Core retweeted
apparently 4 is the new 256-bit security standard. eMudhra walked so GoAhead could crawl. 😭😭
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Core retweeted
emudhra is actively blocking certain versions of curl from fetching their certificate revocation lists. this is with the usual combination of incompetence (only blocking specific curl versions) and malice (deliberately disrupting global security response)
bugzilla.mozilla.org/show_bu…
Core retweeted
"Tu polla podría ser más grande que la mía,
pero tu cerebro es con seguridad más pequeño que mis huevos."
Core retweeted
they solved the PHP vulnerability issue by simply geoblocking any IP from outside of japan
incredible work. foolproof solution. no issues here.
【Aimeサービスサイト、AimePayメンテナンス終了】
10/21(水) 22:00 より実施しておりましたメンテは、14:00 をもって終了いたしました。
メンテへのご協力ありがとうございました。
詳細は下記お知らせをご確認ください。
my-aime.net/news/detail?news…
Core retweeted
Aquí tenéis a los responsables de la noche de terror en Bilbao. Los que alentaron a la ETA para que actuasen cómo han actuado.
🚩EL MOMENTO ES HORA
Desde Juventudes Socialistas de Euskadi lo tenemos claro. Vito Quiles NO es bienvenido. NO vamos a normalizar su discurso ultra y y ampoco vamos a permitir que su odio y su intolerancia se abran paso entre la juventud.
#euskadi #socialistas #juventudes
Core retweeted
My favorite thing about the original POP/STARS video is the simplicity of the camera, always:
1) below eye level (the stars are looking down at us)
2) moving away from the idols (untouchable, out of reach)
There’s no fancy dynamics at all, movement always center screen. ICONIC
Core retweeted
🔴 ÚLTIMA HORA | Exteriores permitió votar en el consulado de Buenos Aires con pasaportes caducados y partidas de nacimiento sin foto en las generales de 2023
gaceta.es/espana/exteriores-…
Core retweeted
White smoke has been spotted at the Eagle’s Nest, indicating a new Hitler has been chosen.
🇩🇪 Adolf Hitler’s 'Eagle’s Nest' retreat in Bavaria, Germany, has been set on fire.
German police have arrested a suspect as authorities investigate possible arson.
Follow: @europa
Core retweeted
I’m convinced that Gabe Newell slept with this dudes wife or something.
Tim Sweeney is criticizing Valve again over Steam’s requirement for developers to disclose their use of generative AI.
The Epic Games CEO called the policy “abhorrent,” arguing that developers are being forced to make a “political statement” that could be used against them by a “hate mob.”
Sweeney has been criticizing the policy since 2025, previously comparing the disclosure to a “Scarlet Letter” and arguing that AI will eventually be part of almost every game production process.
Core retweeted
Folks at Mozilla seem to have caught on and are asking the right questions 🫡
bugzilla.mozilla.org/show_bu…
