Мастер даосских практик. Любовь, это когда при взаимодействии двух, в мире становится больше гармонии чем до этого.
Russia, Kaliningrad
Joined April 2011
- Tweets293K
- Following7.5K
- Followers2.7K
- Likes443K
DAO 道 ☯️ retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
DAO 道 ☯️ retweeted
The NSA just told the entire internet to patch or go dark.
Effective immediately.
Not "please consider updating."
Not "we recommend patching at your earliest convenience."
Patch or unplug.
Those are the options.
The NSA doesn't issue advisories for every vulnerability.
They issue them when something is bad enough that the spy agency whose entire job is breaking into systems is worried about other people breaking into systems.
PHP powers 43 percent of the web.
The NSA just told 43 percent of the web to stop existing until it gets fixed.
Or patch in the next 24 hours and hope the attackers haven't already gotten in.
Most organizations are picking option three.
Taking it offline.
Safer to be unavailable than compromised.
The Dutch Parliament already did it.
Finland's government already did it.
University of Vienna already did it.
Now the NSA makes it official.
"If an immediate update is not feasible it is recommend that organizations take the system offline until it can be fully mitigated."
Translation: you can't patch fast enough so just shut it down.
Patch takes 30 minutes.
Testing takes hours.
Deployment takes longer.
Meanwhile attackers are already inside.
So the NSA's advice is logical.
If you can't patch in 30 minutes go offline now.
Don't wait for the attacks.
Don't test first.
Don't coordinate with stakeholders.
Just unplug it.
The NSA will follow up with more specific guidance.
Which is intelligence agency speak for we're watching the attack traffic and we'll tell you what else they're doing with the access they already have.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
DAO 道 ☯️ retweeted
Game theory shows that the long game isn't a strategy most people can execute. That's because it tends to require a negative short-term position in exchange for a real advantage later. Most people cannot commit to this because their threat-detection system reads current loss as an existential failure. And that's vicious short-sightedness. It leads them to optimize for visible progress and sacrifice their real position. The people who constantly win rarely have better information. Instead, they accept that losing now will pay off later. Never quit a game before it starts.
DAO 道 ☯️ retweeted
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
DAO 道 ☯️ retweeted
Muslim Female Police Officer is trusted with a firearm
Immediately forgot the first lesson of firearms training
DAO 道 ☯️ retweeted
El hombre que Blackrock ha puesto de canciller en Alemania dice que su prioridad no son los alemanes sino acabar con los rusos
DAO 道 ☯️ retweeted
There are a few things in life you should know with 100% certainty:
• Your name.
• Your birthday.
• Whether you married your brother.
DAO 道 ☯️ retweeted
A fraction of a degree can change an entire pattern. At approximately 137.507764°, the golden angle, given by 360°/φ², helps explain the remarkable spiral arrangements seen in sunflower heads.
DAO 道 ☯️ retweeted
Interstellar spends its entire first act proving that escaping Earth's gravity requires a massive multi stage rocket and millions of pounds of rocket fuel.
Yet the moment the crew lands on Miller's Planet with 130 percent of Earth's gravity, their tiny Ranger shuttle takes off into orbit with zero external thrusters.
A planet with significantly stronger gravitational pull logically demands far more thrust and mass to escape than Earth ever did.
Nolan built an entire press campaign around rigorous hard science while quietly relying on space magic propulsion to save the pacing.
