How dare you (correctly) assume I haven’t taken proper backups!

Jk lol

I do have a couple backups I made a few months ago. Never tested restoring them, so I don’t count them as “real”.

I’m hosting on namecheap servers, using their cpanel and stuff. So I don’t have the option of installing my own PHP version, just selecting theirs.

But apparently they had some mitigations in place before updating, and then they got us updated.

Yeah it’s self hosted, thanks

Ah that makes more sense, that’s the key I was missing, thank you

Seriously though, how quickly do you expect patches to be available for WordPress? I’ve got one WordPress site that I made years ago for a friend’s business. I pop in on it and update stuff every few months.

Should I take it down?

Why do it this way? I’m genuinely unaware.

With the plex2shell, they fixed it in a previous update, then told us later.

If PHP knows what the problem is, why announce it now, and then release the patch. Why not release the patch, say hey guys this is an important one, and then tell the world/every script kiddie who didn’t know about php2shell AFTER everyone is patched?

Like I get it, I guess, php2shell must already be happening, the vulnerability is already there, but like… Shut up about it? Right? Let more people patch before you announce why the patch exists?

I’m new to this world so maybe this is normal?

I checked tmp, and looked for suspicious processes or cron jobs, checked logs, I don’t see any reason to think I was impacted.

So that’s good.

Am not sensible admin. Though I did just run a backup and update. How likely am I FUBAR?

Edit: I run Plex on a dedicated proxmox VM. Theoretically I could nuke it and start over with my Plex database file. Though there’s some config I’d have to do again and I don’t want to

Another vote for openwrt

I think you’re right. My brother was on someones Plex for awhile once. And one day the owner asked him how he was liking xyz show he was watching.

Innocent enough, but still weirded him out. He stopped using it immediately after that. Doesn’t want to be observed, even casually.

DSL! Such a classic.

I’m wondering if this has anything to do with the team lead changing?

A big push in features that had been waiting on the back burner?

Since when has apt had ads? That’s horrendous. How have I never heard of this?!

I didn’t realize WHAT the problem was, assumed it was just Linux in general. But that’s my experience with Ubuntu, too.

Been with it since the beginning, it was one of my earlier introductions to Linux. But I could NEVER upgrade cleanly. I was always reinstalling. And yeah there are easier ways to do that too but for a noob I struggled.

That kept me dual booting Windows, or for a good number of years running mainly Windows.

But last year I went atomic fedora bluefin on my new laptop, and I love it. Slightly more restricted, and a couple issues with flatpaks, but the stability is top tier.

I still run Debian on my prox VMs, and I keep a win 10 ltsc VM on there too for the rare program that doesn’t play nice, but otherwise I’m all Linux now.

Same. But I went atomic, bluefin.

For a stable every day driver? It’s gonna take a lot to get me to switch away.

Still Debian for my proxmox VMs though