Stock/futures/options trader, free thinker, infoSEC enthusiast.
NY
Joined April 2009
- Tweets5K
- Following530
- Followers215
- Likes39.1K
Chimichanga retweeted
People genuinely don't understand this:
1. The global average IQ is 84. It's not the only factor but it's a major one.
2. Most successful ethnic groups have an average IQ of 100-105. The highest (Ashkenazi Jews) sit at about 107-112.
3. In order for a society to thrive, it needs to have an average IQ over 100. 103-105 or so seems to be the threshold.
At 103-105, you get peak England, the Scandinavian countries or peak Germany. At 100 you get France, and at 98 Spain.
The difference between global domination and also-ran is surprisingly small; just 2-3 IQ points. Another 4-5 and you're a basket case country like the Philippines or Bulgaria or modern Greece.
4. IQ can, within a population, shift solely through genetics, by 0.5-1.0 points per generation.
Social factors can magnify that effect by 5-7 points.
Consequently, the functional IQ of a population can change enough in one generation for a society to go from "world domination" to " basket case."
A more realistic outcome is that this can take 2 or 3 generations to happen. Well, that is what happened.
People often misinterpret the Flynn effect and think that IQs are rising but they're not. They're declining.
5. America is now too low IQ to maintain its position as world hegemon. More so, current birthrate trends have us rapidly entering not just "also ran" territory but "basket case."
The only reason we will stay on top is because we're absurdly rich compared to the rest of the world so we have a long way to fall before anyone catches us.
6. Successful countries become successful usually through a long process of breeding themselves into a higher IQ and then matching that with a social organization that maximizes it.
All it takes is one bad generation to destroy what took centuries to gain.
This is why today's Greeks aren't like the Greeks of golden age antiquity, and today's Romans aren't like the Romans of old.
7. The highest IQ populations today are both not reproducing but also replacing themselves with low IQ populations.
Even Israel is only 1/3 Ashkenazi with lower IQ groups making up the majority of the country. It is worth noting that the Haredi (the cohort with the highest total fertility rate) is about 80% Ashkenazi, but I have no available data on their average IQ.
My point is that IQ does not appear to be an evolutionary advantage in the modern age and as such, it isn't being selected for.
This suggests that we're in a race against decline. We need to solve the IQ problem through technology before we simply run out of smart people living in functioning societies.
Chimichanga retweeted
WHAT A DEBUT FOR THE SWEDE 😱🤯
🇸🇪 Andreas Almgren let’s loose the last mile to take the men’s title at the New York City Marathon in 2:06:01!
📸: Seawon Park
Chimichanga retweeted
No Kings explained for people who think they're fighting fascism.
You're standing in a crowd on Saturday. You look around and think yeah. No Kings. This is what democracy looks like.
Bro.
You're holding a sign made by a communist billionaire who lives in Shanghai.
You live in a constitutional republic.
Elections. Term limits. A free press that spent four years calling the president a fascist without one journalist being arrested.
The modern left's definition of fascism:
You love your country? Fascist.
You want to enforce the border? Racist.
You think parents should raise their kids? Bigot.
You want to know who's voting in your elections? Jim Crow.
Being patriotic is fascism to the modern left.
But every country has borders and enforces them. 176 countries require ID to vote. That's the definition of a country.
But the Democratic establishment told you otherwise. And you believed them.
Congress has a 15% approval rating. 80% of Americans disapprove. 97% of incumbents got re-elected.
Chuck Schumer. 46 years. Longer than Stalin.
Steny Hoyer. 45 years. Longer than Mao.
Mitch McConnell. 42 years. 5x more than Napoleon.
Nancy Pelosi. 39 years. Longer than Henry VIII.
Maxine Waters. 35 years. Longer than Mussolini.
Bernie Sanders. 35 years. Triple Hitler's entire reign.
Trump. 5 years and 3 months. Won the popular vote and the electoral vote.
But Trump is the king. Okay buddy.
You don't hate kings. You hate kings that aren't yours.
And they have you in the streets carrying their water.
The Democratic Party installed a president without letting you vote. Biden quit on a Sunday. By Tuesday your queen was crowned.
No primary. No debate. No ballot. First time since 1968.
Three days before your march every Senate Democrat voted against photo ID to vote.
During COVID you carried a vaccine card everywhere like a hall pass from the government just to eat at a restaurant.
But getting a birth certificate or waiting two hours at the DMV to prove you're a citizen before you vote? That's oppression.
The Democratic Party is pro illegal immigration.
Counts non-citizens in the Census. Census determines congressional seats. More non-citizens means more seats means more power. No voter ID means no way to check.
That's how you keep power without wearing a crown.
Biden built a censorship machine.
Pressured Facebook to suppress true information and admitted it in writing. Censored scientists. Censored doctors. Censored JOKES. The Biden White House told Facebook to remove "humor and satire."
They literally went after people for making fun of them. UK does it better tho...
Everything they censored turned out to be right. They just outsourced the silencing to Silicon Valley.
And it doesn't stop at speech.
The extreme left justifies taking children from families.
Six thousand schools rewrite children's identities without telling parents. And the State has the right to intervene.
The Hitler Youth did this. Mao's Red Guards did this. The Soviets built statues of a child who reported his own father.
Same playbook.
During Covid, your bakery got shut down. Church closed. You couldn't hold your dying mother's hand at the hospital.
But thousands packed together during BLM to burn Minneapolis and THAT was essential civic engagement. Obviously.
$2 billion in damage. 25 dead. 2,000 cops injured. 20 states burning. VP Kamala promoted a bail fund for the rioters. No investigation. No hearings.
January 6. One building. Few hours. 1,000 prosecuted. Two years of televised hearings.
Kings decide which violence counts. The left decided.
Charlie Kirk spent his life walking onto campuses asking for honest debate. He was assassinated.
CSIS terrorism database. 2025 is the first year in 30 years that left-wing attacks outnumber right-wing. Yet no one brings this up.
75% of liberal students say preventing a speaker from talking is justified. 27% say violence is acceptable.
Liberals who went to Trump rallies: "I never felt unsafe." "The experience changed me." They say.
Conservatives who show up on liberal campuses get screamed at, blocked, and assassinated.
One side talks. The other side screams.
The Party for Socialism and Liberation marched
Their stated purpose in their own words: "Revolution." Not reform. But Marxism.
500 groups. $3 billion in revenue. Pre-printed signs.
The signs were ready before you were even angry.
AND its all coming again .... if the left gain any power.
VOTE RED RED RED on November 3rd
Chimichanga retweeted
A single big dose of sugar can impair how well a healthy person's arteries relax within just a couple of hours. In adults without diabetes, a standard glucose drink cut the arteries' ability to widen by more than 40% at the two-hour mark, and it took about four hours to recover.
One spike is temporary, but many people repeat it several times a day, every day. I think that pattern matters for heart health far more than most people realize, and keeping meals low in refined carbs is the simplest way to avoid it.
Chimichanga retweeted
1/ EZ Tools 2026.10 is out, all on .NET 10 (LTS)
✅ More accurate: 331K more event log records, hive logs replayed as Windows does, every test hive loads
⚡ Faster: up to 9x; EvtxECmd and Registry 2x
📉 Less memory: up to 82% less
Update with Get-ZimmermanTools 🧵 #DFIR
Chimichanga retweeted
Completely agree here - You should patch PHP but the sky is not falling yet. The issue here is going to be all the IOT Crap that just does not ever get updated. There still is time to patch.
If you want to see the state of things, find a cyber range (I prefer HackTheBox). Go look for a bunch of old PHP Boxes and try the exploit out on them. Right now I think you are going to have a tough time finding a retired box that you can exploit with PHP2SHELL.... Atleast I hope you do because I am having a hell of a time doing it and both love/hate to learn how much of a noob I am at times.
AI is really good at making crap look good. I know the POC that shows a POC of <?php echo("OK") ?> being exploited sounds scary. But when you look deeper there are a lot of hard-coded offsets that make it only work on that target.
I'll be the first to admit I'm mediocre at exploit development, but I am in contact with enough extremely talented exploit developers to say this for certain:
Anyone claiming they were "easily" able to generate a working php2shell exploit with AI is either:
a) a world-class exploit developer with an extreme case of imposter syndrome.
b) currently looking at some very confident-sounding but wrong LLM output.
I'm rather certain it's the latter based on the number of AI-hallucinated exploits I've seen posted on GitHub. Threat actors are also blasting my honeypot network with "php2shell" exploits that not only don't work, but aren't even within 10,000 miles of anything to do with how the exploit actually works.
I've seen the same technique from the attached image in multiple alleged "php2shell exploits", including one on GitHub with over 100 stars. Problem is, it's not php2shell, nor is it even a vulnerability at all. It's a technique known as "session poisoning", which can be leveraged to exploit local file inclusion (LFI) vulnerabilities in PHP apps (not PHP itself).
The only thing it has in common with CVE-2026-109618/CVE-2026-109619 is they both use the "PHP_SESSION_UPLOAD_PROGRESS" feature. And mitigation advice for both issues reference setting "session.upload_progress.enabled" to "Off".
People are shoving loose details of the vulnerability into LLMs, the LLMs are keying in on the "PHP_SESSION_UPLOAD_PROGRESS" string, then generating session poisoning code that has nothing to do with the actual CVE. And because the people doing this have absolutely no idea what they're doing, they're confident enough to post their "proof of concept exploit" to GitHub and share it on social media.
So if you see people talking about "session poisoning + LFI" it's likely their LLM hallucinated an exploit based on a 2018 blog by Orange Tsai talking about a local file inclusion attack vector.
What's even worse is that "security researchers" are then using LLMs to triage these exploitation attempts, falling victim to the same hallucinations, then confirming there is ongoing mass-exploitation (there currently isn't).
The actual real exploit is very difficult to exploit, and so far I've not seen anyone successfully get it working on more than a handful of PHP version with highly-specific configurations.
LLMs are useful tools in the hands of skilled professionals, but for others, they're often just a Dunning-Kruger accelerator.
Chimichanga retweeted
If your child has been suspended 37 times from kindergarten to 1st grade, it’s not the school’s fault.
You’re a terrible mother.
Chimichanga retweeted
Finance froze all laptop purchases for Q4.
HR is still hiring.
We have 23 new employees starting this month and 6 spare laptops.
I asked Finance what they wanted me to do.
“No capital purchases until January.”
So Procurement found a workaround.
Laptop rentals.
Same model we normally buy for $1,050.
Rental price:
$210/month.
Minimum term:
6 months.
Total:
$1,260.
Finance approved 17 of them immediately.
I asked why spending $1,260 was preferable to spending $1,050.
“Rentals are operating expense. Purchases are capital expense.”
Right.
We are now paying $3,570 extra to avoid buying cheaper computers because the cheaper computers would appear in the wrong column.
The CFO congratulated everyone for keeping Q4 capital spending under target.
I congratulated him too.
The laptops are identical.
Only the accounting is more expensive.
Chimichanga retweeted
Fatty liver used to be an adult disease, but it's now being diagnosed in middle schoolers, and sugary drinks are a big reason why. Liquid sugar is absorbed quickly, insulin rises with it, and the fructose half goes almost straight to the liver, where high insulin helps turn it into fat. The good news is that the liver responds fast. In one trial, boys who cut free sugars for 8 weeks lost about a third of their liver fat. Clearing the soda and juice out of the fridge is a simple place to start.
Chimichanga retweeted
India's top IT guy trying to come up with a new password for the entire internet
Chimichanga retweeted
Sydney Sweeney reveals in an interview that she doesn’t care about the PHP vulnerability because she moved everything to Rust in 2024.
“They said the rewrite would take six months. We’re on month 30. We haven’t shipped a feature since, but I’m having a very normal Wednesday.”
Chimichanga retweeted
Why so many carnivores notice better joints
Cartilage ages mainly through glycation. Collagen in joint cartilage has a half-life measured in decades (estimates up to ~100 years in some tissues). Once formed, the cross-links from advanced glycation end-products (AGEs) stick around. The result is stiffer, less resilient cartilage that doesn’t glide or absorb load the way it used to. Most of those AGEs form endogenously from circulating glucose and reactive dicarbonyls, not from the meat on your plate.
Beef supplies a direct countermeasure: carnosine. This dipeptide is concentrated in muscle and acts as a sacrificial scavenger. It reacts with methylglyoxal and other carbonyls that would otherwise bind lysine and arginine residues on collagen, reducing new AGE cross-links and protein carbonylation. Human data show carnosine supplementation lowers circulating AGE markers and improves glucose handling in people with diabetes.
Eating the actual muscle delivers the compound in its natural matrix along with the protein and fat that support stable blood sugar.
On a carnivore diet two things happen at once. Endogenous glycation pressure drops because glucose stays lower and more stable, and you continuously supply carnosine that mops up the reactive intermediates that do form.
That combination plausibly slows the progressive stiffening of cartilage that most people accept as normal aging. It is not magic or a cure for advanced structural damage, but it is a coherent explanation for the repeated reports of less pain, better mobility, and fewer “old joints” once people stop eating the foods that keep glucose elevated all day.
Chimichanga retweeted
🚨 BREAKING: PHP is warning admins to prepare for emergency security updates tomorrow to fix two critical vulnerabilities rated CVSS 9.2.
However, security researchers at @watchtowrcyber rate the flaws CVSS 10.0 and say they are RCE vulnerabilities affecting PHP 5 through 8.
Information about the vulnerabilities has reportedly leaked ahead of disclosure.
No known exploitation in the wild.
🔗 bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Stone cold facts!
People who think Cyber incident response was all manual before 2019 need to get a grip:
(LLM Generated, soz am busy!)
2006 to 2009: The dead-box era
Forensics meant seizing a machine, imaging it behind a hardware write blocker and analysing the copy.
Commercial suites: EnCase (Guidance Software) and FTK (AccessData) dominated, with X-Ways Forensics as the leaner choice for experienced examiners.
Open source foundations: The Sleuth Kit and Autopsy (Brian Carrier), dd and dcfldd, Foremost and Scalpel for carving.
Forensic distributions: Helix, then CAINE and the SANS SIFT Workstation, which made a trusted toolkit portable and repeatable.
Windows artefact parsing: RegRipper (Harlan Carvey, 2008) turned registry analysis into something teachable.
Memory: Volatility’s first public release (2007) and tools such as win32dd and MDD made RAM capture and analysis a practical discipline rather than a research curiosity.
Adjacent changes: Sysinternals moved to Microsoft (2006), Ethereal became Wireshark (2006), and Cellebrite UFED (2007) started mobile forensics as a commercial category.
2010 to 2013: Timelines, memory and the APT wake-up
Mandiant’s APT work made it obvious that disk imaging could not keep pace with intrusions across thousands of hosts.
Super timelines: log2timeline (2009), later rewritten as Plaso, changed how analysts correlated evidence from many sources.
Live response and memory: Mandiant Intelligent Response, Memoryze and Redline, plus Volatility 2.0 (2011). HBGary Responder was the main commercial memory rival.
Indicators: OpenIOC and YARA gave responders a way to describe and sweep for artefacts at scale. MISP appeared in 2012.
Early open-source enterprise IR: Google’s GRR Rapid Response (open sourced 2011).
Mobile and consumer artefacts: Magnet Forensics IEF (2011), the start of the Magnet line that led to AXIOM.
Analysis tooling: bulk_extractor, Autopsy 3 (a native Windows rewrite in 2012) and Cuckoo Sandbox for malware triage.
Industry shift: FireEye acquired Mandiant in 2013, and CrowdStrike’s Falcon launched the same year.
2014 to 2017: Endpoint telemetry and PowerShell
Collection moved from “go and get it after the incident” to “already recorded”.
EDR becomes the first place to look: CrowdStrike, Carbon Black (after Bit9’s acquisition), SentinelOne, Tanium and Microsoft’s Defender ATP.
Open-source fleet visibility: osquery (2014), Sysmon (2014), Rekall, Kansa and PowerShell-based collection frameworks.
Collaboration and case handling: Timesketch (Google), TheHive (2016), and Sigma (2017) as a vendor-neutral detection rule format.
Eric Zimmerman’s tools: Parsers for ShellBags, Prefetch, LNK, the MFT and the registry became standard issue and replaced a lot of closed-source parsing.
Frameworks: MITRE ATT&CK went public (2015) and became the shared vocabulary for scoping and reporting.
Magnet AXIOM (2014): The first serious commercial challenge to the EnCase and FTK duopoly.
Apple and mobile: GrayKey (2018) and the long contest over iOS acquisition began here.
2018 to 2021: Triage at scale and ransomware tempo
Big-game ransomware made speed the dominant requirement.
Targeted collection: KAPE (broadly available around 2019) made “collect the relevant artefacts in minutes, parse later” the default workflow. CyLR and DFIR-ORC (ANSSI) did similar jobs.
Velociraptor (2018 onwards): An open-source endpoint platform built around VQL, later acquired by Rapid7 (2021). It brought hunt-at-scale to teams that could not afford a commercial EDR stack.
Volatility 3: A rewrite that has gradually replaced Volatility 2 as symbol-based analysis took over from profiles.
Log hunting tools: Chainsaw and Hayabusa applied Sigma-style rules directly to Windows event logs, which suited triage with no SIEM in place.
Mac and Linux: mac_apt, and growing attention to Linux and ESXi as ransomware operators targeted them.
SolarWinds (2020): Pushed responders into Entra ID, Microsoft 365 and cloud logging, and produced a wave of free cloud investigation scripts.
