sassi67 retweeted
Current information I have on php2Shell:
- The RCEs requires the attacker to obtain memory addresses which are typically protected by ASLR.
- I suspect the original author (lcfr_hax) likely has a reliable exploit which leads to stable code execution.
- Most of the PoCs being posted are completely non-functional AI slop.
- There is at least 1 working non-slop exploit being passed around, but it's reliant on bruteforcing for ASLR bypass, so not particularly impactful.
- Rumor of ITW exploitation are patchy. There are attempts being seen using the non-functional leaked RCE, or variants that are config / system specific.
- Some rumors point towards a known-working exploit being used by threat actors (I've personally confirmed this specific exploit works, but the ASLR bypass technique is unreliable at best and massively limits the potential impact).
- I'd expect heavy ITW exploitation in the next few weeks based on how many people are looking at this. Though, success rates will vary heavily based on the specific exploit chain.
sassi67 retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
sassi67 retweeted
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. cfl.re/487DNbG
sassi67 retweeted
We launched OSS Scanner, which gives critical open source projects free, periodic vulnerability scans from our strongest models.
Each finding includes a proof-of-concept, and a patch where possible.
red.anthropic.com/oss-scanne…
sassi67 retweeted
Many people with relevant expertise think there's a real chance that AI could kill us all in the not too distant future. Others disagree. I've written a post, aimed principally at mathematicians, detailing my struggles to decide what to make of this.
gowers.wordpress.com/2026/10…
sassi67 retweeted
Boost has played a major role in the evolution of modern C++.
Many facilities that were once provided through Boost eventually became part of the C++ standard library, while other Boost libraries continue to provide useful functionality beyond the standard.
It's a fascinating example of how libraries can influence the language itself.
youtube.com/shorts/f_VwqV4wS…
#CPlusPlus #Boost #Programming #Cpp
sassi67 retweeted
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
sassi67 retweeted
Ich baue keine Zulaufstrecken, weil es in irgendwelchen Verträgen steht – Ich baue Zulaufstrecken, weil ich meine europäischen Nachbarn wertschätze.
Abgesehen davon baue ich keine Zulaufstrecken.
sassi67 retweeted
We just let in every Pro and Max user from the Claude Code Projects waitlist!
If you're new to Claude Code Projects, here's a 4 minute walkthrough to get you started:
sassi67 retweeted
Today, we announced the next step in the Project HydraFusion vision: local models and intelligent routing for GitHub Copilot on Windows.
@cinnamon_msft shows what this can mean for your everyday coding workflows.
sassi67 retweeted
Te c’hanno mai mannato in Ucraina?"
Geniali [umani] Luca e Paolo a
#dimartedi
sassi67 retweeted
Clear intent with your AI-generated code is crucial. And confidence in your results takes more than just passing a test.
Our free ebook, Spec-Driven AI Development, covers specs, risk-based testing, and evaluating agent-produced code.
sassi67 retweeted
Decades later I still find Joel on Software as relevant as when I first read it.
If you haven't read it, check out The Law of Leaky Abstractions.
Keep it in mind when someone tells you coding agents are another level of abstraction. As Joel and Thariq say sooner or later you'll end up needing to understand the lower level.
sassi67 retweeted
Se ne è andata all'età di 90 anni la donna della Luna, Margaret Hamilton.
Qui fotografata di fianco agli elenchi del software sviluppato da lei e dal team di cui era responsabile, il team del software di bordo del modulo lunare e del modulo di comando per la missione Apollo 11.
Il software sviluppato da Hamilton e dal suo team era responsabile di molte funzionalità critiche, tra cui il controllo del volo, la navigazione, la gestione dei dati, i sistemi di comunicazione e la sicurezza dei sistemi. Era progettato per gestire situazioni di emergenza, errori di sistema e fornire feedback in tempo reale agli astronauti.
Margaret inoltre, utilizzò un approccio innovativo per la gestione degli errori nel software, introducendo il concetto di "interrupt", che consentiva al software di rilevare e gestire gli errori in modo tempestivo, minimizzando gli effetti negativi sul sistema.
Il codice scritto dal team di Hamilton ha fornito le basi per il controllo e il funzionamento sicuro delle missioni spaziali, consentendo agli astronauti di esplorare la Luna e tornare sulla Terra in modo sicuro.
Riposa in pace, Margaret.
sassi67 retweeted
Haiku 5.5 is now available in the Claude Platform and Claude Code. On average, it costs around 75% less to run than Haiku 4.5.
It pairs well with Opus 5.5 or Sonnet 5.5 as a subagent. Use it for high-volume, cost-sensitive tasks like summaries, compactions, or database queries.
sassi67 retweeted
“Software is over”: Bold AI developer takes aim at Adobe with open source clones arstechnica.com/ai/2026/10/s…
