mikho
mikhoBash Me Gently


About
- Username
- mikho
- Joined
- Visits
- 5,748
- Last Active
- Roles
- Member, Administrator, OG
- Karma
- 2,633
- About Me:
- “I have not failed. I’ve just found 10,000 ways that won’t work.” – Thomas Edison
Comments
-
LESta, part 7: the first Go code (Image) Tags: laravel, react, hosting-panel, vibe-coding, security Six parts of this series have all happened on one side of a boundary this whole project exists to enforce: Laravel constructs desired state, and s…
-
Five parts of this series have been a build log: teardown, plan, code, bugs, ship. This one is different. After Phase 2 shipped, the project did something it hadn't done before, went back over its own entire history and pulled out, in one place…
-
Four parts in, LESta could suspend an account, deny an unauthorized admin, and dispatch a provisioning operation to nothing in particular, and it still couldn't do the one thing a hosting panel is actually for: let a customer point a domain at …
-
Three parts into this series and LESta still didn't have a database schema. It had a teardown of everything wrong with VestaCP, an installation architecture, a threat model, and a capability matrix full of decisions about how suspension state a…
-
Part 2 ended with LESta having an entire installation architecture and not one tenant-facing feature. That changed here, but not by opening a code editor. It changed by going back to the codebase that started this whole series, the one with eval in …
-
Part 1 covered why VestaCP got condemned rather than patched: a panel that reads its own config files back into the shell with eval, at 105 sites, with zero write locks anywhere, plus an authenticated arbitrary file write sitting in the public API. …
-
Not a patch. A demolition. VestaCP has a function called search_objects. Ask it for a domain's IP address and it does not parse a config file. It runs eval on the config file. The value you asked for gets executed as shell code on its way back…
-
(Quote) Not every part is done, I have no idea on how many it will be in the end. There are a couple of more scheduled and more on its way. Since its already a fair amount of parts done, I'm afraid it will end up with more then I expected (it…
-
I'm asking here.... I didn't take into account the number of posts it would create before the whole project is finished. I am considering moving the blog post into its own thread, instead of adding 73 parts to the blog. If that's a …
-
(Quote) When I "code" I use Claude code in Visual Studio Code. For "every day tasks" I use the desktop app if I'm at one of my regular computers. If I'm at a customer supplied computer, I use (not that often) the web …
-
(Quote) If it's my wife's car, she can wash it herself.
-
(Quote) I've noticed that Claude has more problems in Code when I write in Swedish. Works much better in chat mode. Guess it's the need to use more technical language in code then in a random chat. Maybe even the model makes a difference.
-
Started on an easier-to-read blog series to accompany the more technical brain-dump of posts in this thread. https://lowendspirit.com/lesta-part-1-why-the-rewrite
-
(Quote) You are correct; that was my mistake, as in my head, services are more the function... like serving web pages, not the product, Apache, nginx, or any other web server. When I wrote the prompt, I had that in mind and that VestaCP offered both…
-
While runnning the second prompt the following questions were asked What Ubuntu LTS version should be supported? Answer both 24.0 & 26.04 (Quote) While reading the chat log I noticed this The .install skeleton is complete for the decided serv…
-
Step two. I had a little extra time while waiting for a meeting to start, so I took a jab at the first prompt and result. My native language is not English; it's Swedish, so my first step after creating the plan was to have a second project i…
-
(Quote) Thats my thoughts exactly. No icons to keep things fast and simple, just text. Properly formatted.
-
(Quote) Thanks! I’m sure there are keywords in there that I can use when writing the prompts. Don’t want to miss out on the security and features.
-
(Quote) Sure, why not.
-
(Quote) This will be coded by Claude, my AI-assistant. The models and efforts will vary, depending on how many tokens I have left on my company account. I had very little time this evening, so I started by putting on the Plan hat on Claude, feeding…
-
@somik ☝🏻 (Image)
-
(Quote) Well……. Being free doesn’t mean that it will always work with others services. Free often means limited, in some way.
-
(Quote) If you only go for the low hanging fruit, you never get real progress. This time it was important to put focus on something that took a little longer. The links will be there, soooon (tm)
-
(Quote) https://lowendspirit.com/profile/discussions/SpeedBus https://lowendspirit.com/profile/comments/SpeedBus (Quote) It is on the feature request list, just that other things had to be finished first. Which unfortunatly takes longer time then e…
-
(Quote) instead of forcing the users to manually count the names who voted?
-
I think we are missing some details here, please edit or re-apply with every field filled in. And introduce your company. What's your sales pitch?
-
(Quote) I think that are good ideas, especially the part on not removing fields that is not answered. Memory is good, but short :)
-
(Quote) Read the Deadpool series on the LES Blog to bring some memories back. (and welcome!)
-
(Quote) It's the Show Less button (Submit a Link) for when you quickly want to paste a link to something useful or interesting without writing an essay about it.
-
Per request
-
(Quote) Why? Personal preferences or a horror story that you want to tell us?
-
Do you offer yearly payments on the two first plans? Clicked on the links but had to either sign up or login. Not really what I was expecting as an order link.