❌

Normal view

Received — 26 October 2026 ⏭ Tech

Don't know where to ask...

✇WordPress
By: /u/VeritysVisions
26 October 2026 at 22:37

Feel free to point me to the right place.

My website has only a contact form that goes to my Gmail. I did set up my hosting account with the catch all email, so I get everything sent to @mydomain.com.

I have a link to my site at the bottom of my clients sites (with permission), so people can find the webmaster or hire me to make their own site.

I'm getting strange emails at my main domain, where I don't ever get email except for dmarc ones. It's sent to [email protected] and it's asking if I want to buy a .com version of my clients domain.

I imagine they found me via the link on my clients site, but why not use the contact form on my site? And the emails started by assuming I own my clients domain and have continued checking in to see if I'm interested,and just today that the price is negotiable.

I've done internet searches, trying to see what's really going on, but not finding anything. I haven't responded, the big weirdness is the 'instructions' address, which has never existed and doesn't even seem like a reasonable address to send cold contacts to. Admin, contact, support, etc make much more sense.

Just looking for if other people have experienced this and perspective on what the point might be. I know it's some sort of scam, but I guess I'm curious about what kind.

submitted by /u/VeritysVisions
[link] [comments]

US Designates Helium As a Critical Material

✇Slashdot
By: BeauHD
26 October 2026 at 22:30
An anonymous reader quotes a report from the Associated Press: The U.S. designated helium as a critical material on Friday because it's indispensable for making semiconductors that are essential to energy generation, and the global supply is at risk of disruption, according to the Energy Department. The designation by the Energy Department means that more federal financing will be available for helium producers and that the government will monitor it more closely. Helium is primarily produced as a byproduct of natural gas processing. The United States is the world's largest producer of natural gas and of helium. Qatar and Russia are the other top helium producers. [...] Helium makes balloons rise, but that's not why the DOE is interested in it. Helium plays an important role in wind, solar and nuclear energy production, space exploration, medical imaging and research. Assistant Secretary of Energy Audrey Robertson said helium's unique properties make it irreplaceable, such as the fact that it's non-combustible and has the lowest boiling point of any gas. The nation needs an ample supply for semiconductors, quantum and super computing, and superconducting magnets, added Robertson, who oversees the Office of Critical Minerals and Energy Innovation. [...] Despite environmental concerns with recovering helium from natural gas, there are also opportunities, said Greeshma Gadikota, director of the Lenfast Center for Sustainable Energy at Columbia University. "If we burn the natural gas, there are a lot of CO2 emissions associated with that," Gadikota said. "But if you just extract the helium and use it, the uses of it don't contribute necessarily to greenhouse gas emissions. "So from a climate standpoint, if we are going to continue down the line of extracting natural gas and recovering helium," she added, "I would prefer to see natural gas being used in a form where we directly produce hydrogen and we produce solid carbon." Hydrogen is a clean burning fuel, and solid carbon can provide permanent carbon sequestration and can be used widely in industrial applications, including rubber and pigments.

Read more of this story at Slashdot.

Is Wordpress still worth it?

✇WordPress
By: /u/Massive-Year-7690
26 October 2026 at 17:00

Hello everybody. I am a 22 year old (M) and I work at an agency as an SEO consultant where all our client’s websites are created with Wordpress.

I’m now thinking to actually learn how to create responsive webistes with wordpress so I can begin to find individual clients to work with, on building their website and doing their SEO also.

But don’t know if Wordpress is still relevant or will be relevant in the future.
And if yes, where should I start to make fully functional and responsive websites?
And if not where should I focus on learning?

submitted by /u/Massive-Year-7690
[link] [comments]

How the "Steal My Bitcoin" challenge was solved - It was really 2 hours.

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/DrWhatNoName
26 October 2026 at 15:22

TL;DR for the first 26 hours the page was a static html page being served by php. After the challenger author was informed that if there is no php code php doesn't execute, the author added a phpversion() script.

After this became exploitable it took 2 hours for someone to hack the server and steal the bitcoin.

submitted by /u/DrWhatNoName to r/PHP
[link] [comments]

Do you believe the loss reasons in your CRM?

✇CRM - Customer Relationship Managment
By: /u/TrailRun_7545
26 October 2026 at 19:09

We made loss reasons mandatory in Salesforce and thought that would clean things up

It did make the reports cleaner but I’m not convinced the data got much better.

Price is our biggest loss reason right now but whenever we hear from a buyer there’s usually a lot more behind it. Implementation, trust in the vendor, internal politics etc etc etc

I need to hear from people who have started talking to lost buyers regularly and comparing that back to what the rep entered.

submitted by /u/TrailRun_7545
[link] [comments]

PHP2Shell Security Flaws Now Successfully Exploited

✇Slashdot
By: BeauHD
26 October 2026 at 18:00
The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed remote code execution against an Apache mod_php installation running PHP 8.4.26. "This is now confirmed RCE with usable memory disclosure, not just a crash followed by a suspicious process. The response delivered an 800 KiB decoded cookie dump, and a function address derived from that dump using the public exploit's offsets appears in the subsequent execution payload," Karimi shared. "The evidence demonstrates this chain on the intentionally favorable single-worker mod_php profile; it is not a measurement of exploit reliability on other worker counts, PHP builds, or applications," he added. Karimi's findings were also confirmed by Expel threat researcher Marcus Hutchins, who has been tracking a stream of alleged successful PHP2Shell exploitation reports. "This is by far the highest quality confirmation of in-the-wild php2shell exploitation I've seen so far. Deep technical breakdown of a successful exploitation attempt against an Apache mod_php installation running PHP 8.4.26," Hutchins said.

Read more of this story at Slashdot.

Skydance Offers Buyouts, Gives 5-Day RTO Order

✇Slashdot
By: BeauHD
26 October 2026 at 17:00
Skydance, as it begins integrating Paramount and Warner Bros. Discovery, is offering voluntary buyouts to some employees and imposing a five-day-a-week office requirement. Layoffs are also expected as the company targets more than $6 billion in annualized cost savings within three years. Variety reports: The new program was outlined by chairman and CEO David Ellison and co-CEO Ynon Kreiz in a memo to staffers Monday. "As we bring our teams together, we recognize that not everyone will see their future here, and we respect that. To give eligible employees the option to move on in a way that works for them, we are introducing a Voluntary Buyout (VBO) Program," the execs wrote. "Those who qualify will receive an individual communication with their personalized details and terms, and a window to decide whether to accept this one-time offer." They added, "Please know we don't take any of this lightly. We are clear about what we're building: a company that tells the stories people around the world love, embraces new ways to connect with audiences, and leads the next era of media and entertainment. We have the talent, the creative firepower and the ambition to do it, and we will get there together." [...] In the Oct. 26 memo, Ellison and Kreiz also said the new Skydance is moving to a mandatory five-days-per-week in-office policy across the company. "We believe in-person collaboration is vital to our culture and to the success of our business. Especially in a creative company like ours, the best ideas come from people in the same room, sharing perspectives, challenging one another and solving problems," the execs said. "We truly believe this is in the best interest of our company and our people. We've seen the benefits firsthand at Paramount, and we want every part of Skydance to share in them."

Read more of this story at Slashdot.

What do you do with leads that say "not right now"?

✇CRM - Customer Relationship Managment
By: /u/crmkonguru
26 October 2026 at 16:09

In B2B sales, not every lost opportunity is actually lost.

Sometimes the timing is wrong, the budget isn't ready, or the customer simply has other priorities.

I'm curious how other teams handle these situations.

Do you schedule a follow-up for a few months later, keep them in your pipeline, or just wait for them to reach out again?

What has worked best for you?

submitted by /u/crmkonguru
[link] [comments]

Firefox Tries to Bring Back the Internet's 'Good Old Days'

✇Slashdot
By: BeauHD
26 October 2026 at 16:00
Mozilla launched a new ad campaign for Firefox that leverages early internet nostalgia in a bid to win back users who switched browsers. "Today's internet tracks you, interrupts you, and asks for permissions it already took. But it wasn't always that way, and it's not how it's supposed to work," writes Mozilla CEO Anthony Enzor-DeMeo in a post on LinkedIn. "It's how a few companies decided it should work, because it pays." "We're making a different bet at Firefox. Remember us? Well, we're still here, and we don't think the internet should be like this..." The ad features viral internet stars from yesteryear, including Tay Zonday of "Chocolate Rain" fame, Gary Brolsma of "Numa Numa", Noah Ritter, better known as the "Apparently Kid", and Laina Morris, the face of the "Overly Attached Girlfriend" meme, among others.

Read more of this story at Slashdot.

Instagram Chases YouTube With a Push For Longer, Widescreen Videos

✇Slashdot
By: BeauHD
26 October 2026 at 15:00
Instagram is testing a new longform, horizontal video format called "Features" as it pushes further into YouTube territory and expands its presence on TVs. The Verge reports: Instagram boss Adam Mosseri has been against doing longform video on the platform "for a long time," he says in a six-and-a-half-minute video (here's the widescreen version) with VP of product Tessa Lyons, saying that "one of my concerns has been, how do we make sure that we keep Instagram not just about entertainment, but about connecting with friends." If you watch a longform video, "it's a lot of Reels, photos, and carousels that you might not have sent to a friend," meaning less likes and shares. Now, though, the team is working on making shortform and longform video "symbiotic," according to Mosseri, like podcasts or comedy specials that can be both long videos and broken up into shorter ones. The announcement of this widescreen video push also follows the launch of Instagram's TV app late last year. That app launched first as a Reels-focused experience and as a pilot for Amazon Fire TV devices in the US, but it's since expanded to Google TVs, Samsung TVs and Apple TV, and Instagram launched new features like the ability to watch Stories earlier this year.

Read more of this story at Slashdot.

Walter Koenig, Chekov On Original 'Star Trek,' Dies At 90

✇Slashdot
By: BeauHD
26 October 2026 at 14:00
Longtime Slashdot reader schwit1 shares a report from CBS News: Walter Koenig, the actor who played Pavel Chekov in the original "Star Trek" series and several movies, has died, his rep confirmed to CBS News. He was 90. Koenig died Sunday night at his home in the North Hollywood neighborhood of Los Angeles, talent rep Zachery McGinnis said in a statement. He died surrounded by his daughter and niece, McGinnis said. In 'Star Trek,' Ensign Chekov was the sole member of the spaceship Enterprise bridge staff from what was the Communist bloc. His friendly, supportive presence showed how the rival nations (in the far-off future in which the show was set) were capable of working together. Speaking heavily Russian-accented English, Chekov embodied stereotypical Russian personality traits, including fierce pride, love of poetry and blind loyalty. "Through countless convention appearances and interactions with fans, he shared his kindness, wit, and appreciation with everyone fortunate enough to meet him. He understood what Star Trek meant to people and embraced the community that grew around it," McGinnis said. "Thank you, Walter, for the memories, the inspiration, and for boldly going where few have gone before." Watch some of the Chekov's best moments on YouTube.

Read more of this story at Slashdot.

Highway Thieves Are Spoofing GPS To Steal Millions In Data Center-Bound Cargo

✇Slashdot
By: BeauHD
26 October 2026 at 13:00
Highway thieves have stolen more than $100 million in data center equipment since June, employing increasingly sophisticated tactics such as forging driver IDs and spoofing GPS tracking systems. NBC News (paywalled) reports that thieves have "made away with more than $100 million in data center freight." Ars Technica reports: Here's how they said thieves get away with it: First, thieves hack freight brokers' accounts on shipment-listing websites and post fake shipments to lure real bids, then send a malicious link to any trucking companies that respond. Once victims click, thieves install software to take control of their accounts and start bidding on real shipments. Sometimes, a real delivery driver is hired to collect the cargo, unaware of the scam, and other times fake driver's licenses are used to get accomplices hired. Either way, the goods are eventually transferred to a driver working with the thieves to resell the gear, and, in one of the largest thefts, tracking coordinates were spoofed to prevent digital monitoring. Equipment commonly targeted includes "servers, fiber-optic cables, computer memory chips, copper wires, and bitcoin mining machines," NBC News reported. Some trailers hit seem to be carrying only data center equipment, like two stolen freights found in Illinois. The Cook County Sheriff's Office estimated those contained $300,000 worth of copper wire spools and about $1 million in "custom-made data center modular power solutions equipment," NBC News reported. Other trucks impacted were carrying additional freight, like a Los Angeles County Sheriff's Department case where "data center cooling equipment" bound for Deepcool AI was recovered among nicotine pouches, televisions, shoes, printers, speakers, and skin care cosmetics. Experts worry that means Americans may be broadly harmed by the thefts, not just the AI industry. While some stolen goods have been recovered, in two of the largest thefts that NBC News found, none of the equipment was found, and off-duty cops hired to escort the shipments were targeted in hit-and-runs. [...] Broadly, cargo thieves are infiltrating email accounts to find lucrative shipments, misdirecting shipments, disrupting GPS tracking, and using AI to create fake driver's licenses to get accomplices hired as delivery drivers. LASD's Sgt. David Pantoja told NBC News "that's how most of it is being done," which is a big shift from the past when highway thefts were largely opportunistic.

Read more of this story at Slashdot.

Apple Updates the iPad Mini With a Larger OLED Display

✇Slashdot
By: BeauHD
26 October 2026 at 12:00
Apple has unveiled a redesigned iPad Mini with a larger 8.5-inch OLED display, an A20 Pro chip, twice the peak brightness and slimmer bezels while maintaining roughly the same footprint. It starts at $699 ($200 more than its predecessor) and will be available November 6. The Verge reports: Despite having a slightly bigger display than the 8.3-inch screen on its predecessor, Apple says the device maintains the same small footprint thanks to bezels that are 24 percent slimmer. The iPad Mini is 5.4mm thick as well, making it thinner and lighter than the previous generation, according to Apple. It also comes with an IP67 rating for protection against water and dust. Aside from an OLED display, the new iPad Mini features an upgraded A20 Pro chip. This enables support for some of Apple's new Siri AI features, including the ability to tweak the expressiveness and pace of the assistant's voice. Apple says the upgraded iPad Mini also comes with two times the peak brightness than the previous generation. iPad Mini's 12MP front-facing camera is now on the long edge of the device, making it easier for video calls in landscape orientation.

Read more of this story at Slashdot.

How to turn my client's Claude code 'apps' into viable WP tools/plugins

✇WordPress
By: /u/SyncMyLife
26 October 2026 at 13:42

I'm not a Dev. I build WordPress sites using Divi 5 for external clients and we charge for a website with no custom code (only official plugins/tools are used on the sites). Lately, we've been having customers request that we implement their claude coded 'apps': like an interactive event program (so they don't have to pay for a mobile app) or an interactive company archive (so they don't have to pay for a premium timeline plugin), and I'm wondering if this is happening to anyone else? There's obviously going to be a market for turning client's AI coded 'apps' into legit Wordpress tools/plugins that can be updated properly and secured, etc. How is everyone thinking about handling this type of request? Would love to hear ideas!

submitted by /u/SyncMyLife
[link] [comments]

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

✇The Hacker News
By: [email protected] (The Hacker News)
26 October 2026 at 13:12
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you

❌