@nazokiyoubinbou @Viss Exactly

[viss@mastodon.social]

@neurovagrant yes! what.. is the opposite of perl clutching? .. php injection?

[kimschulz@social.data.coop]

@Viss but but but
...perl.

[jernej__s@infosec.exchange]

@Viss I played with cyrus-sasl decades ago and decided it's not for me.

[viss@mastodon.social]

@jernej__s i thankfully have not had to deal with ldap authed postfix since then, but i imagine that if there wasnt some kinda connector thats sensible and not made to torture people i would stoop to fucking writing one myself

[artlung@xoxo.zone]

@Viss but the price is... somehow lower? I am having trouble understanding precisely who and how this affects.

[winterknight1337@infosec.exchange]

@Viss I’ve got a buddy who’s in charge of his company’s CI pipeline in GitHub and he’s absolutely seething right now.

[viss@mastodon.social]

@artlung ive been in a thread about it

https://mastodon.social/@Viss/115731244140632979

[flyingsaceur@ioc.exchange]

@Viss ATLASSIAN: Well, well, well, not so easy to find a source code management platform that doesn’t suck shit, huh?

[viss@mastodon.social]

@winterknight1337 the people who see just how much that shit gets used are shitting kittens.

the people who use it on their own and do not see or are not exposed to the big picture dont get what the big deal is

[viss@mastodon.social]

@flyingsaceur well a self hosted gitlab only exposed via vpn is a pretty good start

[flyingsaceur@ioc.exchange]

@Viss That one was for the Fortune 500

[phillip@social.lol]

@Viss Sounds like they’re worried about people impersonating them or using AI to generate misinformation about them. There’s a Twitter verification joke in here somewhere for sure

[phillip@social.lol]

@cR0w @Viss God I hope someone has a script laying in wait for them to accidentally let the domain expire. It would be so fucking funny

[artlung@xoxo.zone]

@Viss I appreciate the nuance. Thanks!

[xternl@infosec.exchange]

@Viss we all do :(

[richardstephens@hachyderm.io]

@Viss a per minute charge for not actually running your builds, that works out to roughly the same cost of the AWS spot instance tiers we use that can run 2-3 builds at once.

I’m in awe of the hubris.

[viss@mastodon.social]

@richardstephens its gone from rent extraction to exsanguination

[webhat@infosec.exchange]

@Viss @jernej__s I wrote my own, I was deeply embedded in postfix work. There were reasons, none of them good or defensible

[viss@mastodon.social]

@webhat @jernej__s surely theres a better way to auth to ldap now

[webhat@infosec.exchange]

@Viss @jernej__s for sure, I ran dovecot for my last mailserver