Awesomely awesome
IN AMERICA
Joined March 2009
- Tweets22K
- Following6.9K
- Followers631
- Likes208K
HodlSpaceJam retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
HodlSpaceJam retweeted
Another PSA offer to a different victim of the FedEx theft
And a other mistakenly sent spreadsheet
HodlSpaceJam retweeted
🚨 Ilhan Omar is NOT the only one. There are 19 NATURALIZED immigrants sitting in Congress right now.
Not one of them had to pass an FBI background check to see classified information.
That's because members of Congress get access just by winning an election. NO security clearance required.
They don't have to disclose whether they hold DUAL CITIZENSHIP either.
Your average Army private gets more vetting than the people writing our national security laws.
Read that again.
This needs to change NOW.
HodlSpaceJam retweeted
I keep going back to this interview as we watch France burn…
The Far Left interviewer frame Elon and us as “Far Right” for being against exactly what is happening today.
Elon’s every word was proven correct.
Her view was proven wrong.
The Media is the Enemy of the People.
HodlSpaceJam retweeted
OPEN YOURE FUCKING EYES.
ITS NOT RACIST TO WANT THEM GONE.
STOP THIS NOW BEFORE THIS HAPPENS IN THE UNITED STATES.
HodlSpaceJam retweeted
A combination of oil and, perhaps, a big hedge fund blowing up, is just making this one of the worst days of the year
HodlSpaceJam retweeted
Sooo... @Pumpfun gonna drop all these callers who are side walleting?
If you're engaging in bad behavior, you should be cut off from the free money tap.
HodlSpaceJam retweeted
JUST IN: Bitcoin falls under $81,000 and $ETH falls under $2,400.
$350,000,000 worth of crypto longs liquidated in the past 10 minutes.
HodlSpaceJam retweeted
It’s always been weird to me how ppl viewed CT as merely a game. Part of the reason I try to not rape things or make shit calls is bc this is real money and taking it from others, underhandedly, makes you a target. If I had my last dollars stolen from me by a fat faggot who is only a $700 flight away, I’m probably going to try to get it back one way or another.
You are not a “trader” if you’re deploying/bundling/raping, you are a digital thief and a digital fraudster.
Game is game until someone uses some tooling that gives them the upper hand? No crying in the casino except when others take from you and you deem it unfair? The world is small and people can be found. Act in a way that doesn’t make you a target and you will have much less to worry about.
after seeing an unsettling amount of people on this app quoting Realist's tweet saying he deserved to get robbed at knife point because he "drills coins too much", i am now even more convinced that ct is a dinosaur due for extinction
this app is filled with nothing but poor, miserable, mud hut dwelling, 4chan school shooter, sub 50 iq monkeys who will live out the rest of their lives contributing nothing to this world and nothing to their families or personal lives
once ct dies, this space can then truly expand 1,000x from here
HodlSpaceJam retweeted
Think about how bad it is.
It’s even worse than that.
Think about it again.
It’s still worse than that.
You think you thought about it?
Nope, even worse than that.
Imagine the worst case scenario.
Worse than that.
Re-read this tweet.
Think about it again.
Still worse.
