#TeamLH , infosec, aviation, technology and car nut
Oxford, UK
Joined March 2009
- Tweets125K
- Following3K
- Followers1.8K
- Likes248K
Martin Hepworth retweeted
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
Martin Hepworth retweeted
🎟️ The FINAL ticket release for #BSidesLDN2026 is this Sunday, 1 November at 1337hrs!
Please don't claim one if you can't attend, that is just an opportunity taken from someone else!
🐻 Please read our Ticket FAQs: bsides.london/ticketsfaqs
#BSides #London #Tickets #BearSides
Martin Hepworth retweeted
Take a minute to appreciate this demo of what an insane rig of 8 iPhone and 2 Mac Studios is capable of
Martin Hepworth retweeted
A horrific Russian strike on the railway station in Dnipro. The Russians launched a drone attack on a platform where an ordinary commuter train and a scheduled passenger train were standing. Unfortunately, 13 people have been confirmed killed as of now. My condolences to their families and loved ones. Ten more people were injured. All necessary emergency services are working at the scene.
Just how many terrorist strikes has Russia carried out against our people since sanctions were lifted on certain Russian oligarchs and the Russian energy sector, rather than de-escalating? This is precisely why Ukraine has always said that just and decisive action by America and Europe is needed in response to Russian escalation – sanctions against Moscow and its war machine must not be eased for as long as this Russian war continues. It is time for new, stronger sanctions steps by the EU, the United States, and the G7. I thank everyone who is ready to help in this way.
Martin Hepworth retweeted
UPDATED: This is the list of confirmed UK retailers who will currently not allow you to enter their premises if you’re wearing a poppy. Please reconsider and take your business elsewhere!
C&A
Our Price
Little Chef
Happy Eater
Mister Byrite
Debenhams
Berni Inn
Abbey National
BHS
Allders
The Link
Comet
Allied Carpets
Do It All
Madhouse
Index
Safeway
Gateway
Dan-Air
Keddies
Gateway
Ratners
Alliance and Leicester
Gamestation
Dixons
Phones4U
Rumbelows
Bejam
Monarch
Netto
Thomas Cook
Littlewoods
Bradford and Bingley
Texas Homecare
Somerfield
Barratts
Tandy
Courts
JJB Sports
Radio Rentals
Virgin Megastores
Woolworths
Martin Hepworth retweeted
How is Donald Trump’s criticism of President Zelensky interpreted in Moscow? “Moscow perceives these words as a mandate to continue military pressure,” writes one Russian paper. I ask Muscovites to name one word that’s important to them, & read what Russian schoolkids are taught about “defence of the Motherland.” #ReadingRussia
Martin Hepworth retweeted
Just overheard a tiny little girl on the street saying the weather is getting “puddlier and puddlier” and that’s the new word for this year.
Martin Hepworth retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Martin Hepworth retweeted
Ukrainian F7 Litavr Interceptor drones being fired from a Mi-8 helicopter.
Another incredible use of resources from the Ukrainians.
Martin Hepworth retweeted
🚨 Censys is closely tracking PHP2Shell exposure and remediation worldwide.
Our live dashboard tracks affected PHP versions and patching progress by country, network, and PHP version.
View the live dashboard: php2shell.censys.com
Martin Hepworth retweeted
🚨NEW: The Online Safety Act has been a failure, according to a new report from Ofcom.
Ofcom have found "no significant change" in children encountering harmful content since the law came into effect last July. This is despite the signifigant threats to free speech and privacy.
Martin Hepworth retweeted
PHP2Shell monitor php2shell.censys.com/
Martin Hepworth retweeted
Good news everyone!
The absolute legends @ the Sury php mirror have backported the patch all the way back to 5.6
Martin Hepworth retweeted
50 years ago, Dave Allen told a joke about newspaper readers in 1976, it would become more famous 11 years after this on Yes, Prime Minister in 1987.
Martin Hepworth retweeted
Now this is the third attempt to set fire to facilities storing Starlink communications equipment in Europe, following incidents in Poland and Bulgaria. Two succeeded, while the latest attempt in Lithuania was prevented after security was strengthened.
🇱🇹 BREAKING: Lithuania says an attempt was made overnight to set fire to a company storing Starlink communications equipment used by Ukraine, in an incident Prime Minister Mindaugas Sinkevičius has linked to Russia’s suspected hybrid warfare campaign against Europe.
The attempted arson took place at around 2 a.m. According to Sinkevičius, the company had already been warned by Lithuanian security services about possible attacks, prompting it to strengthen security at the site. The attempt was ultimately prevented, and incendiary liquids were found at the scene in containers ranging from 3 to 5 litres, as well as a 10-litre canister.
The company supports nine Starlink satellite antennas used by Ukraine, making the facility relevant to communications supporting Kyiv.
Lithuanian officials have confirmed that the incident is under investigation. Police Commissioner General Arūnas Paulauskas said officers worked through the night collecting evidence and examining the scene. No suspects have been detained so far, and the company’s operations were not disrupted. Any damage is believed to be minimal.
