▲ 34 r/TpLink+1 crossposts

many RCE vulnerabilities found in tp link omada - update now

  • Forescout’s Vedere Labs found 15 flaws in TP‑Link Omada business networking gear, exploitable for RCE when chained with prior CVEs
  • Weak trust shortcuts in zero‑touch provisioning exposed devices to client‑side code execution, hijacking, spoofing, and encrypted comms compromise
  • TP‑Link released firmware updates; admins should patch immediately, with 1,800+ Omada controllers exposed online
techradar.com
u/cranberrie_sauce — 11 days ago
▲ 4 r/cursor

how do I make cursor IDE open by default and not agents window?

How do I make cursor IDE open by default and not agents window?

I dont use agents window - I find it inconvenient - why is it opening agents window by default ?

reddit.com
u/cranberrie_sauce — 24 days ago
▲ 15 r/oneplus

US - which android vendor you are switching to?

US - which android you are switching to?

I cant stand samsung (locked bootloader) or google (hardware backdoors).

What is left on US market? Motorola - but it only seemingly sells foldables in US - I dont want fucking razr.

What is left? there seem to be absolutely nothing.

reddit.com
u/cranberrie_sauce — 27 days ago

bitwarden in firefox does not work - "An error occured. An unexpected error has occured"

bitwarden in firefox does not authenticate anymore - "An error occured. An unexpected error has occured".

Unable to login since about july 18th.

Same credentials work from bitwarden in firefox.

is that a bug in vaultwarden ? or bitwarden extensions?

edit: resolved - just had to update vaultwarden

reddit.com
u/cranberrie_sauce — 1 month ago

plausible analytics enshittification - alternatives? db migration?

when did the plausible enshittified and locked sampling behind enterprise license?
I'm surprised this wasn't a bigger story. https://github.com/plausible/analytics/discussions/4285

tldr - if you want sampling - you gotta pay for enterprise version.
which means plausible community edition is unusable for larger sites, just too slow.

are there open alternatives ? what people use for data migration?

u/cranberrie_sauce — 1 month ago

amazon.com - UI slowly going downhill

I use amazon a lot.

since recently site started showing UI squished and some blank area on the left.

this is really pissing me off.

I suspect its something stupidly AI related and I hate it. u/amazon - I dont need your stupid fucking AI, I dont need your stupid fucking alexa for shopping. Show me full screen website and get out of my way.

u/cranberrie_sauce — 2 months ago
▲ 2 r/cursor+1 crossposts

cursor - how can I make skills only use specific models?

I use cursor - how can I make skills only use specific models?

like for code reviews I only want to use inexpensive models like composer 2.5 for example - how do people set that up?

reddit.com
u/cranberrie_sauce — 2 months ago

sendgrid website - dog slow

sendgrid website - just dog slow.

Its so slow - feels like site is written entirely in aws lambdas. completely unprofessional shitshow

reddit.com
u/cranberrie_sauce — 2 months ago
▲ 106 r/stocks

The "Trillion Dollar" SpaceX Fantasy Ignores a Multi-Front Siege

**The Core Flaw: TAM Denial**

The fundamental assumption that SpaceX will hit **$1 trillion in revenue** relies on Starlink becoming a global monopoly. That thesis is already dead. There are only ~500 million households globally with the disposable income for $100+/month broadband, and the vast majority already have fiber or 5G. Starlink is a rural bridge, not a global telecom replacement.

**Point 1: Tesla's Playbook is Imploding**

Elon's other venture is bleeding credibility. Tesla is no longer the undisputed EV king; BYD, Geely, and Nio have matched battery tech and undercut pricing so severely that margins have collapsed.

Now look abroad. In **Europe**, Tesla's direct-sales model is a liability. With barely any service centers, owners face weeks-long repair delays. Sales have crashed **37%** across the continent as buyers choose Chinese and local brands with real support infrastructure.

**Latin America** is even worse. BYD and Geely are flooding in with dozens of dealerships.

**Point 2: xAI is a Money Pit with an Expiration Date**

Musk is burning billions on xAI, but Chinese AI labs (DeepSeek, Alibaba, Zhipu) have already proven they can match Western models at a fraction of the cost. By the time xAI turns a profit, open-source Chinese models will have commoditized the entire sector.

https://www.tomshardware.com/tech-industry/artificial-intelligence/elon-musk-says-that-china-will-have-a-fable-5-class-ai-model-probably-q1-next-year-ceo-of-chinese-anthropic-rival-says-it-wont-take-that-long

**Point 3: Starlink's Moats are Crumbling**

- **Russia** is launching its own Starlink competitor next year for military use (Reuters).

- **China** has at least **five** aerospace firms testing reusable rockets and is deploying its own Starlink clone (Guowang) with state subsidies. They don't need to beat SpaceX on tech - just be "good enough" and undercut on price globally.

https://www.reuters.com/business/media-telecom/russia-plans-launch-its-smaller-version-starlink-next-year-2026-06-05/

https://www.chinadaily.com.cn/a/202606/17/WS6a329a2fa310986e2b46095d.html

**The Verdict**

The $1T revenue projection assumes China, Russia, and the EU will just surrender space sovereignty. They won't. In 2 - 3 years, Starlink will be in a price war on three fronts while Starship keeps blowing up millions per test flight.

The ROI is vaporware. Sunk infrastructure costs, state-backed competition, and a fraction of the projected addressable market. This is a subsidized hobby, not a trillion-dollar business.

u/cranberrie_sauce — 2 months ago

client.mxroute.com - issues

pragma header - remove it. its legacy http 1 header.

expires 19 Nov 1981 08:52:00 GMT - dead giveaway for PHP, site is very slow. Use hyperf + swoole if you use PHP.

x-frame-options, x-frame-options, x-xss-protection, referrer-policy headers - duplicated.

cache-control no-store, no-cache, must-revalidate
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; frame-ancestors 'none';
content-type application/json
dateFri, 19 Jun 2026 12:00:20 GMT
expires  Thu, 19 Nov 1981 08:52:00 GMT
referrer-policy strict-origin-when-cross-origin
referrer-policy strict-origin-when-cross-origin
server nginx/1.24.0 (Ubuntu)
strict-transport-security max-age=31536000; includeSubDomains
x-content-type-optionsnosniff
x-content-type-optionsnosniff
X-Firefox-Spdyh2
x-frame-optionsDENY
x-frame-optionsDENY
x-xss-protection1; mode=block
x-xss-protection1; mode=block
reddit.com
u/cranberrie_sauce — 2 months ago
▲ 12 r/Visible

visible website - absolutely terrible

visible website - absolutely terrible. I had to request seven OTP codes because the site kept logging me out over and over again.

I checked what powers the site: Adobe Experience Manager. Suddenly everything made sense. AEM is peak corporate software - expensive, bloated, painfully slow, and designed to turn simple workflows into a never-ending exercise in frustration.

Visible, please stop setting money on fire. Fire whoever thought Adobe Experience Manager was the right choice for a consumer-facing website and hire people capable of building something that can maintain a session for more than five minutes.

reddit.com
u/cranberrie_sauce — 3 months ago

Have you tried: qwencode, z.ai coder, kimi coder, minimax coder? feedback ?

Hey guys. Im using both openai and claude now, and cursor at work.

Openai and claude plans are still subsidized, and I can see how expensive cursor is when I actually use it at work with real api tokens (very f*ng expensive, I can burn 100$ a day easy for heavy users).

Now both openai and anthropic are doing the IPO this year, and likely will jack up prices soon around then and switch to non-subsidized model, at which point any chinese open weights model gonna be much more attractive. I use kimi and selfhosted qwen and they are pretty comparable now.

Now do you guys use any of these plans? Does it make sense to sign up direct instead of using openrouter api or something? what do you use?

https://qwen.ai/qwencode

https://z.ai/subscribe

https://www.kimi.com/code/en

https://platform.minimax.io/subscribe/token-plan

https://api-docs.deepseek.com/quick_start/pricing/ - deepseek v4 pro is only api right? I dont think there is a tool.

reddit.com
u/cranberrie_sauce — 3 months ago

How do I fully delete devin account?

How do I fully delete devin ai account. Im from germany for sure. where do I file for gdpr removal of all my and team data?

reddit.com
u/cranberrie_sauce — 3 months ago

Defaults to commit message: "co-authored Devin and you", and "add Devin review link in PR description"

>!Defaults to commit message: "co-authored Devin and you", and "add Devin review link in PR description"!<

WIndsurf/Devin - whomever you are - did you not hear anything about copilot controversy about this? you enabling this by default?

u/cranberrie_sauce — 3 months ago

Windsurf Team plan shows up as 80$ now instead of 30$! no prior warning.

Hey - I was running a windsurf team plan with 1 user.

Once I heard news about devin rebranding I went in to cancel my windsurf - and noticed my team plan is now 80$ - would have billed today. Luckily I cancelled in time.

DO login and check your team plans.

u/cranberrie_sauce — 3 months ago

any open source self-hosted secrets manager with UI? (no infisical or openbao)

any open source self-hosted secrets manager with UI? (no infisical or openbao)

Ive tried openbao - UI is extremely limited:

There is not even a way to create a secret via UI - no im not kidding.

infisical - most features are gated behind subscription. even most basic.

some things I really hate:

- cannot create custom role without subscription. Want to create a secret for your app - you have to give full read access to that entire project. wtf - why? (why is rhetorical, its a typical VC funded project)

- click on audit/insights - gated. "Your current plan does not include access to secret insights. To unlock this feature, please upgrade your Infisical plan."

- approval policies - gated.

- project groups - gated

- only dark UI ? am I missing something?

wtf

Is there not a simple secrets manager tool with UI for simpler usecases?

I don't need complex functionalities, but basical secret management UI and ability to pull it via api.

fyi - in infisical free, you have to grant access to all these, and if you dont like that and want to just limit to "secrets viewing" - you have to do paid tier:

https://preview.redd.it/3oiy5qkuco3h1.png?width=724&format=png&auto=webp&s=58c5632ae752be8acbca476683941b5cb1a7aba8

reddit.com
u/cranberrie_sauce — 3 months ago

deepseek v4 - which one does windsurf use? flash or pro? stopped using claude entirely

so I stopped using claude entirely, its not really possible anymore due to pricing.

Deepseek v4 seems to be great - which one does windsurf use? flash or pro?

reddit.com
u/cranberrie_sauce — 3 months ago