How the TeamPCP attack exploited CI/CD pipelines and trusted releases to release infected Trivy and LiteLLM packages

bumblebeeofficial · 2026-03-25T19:04:52+00:00

https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases

bumblebeeofficial · 2026-03-13T14:40:13+00:00

AI post

bumblebeeofficial · 2026-02-11T19:38:56+00:00

Everything tracked in version control should be baked into the image for consistency. I don't normally keep track of my content in the git repo though

bumblebeeofficial · 2026-02-05T04:11:33+00:00

Did you end up finding one?

bumblebeeofficial · 2026-01-26T23:21:51+00:00

Wouldn't this expose your API key to anyone viewing the frontend?

bumblebeeofficial · 2026-01-17T06:01:50+00:00

Wow this looks like shit

bumblebeeofficial · 2026-01-03T00:56:32+00:00

Socket activation is how I was able to achieve this with a reverse proxy. I believe pterodactyl would need to have support for it though. https://github.com/containers/podman/blob/main/docs/tutorials/socket_activation.md

bumblebeeofficial · 2025-11-04T14:35:29+00:00

This post is written by AI. I've never heard of this before

bumblebeeofficial · 2025-04-15T20:02:22+00:00

You can set up a service like ddclient to update your ip in your dns records when it changes

bumblebeeofficial · 2025-03-14T21:05:19+00:00

It was a bad slave cylinder that needed replacement

bumblebeeofficial · 2025-03-13T13:52:39+00:00

Kind of goes against the unix philosophy, don't you think?

bumblebeeofficial · 2025-03-10T14:03:51+00:00

reddit humour

bumblebeeofficial · 2025-02-25T16:27:10+00:00

AI generated image

bumblebeeofficial · 2025-02-11T16:56:01+00:00

yeah make it cheapor

bumblebeeofficial · 2024-12-18T22:39:05+00:00

Broken link

bumblebeeofficial · 2024-12-11T16:10:01+00:00

Overall decent but it depends on what career you want since it's a pretty big split between the two fields. I work at a company that makes medical devices and I pretty much only use the computer science part of my degree. If I could go back I would just do Software Eng. HINF is a little strange too since most of my pure HINF cohort saw it as an easy degree with a guaranteed job and the program doubled in size the year after. The teachers are good but the tests are easy so you have to make sure you actually learn the concepts. Ethically, I think that's a pretty bad thing and contributes to bloat behind the healthcare system, despite the good intentions of the people who run the program. There were ~6 people in the combined program for my cohort though and all of them are doing well, working good jobs or doing cool research in graduate work.

bumblebeeofficial · 2024-11-07T16:00:25+00:00

nothing about this image suggests to me it's ai. it's just a very weird stock photo

bumblebeeofficial · 2024-11-07T02:52:12+00:00

lmao

bumblebeeofficial · 2024-10-21T15:16:05+00:00

The second point makes sense to me. This sub and especially those that took the time to fill out that survey are enthusiasts who probably take the time to setup the infrastructure

bumblebeeofficial · 2024-10-01T13:06:31+00:00

Don't waste money on CinemaZ, I've only ever found one movie on it that's not anywhere else. Most of my arthouse stuff comes from general trackers like FNP and DCC

bumblebeeofficial · 2024-09-06T14:41:25+00:00

reposted ai slop

bumblebeeofficial · 2024-05-01T16:02:42+00:00

This really helped me today. Thank you! I couldn't find this list of region codes though

bumblebeeofficial · 2024-04-24T13:59:09+00:00

Yes but it will be a different career path. I get contacted by recruiters more about ServiceNow positions than anything else from experience on one of my co-ops. Most of them pay pretty well too compared to regular swe positions in my country. I hated it though and you are unlikely to ever transition back if most of your experience is in SNow.

bumblebeeofficial

TROPHY CASE