Steffen Gransow graste

With the release of PHP 8.1, developers using ZTS (Zend Thread Safety) and the parallel extension gained another convenient tool for inter-thread communication: a shared in-memory SQLite database that can be configured with a single DSN string. This approach turns out to be simpler and more intuitive than the standard parallel\Channel or custom sockets.

A Quick Note on ZTS and parallel

PHP with ZTS enabled allows code to run concurrently in multiple threads. The parallel extension provides a high-level API for this: parallel\Runtime, parallel\Future, parallel\Channel. Threads are isolated, so to exchange data you must either use channels (parallel\Channel) or implement your own data exchange mechanism via sockets, files, or shared memory. While this works, it requires extra code/extensions/experience and is not always convenient.

SQLite as a Data Bus Between Threads

Starting with PHP 8.1, PDO SQLite supports a special DSN format using URIs, which allows the same in-memory database to b

Caddy Server - First Contact

Offene Fragen nach der Session

Wie sieht es bei den Zertifikatserneuerungen aus?

Die werden ebenfalls automatisch durchgeführt, wenn Letsencrypt oder ZeroSSL - bzw eine ACME CA - im Einsatz ist. Kann man aber natürlich auch "klassisch" manuell machen, wenn man das aus irgendwelchen Gründen braucht.

Spring Modulith / jMolecules Stereotype Tree

Legend

■ – Application
□ – Module
○ – Named Interface
⊙ – Stereotype

Details

Intro

CVE-2025-3155 affects Yelp which is The Gnome's user help application. It's installed by default on Ubuntu desktop.

what is a scheme

A URI scheme is the part of a Uniform Resource Identifier (URI) that identifies a protocol or a specific application (steam://run/1337) that should handle the resource identified by the URI. It's the part that comes before the colon (://).

	#!/usr/bin/env python3
	import os
	import sys
	import json
	import subprocess
	import urllib.parse
	import urllib.request
	from pathlib import Path
	from concurrent.futures import ThreadPoolExecutor

	// For context check out https://portswigger.net/web-security/host-header/exploiting#connection-state-attacks
	var connectionId = utilities().randomUtils().randomString(8);
	var options = RequestOptions.requestOptions().withConnectionId(connectionId).withHttpMode(HttpMode.HTTP_1);

	// Send a simple GET / HTTP/1.1 to the target as the precusor request
	var url = requestResponse.request().url();
	var precursorRequest = HttpRequest.httpRequestFromUrl(url);
	precursorRequest = precursorRequest.withPath("/").withHeader("Connection", "keep-alive");

	// Send the attack in the repeater, and update the response pane

	<?php
	// This code is what the Symfony Dependency Injection container performs
	// under the hood when registering a listener.
	$eventDispatcher->addListener(
	KernelEvents::REQUEST,
	function ($event) {
	// only when here, MyListener and ExpensiveDependency trigger autoloading
	// and the time of calling their constructor is spent.
	(new MyListener(new ExpensiveDependency))->onKernelRequest($event);
	},

	// This will use the single-packet attack for HTTP/2, and last-byte synchronisation for HTTP/1
	int NUMBER_OF_REQUESTS = 10;
	var reqs = new ArrayList<HttpRequest>();
	for (int i = 0; i < NUMBER_OF_REQUESTS; i++) {
	reqs.add(requestResponse.request());
	}

	var responses = api().http().sendRequests(reqs);
	var codes = responses.stream().map(HttpRequestResponse::response).filter(Objects::nonNull).map(HttpResponse::statusCode).toList();
	logging().logToOutput(codes);

	\|\|youtube.com$domain=~youtube.com # Don't pull youtube JS unless you're using youtube. This breaks
	# embedded videos, which is mildly inconveninent, but makes everything much faster.

	# This blocks a lot of Google everywhere but Google.

	\|\|www.gstatic.com$domain=~google.com\|~google
	\|\|gstatic.com$domain=~google.com\|~google # Don't use gstatic unless you're on Google. This might
	# break some things but so far I haven't noticed any problems.
	\|\|accounts.google.com$domain=~google.com\|~google # Don't pop up the "log in with google" dialog everywhere. This makes the
	# internet feel about 95% less creepy.

	sudo systemctl stop docker && \
	docker context use default && \
	sudo systemctl start docker