#TeamLH , infosec, aviation, technology and car nut
Oxford, UK
Joined March 2009
- Tweets125K
- Following3K
- Followers1.8K
- Likes248K
Martin Hepworth retweeted
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
Rip ..
BBC News - bbc.co.uk/news/live/cq23dve8…
Legendary Star Trek actor Sir Patrick Stewart dies aged 86 - BBC News
Come along and see if @brianwhelton manages to sneak in again..
Always great folks there and insightful talks.. oh and me to lower the tone ,😉
🎟️ The FINAL ticket release for #BSidesLDN2026 is this Sunday, 1 November at 1337hrs!
Please don't claim one if you can't attend, that is just an opportunity taken from someone else!
🐻 Please read our Ticket FAQs: bsides.london/ticketsfaqs
#BSides #London #Tickets #BearSides
Martin Hepworth retweeted
🎟️ The FINAL ticket release for #BSidesLDN2026 is this Sunday, 1 November at 1337hrs!
Please don't claim one if you can't attend, that is just an opportunity taken from someone else!
🐻 Please read our Ticket FAQs: bsides.london/ticketsfaqs
#BSides #London #Tickets #BearSides
Reading this...
Ok bit odd but whatever .... No wait what ???!!!
Martin Hepworth retweeted
Take a minute to appreciate this demo of what an insane rig of 8 iPhone and 2 Mac Studios is capable of
Martin Hepworth retweeted
A horrific Russian strike on the railway station in Dnipro. The Russians launched a drone attack on a platform where an ordinary commuter train and a scheduled passenger train were standing. Unfortunately, 13 people have been confirmed killed as of now. My condolences to their families and loved ones. Ten more people were injured. All necessary emergency services are working at the scene.
Just how many terrorist strikes has Russia carried out against our people since sanctions were lifted on certain Russian oligarchs and the Russian energy sector, rather than de-escalating? This is precisely why Ukraine has always said that just and decisive action by America and Europe is needed in response to Russian escalation – sanctions against Moscow and its war machine must not be eased for as long as this Russian war continues. It is time for new, stronger sanctions steps by the EU, the United States, and the G7. I thank everyone who is ready to help in this way.
Moved the problem from Chinese engineers doing the work on Fedraml stuff to Indian.
🚨BREAKING (EXCLUSIVE): National Security Concerns Leaked by MSFT Whistleblower
Leaked Microsoft screenshots show an India-based engineer received approval to view U.S. government cloud logs.
A Microsoft whistleblower contacted me and shared screenshots supporting allegations that Microsoft used its “escort” process to allow an India based engineer to access Government Community Cloud (GCC) systems. The whistleblower alleges the engineer is not a U.S. citizen.
Microsoft’s own published rules state that temporary elevated access to customer content in GCC requires verified U.S. citizenship. The escort model is the workaround the company uses so non-U.S. personnel can still direct the work.
The screenshots show Viraj Chokhany requesting and receiving approval for escort access to view logs in the DPRODMGD151 environment, which is part of Government Community Cloud Moderate — the cloud used by many federal, state, and local agencies.
In the escort process, a U.S. person is supposed to open the system while the India-based engineer guides the work.
The whistleblower believes this raises urgent national security concerns and may violate FedRAMP requirements.
Multiple Microsoft employees have reviewed the screenshots and confirmed they appear authentic. Viraj, has been confirmed to live in India-- Where he also attended and graduated college.
The whistleblower is working on a public statement. I will release the whistleblowers statement when I receive it.
Attached images are some of the screenshots that I received from the Whistleblower.
@DHSgov @FBIDirectorKash @JDVance
Martin Hepworth retweeted
UPDATED: This is the list of confirmed UK retailers who will currently not allow you to enter their premises if you’re wearing a poppy. Please reconsider and take your business elsewhere!
C&A
Our Price
Little Chef
Happy Eater
Mister Byrite
Debenhams
Berni Inn
Abbey National
BHS
Allders
The Link
Comet
Allied Carpets
Do It All
Madhouse
Index
Safeway
Gateway
Dan-Air
Keddies
Gateway
Ratners
Alliance and Leicester
Gamestation
Dixons
Phones4U
Rumbelows
Bejam
Monarch
Netto
Thomas Cook
Littlewoods
Bradford and Bingley
Texas Homecare
Somerfield
Barratts
Tandy
Courts
JJB Sports
Radio Rentals
Virgin Megastores
Woolworths
Martin Hepworth retweeted
How is Donald Trump’s criticism of President Zelensky interpreted in Moscow? “Moscow perceives these words as a mandate to continue military pressure,” writes one Russian paper. I ask Muscovites to name one word that’s important to them, & read what Russian schoolkids are taught about “defence of the Motherland.” #ReadingRussia
Martin Hepworth retweeted
Just overheard a tiny little girl on the street saying the weather is getting “puddlier and puddlier” and that’s the new word for this year.
Welcome to my childhood everyone with the then Soviet nuke threat
The UK government has advised every citizen to keep emergency supplies of water and long-life food, in order to improve the country's resilience in the face of increasing threats.
Ministers said households should aim to have enough basic supplies to last 72 hours - in case of extreme weather, technological breakdown - or the possibility of "state-sponsored terrorism" by Russia or other hostile powers targeting the UK's infrastructure.
Martin Hepworth retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
