‼️BREAKING: A critical flaw in Synology NAS devices lets attackers read and write any file on them without logging in.
The SQL injection bug in their login system scores 9.8 out of 10. A second flaw, in rsync, skips the login too.
Synology patched both today. Update ASAP.
First 24 hours with the Iphone Duo.. So far so good. I am missing face ID a little but having a tablet in your pocket is pretty awesome! Might do a small review on my blog shorlty.
Two years ago I open sourced my DIY CNC machine, which cost me £2,655.80 and 9 months of my spare time. The Fusion 360 project, the drawings, the bill of materials, the STLs, the wiring diagrams and the Mach3 profile, all for free.
People ask why I didn't sell the plans... the answer is simple. Selling the plans would have defeated the whole point of the project, shutting out the very people I built it for.
My goal was to build a capable, sturdy machine for as little money as possible. Industrial-grade larger footprint machines are well out of reach for most hobbyists and small woodworking businesses. With a few minor trade-offs, you can build my machine for a fraction of the price, with nothing more than basic workshop tools.
10,000+ downloads later, people all over the world send me photos of the machine I designed, now fully built and operational in their own workshops.
That's what I love about open source. It's for people. Nobody needs permission or a subscription to build their own tools. You can repair them, upgrade them, and write your own software, because you know them inside and out.
This fills me with joy like nothing else.
> wake up
> take a shit
> get out of bed
> check beep boop
> everyone saying ooga booga PHP
> wtf why
> look inside
> ultra mega fuck off exploit coming
> php2shell
> so bad PHP devs begs nerds to patch tomorrow
> proof of concept video released
> pwn website easily
> video has dancing anime lady?
> nobody explains why dancing anime lady
> no one even asks why proof of concept has dancing anime lady
> ok
> cybersecurity nerds bamboozled
> some saying will be up there with Log4J in severity
> goopocalypse
pic unrelated