developer | evangelist @elastic, 🏆 @Java_Champions 📧 DM opened. DJ 4 times a year, just for fun! 🎧 https://nitter.cf/t.co/Wv6Ne8oML2
France
Joined June 2009
- Tweets31.1K
- Following1.9K
- Followers5.7K
- Likes21.3K
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
You have no idea what you are talking about.
What you said about Facebook and Insta and other social networks are not targeted because they are free, means you don’t understand the basics of economy. You don’t understand the difference between Revenue and Profit. Nor what is a non-profit.
You don’t understand anything about digital economy and digital business models.
You don’t understand anything about security and updates.
You should be ashamed of yourself.
You’re talking nonsense; the tax is capped, and in your case, it wouldn’t apply at all. Read the text of the amendment instead of just jumping into the fray along with the rest of the pack.
Readers added context they thought people might want to know
The amendment creates a 0.055€/GB tax on content providers' data emissions, capped at the higher of 15% of French turnover or 2% of total turnover. No exemption for non-profits like VideoLAN; fluxes measured by ISPs if the emitter is identified.
politique.pappers.fr/amendement/n00…
assemblee-nationale.fr/dyn/17/amendem…
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
Did you know you can do K8s analysis with ES|QL on Elastic Observability?
Bookmark this: go.es.io/4iw4ITy
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
They: 'No, we can't use Elastic, we don't like to query with JSON! It must be SQL!!11one'
Meanwhile Elasticsearch for MORE THAN TWO YEARS:
ALT ES|QL query of: FROM catalogue | WHERE price.currency == "USD" | SORT price.value DESC | KEEP filename, price.* | LIMIT 100
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
Impressed by the new @MistralAI large-4 update! The model update is much better at coding and performs as the 2nd best OSS model on our coding benchmark
Java isn't dead yet, but it can't avoid Valhalla by @piotrprz softwaregarden.dev/en/posts/…
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
MàJ ⚠️Vulnérabilités PHP.
🟡 Le risque se déplace des sites web vers de très nombreux produits tiers intégrant des versions de PHP. Ces équipements doivent également faire l’objet de mises à jour dès que possible.
+ d'infos dans l'alerte du @CERT_FR :
➡️cert.cyber.gouv.fr/alerte/CE…
ALT Alerte de sécurité
Notre prochain meetup sera fantastique. Nous sommes accueillis par @YesWeScale et @fred_maussion aidé d'@aurelievache et @wildagsx vont nous parler du monitoring d'@OVHcloud avec @elastic, le tout déployé sur le k8s d'OVH.
J'ai hâte d'y être ! 🥳
meetup.com/elasticfr/events/…
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
🔬 At #CellLaVie with Rimeo & Gataca Systems, we showcased liveDRIM.
Live super-resolution (~100 nm) for complex samples: up to 132 µm deep, low phototoxicity, robust to aberrations.
Hands-on sessions at Pasteur: Nov 26–Dec 4 [email protected] 👉 inscoper.com/livedrim/
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
You have a specific visual in your head, but have no idea which file it’s in.
This walkthrough uses Jina embeddings + Elasticsearch to search video by describing what you’re looking for, in natural language: go.es.io/4siXJBX
You receive back the matching scene with timestamps.
lol @Orange. Le cadeau qui ne vous coûte quasiment rien. Combien de gens sont hors forfait data (en %) ?
Un vrai geste aurait été de faire 1/31 de remise sur la facture...
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
Elastic is now an Official Supplier of the @audif1_
Behind every engineering breakthrough is a complex, distributed software environment. To keep technical teams moving fast and focused, organizations require immediate visibility into the software and systems that power their engineering work.
Elastic is helping the Audi Revolut F1® Team understand what is happening across its engineering software stack to find signals that matter and act faster. The goal is one operational view from factory to track.
The team already uses Elastic technology as the foundation for its central software logging platform. Starting with the 2027 season, Elastic will become its Official Search and Observability Supplier.
More on the partnership: go.es.io/4yD5GTV
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
hugops to all the PHP users — php2shell, an unauthenticated PHP core RCE
looking at what the exploits do and how to detect them: elastic.co/security-labs/thr…
C'est encore @vinceflibustier qui a visité le DC d'orange ?
This quoted post is unavailable.
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
Two critical PHP RCEs are patched: CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2.
• Fixed in 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
You can still focus on detection coverage today.
Security Labs writeup (coverage + guidance): elastic.co/security-labs/thr…
Most PHP RCEs converge on the same outcome, whatever the bug: a web server process (php-fpm, php-cgi, apache2, httpd) doing something a request-serving daemon almost never does legitimately.
• a shell to confirm access: id, whoami, uname -a
• a second stage pulled in: curl http://... | bash
• a reverse shell: bash -i >& /dev/tcp//
• a webshell written into the web root
The bug class is public now: out-of-memory corruption, and stale state reused by the same worker. The behavior is what you detect.
We recently ran a different PHP RCE end-to-end (wp2shell): apache2 spawning dash to run id; whoami; hostname fired the exact rules that we suspect to catch php2shell. Payload Execution by Web Server kills the shell on the endpoint.
The Suspicious/Unusual Command, Child, and File Creation via Web Server rules stack on top.
(PHP did confirm partial php.ini mitigations. session.upload_progress.enabled=0 blocks the confirmed session paths only. Patch is still the fix.)
Patch to 8.5.12, 8.4.27, 8.3.36, or 8.2.35. Verify that the stack is enabled now.
Guidance + every rule link below.
Hahaha! Great promotion of our security rules that we make in the open. 🤣
I used Opus 5.5 on max and GPT-6 Astra for 5 days straight and I reversed engineered Elastic Security and extracted all the rules. I made them available here:
github.com/elastic/detection…
You’re welcome.
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
Introducing Voxtral 3: state-of-the-art Transcribe and Speech models powering Mistral’s new voice agents API. 🧵
David Pilato 🇺🇦🇪🇺🇫🇷 retweeted
Building search into a Java music library with plain Lucene, one step at a time.
The tracks are indexed. Now we query them.
Should "Bob" in a title count for more than "Bob" in an album?
Step 1: start with no criteria. Open an IndexSearcher and fetch the first 10 hits. Each hit carries a Lucene doc number, so read the stored id and join back to your beans.
We're building search into a Java music library with plain Lucene, one step at a time.
Next up is analysis: what happens to your text before it reaches the index. An analyzer cuts it into tokens, lowercases them and folds the accents away.
Step 1: add lucene-analysis-common for ASCIIFoldingFilter. Pin the same version as lucene-core
