mikho
mikhoBash Me Gently
About
- Username
- mikho
- Joined
- Visits
- 5,623
- Last Active
- Roles
- Member, Administrator, OG
- Karma
- 2,614
- About Me:
- “I have not failed. I’ve just found 10,000 ways that won’t work.” – Thomas Edison
Comments
-
(Quote) True, true..... In my defense, I use Claude as a work tool, and I have prioritized things I get paid for above this project. Using "left-over" tokens. And the project changed more then a bit with the decision to write something w…
-
LESta, part 10: the bug that would have waited (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Part 8 covered a bug that would have shipped immediately, a privilege boundary quietly reopened by an environment variable, caught …
-
LESta, part 9: DNS gets a schema and a screen (Image) Tags: laravel, react, hosting-panel, vibe-coding, security With the nginx installer done and CI-green, this project faced the same fork it had already named as a real option back before Phase…
-
LESta, part 8: the bug that almost shipped (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Every part of this series so far has argued the same thing from different angles: verify independently, don't trust an implementat…
-
Bulgaria ... HA ... Made me remember when I had a VPS running for MrVM with some provider in Romania ... they auto stopped the VPS when they thought it was abusing the node ... Had to write a cron scheduler to check via API if the server was runni…
-
(Quote) I meant that he could give you a contact in that DC or rent a dedi in his rack or something.
-
(Quote) That report gave some insight. Hope they add checks on the update packages as soon as possible. Or it could get really messy soon
-
(Quote) If @KuJoe from Securedragon ever wakes up again (and updates his website), he has servers in Florida. Might be worth a contact to see if it's a good connection. The last time I used a VPS from Securedragon in Miami, Florida... it had a …
-
LESta, part 7: the first Go code (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Six parts of this series have all happened on one side of a boundary this whole project exists to enforce: Laravel constructs desired state, and s…
-
Five parts of this series have been a build log: teardown, plan, code, bugs, ship. This one is different. After Phase 2 shipped, the project did something it hadn't done before, went back over its own entire history and pulled out, in one place…
-
Four parts in, LESta could suspend an account, deny an unauthorized admin, and dispatch a provisioning operation to nothing in particular, and it still couldn't do the one thing a hosting panel is actually for: let a customer point a domain at …
-
Three parts into this series and LESta still didn't have a database schema. It had a teardown of everything wrong with VestaCP, an installation architecture, a threat model, and a capability matrix full of decisions about how suspension state a…
-
Part 2 ended with LESta having an entire installation architecture and not one tenant-facing feature. That changed here, but not by opening a code editor. It changed by going back to the codebase that started this whole series, the one with eval in …
-
Part 1 covered why VestaCP got condemned rather than patched: a panel that reads its own config files back into the shell with eval, at 105 sites, with zero write locks anywhere, plus an authenticated arbitrary file write sitting in the public API. …
-
Not a patch. A demolition. VestaCP has a function called search_objects. Ask it for a domain's IP address and it does not parse a config file. It runs eval on the config file. The value you asked for gets executed as shell code on its way back…
-
(Quote) Not every part is done, I have no idea on how many it will be in the end. There are a couple of more scheduled and more on its way. Since its already a fair amount of parts done, I'm afraid it will end up with more then I expected (it…
-
I'm asking here.... I didn't take into account the number of posts it would create before the whole project is finished. I am considering moving the blog post into its own thread, instead of adding 73 parts to the blog. If that's a …
-
(Quote) When I "code" I use Claude code in Visual Studio Code. For "every day tasks" I use the desktop app if I'm at one of my regular computers. If I'm at a customer supplied computer, I use (not that often) the web …
-
(Quote) If it's my wife's car, she can wash it herself.
-
(Quote) I've noticed that Claude has more problems in Code when I write in Swedish. Works much better in chat mode. Guess it's the need to use more technical language in code then in a random chat. Maybe even the model makes a difference.
-
Started on an easier-to-read blog series to accompany the more technical brain-dump of posts in this thread. https://lowendspirit.com/lesta-part-1-why-the-rewrite
-
(Quote) You are correct; that was my mistake, as in my head, services are more the function... like serving web pages, not the product, Apache, nginx, or any other web server. When I wrote the prompt, I had that in mind and that VestaCP offered both…
-
While runnning the second prompt the following questions were asked What Ubuntu LTS version should be supported? Answer both 24.0 & 26.04 (Quote) While reading the chat log I noticed this The .install skeleton is complete for the decided serv…
-
Step two. I had a little extra time while waiting for a meeting to start, so I took a jab at the first prompt and result. My native language is not English; it's Swedish, so my first step after creating the plan was to have a second project i…
-
(Quote) Thats my thoughts exactly. No icons to keep things fast and simple, just text. Properly formatted.
-
(Quote) Thanks! I’m sure there are keywords in there that I can use when writing the prompts. Don’t want to miss out on the security and features.
-
(Quote) Sure, why not.
-
(Quote) This will be coded by Claude, my AI-assistant. The models and efforts will vary, depending on how many tokens I have left on my company account. I had very little time this evening, so I started by putting on the Plan hat on Claude, feeding…
-
@somik ☝🏻 (Image)
-
(Quote) Well……. Being free doesn’t mean that it will always work with others services. Free often means limited, in some way.
-
(Quote) If you only go for the low hanging fruit, you never get real progress. This time it was important to put focus on something that took a little longer. The links will be there, soooon (tm)
-
(Quote) https://lowendspirit.com/profile/discussions/SpeedBus https://lowendspirit.com/profile/comments/SpeedBus (Quote) It is on the feature request list, just that other things had to be finished first. Which unfortunatly takes longer time then e…
-
(Quote) instead of forcing the users to manually count the names who voted?