If you actually got pwned by the latest PHP vuln, you need to talk to the security researchers who are running all these honeypots and only managed to capture unsuccessful exploitation attempts.

An actual working exploit in the wild is real news

Being able to find the cause of a bug and being able to build a decent codebase from scratch are definetly not the same

I do some vibe coding using recent affordable models, it’s still slop. I guess the better, more expensive models are less sloppy, but 1. I don’t have unlimited funds and 2. I kind of hate that everyone is now asking their favorite models to re-invent the wheel. The token money that collectively goes into these projects would be spent so much better on financing established open source projects and their maintainers.

Anyway, even with “good” models and Rust, you’ll still get logic bugs which are usually far easier to actually exploit than memory corruption (for which going beyond crash/DoS to RCE often requires adapting to the specific build of the target, and generally a lot more time and effort)

A lot of these bot requests come from what seems to be compromised hosts turned into scanners and residential proxies.

I find it funny you’re hating on python right after praising vibe coded slop :D

Or maybe that was just sarcasm

Putting everything behind a VPN is useless if i give people who routinely click phishing links (then ask me for help when/if they realize their mistake, that’s how I know) access to said VPN

Self hosting is getting really exhausting lately… Maybe I will just gate everything behind a VPN and stop sharing my services with relatives :/