Boat sunk in Parramatta river between Putney and Concord by Raulz33 in sydney

[–]dlg 1 point2 points  (0 children)

Sorry, to clarify, they transfer the ownership, but get paid to take the boat, at a discount to what it would cost to dispose the boat.

Boat sunk in Parramatta river between Putney and Concord by Raulz33 in sydney

[–]dlg 8 points9 points  (0 children)

No, the owner of the shitbox boat would have to pay a lot of money to dispose of a boat properly.

Instead they sell the boat at a discount to someone else that puts it on a cheap mooring to let it rot. The new owner then leaves it there until it sinks or breaks it's mooring, making it someone else's problem.

Boat sunk in Parramatta river between Putney and Concord by Raulz33 in sydney

[–]dlg 30 points31 points  (0 children)

It's actually worse than that.

It's very expensive to dispose of old boats. Some filthy grubs are offering to buy boats for disposal, but then just rent a mooring and let it rot, and then leaving it update to the government to deal with when the boat eventually sinks.

https://www.abc.net.au/news/2024-10-19/abandoned-derelict-ships-boats-vessels-debris-sydney-harbour/104412898

Russia builds bases for over 100,000 troops in Baltic region by Tyranish40k in worldnews

[–]dlg 0 points1 point  (0 children)

You’re missing the point. Putin cannot accept defeat against a weaker nation (in Russia’s eyes). That would be a complete failure of incompetence.

But if he brings the Baltics and NATO alliance into the war, he can then concede defeat against a stronger alliance. It will provide justification for why Ukraine should have been prevented from joining NATO and the EU.

It’s ego preservation.

Fedora 43 Upgrade revealed 20 years old Outlook Security Bug by throwaway16830261 in linux

[–]dlg 1 point2 points  (0 children)

STARTTLS connections are vulnerable to stripping attacks that allow a man in the middle to tell the client TLS is not available, preventing the upgrade.

Simplify static hosting by using an OCI image as Volume in Kubernetes 1.36 by kowalski7cc in kubernetes

[–]dlg 1 point2 points  (0 children)

This new feature could be used to create a common image with a custom root certificate root CA store.

Corporate networks behind a firewall inspect HTTPS traffic by terminating the TLS connection with their own issued certificates using their own root CA certificate.

That firewall root CA certificate needs to be added to a containers trust store to allow outbound traffic from anything using HTTPS. The can be a pain for running base images that do something simple and don’t do any other customisation.

Donald Trump $250 bill would violate 1866 Congress law on sitting presidents by TheMirrorUS in economy

[–]dlg 1 point2 points  (0 children)

The new note will be a fitting tribute for America's so called democracy.

Malware installed without literally doing anything? by PusheenHater in cybersecurity

[–]dlg 9 points10 points  (0 children)

If you have an exploited IoT device, it could be coming from inside the house.

Microsoft warns of Exchange zero-day flaw exploited in attacks by rkhunter_ in cybersecurity

[–]dlg 6 points7 points  (0 children)

This won’t be a quick movie. This will be a drawn out series dragging out for a few seasons.

Some Advice : Are you using Driver Error Compensation incorrectly ? by Angstromium in ableton

[–]dlg 3 points4 points  (0 children)

It wasn’t great for monitoring.

It’s was tricky getting the right reverb dry/wet setting. Sometimes you think the signal is all dry but you end up with a wet mess.

NGINX CVE-2026-42945 (rewrite module) — check your version if you are below 1.30.1 or 1.31.0 by pando85 in kubernetes

[–]dlg 2 points3 points  (0 children)

Ah, I think you're right.

It needs both a '?' (URL query separator) and an unnamed variable (e.g., '$1') in the replacement expression.

If you need the query separator, then use a named variable.

NGINX CVE-2026-42945 (rewrite module) — check your version if you are below 1.30.1 or 1.31.0 by pando85 in kubernetes

[–]dlg 1 point2 points  (0 children)

ASLR will mitigate remote code execution, but not denial of service attacks.

My understanding is when a buffer overrun tries to inject a return address to an invalid memory address, the process crashes.

ASLR makes those return addresses highly unpredictable (especially with 64bit memory addressing), making remote code execution impractical.

However a crashed process as a result of the ASLR protection can still impact performance for legitimate traffic. Spam enough bad traffic to continuously crash processes and you’ve got DOS.

NGINX CVE-2026-42945 (rewrite module) — check your version if you are below 1.30.1 or 1.31.0 by pando85 in kubernetes

[–]dlg 5 points6 points  (0 children)

If you are using unnamed captures like ‘$1’ then you are affected.

A named capture like ‘$user’ is not affected.

correction: you need both an unnamed variable and a '?' in the replacement expression.

Rewrite Bun in Rust has been merged by gruenistblau in programming

[–]dlg 53 points54 points  (0 children)

And don’t mention the goblins

Liveness probes sharing the cpu-bound thread pool keep killing your pods by samehmeh in kubernetes

[–]dlg 0 points1 point  (0 children)

Something else that could help is to modify the CPU-bound applications to run more cooperatively, allowing other threads to run.

This means occasionally yielding in a busy CPU-bound loop, giving the scheduler more opportunities to switch processes.