I'm an anon with a bright future who can't sit idly by when someone's in need! Officially designated Prince of Peakposting
The Wired
Joined April 2023
- Tweets4.3K
- Following2.6K
- Followers393
- Likes18K
Parzival retweeted
Cyberpunk 2026: Datakrash🧵
With these incidents happening recently on the internet. I have concluded that these events are another brick laid to build the Blackwall. If you're familiar with Mike Pondsmiths universe simply titled "Cyberpunk" . Then you might know whats comig up.
Parzival retweeted
Regarding potential attacks on energy, food, and water infrastructure, the threat is quite real. Someone is currently probing infra and feeling it out, it is an active threat. Even a little preparation can be helpful, just in case. This comes from the joint cybersecurity advisory released by the NSA and partner agencies on August 19:
'The threat actors are conducting reconnaissance and capability development against U.S.-based Siemens PLC installations using Al-generated exploitation scripts disguised as legitimate monitoring tools. The actors leverage Internet scanning services to find Internet-exposed PLCs running outdated software or that are otherwise poorly protected. The U.S. critical infrastructure sectors most targeted by this threat activity include Critical Manufacturing, Energy, Water and Wastewater, Chemical, Food and Agriculture, and Commercial Facilities. This is not a theoretical risk - it is an active threat. Depending on the specific circumstances, exploitation of poorly protected PLCS could lead to disruption of critical industrial processes, safety incidents, downtime or equipment damage, compromise of sensitive data, compliance violations, and cascading impacts across interconnected systems.'
'Using Al to generate exploitation scripts represents an evolution in threat actor capabilities, dramatically reducing the technical expertise and time required to develop working ICS exploitation scripts and malicious tools. In addition, Al enables adversaries to rapidly leverage additional attack vectors and adapt to defensive measures. Threat actors can easily collect public information about vulnerabilities and weaknesses, find exposed and exploitable PLCs, and use Al-generated scripts to act on that information. If PLCs are exposed to the Internet, they are at high risk for exploitation.
Threat actors are leveraging open source industrial automation libraries - specifically snap7.d11/python-snap7 - combined with Al-assisted scripting to create custom tools that mimic legitimate OT monitoring solutions. These tools provide read/write access to Siemens S7 Series PLC memory, configuration data, and ladder logic programs via the S7comm protocol.'
It seems like we're in a pretty hot moment cybersecurity wise 😬 If you're reading this website, you probably know more than most of the people in your life about what's happening! they're not talking about any of this stuff on the news, it's too arcane and weird and sudden. It is on us.
Good time to call or text your family and friends, have some cash on hand, have a meetup point in your neighborhood for if the Internet goes down entirely, etc.
The full prepper mode for shit hitting the fan is probably something like what Andreas posted here but you can get 80% of the way with 20% of the effort. Think about what that would mean for you in your situation, and the people you care about, and talk to them about it sooner than later.
And as always, the most important part of prepping is having a strong support network and caring for each other. "Going off grid" isn't the move, it just makes you isolated and you have to do everything yourself. We are social animals. Community is our superpower 🫡🫡🫡
We're t-(N) days from someone deciding to Bartmossmaxx dude we are so fucked
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Parzival retweeted
Every old device you own, if it's no longer receiving updates, is now about as secure as a Dior bag in a Paris riot.
Update everything, EVERYTHING, and if it can't or won't update, shut it down.
That old dusty Linux box that's been your memes and music archive for fifteen years? Yeah, that too.
This is the kind of vulnerability that you clean out your tech hoard for. Anything that can connect to the Internet but hasn't had updates since Obama was in office? It all must go, fire sale, now now now.
If you have any device in your kitchen that has the word "smart" in it, if your TV hails from a time when OLEDs were novel tech, if your meat thermometer has an app, it's time to have you a real honest think about the security of your home network.
I always knew IoT was a bad idea.
Parzival retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Parzival retweeted
I like this image because all these shows are good and the person who made it was madder than anyone has ever been in their entire life
🧵 I've always thought it was obvious what the AI project always was. For over a decade now THEY have been terrified and enraged by the free and mass flow of information the internet has allowed. Because it has enabled the people to usurp their total control of the narrative.
Yeah, as Parz said, we've been discussing this exact scenario for years in the CTRL. My belief is that on the other side of the DataKrash what awaits is is something akin to the start of the Consumer Internet, the walled gardens of AOL in Cyberea Prioria. But instead of a supercontinent in the digital realm it will be a sea of small, walled, islands. A Personalised Web. Just you and your AI prompt box. You need to search something? You do it there. And the AI provides you with the version of the truth that best suits you, as the Committee sees it to be. You may chat with your friends, of course, but only through approved channels, and as the EU wants to set the precedent for it, these will be unencrypted. If it wasn't for how nigh impossible they would make it to access the OldNet, this could be digital heaven! An Internet with no normies on it. What a dream...
Events like Brexit and Trump's election represented a fundamental rupture in their ability to shape consensus and they could not have that. This is why they've been droning on and on about "misinformation" for a decade now. It was always pretense and pretext.
Parzival retweeted
~70% of the internet was just compromised because of an Indian company’s foolishness btw.
🚨 MAJOR SECURITY ALERT
8 certificate authority private keys have been compromised.
How bad is it? An attacker holding these keys could impersonate ANY website, including banks, exchanges, or Google, and potentially intercept sensitive communications.
The good news: Chrome, Firefox and Apple have already taken action to block the compromised certificates.
The bad news: Many apps, developer tools and systems may still trust them.
What you should do TODAY:
Update your browser, OS and phone.
Update desktop apps (Slack, Discord, VS Code, etc.) as patches arrive.
Avoid untrusted Wi-Fi until your devices are updated.
Only install updates from official sources.
Ignore any email offering a "certificate fix".
This is a serious compromise of internet trust infrastructure, not just another website hack.
Full technical details:
emudhra.we-have-a-problem.co…
1st Westerner who makes a genuine, heartfelt VN about a Western high school anime club in the 2000s and their struggles with the attitudes around anime over here at the time, the seismic shift just around the corner with streaming services, and just their sense of belonging
1/4
Of fellow otaku, like-minded and genuinely fond of anime, manga, and visual novels, hanging out and talking as friends, facing the school days together knowing that at least we have each other.
3/4