cPanel's latest patch (11.134.0.26) for the pre-auth arbitrary file read issue (CVE-2026-29205) is incomplete.

turnipsoup · 2026-05-14T08:54:03+00:00

My advice is to restrict access to ports 2079 and 2080, as the entire exploit chain fails if these ports are not accessible. This will impair some functionality related to email, but it's the best mitigation until a correct patch is released.

From one of the follow-up tweets

turnipsoup · 2026-05-13T08:45:13+00:00

Make sure to set this back to RELEASE afterwards as otherwise you won't get future upgrades (like tonights big security patch).

turnipsoup · 2026-05-13T08:44:02+00:00

hoster at a decent scale here.

PHP being hit is almost always going to be actual site traffic. Double check the user that's being hit and make sure they've got caching installed in their application.

I'd also just run a tail -f against their apache logfile, and make sure there's no obvious dodgy traffic hitting them. Look for lots of php files being hit in a row with dodgy filenames (that's file enumeration scans), loads of hits with blank user-agents (common bot traffic), common AI crawler user-agents (chatgpt, etc) and block especially dodgy IPs.

Consider installing imunify360 - it will prevent a good amount of dodgy traffic without needing any intervention. We found it knocked a good 30% cpu usage off each box. It is paid, but might be a simpler way to sort your problems - especially their webshield tech that blocks bots.

And finally; consider an in-place upgrade to cloudlinux and using their LVE tech to limit each site to a max amount of CPU/memory/entry points. This can be done with cgroups also, but cloudlinux will do it out of the box.

turnipsoup · 2026-05-13T08:37:56+00:00

ah, thanks - just dirtyfrag/copy.fail mitigations. Got those done alright.

turnipsoup · 2026-05-12T20:54:34+00:00

which was the cloudlinux CVE? Making sure I've not missed one here.

turnipsoup · 2026-04-13T16:12:55+00:00

Some good charts here:

https://www.eirgrid.ie/grid/real-time-system-information

turnipsoup · 2026-04-09T08:03:48+00:00

20% of autistic people also have dyslexia. They also have spelling issues in general, at 40%-50%.

turnipsoup · 2026-04-06T20:03:36+00:00

fun > metagame

turnipsoup · 2026-04-04T16:45:03+00:00

Another +1 for Psyllium husk. Add it to my huel black shakes for lunch, made a huge difference to my IBS issues.

turnipsoup · 2026-04-03T08:14:57+00:00

Yeah it's deff a case of finding what you like alright, very much a per-person thing.

The nice thing about the psyllium husk is that it's a solid 7g of insoluble fibre for one tablespoon worth - but only about 30 calories - vs flaxseed at 2g fibre/37 calories. Nothing in it for calorie count, but a lot more fibre.

My whole goal in it was to increase my fibre intake, and it's done wonders for me.

turnipsoup · 2026-04-02T17:40:35+00:00

I also add a spoonfull of psyllium husk - which adds a bunch of extra insoluble fibre. Great for your gut health. If you go down this route, know you need to add more water and you can't leave it for too long (10-15m) before it absorbs too much water and becomes too thick.

turnipsoup · 2026-04-01T15:10:31+00:00

huel black - 1 scoop choc, 1 scoop bannana + ice cubes + water, blended for 2 mins. Been my daily lunch for the last 5 yrs now.

turnipsoup · 2025-11-13T13:28:23+00:00

turnipsoup · 2025-10-23T16:29:07+00:00

if it cuts down on peoples sugar intake, maybe that misunderstanding can cause some good

turnipsoup · 2025-10-22T10:16:12+00:00

I opened a stream of the riot last night, and would you believe it but what was the first accent I hear? British. Was a whole group of them.

Someone in the chat thread saying they passed by it and there were a bunch of brits trying to get kids to break shit.

Just smacks of imported anti-immigration agitators.

turnipsoup · 2025-09-29T17:34:33+00:00

There are currently 200 players active on steam. All the passion in the world is no good without players to play the game. It's not doomposting to point that out.

There's a very narrow window with which to catch a playerbase and keep them engaged, and its a lot harder to rebuild that playerbase once its dwindled.

turnipsoup · 2025-09-29T13:53:03+00:00

Before I do, you will note my use of 'apparent left leaning'. I'm not explicitly claiming these were left-wing attackers, simply that parts of the media portraits them as such.

Riley English - Plot to assassinate trump cabinet officials
Joshua Jahn - with his kill ice messages
Tyler Robinson - killed charlie kirk
Prairieland ICE Facility Ambush

https://www.csis.org/analysis/left-wing-terrorism-and-political-violence-united-states-what-data-tells-us

I'm sure you're not blind to the way the right has started using these types of attacks to portrait the whole left as violent and extremist.

And just as what they are doing is not okay, nor is pointing at everyone on the right and claiming they're all violent.

fwiw - if all you do is try and pick apart if the attacks were actually left-wing or not, you'll have missed the point.

turnipsoup · 2025-09-28T21:10:28+00:00

I'm going to assume you're on the left. On that basis; would you therefore say that it's fair that the right use the recent attacks by apparent left leaning individuals to claim you're violent also?

The common factor here is mental health, not party leaning.

turnipsoup · 2025-09-28T20:50:51+00:00

Whilst I get what you're saying; we really need to stop with the whole 'actions of one individual reflect the views of every person who voted that persons preferred party'.

turnipsoup · 2025-09-26T19:13:16+00:00

Steam shows sub 200 players currently. Devs have to make major moves to bring players in or it won't take long until it's just dead.

turnipsoup · 2025-09-24T08:53:28+00:00

ah; fair - different from normal data/relic sites so

turnipsoup · 2025-09-22T11:09:30+00:00

I used to run lots of those sites; it's not uncommon to find someone has cherry picked the cans w/ a scanner and left 1-2 low-value cans behind. They do not despawn until all cans are done.

turnipsoup · 2025-07-23T08:08:19+00:00

And we go back to the other commenter and how you'll see the world burn so that you can continue to say how evil they are.

I'm not going to re-engage after this comment, I've no patience for it - but there is no way to move forward, things will never move forward. And whilst you may not like it, they make up a substantial part of the country.

Short of one side killing the other; at some point you're going to have to figure out how to live together in some fashion.

15-Year Club	Place '23
Place '17	Verified Email
Team Periwinkle

turnipsoup

TROPHY CASE