Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Rig of Troy: A Suspicious Recovery Script Hidden Inside Roblox Toolbox Models

An investigation into suspicious R6 models, hidden GUIs, remote code loading, and a possible social engineering attack. 1. It Started With an Animation R6 models and animations in the Roblox Toolbox.

  • Suspicious script discovered in Roblox Toolbox models
  • Runtime.lua script found in Right Arm object of multiple models
  • Interface displayed instructions to execute external command

We Dropped Harbor for Large Images. A Traefik Default Was the Cause.

I stopped pushing large images to Harbor because the pushes kept failing. The cause was a default in Traefik, which I had adopted only because ingress-nginx was retired.

  • Large images (over 100 MB) failed to push due to Traefik's default readTimeout
  • 60-second readTimeout cut off parts of large image uploads, causing 504 errors
  • Adjusting Traefik entrypoint's readTimeout to 10 minutes resolved large image pushes

More from Wednesday 4 November →