We were able to get full create, read, update and delete (CRUD) access & shell access to CBSE's prod servers (as mentioned in their circular https://t.co/MFiu5xU1DF). This is disastrous. Proof archive is at https://t.co/LWWqKBOGjv.
Prod URL (might be taken down): https://t.co/gbZKz3d65V
@Namishsahu01@ni5arga The guy basically got full admin access. Post that, getting a reverse shell, privilege escalatation and leaking some critical env vars doesn't seem like a very far fetched idea.
I remember breaking CampusLynx captcha (generation was on frontend π€¦ββοΈ)
(my college uses campuslynx..)
5. @feynon_ is the founder of Tiles, a privacy-focused AI assistant built around local models and ATProto.
At the Mumbai meetup, he will be speaking about building privacy-first AI products using local models and open protocols.
unpopular opinion, but project hail mary was an okay movie - just an average fairy tale. im tired of seeing people hyping it up on x as if its the generational golden egg
Was really bored today and figured I'd update my url-switcher extension to support quick switching of google docs and related products (sheets, slides etc.). Thanks @ChromiumDev for the lightning fast review!
New package! PhoenixReplay β session recording and replay for Phoenix LiveView.
β Records assigns server-side, replays by re-rendering the actual view β pixel-perfect, not a DOM approximation β Zero client-side JS β no bundle size impact, invisible to users β See actual server state during replay: changesets, Ecto structs, form data β Navigation, page transitions, live_patch β all captured in one session automatically β 30s session = 8 KB
rrweb and friends record DOM mutations client-side: they fight CORS, break on shadow DOM, drift when assets change, and produce approximate replays with visual glitches. None of that applies here β LiveView templates are pure functions, so same assigns = same HTML. The BEAM just keeps the state.
More coming soon.
https://t.co/vlsnrbpiMn
Overwhelmed by the support over the last 24 hours, not something I was looking for and expecting when I recorded that podcast on a whim. Thanks so much to everyone with words of encouragement, the new sponsors we've brought on, and people who've used their platforms to help in any way, I'm extremely touched β€οΈ
I feel like I have to make it clear though that we've still got a fine business (even if things are trending down), just not a great one anymore. Had to make a really crushing change and did everything I could to do it in the most generous and gracious way possible, but at the new size we're okay. We're comfortable, and things like our partner program are helping a lot to fund the framework more directly instead of selling products that are more at risk of disruption. We don't need anyone to rescue us, we've got lots of time and space to try new ideas and see what works ππ»
I'm optimistic we'll figure out how to get things moving in the right direction, but even if we just have be a smaller business with less budget than we've had in the past that's okay too β€οΈ
@ankk98 years of trying to not expose personal data to ad networks by using cookie/ad blockers to literally giving the same organisations your data voluntarily is crazy
@karlclement@mikehostetler We've been using Elixir to power real time player versus player games as well a lot of our CRUD ops @PlayGamezop for over 8+ years!
Being able to build generic realtime game servers was the key that made us took this route - and this was back when server engines weren't mature.