nullbyte420

This Security Alert addresses vulnerability CVE-2026-21992 in Oracle Identity Manager and Oracle Web Services Manager. This vulnerability is remotely exploitable without authentication. If successfully exploited, this vulnerability may result in remote code execution.

And it's in the IDM REST WebServices. I'd assume it's publically exposed? Doesn't sound like a management interface, but I could be wrong.

Extremely nasty stuff. I think Oracle uses these to run it's cloud..

Is there any good reason I can't use DNS round-robin for loadbalancing my controlplane? I'm thinking something very simple like adding an entry for each controlplane node in /etc/hosts, like for ip in controlplane-ip-range; do echo $ip controlplane.internal >> /etc/hosts; done. This means I can just use the controlplane.internal hostname in all my config files, without knowing what the cluster is going to be called on our DNS server. Obviously I'll add the name to tls-extra-sans etc for the API-server.

This would obviously mean that if a control plane node is down, the other nodes will potentially try contacting it and failing, but then they will try again and get another address - rig

The Gemara relates: There was a certain person who said to his wife: Benefiting from me is konam for you until you show some beautiful [yafeh] part of you to Rabbi Yishmael, son of Rabbi Yosei. Rabbi Yishmael attempted to find something beautiful about the woman.

He said to his students: Perhaps her head is beautiful? They said to him: It is round [segalgal]. Perhaps her hair is beautiful? They replied: Her hair resembles stalks of flax. Perhaps her eyes are beautiful? They are narrow [terutot]. Perhaps her ears are beautiful? They are double in size. Perhaps her nose is beautiful? It is stubby. Perhaps her lips are beautiful? They are thick. Perhaps her neck is beautiful? It is low and sh

A diligent user notices that the Digger IaC project secretly collects user information as part of their telemetry https://github.com/diggerhq/digger/issues/1179

It then turns out that it's fully intentional. They refuse to provide a data processing agreement too! The devs seek validation on reddit, which obviously doesn't go well: https://www.reddit.com/r/opensource/comments/1ausyxa/should_opensource_projects_allow_disabling/

I just thought I'd share even though there's probably not a lot of their users on here. I think it's nice to see open source leading to users actually reviewing the code for once. The behavior of the devs is pretty astounding!

Hi everyone

I work in a big MSP that does government stuff and has a strict(-ish) airgap policy. In this company, containers are considered a new and experimental technology. People are starting to realize that Kubernetes might not be all that bad and while they constantly dunk on it for being complex and vulnerable because of containers (lmao), all the managers also want their own cluster. We have a kafkaesque bureaucracy around getting access to our internal container registry. When you finally get a service account for a read-only user, you also get a repository with full access to the docker registry etc. I think my colleagues have a point that it seems wrong to just have unfettered acc

I like argocd for application delivery, but I find that it's a major hassle to set up stuff like istio with it. I tried out terraform for provisioning, but the kubernetes integration is about equally awful if not worse.

Is it possible to make a base setup with Flux that includes argocd exposed to developers? I don't see why not, but is there any reason I shouldn't do that? Or any better solutions? I'd like to have as few manual steps as possible and have a minimum of cluster specific details in the repository.

So I've been falling in with pop basslines, they're so sonically and rhythmically tight, and often simple and repetitive enough to play easily. It's so meditative to play along to, and so enjoyable to just feel the groove without focusing a lot on weird technique.

So I'd love to hear some recommendations for more pop songs with great basslines! I was inspired to make this post by the new song by BTS (I don't normally listen to k-pop but this one is pretty darn good). I also really like the complex but ultra-groovy basslines of Asteroids Galaxy Tour. Can

Hey everyone! At first I thought there would be no reason to do a OP-Z Field device, as it already has bluetooth and so on.

However, I totally changed my mind because I realized how much they could do in the style of the OP-1 Field.

OP-Z Field dream feature list:

• My primary dream feature: Philips Hue/Ikea Trådfri light sequencing as an alternative to DMX. The most insane (op1 field fm transmitter-like) idea would be to have a built-in zigbee transmitter in the OP-Z Field. But it could just be done over wifi through the hue bridge.
• Better sampler with multisampled instruments etc, like OP1-Field
• More rigid construction, like the OP-1 Field
• Stereo fx, stereo synth engines
• Full

Hey everyone, I would love to connect an audio interface to my future Op1 (field) to record mic and guitar input with a cleaner signal than the built in input.

Does anyone know how/if that would work? For example, let's say I have a 4in/4out interface. Will I be able to select which of the four input it records from, and can it record from them all simultaneously? And can I select output channels too?