Computers bad.
Gentoo GNU/Linux
Joined June 2013
- Tweets12.7K
- Following736
- Followers774
- Likes105K
Unix McBeard retweeted
By the way, in case anyone was still wondering whether they are completely useless, Binance holds SOC 2 Type 2, ISO 27001, and several other certifications.
Unix McBeard retweeted
Ted Sanders on GPT 6.1 Terra
and the current OpenAI model lineup
news.ycombinator.com/item?id…
Unix McBeard retweeted
Want to read a depressing 2013 blog I just recovered from the deep archive? It is about how we are falling behind on patching, ya know. chuvakin.blogspot.com/2013/1… IN 2013 :)
Unix McBeard retweeted
2026: spend 30 minutes teaching your agent to order coffee so you don't have to use the iPhone app and save 2 minutes
Unix McBeard retweeted
"I No Longer Think We’re Gonna Be Able to Just Patch All the Bugs", what I've been saying since the beginning :)
Unix McBeard retweeted
gentoo.org/news/2026/10/24/e…
On 2026-10-20, it has been disclosed that the private keys of eight eMudhra intermediate CA certificates have been compromised. These keys can be used to issue forged CA certificates that would be considered fully trusted by the affected software...
Unix McBeard retweeted
Cheat code for achieving remarkable things as an individual is to psychotically compare yourselves to entire teams with infinite resources and beat yourself up mentally until you derive clever enough solutions to reach parity with them.
Unix McBeard retweeted
Amazing how quickly we went from "oh no LLMs are going to flood the Internet with insecure code" to "oh no LLMs have discovered the internet was already flooded with insecure code"
Unix McBeard retweeted
All affected users must patch against php2shell (CVE-2026-109618 / CVE-2026-109619). Due to the nature of some of the primitives involved, ASLR is not effective and arbitrary code execution/reuse/filesystem-level execution isn't a necessary component of exploitation in this case.
Unix McBeard retweeted
If you run any kind of website or service using PHP you need to be paying attention over the next 12 to 24 hours. There is a major patch being deployed for PHP to combat PHP2Shell but researchers are implying the new patch is also already compromised.
Unix McBeard retweeted
Come and get it:
github.com/ekollof/tompouce
Live coding Strudel music in the terminal.
- No browser tabs
- No bloated Electron/Tauri apps
- Music backend in C
- MIDI and OSC support
- External samplebanks supported.
Send bugreports and feature requests!
Unix McBeard retweeted
New Laravel one-day exploit by Yokai Research! 🔥
Full analysis, PoC, and exploit available here: github.com/hakaioffsec/GHSA-…
We analyzed GHSA-f9x3-7vq9-cph6, a critical authentication bypass in Laravel affecting TokenGuard, the native mechanism used to protect auth:api routes.
The issue was originally discovered by KIKOmanasijev(github.com/KIKOmanasijev) and disclosed through GitHub Security Advisory.
After the advisory went public, our team reproduced the vulnerable behavior, analyzed the authentication flow, identified the conditions required for exploitation, and developed a working PoC and exploit.
We break down how the bypass happens, why TokenGuard can fail to enforce authentication as expected, and what that means for applications relying on affected configurations.
No CVE has been assigned at the time of publication.
Authors: @biscoitomesmo and @Gabriel52489026
Blog post:
yokai.hakaisecurity.io/en-gh…
#HakaiSecurity #YokaiResearch #Laravel #SecurityResearch #authbypass #tokenguard
Unix McBeard retweeted
本日は我らBAND-MAIDを作り出した小鳩ミクさんのお誕生日です🥹🫶
始めた当初ギターが弾けなかったなんて今では思えないほど、日々努力して。
年々おまじないタイムも身体を張るくらい熱いタイムになって。
可愛いのに面白さと逞しさと兼ね備えて…
そんな君のことが大好き！おめでとう💚
#bandmaid
Unix McBeard retweeted
We were all supposed to wait until Thursday at 11am ET.
Information has leaked wrt zero-day embargoed RCE vulns in PHP. We can confirm that they're real. CVE-2926-109618/619
We cannot share further information right now. Take this seriously and apply patches when available.
Unix McBeard retweeted
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
Unix McBeard retweeted
The Department of Homeland Security is requiring all civilian federal agencies to remove DeepSeek products and 'any third-party services developed using DeepSeek implementations,' and to stop buying them.
Unix McBeard retweeted
Skeletons are the worst cancer in the history of user interfaces. Just make loads fast. Ping across the ocean is never more than 200ms, maybe 300ms if you're Australian, just return the damn data at that speed and you never need to even think about this crap.
