Hacker Newsnew | past | comments | ask | show | jobs | submit | embedding-shape's commentslogin

I'm guessing it'll depend on the GPU (and CPU) choice, putting the cheapest that is sufficient for the choice.

Seems they might be selling a combo of dual RTX Pro 6000 workstation cards (non-refundable), but the setup they have, unless they change how the GPUs cooling work, isn't gonna work out thermally if you stack two of those workstation cards on top of each other. But it doesn't say WS or "Workstation", so I suppose could be the server variant too? But also doesn't say...

Hope they have good overall cooling the case, cooling doesn't seem to be mentioned, it'll be a noisy little machine no doubt :)


They're [Max-Q] blower cards and there's a big gap between them so the cooling looks fine.

So the two variants they offer is the Max-Q and the Server edition one, but only explicitly mentioned for one?

Edit: The Max-Q is one of the options, what's the other option then?


Seeing as it adds a second PSU, I'm guessing the workstation one.

Page mentions liquid cooling, for what it's worth.

Tried it on my Blackberry too, also nothing. I say it's a nothingburger.

A Denial of Browsing attack.

I have two other web browsers open at any given time, so probably not really. I guess it would be if it truly did bring down the entire system.

Is that linked submission "your experience" or is there something else you're basing that on? Because that article you linked is kind of strange, read through the comments on what you linked.

And whoever needs something else, I give you permission to ignore this fool and keep your box(es) of cables. I don't regret a single thing about my ~8 boxes of cables.

My boxes been sorted by "what does the cable carry", one power cables, one data, one video, one patch cables, then some are split out, like sound production related cables, one with balanced 1/4", one unbalanced, one MIDI... I think in total 8 moving boxes by now.

Very interested in knowing too, since the issues seems to not be related at all, or similar, so now this must mean a Gitea "project leader" would only say this if they have some sort of layer that doesn't require them to manually patch issues individually. Meaning, firewall? Would be weird if that's built-in into Gitea though... Hmm.

It looks like Gitea made the same fix (rm -r .git after template processing) back in February: https://github.com/go-gitea/gitea/commit/2176e84ab977011ff2b...

PR: https://github.com/go-gitea/gitea/pull/36734

So likely Gitea < 1.25.5 was vulnerable.


i like how this is a side effect of a bunch of assorted changes in a commit and PR solely described as "Fix path resolving" making it hard for anyone running Gitea to even know this is a security fix

It’s explicitly listed as a security fix in the release notes, accompanied by a CVE: https://blog.gitea.com/release-of-1.25.5/

It is unfortunate nobody tipped anyone off downstream.

Forgejo is a fork of gitea.

Hence the question...

Conciser: User's who can create new repositories, can exploit templates to do variable template expansion leading to being able to read arbitrary data from the Forgejo hosts.

If you have open registrations or otherwise users you don't 100% trust with the ability to create new repository (which is the default I think?), they could potentially exploit this and you probably wanna upgrade ASAP.

If you have only trusted users, or single user, seems it's fine. Of course, wanna upgrade anyway to not add escalation paths, but in the other situation it's graver.


That sounded too extreme to be true, but it seems to be true, there is no "practical driving exam" as most other countries I know of have. There still seem to be a written theory exam at least, but if you're over 18, you go in and do those things and get the license.

Unsurprisingly, Mississippi seems to have the highest fatality rate by rate compared to any other US state: https://www.iihs.org/research-areas/fatality-statistics/deta...

Seems kind of crazy they don't do anything about that... But then again, lots of things to do something about, some even crazier so what's a couple of more vehicle accidents gonna do.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: