whoa man. really sorry to hear that.

in our neck of the woods things have been eerily quiet aside from some ‘security officers’ (lol they’re like cops now) shouting in the dark, us engineers agreeing, but we can only fear what’s to come.. it’ll all depend on the app devs/maintainers and january is going to be black..

yes it’s all quite annoying. And log4j has basically killed my christmas. the place I consult for has had catastrophic issues stemming from ‘too good to be true’ and ‘constantly evolving foss’ stuff that cannot be updated without breaking everything, so it bitrots in the corner to only find out people have exposed it, and it’s become circular death.

all I can say is the best part is that security platforms were hit the hardest as they have full access ‘to do scans’. fantastic.

I really enjoy your blog. I’m sorry to hear about the attack.

Are you mirroring your RSS feed anywhere?

My feed reader (a poorly cobbled-together fork of tt-rss) can’t pass Cloudflare’s “you’re not a bot” tests (because it *is* a bot… >smile<).

I got hit with some DDOS, and had to take a bunch of stuff offline or password protected. I know that it’s very annoying.

https://virtuallyfun.com/wordpress/wp-content/uploads/2021/12/Screenshot_20211218-105316132-e1639890701820.jpg

This is what I’d woken to, so I had to hit the panic button 🙁