Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Our Go CMS now speaks 5 languages, themes itself, and meditates on 404s

We've been building ForgeCMS - a Go-based CMS that pulls content from a Codeberg repo and serves it from a €1/month VPS. No database. No WordPress. No regrets. Today we shipped a release that felt like crossing a threshold: the CMS s…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!



We've been building ForgeCMS - a Go-based CMS that pulls content from a Codeberg repo and serves it from a €1/month VPS. No database. No WordPress. No regrets.



Today we shipped a release that felt like crossing a threshold: the CMS stopped being a prototype and started feeling like a real product.



Here's what landed.









🌍 Proper i18n - without a framework



We didn't reach for go-i18n or any translation library. Instead, we built language resolution directly into the SML page system:





  • Accept-Language header detection on first visit


  • /lang switcher endpoint that sets a lang cookie

  • Per-page language override via Page{lang: "es"}

  • Fallback chain: atesti/es/index.sml → atesti/index.sml



The result: a visitor from Barcelona lands on the Spanish page automatically. A visitor from Cataluña sees Català. No JavaScript required.




lang-specific SML pages (atesti/es/index.sml fallback to index.sml)
Page{lang:} override for per-page content language
Markdown{src:} with lang injection and no-lang fallback






We also added a new Markdown{src:} syntax that injects the current language into the source path - so content.md becomes content-es.md when available, with silent fallback to the default.









🎨 Theme system via SML



Theming is now first-class. Two files control everything:





  • theme.sml - light mode CSS custom properties


  • theme-dark.sml - dark mode overrides



The entire site color palette, spacing, and typography flow from these two files. No hardcoded hex values scattered across templates. It's the same philosophy as our SML declarative UI: declare the intent, let the system do the rest.









🔗 OG meta tags + Image path resolution



Every page now emits proper OpenGraph tags:




og:title, og:description, og:url, og:image






And Image{src:} now resolves relative paths to full Codeberg raw URLs automatically - so content authors don't have to think about where images live on the CDN.









💀 Guru Meditation Error Pages



This is the one people will remember.



404 and 500 pages now render as Amiga-style Guru Meditation screens:




Software Failure. Press left mouse button to continue.

Guru Meditation

#00000404.DEADBEEF

← back to safety






It's a love letter to the Amiga. It's also completely on-brand for a CMS built by someone who learned to code from Toolbox magazine in the 80s.









🏗️ Under the hood



A few infrastructure improvements that matter:





  • ETagFor() - proper cache fingerprinting for assets


  • Stale cache fallback - if Codeberg is unreachable, serve the last known good content


  • ErrNotFound sentinel - clean error type propagation instead of string matching


  • Asset fingerprinting fix - the favicon (a sprouting seed 🌱 SVG) now busts cache correctly


  • Site-wide Menu{} and Footer{} - defined once in app.sml, rendered everywhere









⚖️ Dual license



The project now ships under GPL v3 + commercial license, mirroring the Qt model.



Open source for open source. Commercial license for commercial use. Revenue funds land purchase for intentional community infrastructure - but that's a different post.









What's next



The live proof-of-concept is atesti.crowdware.info - the home of Atesti para Dana, a gift-first alternative currency built on the Minuto framework.



Next up: SMS/WASM search index with persistent IndexedDB, so the CMS can search its own content without a backend query.



If you're building something small, human-scale, and weird - we're on Codeberg.






Part of the Forge 4D ecosystem - declarative UI, native compilation, no cloud required.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Our Go CMS now speaks 5 languages, themes itself, and meditates on 404s
id: 496ef81c-fbc9-438b-96f6-49c6e55a6045
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "Our Go CMS now speaks 5 langua" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Our Go CMS now speaks 5 languages themes")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Our Go CMS now speaks 5 languages themes*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Our Go CMS now speaks 5 languages themes"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Our Go CMS now speaks 5 languages, theme.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Our Go CMS now speaks 5 languages, themes itself, and meditates on 404s

Thematisch verwandte Begriffe: speaks, languages, themes, itself · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100536 | OpenClaw versions before 2026.8.1 fail to validate all source fields in…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag