TGViewer
Channel Public Channel
Qishloqi 👨‍💻

Qishloqi 👨‍💻

@qishloqi_dev

Stuff.
SWE at srpsoftware.com.
Open in Telegram
Subscribers
56
Photos
40
Videos
4
Links
62

Showing posts older than #102 · Back to latest

Older Posts 20 shown
Post #101 270
found something I built 3-4 years ago. This looks horrible aon but I think i have an idea
Post #99 264

Forwarded from Антон Непша.js

Критическая уязвимость в React

Разработчики React рекомендуют срочно обновиться до версий 19.0.1, 19.1.1 или 19.2.1 из-за критической уязвимости в React Server Components, обнаруженной 29 ноября.

Под угрозу Remote Code Execution попадают все сайты, поддерживающие RSC, даже если на самих сайтах RSC не используются. Так же затронуты next, react-router, @vitejs/plugin-rsc и ещё ряд пакетов.

Кому интересно, вот PR с исправлением.
Post #98 276
My friend didn't get SMS invitation to MCDU so I had to check myself.

See ya'll there :)

@qishloqi_dev
  • 👍 3
  • 😁 3
Post #97 284
Thanks git
git stash -u
git switch main
# change stuff, commit, push, e.t.c ...
git switch -
git stash pop # or drop ))
  • ❤ 3
  • 😁 2
Post #95 359
🍰🎉
  • 🎉 6
  • 😁 2
Post #94 290
AI-powered parking never looked like this in my head.


© @science
  • 😁 3
  • 🔥 2
Post #93 353
Linuxga o'tishning ayni vaqti )

https://youtu.be/GQJZ96l-XQ4?si=vlRgRfFIguUNwoAx

https://learn.microsoft.com/en-us/answers/questions/5585563/localhost-not-working-anymore-after-2025-10-cumula

https://www.reddit.com/r/pcmasterrace/comments/1o14lo0/microsoft_is_blocking_all_workarounds_to_create/

@qishloqi_dev
YouTube Apple Introduces The Year Of The Linux Desktop! https://twitch.tv/ThePrimeagen - I Stream on Twitch Become Backend Dev: https://boot.dev/prime (plus i make courses for them) This is also the best way to support me is to support yourself becoming a better backend engineer. https://twitter.com/terminaldotshop…
  • ❤ 2
  • 🥴 2
Post #92 344
Hacker News Companies Are Lying About AI Layoffs Article, Comments
Artikl va kommentariyalarga ko'ra gigant kompaniyalar N minglab ishchilarni AI bilan almashtirdik deyishgani yolg'on.
  • 🕊 4
  • 🗿 1
Post #87 253
https://blog.cloudflare.com/supporting-the-future-of-the-open-web/

Ladybird: https://youtube.com/@ladybirdbrowser?si=RsYfirRY6OQWexWZ

Har olyik reportlar qilib borishi yoqadi Ladybirddagilarni. 1-2tasini ko'rgandim. Qiziq.
Cloudflare Blog Supporting the future of the open web: Cloudflare is sponsoring Ladybird and Omarchy We're excited to announce our support of two independent, open source projects: Ladybird, an ambitious project to build a completely independent browser from the ground up, and Omarchy, an opinionated Arch Linux setup for developers.
Post #86 193
Qishloqi 👨‍💻 Ohirgi paytlar "Supply chain attack"lar ko'zga tashlana boshladi. Masalan: https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack/ Bunday attacklarga qarshi Obsidian jamoasi qanday kurashishi haqida post: https://obs…
https://github.com/bodadotsh/npm-security-best-practices
GitHub GitHub - bodadotsh/npm-security-best-practices: Continuous updates on how to stay safe from NPM supply chain attacks Continuous updates on how to stay safe from NPM supply chain attacks - bodadotsh/npm-security-best-practices
  • 👍 3
Post #84 190
Ohirgi paytlar "Supply chain attack"lar ko'zga tashlana boshladi.

Masalan: https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack/

Bunday attacklarga qarshi Obsidian jamoasi qanday kurashishi haqida post: https://obsidian.md/blog/less-is-safer/

Sber'dan esimda doim npm ci qilib o'rnatardik paketlarni.
Yana bir rule of thumb juda yangi lib/versiyalarni o'rnatmaslik yokida ularga shoshilinch update qilmaslik.

Undan tashqari chatgptga ko'ra: https://chatgpt.com/share/68cdfb82-aef8-800a-9eb0-63ad092c3b25

@qishloqi_uz
OX Security 180+ NPM Packages Hit in Major Supply Chain Attack - OX Security Sandworms in the Supply Chain: The “Shai‑Hulud” npm Credential Theft Overview Attackers slipped malicious code into new releases of a popular open-source color library @ctrl/tinycolor versions 4.1.1 and 4.1.2. The same campaign also trojanized 40+ packages…
  • 👌 3
Post #83 171
Shaxsiy tajribamdan o'tgan. Eng yoqimsiz ishlardan biri shu Vibe Coding qilib yararilgan kodda nimanidir tuzatish.

@qishloqi_dev
  • 💯 4
  • 👍 1
Post #82 185
Tak.
Cloudflare yiqilib tushibdi.

Sabab?
React 😆. Ha oddiy client side "framework" Reactjs. Ehh, meni olishganda bunday bo'lmasdi #opentowork )

DDOS hujumlarni qaytarishda Cloudflare yetakchilardan. Lekin hujum orqasida ham o'zlari turishganda bu qiyin jang.


Artikl: https://blog.cloudflare.com/deep-dive-into-cloudflares-sept-12-dashboard-and-api-outage/

@qishloqi_dev
Cloudflare Blog A deep dive into Cloudflare’s September 12, 2025 dashboard and API outage Cloudflare’s Dashboard and a set of related APIs were unavailable or partially available for an hour starting on Sep 12, 17:57 UTC. The outage did not affect the serving of cached files via the Cloudflare CDN or other security features at the Cloudflare…
  • 😁 3
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →