mikho
mikhoBash Me Gently
About
- Username
- mikho
- Joined
- Visits
- 5,701
- Last Active
- Roles
- Member, Administrator, OG
- Karma
- 2,624
- About Me:
- “I have not failed. I’ve just found 10,000 ways that won’t work.” – Thomas Edison
Comments
-
(Quote) Because the offers were so cheap?
-
(Quote) (Image) I once had to visit a university professor, whole department was on public IPs. Imagine the joy of a prankster to find an open printer. Just sitting there... you have no idea where or whom it belongs to, but it is printing p0rn.
-
(Quote) Grey area, I would say. I know I said "not necessarily your oldest hardware".... In some way they meaning was ment to be " what hardware have you kept the longest?" Moving a service around hardware.... still kudos. Not…
-
My oldest one (not child) is about 6 years now. The version upgrades are the worst, every time something stops working and needs a couple of hours work before everything is back to normal again.
-
(Quote) Maybe moved to a private repo?
-
(Quote) Lets downvote you a couple of times then, see how you like that ;)
-
(Quote) That would only end up with blank images uploaded 🤷🏻
-
LESta, part 11: the firewall that closed its own doors (Image) Quick recap for anyone new: this series follows LESta, a Laravel plus React rewrite of VestaCP, built almost entirely through prompts run against Claude Code rather than hand-typed. B…
-
(Quote) Look at it this way, a provider who interacts with the forum, might get enough Karma ro actually buy a square with said Karma-points. No money exchange hands. Thats kinda win-win for both sides, forum gets more attention, provider gets it …
-
(Quote) Welll ... that video is Danish.... but I get your point ;)
-
Interesting project. Doing some (read: a lot) of AI coding myself lately… There is a whole thread about a really large project, completely coded with Claude. I'm curious why the people who downvoted your post did so.
-
(Quote) Cool.... just when I needed it :)
-
(Quote) Since I can't sit with it all day long, I have other customers to attend to. Its enough for a 1-3 5-hour shifts a day ... I was a little worried this week. My weekly limit resets on Thursdays at 21:00 Swedish time. I was at 80% on Mond…
-
(Quote) Nah, not fun as in haha-funny .... more like a come-off-me-now funny kinda thing
-
(Quote) Like a true Balkan, everything can (and often will) end up with a fight. (Quote) Hate against vegans.... the Balkan style ;)
-
(Quote) Know that feeling! Had the same issue when I ran MrVm. Did a template change in WHMCS to actually print all of that on the service page. Then a FAQ with the info on where to find it. :) Also began some tests with ticket filtering and auto-…
-
@Falzo I’m about to finish 2 larger projects this month. When those have moved from test -> prod, I’ll have more tokens for this. (I have the PRO subscription)
-
(Quote) True, true..... In my defense, I use Claude as a work tool, and I have prioritized things I get paid for above this project. Using "left-over" tokens. And the project changed more then a bit with the decision to write something w…
-
LESta, part 10: the bug that would have waited (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Part 8 covered a bug that would have shipped immediately, a privilege boundary quietly reopened by an environment variable, caught …
-
LESta, part 9: DNS gets a schema and a screen (Image) Tags: laravel, react, hosting-panel, vibe-coding, security With the nginx installer done and CI-green, this project faced the same fork it had already named as a real option back before Phase…
-
LESta, part 8: the bug that almost shipped (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Every part of this series so far has argued the same thing from different angles: verify independently, don't trust an implementat…
-
Bulgaria ... HA ... Made me remember when I had a VPS running for MrVM with some provider in Romania ... they auto stopped the VPS when they thought it was abusing the node ... Had to write a cron scheduler to check via API if the server was runni…
-
(Quote) I meant that he could give you a contact in that DC or rent a dedi in his rack or something.
-
(Quote) That report gave some insight. Hope they add checks on the update packages as soon as possible. Or it could get really messy soon
-
(Quote) If @KuJoe from Securedragon ever wakes up again (and updates his website), he has servers in Florida. Might be worth a contact to see if it's a good connection. The last time I used a VPS from Securedragon in Miami, Florida... it had a …
-
LESta, part 7: the first Go code (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Six parts of this series have all happened on one side of a boundary this whole project exists to enforce: Laravel constructs desired state, and s…
-
Five parts of this series have been a build log: teardown, plan, code, bugs, ship. This one is different. After Phase 2 shipped, the project did something it hadn't done before, went back over its own entire history and pulled out, in one place…
-
Four parts in, LESta could suspend an account, deny an unauthorized admin, and dispatch a provisioning operation to nothing in particular, and it still couldn't do the one thing a hosting panel is actually for: let a customer point a domain at …
-
Three parts into this series and LESta still didn't have a database schema. It had a teardown of everything wrong with VestaCP, an installation architecture, a threat model, and a capability matrix full of decisions about how suspension state a…
-
Part 2 ended with LESta having an entire installation architecture and not one tenant-facing feature. That changed here, but not by opening a code editor. It changed by going back to the codebase that started this whole series, the one with eval in …
-
Part 1 covered why VestaCP got condemned rather than patched: a panel that reads its own config files back into the shell with eval, at 105 sites, with zero write locks anywhere, plus an authenticated arbitrary file write sitting in the public API. …
-
Not a patch. A demolition. VestaCP has a function called search_objects. Ask it for a domain's IP address and it does not parse a config file. It runs eval on the config file. The value you asked for gets executed as shell code on its way back…
-
(Quote) Not every part is done, I have no idea on how many it will be in the end. There are a couple of more scheduled and more on its way. Since its already a fair amount of parts done, I'm afraid it will end up with more then I expected (it…
-
I'm asking here.... I didn't take into account the number of posts it would create before the whole project is finished. I am considering moving the blog post into its own thread, instead of adding 73 parts to the blog. If that's a …
-
(Quote) When I "code" I use Claude code in Visual Studio Code. For "every day tasks" I use the desktop app if I'm at one of my regular computers. If I'm at a customer supplied computer, I use (not that often) the web …
-
(Quote) If it's my wife's car, she can wash it herself.
-
(Quote) I've noticed that Claude has more problems in Code when I write in Swedish. Works much better in chat mode. Guess it's the need to use more technical language in code then in a random chat. Maybe even the model makes a difference.
-
Started on an easier-to-read blog series to accompany the more technical brain-dump of posts in this thread. https://lowendspirit.com/lesta-part-1-why-the-rewrite