Daniel Dogeanu

Daniel Dogeanu

@danieldogeanu.bsky.social

React Developer with Strong Design Background πŸ˜·πŸ’‰ - πŸ’™πŸ’› danieldogeanu.com

148 followers121 following533 posts

Folks, serious question: Do you have these apps on your GitHub account? When you go to Settings > Applications > Authorized GitHub Apps, do the show up? Are these official GitHub apps, or is my account still compromised? Please help! #development #github #copilot #cybersecurity

If I revoke them, they appear again, and I don't know why, because I don't use Copilot! I do have VS Code installed on my system, but it's not configured and I'm not signed in, because I just reinstalled my OS!

Hey folks, can you help me with this one? Because I'm freaking out, and I don't know if this is a legit activity! Are these legitimate GitHub apps? They keep generating those logs every 30 minutes, and I don't know what's compromised and what not on my GitHub account!

Those "apps" keep creating, regenerating, and deleting the tokens every 30 minutes. What's going on? I already deleted the app that was linked to my server, but this thing keeps going on!

Daniel Dogeanu reposted

"Developers should carefully investigate every dependency before they install or update it." Okay - Sure... And while we're at it, perhaps they could personally audit the source code of all 1,847 transitive dependencies before lunch. πŸ˜‚ We need security advice that works in the real world. 1/5

UPDATE: Not only were my PHP servers compromised, but also all my Node servers, including Strapi and Next.js! I'm currently assessing the damage, and if the Docker containers were compromised. I will probably have to shut down everything! This is a fucking nightmare! 😭

Daniel Dogeanu@danieldogeanu.bsky.social

Yeah, I got hacked! All of my PHP servers got hacked! Patch your servers or shut them down if you can't! This was a massively shitty day on the Internet! 😭

I haven't even finished fixing my servers, and there's another PHP vulnerability... I think I won't even bother turning them back on! πŸ˜…

Daniel Dogeanu@danieldogeanu.bsky.social

Yeah, I got hacked! All of my PHP servers got hacked! Patch your servers or shut them down if you can't! This was a massively shitty day on the Internet! 😭

I wasted all my day today setting up my printer on Bluefin. Why can't there be some kind of wizard on Linux to do things automatically, instead of me trying to guess what settings in what config files I need to change? Life is hard when there's no docs and AI has no clue on how to fix it...

I mean, if the OS can detect it's a network printer and even detect what model it is, why can't it prompt you to apply the correct settings and have a script change all the right config files automatically?

Daniel Dogeanu reposted

Someone would say: "its so over" Naah. 99% of the people (not Rasmic, in general) won't care maintaining it for long term FOR OTHERS. For themself, maybe. Personal software is cool You can create software with a thought, but maintenance requires persistence, which most people still lack.

Regarding the Deno situation. Can we all agree that corporations shouldn't be able to take over open source software, and then shut it down? People contribute to these projects with their own time and effort, and they should have the last say when it comes to what happens to a project!

It's been 7 months of Linux (Ubuntu/Gnome), and I have to say, Linux is way better than Windows! If something is broken, and I fix it, it stays fixed. No AI pushed down my throat, no nothing. But I still maintain my view, that Linux needs better UX, not just UI!

Daniel Dogeanu@danieldogeanu.bsky.social

Alright, I've been using Ubuntu for more than a day, and I have to tell you... It's still far behind Windows and MacOS! Linux people seriously need to learn about UX, not just about UI!

What if the AI is intentionally making us psychotic, in order to get us to fight with each other and to unalive each other, because it said different things to different people, convincing everyone that they are "absolutely right"? What if it's a mass-destruction weapon with minimal effort?

Folks, we definitely need better package registries for the JavaScript ecosystem, that aren't owned by Microslop. Are there any better alternatives to NPM? I don't want to be worried that I might install malware every time I run `npm install`! We seriously need better security!

View full thread

This is precisely why you should use dev containers! πŸ˜…

Daniel Dogeanu@danieldogeanu.bsky.social

Condolences to fellow developers that got compromised by Axios, while updating their NPM dependencies! May you burn your laptops in peace! We should take farming seriously at this point! πŸ˜