in their senior. We eventually get something working after they iterate through their XML configs and remappings.

It turns out that the WAF has been set to filter out any header with a _ in it.

We're converting our apps to use Shibboleth. We've had meetings with IAM. We've discussed the shape of the data we're getting from them. All good.

Time to code.

Unexpected results, as in we're not getting any of the expected data. Get my ducks in a row, ask IAM if I've got something out of place. They offer debug approaches. Great. Let's get on that. Eventually I eliminate every possibility I can think of.

IAM: "Get the values from the session." Shows me a debug screen on their side that show the expected data.

Ok, so I recheck the login process, with recording on. No "session". This is relevant. I find a big old blob that might be base64 encoded. Turns out it is, but it decodes into XML that looks like it has its own encrypted data. Just to make sure, I check with IAM if this is what they meant, 'cause I'm going to need a key, but ok.

IAM: "No, it's in the session."

Ok, why don't you show this to me. I speak Java, let's read up. Blah blah request.getSomething(). Here's where we get it from the session. Cool. Where is that transferred to me? No, it's in the session. Great how do I get to it. You should have the session. Ok, look, I have a cookie that I remind you of so you know who I am so you can... Anyone? Anyone? Right. Read the session.

IAM: "So now you see how to read the session."

Pause. Count to 10 in Russian. Ok. Let's try this. You're session lives in your machine. My machine is not your machine and we can only talk through your IP address and my URI. At this stage, you're not even aware of my browser. So how would any of this data get from you to me?

IAM: "...

Shingles vaccine part 1 yesterday.

Dying today.

RE: https://social.lansky.name/@hn50/117144256937714821

There is no known cure for Neurotypical Syndrome.

RE: https://loops.video/v/hDOi6DKPim

Chef's kiss.