SuperFola

TLDR: perfctl is a crypto mining and proxy jacking malware that exploits about 20’000 common missconfigurations to install itself on Linux servers. Mostly using a 10/10 CVE on Apache RocketMQ.

It is very persistent and can reinstall itself even when you have deleted all the perfctl and perfcc files. It hides itself by removing logs, network packets, and stopping all activity once you login to the machine.

Monitoring cpu usage using tools (I use net data on my server) can help identify infections (100% cpu usage when « idle »).

I’ve started putting the (long) forum posts I make about ArkScript on my blog, so that more people can follow the development. I must say I like the look of it, that’s also helping me getting back into blogging!

cross-posted from: https://programming.dev/post/18859576

This past few weeks, Python 3.13 and the possibility to disable the GIL has seen a lot of coverage and that pushed me to dig into my own language, to see how different our approaches are.

So if you’re curious about the rambling of a pldev, that might be for you!

I just wanted to have a handy description of computed goto that I could refer to, to reuse this concept without having to read thousands of line trying to make sense out of it.

This past few weeks, Python 3.13 and the possibility to disable the GIL has seen a lot of coverage and that pushed me to dig into my own language, to see how different our approaches are.

So if you’re curious about the rambling of a pldev, that might be for you!

I had some fun trying to check if a hash (more like a transformation really) was collision free, so I wrote a quick piece code and then iterated on it so that it was usable.

I might add a quick bench and graphs and try to push it even further just for fun, to explore std::future a bit more (though the shared bit set might be a problem unless you put a shared condition variable on it to allow concurrent read but block concurrent writes?)

More and more new accounts are posting spam and ads to communities (eg !technology@programming.dev), would it be an idea to block new accounts from posting to any p.d community?

I wanted people to be able to try out my language online, and it’s now possible with a vscode like interface, sending code to a docker image running the interpreter!

It was easier than I thought to implement, and yes, security was a concern, but I have been able to harden the docker container as well as implement restrictions on the websocket server to avoid having users escaping the docker image and getting access to the VM it’s running on.

I currently have a server, a Dell T310 with an SSD in it and 12Gig of ram (weird config, I know I messed up but it works fine so I can’t be bothered to change that for now), with all my dockers running in it.

It runs mostly fine, with Debian 11, a VPN so that I can block public ssh and allow it only on the VPN network, an nginx proxy to have services like a forgejo and a music library (ampache).

However it can’t run a Minecraft server with more than a single person on it without stuttering ; so I was considering changing it maybe next year, after more than 3 years of services, for something beefier but also consuming less W/h (current consumption is 80W), and since I already have a Mac for work I was wondering how suitable a Mac Mini M1/M2 would be for a homelab?

Does anyone have such a configuration and how does it work for you? Any hurdle that you should be aware of?

I’ve been thinking about it for a while now, and just realized how weird it is, after trying to explain it out loud to a friend who’s also neurodivergent.

I’m curious to know if it’s a common experience with other neurodivergent individuals.

My mind has three different depths:

• a very conscious one, capable of conjuring images and sounds from the void, capable of manipulating at will said images, morph them, move them… I can think « words » and have them be real in my mind
• a conscious but closed one: I can put words in it but without acting on them, only watching them. This one is the weirdest of all. There is a difference for me when I think about « dog » and just « look at the idea of a dog ». There are some things I don’t want to consciously think about (like things that makes me sad or depressed) so instead of thinking about them I’ll put them in this zone. They exist but it’s very different from having the words out loud in my mind, as if I was thinking inside my own mind. It’s like I’m in a museum watching thoughts behind plexiglass
• the dark zone, where I put things I don’t want to think about at all, things I want to forget. It’s literally a foggy dark place made of some kind of fluid darkness with no thoughts shining in it, I have to consciously want and try to pull things from it

A while ago, I read somewhere that the mere thing of being able to conjure images was « rare », like only 25% of people on earth can do it. Somehow I linked this idea to people being neurodivergent but I have no proof or source and I may just have made things up in my sleep or under the shower.

TL;DR: how does your mind works? Mine is weird