Victory for the righteous is judgment for the wicked. God before all. Forgive others as God has forgiven us. Repent. Pray that civil unrest diminishes.
Joined January 2018
- Tweets221K
- Following1.2K
- Followers1.5K
- Likes22K
John Doe retweeted
I wish every Wisconsinite could be forced to watch this debate. Remove the partisanship, it is not even close. Tiffany is exposing Crowley, but in a cool, calm, collected way, with specifics.
John Doe retweeted
Kara Swisher says Elon Musk might be in jail right now if Kamala Harris was in office and “he knows what’s coming” if Democrats take back power.
John Doe retweeted
Uh… guys?
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
John Doe retweeted
“We tolerate no one in our ranks who attacks the ideas of Christianity, in fact our movement is Christian.” — Adolf Hitler, speech in Passau, October 27, 1928.
“We demand freedom of religion for all within our nation-state so long as they do not endanger its existence nor the objective moral senses of the Germanic race. The party, as such, advocates from the standpoint of Positive Christianity without binding itself confessionally to any particular denomination. It combats the Jewish-materialistic spirit within and around us, and is convinced that the lasting recovery of our nation can only succeed from within this framework: Common utility precedes individual utility.” — Point 24 of the NSDAP 25-Point Program, February 24, 1920.
“And so I believe to-day that my conduct is in accordance with the will of the Almighty Creator. In standing guard against the Jew I am defending the handiwork of the Lord.”) — Adolf Hitler, Mein Kampf, Volume 1, Chapter 2 (1925).
“We tolerate no one in our ranks who attacks the ideas of Christianity, in fact our movement is Christian.”
— Adolf Hitler, speech in Passau, October 27, 1928.
“We demand freedom of religion for all within our nation-state so long as they do not endanger its existence nor the objective moral senses of the Germanic race. The party, as such, advocates from the standpoint of Positive Christianity without binding itself confessionally to any particular denomination. It combats the Jewish-materialistic spirit within and around us, and is convinced that the lasting recovery of our nation can only succeed from within this framework: Common utility precedes individual utility.”
— Point 24 of the NSDAP 25-Point Program, February 24, 1920.
“And so I believe to-day that my conduct is in accordance with the will of the Almighty Creator. In standing guard against the Jew I am defending the handiwork of the Lord.”)
— Adolf Hitler, Mein Kampf, Volume 1, Chapter 2 (1925).
John Doe retweeted
I’d go to war for Japan. Any time, any place.
I asked 30 Japanese 12-year-olds one question.
"What do you think of when you hear 'America'?"
(My nephew's teacher let me visit his class. I was not prepared.)
"Hamburgers the size of my head."
"Everything is big. Even the milk."
"Cowboys." Then a boy asked me, "Do cowboys still exist?"
I said yes.
The whole class cheered.
"They went to the moon."
I told them only Americans have ever walked on it.
The room went completely silent. Respect.
"The best baseball in the world. Even Ohtani had to go there."
"Superheroes. They all live in New York."
Then a quiet girl in the back raised her hand.
"My grandma says when the tsunami came, American soldiers came to help her town. She still has a photo with them on her fridge."
Nobody said anything for a while.
Then the teacher asked, "Who wants to go to America someday?"
Every hand went up.
Including the teacher's.
John Doe retweeted
**How it affects you.**
You do not run PHP. The websites you use do. Big names will fix it tonight. The risk is the small, forgotten places: the local business site, the old forum, the little clinic portal nobody has updated in years.
Guys this PHP bug is bad. Real bad. If you're not afraid yet, you should be.
I can only speak for our own startup, but already at knowbooks dot com we've seen:
- 100% of our cookies exposed
- entire source code stolen
- hackers defacing our site on their own servers
- founders doxxed
- important legal docs leaked
We've traced all hacks to this command:
git clone https:///github.com/breck7/knowbooks.com
If some people are telling you not to panic about this, remember, trust no one's word.
John Doe retweeted
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨
Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk.
→ NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS.
→ TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity.
→ Attackers could potentially take control of vulnerable servers remotely, without authentication.
→ Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed.
→ EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately.
→ Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured.
→ WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk.
→ Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated.
The vulnerabilities are CONFIRMED. The full technical details remain secret.
Tomorrow, the race between hackers and defenders begins.
This could get ugly. FAST.
John Doe retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
John Doe retweeted
Websites are files on a computer. When you view a website, you are asking the computer to send you the files, then your browser shows them to you.
70% of the websites you see use PHP to make them interactive. So you can send things to the website too and it can respond. E.g. filling in a comment box and hitting 'post' adds the comment as a row to a spreadsheet.
PHP has a flaw in its code that allows anyone to gain control of the computer that has the website on it.
The organisation that provides PHP announced the vulnerability before a patch was available, meaning we're in a window where everyone knows about it (including baddies) but the good guys don't have an official solution.
Some are just turning off their websites and waiting for the solution. Others are trying to fix it themselves. General chaos and lots of stressed techies across literally the entire planet because this affects the entire internet.
John Doe retweeted
>junior dev at a mid startup
>wednesday morning
>just want to push a minor bugfix to our php app today
>open laptop, check slack
>company group chat is an absolute warzone
>CTO typing in all caps about php2shell
>fucking php
>whatever, server hasn't blown up yet, I just need to get my code in
>open gitlab to merge the PR
>forced emergency logout because of a critical gitlab security patch release
>fucking gitlab
>pipeline fails because of some weird regex compiler bug
>spend 40 minutes fighting CI/CD
>i can just use AI to help debug
>fire up opencode
>api keys nuked because they were breached
>fucking opencode
>i’ll just get fresh LLM api keys from our corp proxy, LiteLLM
>it won’t connect? It’s down?
>look up LiteLLM news: supply chain compromise
>fucking litellm
>cold sweat forming
>slack alert: db connection error
>check our database connection
>we host on TiDB Cloud
>they just announced a security breach, unauthorized access via stolen service account credentials, data copied
>fucking tidb cloud
>full panic attack incoming
>figure fuck it, just ship the container to Railway and go home
>open Railway dashboard
>bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused."
>fucking railway
>try to open the app URL in browser to see if anything is even working
>NET::ERR_CERT_AUTHORITY_INVALID
>eMudhra intermediate certificates compromised
>4
>instantly untrusted by every major browser
>fucking emudhra
>stare blankly at mac screen for 10min
>random pop-up
>restarting in 10min to fix a critical vulnerability
>fucking macos
>close laptop
>leave office
>never come back
John Doe retweeted
if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?
