@zvava@twtxt.net I might misunderstand what you wrote, but only hashing the message once and storing the hash together with the message in the database seems a way better approch to me. It’s fixed and doesn’t change, so there’s no need to recompute it during runtime over and over and over again. You just have it. And can easily look up other messages by hash.
How We Ingest Plastic Chemicals While Consuming Food
A comprehensive database built by scientists in Switzerland and Norway has catalogued 16,000 chemicals linked to plastic materials, and the findings paint a troubling picture of what Americans are actually eating when they prepare food in their kitchens. Of those 16,000 chemicals, more than 5,400 are considered hazardous to human health by government and industry sta … ⌘ Read more
SoundCloud Confirms Breach After Member Data Stolen, VPN Access Disrupted
An anonymous reader quotes a report from BleepingComputer: Audio streaming platform SoundCloud has confirmed that outages and VPN connection issues over the past few days were caused by a security breach in which threat actors stole a database containing user information. The disclosure follows widespread reports over the past four … ⌘ Read more
Over 10,000 Docker Hub Images Found Leaking Credentials, Auth Keys
joshuark shares a report from BleepingComputer: More than 10,000 Docker Hub container images expose data that should be protected, including live credentials to production systems, CI/CD databases, or LLM model keys. After scanning container images uploaded to Docker Hub in November, security researchers at threat intelligence company Flare foun … ⌘ Read more
Using AI To Modernize The Ubuntu Error Tracker Produced Some Code That Was “Plain Wrong”
A week ago I wrote about AI being used to help modernize Ubuntu’s Error Tracker. Microsoft GitHub Copilot was tasked to help adapt its Cassandra database usage to modern standards. It’s worked in some areas but even for a rather straight forward task, some of the generated functions ended up being “plain wrong” according to the developer involved… ⌘ Read more
Contractors With Hacking Records Accused of Wiping 96 Government Databases
Two Virginia brothers Muneeb and Sohaib Akhter, previously convicted of hacking the U.S. State Department, were rehired as federal contractors and are now charged with conspiring to steal sensitive data and destroy government databases after being fired. “Following the termination of their employment, the brothers allegedly sou … ⌘ Read more
‘We Built a Database of 290,000 English Medieval Soldiers’
An anonymous reader quotes a report from the Conversation, written by authors Adrian R. Bell, Anne Curry, and Jason Sadler: When you picture medieval warfare, you might think of epic battles and famous monarchs. But what about the everyday soldiers who actually filled the ranks? Until recently, their stories were scattered across handwritten manuscripts i … ⌘ Read more
Morgan Stanley Warns Oracle Credit Protection Nearing Record High
A gauge of risk on Oracle debt “reached a three-year high in November,” reports Bloomberg.
“And things are only going to get worse in 2026 unless the database giant is able to assuage investor anxiety about a massive artificial intelligence spending spree, according to Morgan Stanley.”
A funding gap, swelling balance sheet and obsolesce … ⌘ Read more
Violent Conflict Over Water Hit a Record Last Year
Researchers at the Pacific Institute documented 420 water-related conflicts globally in 2024, a record that far surpasses the 355 incidents logged in 2023 and continues a trend that has seen such violence more than quadruple over the past five years. The Oakland-based water think tank’s database tracks disputes where water triggered violence, where water systems were target … ⌘ Read more
Linux 6.19 Slated To Land “mm/cid” Rewrite That Has Very Positive Performance Potential
A set of Linux kernel patches posted back in October for rewriting the kernel’s memory-mapped concurrency ID code for some nice performance wins looks like it will land for Linux 6.19. This is the code that prominent Intel engineer Thomas Gleixner found to yield up to an 18% improvement for the PostgreSQL database. My testing of this “mm/cid” code has also shown some nice performance wins too… ⌘ Read more
Cloudflare Explains Its Worst Outage Since 2019
Cloudflare suffered its worst network outage in six years on Tuesday, beginning at 11:20 UTC. The disruption prevented the content delivery network from routing traffic for roughly three hours. The failure, writes Cloudflare in a blog post, originated from a database permissions change deployed at 11:05 UTC. The modification altered how a database query returned information about … ⌘ Read more
When I have to explain to the client that we can’t use their Excel 2010 file as a database ⌘ Read more
ACLU and EFF Sue a City Blanketed With Flock Surveillance Cameras
An anonymous reader shares a report: Lawyers from the American Civil Liberties Union (ACLU) and Electronic Frontier Foundation (EFF) sued the city of San Jose, California over its deployment of Flock’s license plate-reading surveillance cameras, claiming that the city’s nearly 500 cameras create a pervasive database of residents movements in a s … ⌘ Read more
IRS Accessed Massive Database of Americans Flights Without a Warrant
An anonymous reader shares a report: The IRS accessed a database of hundreds of millions of travel records, which show when and where a specific person flew and the credit card they used, without obtaining a warrant, according to a letter signed by a bipartisan group of lawmakers and shared with 404 Media. The country’s major airlines, inc … ⌘ Read more
When the database takes 10 minutes to respond ⌘ Read more
Intel Finds Great Performance With PostgreSQL’s AVX-512 Support
Back in April PostgreSQL added AVX-512 support for CRC32 computations. At the time the gains for CRC32 computations with this popular open-source database server were reported to be 50% to 3x faster for x86_64 CPUs able to leverage AVX-512. That AVX-512 support is found with PostgreSQL 18.0 that released in September and now Intel is praising this addition to PostgreSQL for which their developers also had a part in along with AWS and others… ⌘ Read more
Intel’s Rewrite Of Linux MM CID Code Showing Some Nice Gains For AMD
Posted last month were new Linux kernel scheduler-related patches rewriting the MM CID management code. The main takeaway for end-users from this set of 19 Linux kernel patches from an Intel engineer was seeing 14~18% improvement in a PostgreSQL database benchmark but that more benchmarks were needed. Curiosity got the best of me and I recently tested these patches on an AMD EPYC server to seeing some very enticing results for this in-development c … ⌘ Read more
Intel’s Rewrite Of Linux MM CID Code Showing Some Nice Gains For AMD
Posted last month were new Linux kernel scheduler-related patches rewriting the MM CID management code. The main takeaway for end-users from this set of 19 Linux kernel patches from an Intel engineer was seeing 14~18% improvement in a PostgreSQL database benchmark but that more benchmarks were needed. Curiosity got the best of me and I recently tested these patches on an AMD EPYC server to seeing some very enticing results for this in-development c … ⌘ Read more
**How I Used Sequential IDs to Download an Entire Company’s User Database (And The Joker Helped) **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosec … ⌘ Read more
I had a looksie (just to be sure) at the database, and they were thankfully legit test events. But this did spark/trigger me to make sure I have some form of anti-spam measures in place. So I added some per-event / per-rsvp rate-limiting and honeypot(s).
Simple, minimal SQL database migrations written in Go with generics. Std lib database/sql and SQLX supported OOTB
I built GoSMig for personal projects and open-sourced it. It’s a tiny library for writing migrations in Go (compile-time checks via generics). Supports both transactional and non-transactional steps, rollback, status/version commands, and a built-in CLI handler so you can ship your own tool.
- Zero dependencies (std lib; golang.org/x/term used for pager support)
- database/sql and sqlx supported out of the box, others w … ⌘ Read more
Applying RBAC to databases on Kubernetes: Practical, real-world examples
Introduction Role-Based Access Control (RBAC) is one of the most important security features in any cloud native platform. It determines who can do what inside the Kubernetes Cluster, helping teams give the right access to the… ⌘ Read more
What’s your go-to strategy for giving engineers access to production?
I’ve been in this field for almost 15 years, and I don’t think I’ve ever seen two companies handle this the same way
Some other places just hand out just-in-time database access with short-lived credentials, others rely on rigid role-based permission, and others go all in on anonymized data dumps or shadow environments to avoid prod access altogether
What’s your go-to when it comes to giving access to engineers to access production app … ⌘ Read more
How I Mastered Blind SQL Injection With One Simple Method
Transforming my web security skills by learning to listen to a silent database
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-i-mastered-blind-sql-injection-w … ⌘ Read more
Automating stateful apps with Kubernetes Operators
Member post originally published on the Middleware blog by Keval Bhogayata, covering Automating Stateful Apps with Kubernetes Operators. If you’ve ever had issues with scaling databases or automating upgrades in Kubernetes, Operators can help by saving… ⌘ Read more
** Encrypt & Decrypt Database Fields in Spring Boot Like a Pro (2025 Secure Guide)**
“Your database backup just leaked. Is your data still safe?”
[Continue reading on InfoSec Write-ups »](https://infos … ⌘ Read more
How to Add MCP Servers to Claude Code with Docker MCP Toolkit
AI coding assistants have evolved from simple autocomplete tools into full development partners. Yet even the best of them, like Claude Code, can’t act directly on your environment. Claude Code can suggest a database query, but can’t run it. It can draft a GitHub issue, but can’t create it. It can write a Slack message,… ⌘ Read more
Hopefully I can muster up the energy to start this new project:
Put up lots of thermometers and hygrometers in the apartment, have them report their readings wireless to a database.
I suspect that I’ll have to “build” these myself, because ready-to-use kits most like require some sort of cloud service. Dunno, haven’t checked yet.
@alexonit@twtxt.alessandrocutolo.it My problem is I don’t see a world where we don’t employ some form of cryptography to use as keys for threads in databases and other such things honestly. I’m not going to use url#timestamp as keys.
I corrupted my SQLite test database with sed -i s/… $(find …). Clearly, I found too many files. That’s the signal to go to bed.
@kat@yarn.girlonthemoon.xyz @kat@yarn.girlonthemoon.xyz Pretty sure I have many more mentions in the database than the one and only one I see hmmm 🤔 – I’ll have a look at the code when I can and the SQL query it’s using
Chances are the database bought wasn’t cheap at all and was aold by some scam company that probably ripped them from six figures or more for a database that’s full of rubbish. 🤣
Now that’s interesting. Some of these bots start crawling at URLs like this:
That is obviously completely wrong. But I can explain it. Some years ago, I screwed up my nginx rewrite rules, and that’s how these broken URLs came to be.
It all redirects to /git now, which is why that endpoint sees so much traffic lately.
But what does that mean? Why do they start there? I can only speculate that this company bought an old database of web links and they use that to start crawling. And it was probably a cheap one, because these redirects have been fixed for quite a long time now.
linode’s having a major outage (ongoing as of writing, over 24 hours in) and my friend runs a site i help out with on one of their servers. we didn’t have recent backups so i got really anxious about possible severe data loss considering the situation with linode doesn’t look great (it seems like a really bad incident).
…anyway the server magically came back online and i got backups of the whole application and database, i’m so relieved :‘)
** “Before injection, understanding” — What every hacker needs to master before exploiting a NoSQL…**
NoSQL database types
[Continue reading on InfoSec Write-ups »](https: … ⌘ Read more
VectorVFS: your filesystem as a vector database
VectorVFS is a lightweight Python package that transforms your Linux filesystem into a vector database by leveraging the native VFS (Virtual File System) extended attributes. Rather than maintaining a separate index or external database, VectorVFS stores vector embeddings directly alongside each file—turning your existing directory structure into an efficient and semantically searchable embedding store. VectorVFS supports Meta’s Percepti … ⌘ Read more