Forwarded from 竹新社
美国与伊朗已达成和平协议。
巴基斯坦总理夏巴兹称，美伊双方都宣布立即和永久地终止包括黎巴嫩在内的所有战线的军事行动。正式签署仪式将于6月19日在瑞士举行。
随着协议就位，斡旋方将在本周协调一系列会议，为技术性会谈和正式签字仪式奠定基础。
特朗普随后证实协议达成，表示将免费开放霍尔木兹海峡，并下令美军解除封锁。
（夏巴兹X，特朗普Truth Social）
巴基斯坦总理夏巴兹称，美伊双方都宣布立即和永久地终止包括黎巴嫩在内的所有战线的军事行动。正式签署仪式将于6月19日在瑞士举行。
随着协议就位，斡旋方将在本周协调一系列会议，为技术性会谈和正式签字仪式奠定基础。
特朗普随后证实协议达成，表示将免费开放霍尔木兹海峡，并下令美军解除封锁。
（夏巴兹X，特朗普Truth Social）
Forwarded from 每日消费电子观察 (septs)
甲骨文调整永久免费套餐资源上限 超限自动关闭以及按量付费将产生费用
https://www.landian.news/archives/113475.html
甲骨文近期更新文档宣布对永久免费套餐的 ARM 实例资源上限进行调整，此次调整后核心数从 4 核降低到 2 核、内存总量从 24GB 下调到 12GB，此次调整主要是影响现有用户，因为现有实例如果超过资源上限有可能会被自动关闭，而按量付费用户则需要为超出部分付费，而不是继续免费。
https://www.landian.news/archives/113475.html
甲骨文近期更新文档宣布对永久免费套餐的 ARM 实例资源上限进行调整，此次调整后核心数从 4 核降低到 2 核、内存总量从 24GB 下调到 12GB，此次调整主要是影响现有用户，因为现有实例如果超过资源上限有可能会被自动关闭，而按量付费用户则需要为超出部分付费，而不是继续免费。
Forwarded from YCombinator News
Curl will not accept vulnerability reports during July 2026
306 points by secret-noun ago | 78 comments
https://news.ycombinator.com/item?id=48537165
306 points by secret-noun ago | 78 comments
https://news.ycombinator.com/item?id=48537165
Forwarded from Hacker News
Hetzner increased dedicated server prices 3-4x (🔥 Score: 162+ in 1 hour)
Link: https://readhacker.news/c/6WqYA
A few months after raising prices ~30%, Hetzner has increased bare metal pricing again, this time by 3-4x:
AX102: €124 -> €454
AX162 (256GB): €244 -> €844
Link: https://readhacker.news/c/6WqYA
A few months after raising prices ~30%, Hetzner has increased bare metal pricing again, this time by 3-4x:
AX102: €124 -> €454
AX162 (256GB): €244 -> €844
Forwarded from Faker的个人频道
建议不要在生产环境服务器上安装超出其原本职责范围的软件，包括但不限于有root权限可访问shell的“探针”，以免可能的安全问题影响
如果有需要监控生产服务器运行状态或收集监控矩阵信息，建议使用经过业界工作负载完整测试过、相对稳定可靠的软件（例如Prometheus/Netdata）
如果有需要集中管理服务器或提供安全的堡垒机环境，建议使用JumpServer/Next Terminal等产品进行处理，若无需图形化运维，推荐使用Ansible
如果有需要监控生产服务器运行状态或收集监控矩阵信息，建议使用经过业界工作负载完整测试过、相对稳定可靠的软件（例如Prometheus/Netdata）
如果有需要集中管理服务器或提供安全的堡垒机环境，建议使用JumpServer/Next Terminal等产品进行处理，若无需图形化运维，推荐使用Ansible
India’s IT ministry banned Telegram for one week because some users shared leaked exam questions.
This punishes 150M+ ordinary Telegram users in India — not the insiders who leaked the exam materials.
And the ban hasn't stopped anything. The leaks just moved to other apps.
https://x.com/durov/status/2066879467054649639
This punishes 150M+ ordinary Telegram users in India — not the insiders who leaked the exam materials.
And the ban hasn't stopped anything. The leaks just moved to other apps.
https://x.com/durov/status/2066879467054649639
X (formerly Twitter)
Pavel Durov (@durov) on X
India’s IT ministry banned Telegram for one week because some users shared leaked exam questions.
This punishes 150M+ ordinary Telegram users in India — not the insiders who leaked the exam mater…
This punishes 150M+ ordinary Telegram users in India — not the insiders who leaked the exam mater…
Forwarded from Maozai
真他喵牛逼，世界是华为的，仙界和天界也是华为的
🤡18
Forwarded from Soha 的日常 (Soha Jin)
www.rfc-editor.org
RFC 10008: The HTTP QUERY Method | RFC Editor
This specification defines the QUERY method for HTTP. A QUERY requests that the request target process the enclosed content in a safe and idempotent manner and then respond with the result of that processing. This is similar to POST requests, but QUERY requests…
第一篇正式发布的 5 位数 RFC！RFC 编号来到了 5 位数时代。
RFC 10008: The HTTP QUERY Method
TL;DR 就是：GET 请求的 query 在遇到复杂查询的时候很容易撞上服务器的长度限制，部分敏感查询参数也容易暴露在日志。GET 不能包含请求体（虽然有些服务器不会丢弃），而改用 POST 的话语义不对，也不幂等，会影响缓存和重试。于是就把 query 塞进请求体，搞成一个安全的 QUERY 请求。
RFC 10008: The HTTP QUERY Method
TL;DR 就是：GET 请求的 query 在遇到复杂查询的时候很容易撞上服务器的长度限制，部分敏感查询参数也容易暴露在日志。GET 不能包含请求体（虽然有些服务器不会丢弃），而改用 POST 的话语义不对，也不幂等，会影响缓存和重试。于是就把 query 塞进请求体，搞成一个安全的 QUERY 请求。
Forwarded from 猫体剑舞连
vxTwitter / fixvx
💖 341 🔁 46
💖 341 🔁 46
阿冬的酷儿法律观察 (@QueerLawWatchCN)
镇镇的彩虹（彩虹暴力终结所公众号）今天被微信公众号平台封禁🏳️🌈🇨🇳
这个账号背后是"彩虹暴力终结所"——中国第一家专门为性和性别少数群体提供性别暴力直接干预服务的机构，2016年6月25日在北京成立，旨在《反家庭暴力法》框架下为性与性别少数群体提供针对性倾向、性别认同和性别表达的暴力和歧视的直接干预服务。
它具体做过的事：
— 一线个案服务：由社工和法律服务者组成团队接案，2021年共有19位服务者参与个案服务或咨询，社工年人均接案5例、法律服务者年人均接案4.4例，六年间累计受理500多个求…
这个账号背后是"彩虹暴力终结所"——中国第一家专门为性和性别少数群体提供性别暴力直接干预服务的机构，2016年6月25日在北京成立，旨在《反家庭暴力法》框架下为性与性别少数群体提供针对性倾向、性别认同和性别表达的暴力和歧视的直接干预服务。
它具体做过的事：
— 一线个案服务：由社工和法律服务者组成团队接案，2021年共有19位服务者参与个案服务或咨询，社工年人均接案5例、法律服务者年人均接案4.4例，六年间累计受理500多个求…
😢3😱1🎉1🤡1
I haven't checked the Chinese Threat Intelligence places in awhile. I said, "Hmph, I wonder what's going on over in Mandarin city" (I don't know any cities in China, so I make up names).
I checked out Rising (瑞星), they do technical write-ups about malware hitting China, and stuff, because they're ... headquartered in China. They're a Chinese company.
Anyway:
> be me
> open rising blog
> all mandarin
> damn i wish i could read
> translate page
> supply chain attack
> wtf.jpeg?
> AutoGLM hit
> wtf.mp4?
> Chinese AI agent thingie
> made by Z ai
> (idk wtf that is)
> GitHub for AutoGLM compromised
> download link replaced with malware payload
I said, "What the fuck? You guys have premium AI slop too? You guys have nerds attacking your supply chains too?"
Wow, we have so much in common
https://x.com/i/status/2067298437524038071
I checked out Rising (瑞星), they do technical write-ups about malware hitting China, and stuff, because they're ... headquartered in China. They're a Chinese company.
Anyway:
> be me
> open rising blog
> all mandarin
> damn i wish i could read
> translate page
> supply chain attack
> wtf.jpeg?
> AutoGLM hit
> wtf.mp4?
> Chinese AI agent thingie
> made by Z ai
> (idk wtf that is)
> GitHub for AutoGLM compromised
> download link replaced with malware payload
I said, "What the fuck? You guys have premium AI slop too? You guys have nerds attacking your supply chains too?"
Wow, we have so much in common
https://x.com/i/status/2067298437524038071
Forwarded from xkcd
'Commentators agree that this will probably be the last World Cup in which Messi faces serious competition.'
67 Open Technology Projects awarded NGI grants
https://nlnet.nl/news/2026/20260616-67-new-projects.html
https://nlnet.nl/news/2026/20260616-67-new-projects.html
CVE-2026-46331
Linux Kernel net/sched act_pedit LPE
https://git.kernel.org/linus/899ee91156e57784090c5565e4f31bd7dbffbc5a
https://github.com/sgkdev/packet_edit_meme
Linux Kernel net/sched act_pedit LPE
https://git.kernel.org/linus/899ee91156e57784090c5565e4f31bd7dbffbc5a
https://github.com/sgkdev/packet_edit_meme
😇5