Yo why is a Prime Minister tweeting about PHP
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な2件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時(日本時間)に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)(@cyber_forecast) / X
It is genuinely over lmao
I notified a friend working at a big tech corporate about the PHP vulnerability as their entire infrastructure runs on PHP
He answered
"Thanks, I'll try patch it in a few days as I'm Out of Office (OOO) now"
And this is a modern tech company, imagine the traditional companies running PHP
People won't update fast enough and the vulnerability will be out in the wild once the patch hits as anyone can reverse engineer it based on the patch
Considering this, there's gonna be so many sites hacked and so much user data exposed I think
🤯
SQL injection ina big 26
Who's gonna tell vibe coders about...
1. SQL Injection
2. XSS
3. CSRF
4. CORS
5. SSRF
6. IDOR
7. Path Traversal
8. Mass Assignment
9. Clickjacking
10. Content Security Policy
11. Security Headers
12. Input Validation
13. Server-Side Authorization
14. Row-Level Security
15. Least Privilege
16. RBAC
17. Secrets Management
18. .env in .gitignore
19. API Key Rotation
20. Secret Scanning
21. Hashing vs Encryption
22. Password Salting
23. bcrypt & Argon2
24. JWT Expiry
25. Refresh Tokens
26. OAuth 2.0
27. OpenID Connect
28. Session Fixation
29. MFA
30. Brute Force Protection
31. Account Enumeration
32. Timing Attacks
33. File Upload Validation
34. Webhook Signature Verification
35. TLS Certificate Expiry
36. HSTS
37. Encryption at Rest
38. Dependency Vulnerabilities
39. Supply Chain Attacks
40. Threat Modeling
41. Indexes
42. EXPLAIN ANALYZE
43. N+1 Queries
44. Full Table Scans
45. Connection Pooling
46. Database Migrations
47. Down Migrations
48. Transactions
49. ACID
50. Isolation Levels
51. Deadlocks
52. Optimistic Locking
53. Pessimistic Locking
54. Normalization
55. Denormalization
56. Foreign Keys
57. Unique Constraints
58. Cascading Deletes
59. Soft Deletes
60. UUIDs vs Auto-Increment
61. Cursor-Based Pagination
62. Full-Text Search
63. Read Replicas
64. Replication Lag
65. Sharding
66. Partitioning
67. Hot Partitions
68. Postgres VACUUM
69. Materialized Views
70. Backups
71. Testing Your Restores
72. Point-in-Time Recovery
73. Change Data Capture
74. Outbox Pattern
75. ORM Lazy Loading
76. CAP Theorem
77. Eventual Consistency
78. Strong Consistency
79. Raft Consensus
80. Leader Election
81. Split Brain
82. Quorums
83. Clock Skew
84. Distributed Locks
85. Consistent Hashing
86. Bloom Filters
87. Two-Phase Commit
88. CQRS
89. Event Sourcing
90. Race Conditions
91. Backpressure
92. Load Shedding
93. Bulkheads
94. Jitter
95. Retry Storms
96. Cascading Failures
97. Thundering Herd
98. Cache Invalidation
99. Cache Hit Ratio
100. TTLs
101. Cache Warming
102. Write-Through vs Write-Back
103. Redis Eviction Policies
104. CDNs
105. Cache-Control Headers
106. ETags
107. Dead Letter Queues
108. Poison Messages
109. At-Least-Once Delivery
110. Exactly-Once Semantics
111. Message Ordering
112. Kafka Consumer Groups
113. Partition Keys
114. Background Jobs
115. Webhook Retries
116. DNS
117. DNS Propagation
118. HTTP Status Codes
119. HTTP Method Semantics
120. Keep-Alive
121. HTTP/2
122. WebSockets
123. Server-Sent Events
124. Long Polling
125. gRPC
126. Protocol Buffers
127. API Versioning
128. OpenAPI Specs
129. Backward Compatibility
130. Request Size Limits
131. Compression
132. Latency vs Throughput
133. Egress Fees
134. VPCs
135. Subnets
136. NAT Gateways
137. Firewalls
138. Security Groups
139. Service Mesh
140. Ingress Controllers
141. Health Checks
142. Liveness vs Readiness Probes
143. Graceful Shutdown
144. Connection Draining
145. Stateless Services
146. Failover
147. Multi-Region
148. Availability Zones
149. Single Points of Failure
150. Disaster Recovery
151. RTO & RPO
152. SLAs
153. SLOs
154. Error Budgets
155. Incident Response
156. On-Call
157. Runbooks
158. Postmortems
159. Chaos Engineering
160. Graceful Degradation
161. Autoscaling
162. Horizontal vs Vertical Scaling
163. Cold Starts
164. Capacity Planning
165. Load Testing
166. Memory Leaks
167. OOM Killer
168. Structured Logging
169. Log Levels
170. Log Rotation
171. Distributed Tracing
172. OpenTelemetry
173. Correlation IDs
174. Metrics Cardinality
175. p99 Latency
176. Alert Fatigue
177. Error Tracking
178. Profiling
179. Flame Graphs
180. Infrastructure as Code
181. Terraform State
182. GitOps
183. Blue-Green Deployments
184. Canary Releases
185. Rollbacks
186. Feature Flags
187. Environment Parity
188. Staging Environments
189. 12-Factor Apps
190. Multi-Stage Builds
191. Non-Root Containers
192. Image Scanning
193. Resource Requests & Limits
194. Pod Disruption Budgets
195. Semantic Versioning
196. Lockfiles
197. Reproducible Builds
198. Branch Protection
Israel's social media operation has a paper trail:
1. The Government Advertising Agency (LaPam) hires Havas Media Germany (€50m option contract).
2. Havas hires Clock Tower X ($15,000,000 received): nine news-style sites.
3. The Ministry of Diaspora Affairs publishes a directory of volunteer tools: reply, report, boost in one click.
4. Amplified on X, Instagram, TikTok and Facebook.
5. Piro, another Havas hire, writes content "engineered for how LLMs evaluate credibility." WIRED and POLITICO found AI chatbots citing these sites.
The whole web:
Grok 4.7 is a pleasure to work with.
No huge fuss, just does what you asked it to do.
Well done @elonmusk
Thank God I've got Gemini 4 Argon.
Considering the fact I'm paying 8 bucks a month for Google AI Pro + YT Premium.
SupoClip is growing insanely fast btw.
Quadrupled the amount of subscribers to the hosted version in a matter of days :)
Sami (e/acc) retweeted
ACAB
🚨 A family opened their back door to let their dog out... and a cop they didn't know was there KILLED her in five seconds.
Then he pointed his gun at her OWNER.
Her name was Tesla. A 3-year-old black Lab from Rochester, New York.
October 19th, 2018. Police were chasing two suspects through backyards.
They already had them in CUFFS. It was OVER.
But Officer Javier Algarin hopped the Dempsey family's fence AGAIN.
No warrant. No knock. Nobody inside even knew he was there.
Three seconds later, Charles Dempsey opened the back door.
Tesla ran off her OWN porch into her OWN backyard.
"Whoa! Whoa! Whoa! Hey!"
BANG. BANG.
Five seconds. She was DEAD.
Then he turned the gun on Charles.
"LEAVE MY PROPERTY!" Charles screamed.
"Get back!" the officer yelled.
Years later, under oath:
Could this have been avoided if you'd just knocked and asked permission?
His answer: "Yes."
The family fought for seven years.
A federal jury found him PERSONALLY liable. $125,000.
Rochester's training? "DELIBERATE INDIFFERENCE."
At least 6 dogs killed by that department from 2017 to 2019.
And that officer?
He's STILL on the job.
In 5 days it'll be EIGHT YEARS since Tesla died in her own yard.
HOW IS HE STILL WEARING A BADGE?!!!!!!






















