Of course it isn’t.
It was behind a WAF. But that didn’t matter for the path traversal in this attack.
Of course it isn’t.
It was behind a WAF. But that didn’t matter for the path traversal in this attack.
It’s pretty common in a killchain following a server side request forgery since the traffic isn’t seem by the WAF.
Example: https://github.com/watchtowrlabs/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882


Being a complete leech is very profitable.


Sure. Fine. It means all of that now.
But what are we going to call the difficult thing that we have to do to coax, say, unstructured event listings into reasonably structured data?


So scraping means any harvesting of data now?
We need a new name for the fairly painful process of trying to tease meaning out of people’s unstructured HTML.
In any case downloading a bunch of stuff from JSTOR was not scraping. And he absolutely had authorised access to that data. They took exception to the quantity, mainly.
Donald Trump is relentless in the pursuit of stolen valor.


Code is a mass noun, and as such it’s a shibboleth. People who “open a code” have no idea what they are doing.


This is normally covered by a venue’s blanket license.


This misses one of the main instruments used.
Loans. The interest cancels out their realized gains, but unrealised gains always dwarf that. Unrealised gains aren’t taxable income.
https://themoneyknowhow.com/how-do-the-rich-live-off-of-loans/

The one in Verona is used for concerts. So that works.


Eleven. It was easier to talk with people eleven years ago. By about this time in 2016 it was too late.


You get security updates without Ubuntu pro.


When have any of you given them your private information?


I’m well aware. I’m taking about the problem of having to convert when dealing with USA origin consumer products.
You get to pick and choose but your manufacturers force us to deal with your ancient Roman units. I mean, whose foot was it anyway?


Exactly. They will stay in the USA from now on, and leave the rest of us have our metric units.


This happened at our shop fifteen years ago. We were instructed to outsource everything to offshore.
That didn’t work at all, because with a few rare , bright exceptions the people the offshore company have us could only achieve an outcome if they had a list of steps for that specific thing.
It’s going to be exactly the same thing with vibe coding. It kind of works in the hands of somebody with a deep understanding of the tech, but they expect to hand it to juniors and get good result.
So we’ll either have to pick up the pieces or let them flounder.


Can you name the one with the largest user base? How do you distribute it? What’s the ecosystem?


Are you maintaining them for your own use, or do they have other users who you are supporting?
They don’t have to scrape it. They just use the nominatim API like everybody else.