Every time I hear my boss say "surely it can't be that hard" or "that's what, like a 5 minute job?"
*shudder*

Echo "Hello world"
Echo "Hello devrant"

So our main web server got ransomware'd.

By some miracle only a shared directory was compromised and not the whole server.

The server is on an end-of-life OS (Win Server 2008r2), no antivirus solution, no WAF, no log hardening or aggregation, so basically our Security MSP told us "lol good luck finding the attack origin, nuke it and rebuild it correctly this time"

Thing is IT leadership is like "Eh, no harm done, everything is fine" and want to sweep it under the rug and not report it to senior management.

How do i go about convincing them that this is actually important and for once in their life, they should give a fuck ? (This web server is the main moneymaker, it goes tits up and heads are gonna roll).

Looking for bug bountry online and trying to find sqli bug.
I tried using sqlmap but no success.
Is it about WAF they're using or sqlmap is not complete ?
(I set the level and risk to highest possible)

Thanks
@ExGetMessage

!rant
Digging though my old emails found this joke sent to me long time ago. Think that originally was posted in a 1997 issue of Computerworld. Maybe you already suffered the effect of the "Opcodes" listed here. Hope that !tl;dr

ARG Agree to Run Garbage
BDM Branch and Destroy Memory
CMN Convert to Mayan Numerals
DDS Damage Disk and Stop
EMR Emit Microwave Radiation
ETO Emulate Toaster Oven
FSE Fake Serious Error
GSI Garble Subsequent Instructions
GQS Go Quarter Speed
HEM Hide Evidence of Malfunction
IDD Inhale Dust and Die
IKI Ignore Keyboard Input
IMU Irradiate and Mutate User
JPF Jam Paper Feed
JUM Jeer at Users Mistake
KFP Kindle Fire in Printer
LNM Launch Nuclear Missiles
MAW Make Aggravating Whine
NNI Neglect Next Instruction
OBU Overheat and Burn if Unattended
PNG Pass Noxious Gas
QWF Quit Working Forever
QVC Question Valid Command
RWD Read Wrong Device
SCE Simulate Correct Execution
SDJ Send Data to Japan
TTC Tangle Tape and Crash
UBC Use Bad Chip
VDP Violate Design Parameters
VMB Verify and Make Bad
WAF Warn After Fact
XID eXchange Instruction with Data
YII Yield to Irresistible Impulse
ZAM Zero All Memory

Just realised I have not seen some regular users on devrant for a good amount them. Listing them now :-
linuxxx (Last action 75 days ago( a ++))
SortOfTested(Last action 51 days ago(a comment))
Linux(Last action 50 days ago(a ++))
This list might not be accurate

Hello,
I want to be a full stack developer buh I'm overwhelmed, I don't know where to start. Kindly advice

What would you use for building the baclend of a moderately complex web application that probably will have a small userbase?
Ruby on Rails
Django
ASP.NET Core
Spring/Springboot
Node.js
Deno

If what you would like to use something else that is not listed feel free to tell about it in the comments

!Dev
TL Dr :- Debugging a software I barely know about was slow and ended up breaking in the shop it was used in and reverting the changes does not solve the problem

I asked my father a few days ago why he was buying a dedicated server for his ERP software and not using a client computer as his server which he is doing in his shop currently. He said that it was slow on other computers in the LAN which is an wired. The solutions given by the company that made it did not work. Big bills would sometimes also dissapear which took around 30 minutes to make. So when he bought the computer to home during lockdown I pulled up the debugging guide from the company which summed up to check latency,ram and add these files to exclusion list of your antivirus. Latency was kinda high at the first when pinging another computer on the LAN but I was testing on WiFi so it could be pretty inaccurate. The computer met the ram requirements so that was not a problem. I checked the data path by opening the software and accidentally typed something but I did not worry since the changes needed to be manually accepted. I added the files to the Windows defender exclusion list and shut it down.

Next day :- My father calls me up and says the software is working on the server but is broken on other computers. So I check if the changes were automatically accepted for some reason and yes that happened. So so pull up a guide to configure the software in multi user mode and I replace the mistyped setting with the correct one and it still does not work. My father asks me to undo everything by using anydesk. I remove all the exclusions I added to Windows defender and disable windows firewall. Still does not work. Restart the computer and software. Still does not work. Check permissions on data folder. They are correct.

WTF I reverted all the changes I made and the software does not work on other computers.

Anybody know why a good amount of active members like linuxxx and SortofTested have been inactive for a few months. Also why has there been a green dot explosion

Thank you theabbie for giving your location on your devrant profile. Some devranter might be able yto meet you though it will certainly be mot me unless that is a joke. Inputting the location writen in the brackets gives a location somehwere is navi mumbai

What kind of development work do you do at your job?

Are airwaves cast by WiFi and cell towers dangerous. Please link a credible source for it. During lunch my father brought up the fact that a actress sued the Indian government asking them to announce of 5g is dangerous or not. I said that it is not dangerous since we get higher amounts of radiation at us every day so 5g should not be anything dangerous for us. I should have said that it is non ionising radiation though. He also brought up that fact that there have been numerous instances of misleading advertising saying that what we use at our home is bad like saying ghee causes cholesterol which is bad and then a few years later saying that ghee is actually good. He just believes that companies could be doing false advertising saying that 5g is good when it actually is not. Can't blame him since he has seen multiple instances of false advertising.

Digging up on Google landed me on a nytimes article which basically said radiation 5g airwaves not effect us since our skin reflects that off and the small amount that does not get reflected heats up our skin to a negligible amount

What is your wishlist for things that need to die or change next year. Mine is :-
1. Games that use peer to peer and have servers for data. Please buy servers on aws or any good cloud service.

2. ISP's that block all incoming connections for security

Okay, yes, modsecurity WAF is amazing and all, but... When one tries to implement its rules atop an existing app that wasn't developed in accordance to the rules... That hurts.

How tf am I supposed to parse and present a 6.5GB / 22M line audit log to the client?! Just parsing that monstrosity once takes *minutes*, let alone doing any sort of sorting / analysis!

I feel sick. This is exactly why I am a sysadmin and not a programmer, I don't like writing analysis stuff, or programs more complex than a few hundred lines of bash... :|

This question is a bit dumb

Why do browsers block asynchronous requests when you use local files from your computer

This kind of question has been asked before.

Is coding on mobile actually a plausible idea or should I just leave the idea. I am mostly doing some c# with .net core. It is mostly console apps

I wont have access to my laptop for quite a while because I spent quite a lot of my free time on my laptop. Also me being dumb refused their offer of 1 hour of continuous access to the laptop every day.

Is xamarin good for cross platform app development or should I use flutter. I am planning to make the app for windows too so xamarin seemed better as it is owned by microsoft and desktop support isntin alpha

Sorry for posting a non dev goal
1. Check every social media ultra often and the first thing in the morning. I was late or sometimes completely missed something because I did not check my social media. Today I missed school because study leve was kinda cancelled. But guess what did not check my social media for the announcement and checked it in rhe afternoon when school was long over. No nwed to check email because nearly nothing important comes there except my report card which is resent on whatsapp 4 times a year

What should i use for making a app which needs to learn on both android and windows and maybe ios. It is pretty simple. Mainly needs notification, network and file acccess, does not cost an arm and a leg, uses less than 1 gb of memory at a time and being able to be used as to make a backend is a plus. Being able to be used commercially is a plus too. Also please suggest somehing that does not have a steep learning curve

!Dev

Fuck you realtek and your shitting laptop nics and the companies that use them. Just a year later I cannot garuntee more than 10 minutes of uptime of WiFi all other devices operate fine leaving the laptpp with the realtek card. I need to use third party drivers to be sane. I have already dksabled the option to allow the computer to turn you off to save power

Kind of !dev

Googleable question but I though you guys will give better advice. I am curious about computer networking and want to learn about that a bit. Any resources you recommend.

Probably !dev

How should I inform a government website that one of their user password combinations is in a short metasploit password list. The list name is tomcat_mgr_default_userpass

The top exploit db vulnerabilities for tomcat verison did not work so kudos to them on that. I am just a script kiddie

Edit :- Forgot to mention I am an Indian citiizen

Anyone ever bought Cc or Pp from DW? If yes, how legit was it?

Was curious abut how painfu to work with and deploying .net core, asp.net core, blazor and xamarin are. I am currently learning c# and I have heard stuff such as ".net is a dumpster fire" and xamarin has had pretty negative reviews. Is that stuff true

Any tips to speed up wordpress site. I have googled and tried as many solutions I can except adding cdn. I have minified images, html, css and js. I have used caching on the server with litespeed cache. There are not many plugins on the site.

The plugins installed are elementor, litespeed, orbit fox, wp-optimize, updraft plus and wpforms lite. The site takes around 4 to 5 seconds to fully load. I am doing this for a releative(don't worry he is sane and I am doing pretty simple stuff for him which is simply not worth charging). I cannot use cloudflare cdn since they need nameserver access and the hosting service used is hostinger which have put a lot of dns records which I don't understand and don't wanna mess with unless it is the last option.

When should I develop a website myself using whatever the hot framework currently is and when should I just use something like a cms because it is too complex for only one developer to make the website

Firstly give me the skill equivalent to the best in the field. If the rules allow it all of these skills listed and if not any of these :-
1. Computer networking to the point of having the same knowledge as the best in the field. Why? I am curious about that stuff and being able to work as a network engineer if I don't get a good Dev job

2. Cyber security. Why? I enjoy it and being able to make sure my code is not easily exploitable is a cherry on top. Also having a backup job in case I don't get a good dev job

3. Being able to communicate with non dev people about developer or non developer stuff easily and being a really good leader.

4. Being a good developer in whatever language I use and instantly being able to learn new programming languages and frameworks or libraries with ultra in depth information.

Sorry if this has been been asked before and asking useless questions

What are your thoughts on the mac ec2 instances

Found out that windows automatically backs up your Desktop and Documents folder by redirecting those folders to Onedrive. Why create a seperate folder and redirect instead of just syncing from time to time

!dev
Dumb question
What are some good companies for consumer networking equipment. I need a unmanaged switch and might buy a router from them. There will be 7 cables run though it. I have heard praises for ubiquiti but mostly from U.S. youtubers and I live in India so service might defer. Being cheap is a plus point.

This question might make you lose a brain cell because of stupidity in the question. Read with caution

Is there a way to compile a game for Windows from Linux in Unreal engine? I did google some posts but the answer was either use a Virtual machine which will not be done or use the the theoretical method of using mingw but the forum posts state that it will be tricky business or use a windows machine. I have dual booted windows with linux on my machine.

However since the machine has a 512 gb ssd most of the storage space is devoted to unreal engine which takes 47 gigs in itself and have a lot of programs installed I have a usable 20 gigs left out of 145 gig partition. Windows has around 318 gigs of storage to it but I have 100 gigs free at most. So after installing the windows sdk, visual studio with extensions, unreal engine and some other stuff I don't have much space left for myself. I need that much space since I install a lot of games to my ssd. So now I cant load my bigger projects for playing on my windows. I could use my hdd which is mostly used for backups and 100+ gig stuff. Though the hdd's are of course far slower than ssd's which shouldn't be a problem however last time I used visual studio it ate more than 2 gigs of ram for a solution meaning that the compiler has very low memory for itself to actually compile so for any large files the hdd has more of a bottleneck.

Oh and I can't upgrade my ssd's or ram because I don't have enough money.

Thanks for the answers in advance

What are some backstage computer science jobs(jobs most people dont know even exist but keep the show runnning and are pretty important)

On devrant I sometimes see a good amount of posts saying angular is garbage but nearly none about react. Why is angular so hated.

Windows why do I need to explicitly tell you in a firewall rule to allow port 80 to allow someone in the same NAT as me which is set to a private network to access the web server?

Need recommendations for CMS compatible with c# and .net core. Headless CMS are fine too

Thanks

Should I go for freecodecamp or app academy open or some other free resource to learn full stack web development. Freecodecamp's explanations are starting to get over my head. App academy open seems great except they teach ruby on rails before teaching MERN stack and there are only three reviews on the internet I could find

I need to run wordpress on a Windows server or Windows 10 to be used for a medium sized WooCommerce site for a reason I don't want to state. What is the best way to do this. My best options seem to be :-
Using IIS
Docker with caddy
Linux vm with or without docker

Should I write my app as a pwa or in electron. The app needs to be on mobile devices too but I wont mind rewriting the app for another platform since the app is pretty small. It only needs notifications, network access and basic read and write access to write some pretty small configs. Most of the code will be for the ui anyways

Sorry for asking this question again but I got no replies or releated replies.

Is app academy open good for learning fullstack web development for a newbie or somewhat new to web development. There are barely any reviews on the internet about it. I did kinda ask about them in one of my previous rants but was recommended fullstackopen by @100110111
. I started fullstackopen pretty recently. App academy seems good too but it is a 1000+ hours soo I wanted to know if I am learning anything useful there.

Also thanks @100110111 fullstackopen is pretty good

Not exactly a rant but some annoyances

Whenever I copy paste code from kindle it does not space the code. Stack overflow says that kindle is using characters for space which are not present in UTF-8 which causes the issue and the find and replace option coes not work in vs code which the author is using. And if you copy from kindle whether you use the button or Ctrl + C it will add the book title and the author at the end. Who the fuck though this was a good idea.

Oh a table does not fit on the screen render whatever fits even if it is the top line of the table. This is probably not an issue and they cannot fix it and I shoild just deal with it.

The author introduces me to the language compiler and lists a command to what versions are available. I get an error which says the command is not found on windows. I dont find any solutions on google, so I go the next place and author says that he knows about it and shows a link to fix it and tells to folloe the instructions. But the link does not have any instructions and just has instructions to configure the compiler itself. The only releveant information was the path to the compiler which the author could have included there or said that was the only relevant information. The path was correct but I needed to install some stuff through Visual Studio

Newbie question

Any good free resources for full stack web development. Also if a resource teaches mainly frontend but also teaches some backend it is a full stack web development resource in my eyes. I was looking at freecodecamp but it is a bit too vast for me. I am also looking at the cokplete intro to web development v2 course by Brian holt for free on frontend masters but it is 2 years old and has not been updated. Also it does not teach that much bakcend hust node and express.

Also another question is frontend masters good for web development. I did not find many threads about it. I got a discount for it which gives me a one year subscription for 195 dollars

I want to learn c# to build a mobile app with xamarin and a website with asp.net core. I have some programing experience and have build some meh apps. What should I use
Head First C#, 4th Edition
C# 9 and .NET 5 - Modern Cross-Platform Development - Fifth Edition
C# Fundamentals by Scott Allen on Pluralsight

C# 9 and .NET 5 - Modern Cross-Platform Development - Fifth Edition teaches what I want to learn but the Xamarin section seems a bit short. C# Fundamentals by Scott Allen on Pluralsight was recommended a lot to beginners online and I can always learn Xamarin from Microsoft Learn

!dev
Yo anyone who uses hikvision, do they still use npapi requiring use of older browsers or a plugin or other software like iVMS

Any gift recommendations. My birthday comes up in a few days and he asked what I wanted as a birthday gift(gifts are supposed to suprises but being able to choose is good still).

However I cannot ask for electronic gadgets. That knocks a lot of stuff of. The exception is that if something does not make me spend more time on the computer that is allowed. Kinda weird. For example I can ask for a printer or medical equipment like oximeters since that wont make me spend more time on the computer. Both of these examples were given by my father. I could ask for a new printer however we still have a printer but it is currently in the shop since it is not being used and the shops printer broke and is hell to replace since they need chips to verify toners and you need to get those chips separately from what my father told me and the shops printer should be repaired in a few months since lockdown was lifted a few days ago and I won't need to print something since everything is online and they don't need to show student projects yet.

Thia knocks a lot of hardware off since by definition if I am using hardware I still need to code it to do something which is more time on computer which is not allowed. So no fiddling with aurdino or rasberry pie or whatever is the most used hardware kit.

I can buy some course or a book to learn something but I already have problems with consistently learning c# with a good book which will lose value in November and that most topics I would like to learn like computer networking or some new language are practical which is more time on computer which is not allowed.

So the only thing I can buy are some books to enjoy reading for fun or some school books like a science digest book like Together with or the ultra popular maths reference book RD Sharma

So what things should I ask which comply with the rules my father has laid or just skip this thing

!Dev
Fuck people using trace rifles in momentum control. How the hell am I supposed to kill someone who kills me in two rounds and also fires at 1000 rounds per minute. I was trying to get the catalyst aka upgrade for the seasonal weapon which is pretty bad and the upgrade makes it usable but I am getting ripped apart after my first kill because someone can kill me with 2 bullets wherever he shot me.

Yes momentum control is supposed to be a gunfight mode and it comes around rarely but that does not mean a broken weapon can roam around killing anybody in sight before they even know you fired a shot at them from some lane. Shotguns do the same but you need to get close. Shotguns are still a problem but at least you can dodge or counter with a shotgun since your radar tells you someone is nearby and snipers need a headshot. These weapons can fire at your toe and you are dead. Oh the devs knew that such fast firing weapons wil be op and needed their damage and made them use the same ammo as shotguns, sniper and non heavy grenade launchers. However the game mode gives all weapons a damage buff which is enough for trace rifles to be broken. Yes you can use other primaries but what are you gonna do when a auto rifles kills you with two shots to the toe. And since they burn ammo quickly and take more rounds to kill then their counterparts like shotguns which use he same ammo as them they spawn in with 50 in the mag and anybody who is using shotguns snipers or grenade launchers give them ammo and they only need two rounds to kill. Also after I kill 50 PvP opponents I need to kill a few hundred opponents in PVE or PVP to actually apply the upgrade and who you kill does not matter.

Seriously and the second weapon I want to upgrade which is able has tracking but you need to aim down sights after hipfiring the tracking shots
which dl negligible damage so they explode or aim down sights and shoot which deals more damage but I am probably not going to have enough time before some random kills me again.

And this is just the first game. From what I heard it was supposed to be a fun game mode which focused on gunfights with your primary not the infamous laser tag show of Prometheus lens which happened a few years ago but now all trace rifles can do that. Oh and I still need to get 50 kills there for a seasonal challenge so I can get the free version of the premium currency and I can only skip one challenge and I have already skipped one challenge since it requires a dlc K don't own.

Seriously why cant some actual good game come up to challenge this. All the competition seems to be third person shooters. Also most of the guns don't feel good and lore is pretty lacking but lore is not top priority. The only competition is Warframe which is not my style, Titanfall 2 but I get insane pings from here so no multiplayer so after the story nothing to do unless I want to do airtstrafing which is useless since I can't play multiplayer. Granted Titanfall 2 is not a looter shooter but the guns feel good and the movement is too good and Halo 1 - 3 since I heard 4 and 5 are pretty bad and I have only played halo 1. I might complain about jackal snipers in halo 2 but at least they have fixed spawns.

Maybe I am overreacting since it is my first game of momentum control