3か月も毎日電車通勤する仕事は久しぶりだが、おかげで通勤時間を開発に使うための方法探しに真剣に取り組む機会になっている。 結果、自宅母艦の Claude Code にTailscaleと自前Happy Serverを立てて、GitLab Happyでモバイルから指示&SSHで復旧対応もOK、というインフラが完成した。

New analysis reveals Rock, a single developer operating The Quarry MaaS/PhaaS ecosystem since April 2025, enabling up to 200 affiliates to run tax-themed phishing campaigns targeting US 🇺🇸 organizations with legitimate RMM tools. Key technical details: • Modular toolkit includes VBS droppers with UAC bypass, self-hosted ScreenConnect panels, Rocky Gmail Sender mass mailer, and PowerShell exfiltration scripts • Three VBS variants: Base64, hex-encoded GitLab loader, PowerShell AES decryption to evade static analysis • Legitimate signed RMM software (ScreenConnect, Tiflux, Datto) used as final payload, not modified malware • Adspect cloaking filters researchers while serving fake SSA/IRS portals to victims • Telegram-based C2 for real-time victim logging and exfiltration (T1071.001) Attack chain methodology: • Bulk emails with tax lures → Adspect filtering → spoofed government portals → RMM payload delivery via de.php • VBS path: self-elevation → parallel RMM decoy PDF download → silent install with /quiet ALLUSERS=2 → cleanup • Post-exploitation includes browser history theft and W-2 document finder targeting financial data 90% victims in US 🇺🇸 across SaaS (17.4%), Healthcare (15.8%), Media (14.7%), Finance (11.1%) sectors. Arabic comments in code suggest developer origin, but affiliates span multiple regions. #DFIR_Radar

・Markdown エディタ（表・数式・Mermaid） ・全文検索／タグ／タグクラウド ・アーカイブ＆ごみ箱（復元OK） ・PDF・HTML エクスポート ・GitHub / GitLab / Dropbox / Box / Drive 同期 ・ノート暗号化・ロック ・スマホ／タブレット／PC対応 🚫 広告なし・サブスクなし ✅ 3リポジトリ目だけ買い切りPro（いまローンチ価格）

無料ユーザも使えます！GitLab Self-Managed EEで有料機能を無料で使い倒す「Registration Features Program」完全ガイド qiita.com/GL_Tsukasa/items/c… #Qiita @GL_Tsukasaより

I'm currently using GitLab

I was paying for cloud storage, a password manager, a VPN, and ChatGPT. Then I found this GitHub repo and started replacing all of them. It's called Self-Hosting Guide. 19,000 developers have starred it. And it's the closest thing the internet has to a bible for replacing every paid SaaS you use with software running on your own hardware. Here's what it actually covers: → Self-hosted ChatGPT alternatives. Ollama, llama.cpp, LocalAI, GPT4All, LM Studio. Walked through with install steps. → Cloud storage to replace Dropbox and Google Drive. Nextcloud, Seafile, ownCloud, Syncthing, MinIO. → Full WireGuard setup guides for PiVPN, Unraid, pfSense, OpenWRT, and Home Assistant. → Self-hosted Git replacing GitHub. Gitea, GitLab, Gogs, OneDev. → Media servers, password managers, smart home automation, video surveillance, podcast hosting. → Docker, Kubernetes, Proxmox, Ansible. Every piece of infra you actually need to run this stuff. → Hardware breakdowns for Raspberry Pi, NAS builds, and home server upgrades. → Linode, DigitalOcean, and bare metal hosting walkthroughs for when you actually want to deploy. It's not just a curated list. It has install commands, config files, and step-by-step setup guides for every category. Most people pay hundreds a month for SaaS this repo teaches you to run for the cost of electricity. 19.1K stars. 941 forks. 100% Opensource.

GitLab also good

For official projects I'm also using on-prem GitLab.

I mostly use GitLab

GitLab I'm using

I studied the GitLab files of @NexaMoney / @BitcoinUnlimit with AI and I’m impressed by what the $NEXA team is cooking behind the scenes. Let’s dive into it with some groundbreaking conclusions that will definitely attract a lot of eyes on Nexa when the release is there👇

記事を投稿しました！ 無料ユーザも使えます！GitLab 18.9 ── Cloud Native Hybrid でついにゼロダウンタイムアップグレードが正式サポート qiita.com/GL_Tsukasa/items/a… #Qiita

錯和自体がアレなのは置いておいて、そもそもチャットのようなフロー情報に依存しているのも悪なんでいっそ GitLab 社みたいに半年ぐらいでチャット履歴は消える式でいいと思ってます >> 厚労省、Teamsチャット2年10カ月分が消失　東芝が作業ミス　一部は復元困難 - ITmedia NEWS itmedia.co.jp/news/articles/…

congratulations

最近给不止一个朋友推荐分享过这个《远程工作手册》来自 @gitlab ，一家全员remote的公司。 learn.gitlab.com/allremote/r… 这本手册详细的介绍了如何过渡到远程、管理分布式团队、远程沟通策略、建立文化，甚至成为远程工作专家等。 在这篇帖子下，我利用translate.simplifyai.cn/?ur=…翻译了一份中文版。

that's not new, every decent developer's been doing that for years with jenkins and gitlab, but i guess now it's 'ai' so we can reboot our existing infrastructure and call it innovation

Claude Fable 5 무료로 써보고 싶은 분들 주목. GitLab Duo를 활용하면 신용카드 입력 없이 무료로 Claude Fable 5를 테스트할 수 있습니다. 정책 바뀌기 전에 무료로 사용해보세요. youtu.be/mRCb1P0LEZM?si=qc2G…