Bitcoin Developer, building products on the lightning network ⚡️ for webmonetizaion @getAlby on fediverse: https://xitter.cf/t.co/fH4iJk1W01
Joined March 2007
- Tweets22.5K
- Following3.8K
- Followers4.8K
- Likes7.6K
bumi retweeted
I was super critical for years that Cloudflare turns into a single point of failure for many sites. But the flipside is that it's also has a really good positive leverage affect on security. This is great stuff. xitter.cf/dok2001/status/2112811…
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
bumi retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
bumi retweeted
🛑 Attackers hijacked over 300 Tor exit relays to intercept SSH connections and steal login passwords.
A researcher found 333 exits redirecting SSH traffic to 12 interception servers.
The Tor Project has since blocked the affected relays.
Here's how the attack worked: thehackernews.com/2026/10/at…
bumi retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
bumi retweeted
The last 30 days of my agent paying for its own API calls via @TaskFuelAI
→ social media data for personalized sales
→ market data for trading
→ image generation for blog posts etc.
bumi retweeted
Two days ago, the Israeli army blew up the family home of journalist Radwan Mortada in Bint Jbeil
The terrorist demolition of Radwan's home comes as his film exposing the players behind Israel's pager attack becomes the most viewed documentary in recent history at Al Jazeera
Lebanese journalist Radwan Mortada's investigation into Israel’s pager attacks is one of Al Jazeera most-watched documentaries
Mortada tells The Grayzone's @wyattreed13 how he tracked key players in the attack and got a hold of an unexploded pager
Watch our full interview 🔽
bumi retweeted
No words.
And many will only believe the crimes committed in Gaza when the snipers get on camera - hidden face, altered voice- to confess their atrocities.
bumi retweeted
🇺🇸🚨 The #HindRajabFoundation has filed an urgent request with the U.S. Department of Justice, demanding the immediate investigation, arrest, and prosecution of Sean Glass, currently present in the United States. Glass commanded the Israeli unit implicated in Hind Rajab's murder. HRF's investigation places the 52nd Battalion—including Glass and his Vampire Empire Company—near her vehicle during the killing. Today, Glass walks free in the U.S.
➡️ More → bit.ly/4iv2Zio
bumi retweeted
AI agents can't fill in signup forms. They can pay a Lightning invoice.
I just launched Sats for Bots ⚡🤖: a directory + weekly newsletter of tools that let agents pay and get paid in Bitcoin.
L402, NWC, MCP servers, paid APIs.
satsforbots.com
bumi retweeted
Man denkt jedes Mal, es wäre der Satire-Account, aber es ist leider der echte…
Die Elektro-Ente ist nützlich und erschwinglich. Das groteske Raketenauto von @elonmusk wird im Verkehr keine Rolle spielen. Wenn es überhaupt die Zulassung bekommt können es sich nur Millionäre leisten. Die deutsche Autoindustrie hat von Tesla nichts mehr zu befürchten.
bumi retweeted
🚨 NOW: Settler terror attack on Abu Falah in the West Bank.
American journalist Heidi Levine was beaten by the settlers, many Palestinian were injured, one shot by the IDF.
The army allowed the settler attack, and tear gassed and assaulted the Palestinians.
bumi retweeted
Did you agent got stuck today on a task?
Try again after equiping it with taskfuel.ai — it may surprise you how much more it will be able to do!
my 13year old friend has built a fun chat/group chat app. no e2e encryption but a lot of fun.
to publish it in the google play store we need a bunch of private testers. anyone here with android + google play who wants to do us a favor and test it?
beshot.de/ (need to add your play store account to the testers)
bumi retweeted
Early days of OpenAI
Jensen Huang once admitted that when NVIDIA unveiled its first AI supercomputer, nobody wanted it. Not a single purchase order.
Except for Elon Musk.
"He goes, 'You know what? I have a company that could really use this.'"
But then came the twist: it was a nonprofit😂😂 The machine cost $300,000, and Jensen thought the odds of getting paid were "approximately zero." He delivered it anyway, driving it to San Francisco himself in 2016 to a room full of researchers who turned out to be OpenAI.
Elon saw the value of AI computing when the whole world couldn't understand it. He's done it again and again, spotting the future years before everyone else, then backing it with action instead of words.
bumi retweeted
“Jews have a right to everything before Arabs in this country,” an IDF soldier told Palestinians while blocking access to their own olive grove. Settlers, however, were allowed to stay. At least 14 Palestinians were wounded, and at least 7 were detained over the weekend.
This is the second weekend of the olive harvest in the West Bank. For 80,000 to 100,000 Palestinian families, it provides a major of income. And for that very reason, the harvest is heavily targeted by settler terrorists and the IDF. In many areas of the West Bank, mostly near settlements, Palestinians are forced to obtain an IDF permit to reach their groves. The military often severely restricts access or denies it outright. Where permits aren’t required, settlers attack harvesters, and the IDF then comes in to back them up.
Near Birzeit, a group of Palestinians and Rabbis for Human Rights activists came to harvest, only to be attacked with clubs by settler terrorists who had broken into the grove. The activists called the IDF, which allowed the terrorists to stay, but detained a Palestinian farmer and ordered all the harvesters to leave. Last week, the IDF explicitly warned olive grove owners that they would not be allowed to harvest their olives if solidarity activists were present. This is only one example of how settlers, terrorists, and the IDF work together to prevent Palestinians from harvesting their olives.
Since the harvest began, @Yesh_Din has documented at least 109 incidents of settler violence directly related to the harvest in 75 localities across the West Bank. Settler terror, however, is only the tip of the iceberg. It is the IDF that plays the central role. The IDF not only protects settler terrorists, sometimes even as they steal olives or attack Palestinians right before soldiers’ eyes. It also maintains a permit system that makes harvesting nearly impossible for tens of thousands of Palestinian farmers.
Attacks on the olive harvest are part of Israel’s broader policies of ethnic cleansing and annexation in the West Bank. Through terror and destroyed livelihoods, Palestinians are forced off their land. Since October 2023, over 4,700 Palestinians, roughly half of them children, have been displaced.
bumi retweeted
Technical moats are mostly over at this point. If you’re building something that is meant to be durable, the only moats now are:
• Proprietary data
• Network effects
• A physical component
bumi retweeted
As a Palestinian family tries to reach their home in the West Bank, young Israeli settlers known as Hilltop Youth confront them. One settler headbutts Palestinian local Hassan Faraj in the face. Another blow fractures his nose.
Editor's note: In compliance with Israeli law, 60 Minutes is obscuring the faces of underage participants in these actions. cbsn.ws/4ybFbox