iiinova — where your digital self keeps evolving

Reposted by Death by Lambda

Awet Tesfaiesus, MdB @awettesfaiesus.mastodon.social.ap.brid.gy · 10h

Kann doch Gertenbach diese Bank eigentlich zumuten? Darum ging es heute Abend in einer langen Diskussion

Eine farbenfrohe Holzbank mit horizontalen Lamellen im Regenbogenmuster. Es ist drinnen positioniert, an einer strukturierten Wand, mit einem Mantel, der in der Nähe hängt, und einem Fenster im Hintergrund. Der Boden ist gekachelt, und die Einstellung wirkt funktional und einladend.

Eine Gruppe von fünf Personen, die auf der Regenbogenbank sitzen, lächeln und für die Kamera posieren. Sie sind in einer Mischung aus lässiger und formeller Kleidung gekleidet. Im Hintergrund befinden sich Haken und ein Poster mit bunten Bildern und Text.

Eine Person mit Brille (Awet) spricht in ein Mikrofon und gestikuliert mit den Händen. Sie sitzen vor einem Holzhintergrund mit bestickten Stoffgegenständen und dekorativen Elementen. Andere Personen sind im Vordergrund teilweise sichtbar.

113 3

Reposted by Death by Lambda

Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 9h

Oh, hey, if for some reason you have a need to inspect a cert bundle of PEM files, I have a useful little tool for you. Kind of the love child of split(1), tee(1), and xargs(1): github.com/jschauma/xpipe This makes getting a cert bundles issuers out of pemblocks a single command […]

mstdn.social

Original post on mstdn.social

102 2

Reposted by Death by Lambda

Anna Haunthro @annaanthro.mastodon.social.ap.brid.gy · 13h

Health #Canada has a great Citizen Scientist #epidemiology project running for several years now that I’ve been part of. Each Monday they send out a two-question survey: This past week, Did you develop a cough? Did you have a fever? You answer Y or N. That’s it! It’s anonymous but linked to […]

mastodon.social

Original post on mastodon.social

002 2

Reposted by Death by Lambda

daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 19h

gosh, a vulnerability report just arrived that was... *gasp* seemingly written by a human!

12712 27

Reposted by Death by Lambda

Matthew Haughey @mathowie.xoxo.zone.ap.brid.gy · 18h

why do people call LLM training on public website data “AI Copyright Infringement” when “six finger discount” is right there

8213113 213

Reposted by Death by Lambda

Alix Guillard @aloxe.mast.eu.org.ap.brid.gy · 14h

voilà @ondrej someone made you to a meme.

the famous xycd infrastructure with the text : All modern PHP installs. and bellow the small block is: One guy called Ondrej

026 6

Reposted by Death by Lambda

hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026

O_O pfSense OPNsense QNAP NAS DrayTek ZyXEL D-Link TP-Link Netgear Tenda Synology DSM all run PHP exposed to the internets tis gonna be a brutal, brutal day

2129 29

Reposted by Death by Lambda

Dan Gillmor @dangillmor.mastodon.social.ap.brid.gy · 13h

The right-wing owners of Scientific American, once the pillar of science writing, have ruined the publication's content and reputation. An incredibly sad situation: www.thenation.com/article/society/s…

thenation.com

The Fall of “Scientific American”

When the beloved science publication got too political, its corporate owners stepped in. Now its future is uncertain.

9444 44

Reposted by Death by Lambda

Waldo Jaquith @waldoj.mastodon.social.ap.brid.gy · 16h

IMPORTANT VULNERABILITY DISCLOSURE: sometimes I feel sad

2549 49

Reposted by Death by Lambda

abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 16h

“It’s a poor worksman who blames his tools” has always been complete nonsense. No-one complains about imperfect tools faster and louder than a master. A master will yank a cheap or damaged tool out of your hand and yell at you for not blaming it yet Cheap, lousy tools come from middle managers […]

infosec.exchange

Original post on infosec.exchange

116187 87

Death by Lambda @xdydx.mastodon.social.ap.brid.gy · 12h

@AwetTesfaiesus Also, das ist mein Beruf und bist durchaus klüger und qualifizierter als manche "Kollegen"...

000 0

Reposted by Death by Lambda

Rachel Lawson @rachel.norfolk.social.ap.brid.gy · 20h

The BBC being absolutely on the button. Their Cyber correspondent had never even heard of php before? Really??? 🤦‍♀️ www.bbc.co.uk/news/live/ckgel5xp2xv… #php

screenshot of the story linked in post showing a section saying:
Cyber correspondent Joe Tidy says he didn't know PHP existed until yesterday morning - it's "one of these things we take for granted", he says.

161896 96

Reposted by Death by Lambda

Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 17h

Embargo, shmembargo. Trust me, tho.* *And give me your money.

001 1

Reposted by Death by Lambda

Jason Koebler @jasonkoebler.mastodon.social.ap.brid.gy · 16h

wrote about "Black October," the PHP vulnerability, and the AI-fueled dread and panic I'm seeing among almost all of the cybersecurity experts I've ever known. I think people w/ LLMs are brute forcing software the same way they brute forced social media w/ slop […]

mastodon.social

Original post on mastodon.social

1116 16

Reposted by Death by Lambda

Jason Koebler @jasonkoebler.mastodon.social.ap.brid.gy · 16h

Security through obscurity is a terrible principle but in practice a lot of things didn't get hacked bc people ignored them, or didn't know they existed, or just generally got missed. AI makes it easy to probe all of these things at scale + makes it easier to find/develop exploits

But it has become clear that AI, broadly defined, has fundamentally changed both offensive hacking and defensive cybersecurity. This is not because AI has become sentient or because human beings have lost control of it or because of “swarms” of “rogue agents,” but because AI is proving something that we have always known: much of the software that runs the internet, our devices, our accounts, and our lives is vulnerable, or out of date, or has security flaws that human beings never noticed, or was installed by someone at a company who left the company six years ago and has been replaced four times and no one knows how to find them now or how to update it. This doesn’t mean that all of the vulnerabilities that have been found with the help of AI have been obvious or trivial; skilled hackers and researchers, driving AI tools, seem to be better than humans alone at finding vulnerabilities. But, critically, AI and large language models have made it extremely easy to essentially brute force the internet; if every piece of software is a door, AI makes it exceptionally easy to turn turn the knobs of every door to see if it’s unlocked, even on buildings that human beings had never really bothered to try to open. What we are learning at an alarmingly fast pace is that not only are some of the locks easy to pick, in some cases the door is wide open or there’s a giant hole in the wall. The recent spate of people using AI to hack their internet of things devices to run new software shows that, in some cases, it takes essentially no expertise to actually use AI to hack something.

106 6

Reposted by Death by Lambda

Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 16h

It's only Thursday, so this week stll has a few punches to pack. Apparently Trend Micro accidentally dropped 0-days into the public kernel list, including RCEs and LPEs, so yeah, cybersecurity awareness month is really nailing it this year […]

mstdn.social

Original post on mstdn.social

013 3

Reposted by Death by Lambda

Awet Tesfaiesus, MdB @awettesfaiesus.mastodon.social.ap.brid.gy · 13h

Heute Abend: Bürger:innen- und Dorfgemeinschaftshaus in Gertenbach im Nördlichsten Zipfel meines Wahlkreises: „Demokratie braucht sichtbare Zeichen“

Ein gut beleuchtetes Gebäude mit großen Fenstern und einem unverwechselbaren Dachdesign ist in der Abenddämmerung zu sehen. Es gibt Bäume und einen Laternenpfahl im Vordergrund, mit Fahrrädern, die in der Nähe auf einem Kopfsteinpflasterweg geparkt sind. Der Himmel verdunkelt sich mit Wolken.

003 3

Reposted by Death by Lambda

Zhi Zhu 🕸️ @zhizhu.newsie.social.ap.brid.gy · 19h

" #Trump wanted someone who looked and sounded like the #defense secretary he imagined—a living cartoon warrior, as opposed to a #military professional with a demonstrated record of managing a vast institution... Military effectiveness depends on professional […] [Original post on newsie.social]

Text from article:
This would all be dangerous enough if Trump were pursuing a cautious foreign policy, or the noninterventionist approach that he was somehow credited with by an ignorant pundit class, who were all too willing to be snowed by his dovish rhetoric. Instead, he is reviving the expansionist logic of the Monroe Doctrine, threatening other countries with military force and territorial demands while assuming American superiority will compel submission, even while the war with Iran has exposed the obvious weakness in that assumption. The United States can inflict enormous damage, but Trump’s and Hegseth’s belligerence has exposed a military far more confident in its capability to impose success than it is able to execute. Military effectiveness depends on professional judgment, institutional knowledge, technological adaptation, logistics, and an understanding of what force can and cannot accomplish, and these are all components of the job in which Hegseth has shown zero interest or competence.

002 2

Reposted by Death by Lambda

California Dreamin’… 😎 @jerasikehorn.bsky.social · 19h

Look at this…👇 Especially Texas, nd Tennessee voters. Enjoy. 😎🇺🇸✨

23930 39

Death by Lambda @xdydx.mastodon.social.ap.brid.gy · 19h

@jschauma Well, 100% of my websites do - so it probably averages out.. Until I move to Owncloud...

000 0

Reposted by Death by Lambda

Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 21/10/2026

Anybody know where the "70% of all websites use PHP" number comes from? Seems high to me. #php2shell

211 2

Reposted by Death by Lambda

Quinn Norton @quinn.social.circl.lu.ap.brid.gy · 22/10/2026

I should probably mention this is coverage of the youth protests in France. This has the possibility to become A Really Big Deal, not just in France.

011 1

Reposted by Death by Lambda

Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 22/10/2026

Advanced Programming in the #UNIX Environment Week 6: Process Control In this video lecture, we look at process control: how new processes are started from an executable, and what happens when they terminate. In particular, we will look at the fork(2), exec(3), and wait(2) system calls. Be […]

mstdn.social

Original post on mstdn.social

202 2

Reposted by Death by Lambda

Wuschi @wuschi.mastodon.social.ap.brid.gy · 23h

@AwetTesfaiesus zumal in D Open Source Entwicklung immer noch nicht als Ehrenamt anerkannt ist. Darüber sollten wir auch mal sprechen.

001 1

Reposted by Death by Lambda

Oliver Konow 🇪🇺🇮🇳 @okonow.mastodon.social.ap.brid.gy · 22/10/2026

@AwetTesfaiesus Die KI-Unternehmen die sich dafür Feiern diese Lücke gefunden zu haben, sind diejenigen, die Millionen von Seiten lahmlegten und enormen Schaden anrichteten. Hier die Stellungnahme der PHP Foundation […]

mastodon.social

Original post on mastodon.social

001 1

Reposted by Death by Lambda

Oliver Konow 🇪🇺🇮🇳 @okonow.mastodon.social.ap.brid.gy · 22/10/2026

@AwetTesfaiesus Hoffentlich wacht die Politik endlich auf und nimmt die KI-Unternehmen in die Verantwortung, denn diese waren mit ihren Tools maßgeblich an den Angriffen beteiligt, um es verkürzt auszudrücken. Denn diese Sicherheitslücke wurde erst durch die KI ausnutzbar. Vorher gab es nämlich […]

mastodon.social

Original post on mastodon.social

101 1

Reposted by Death by Lambda

Quinn Norton @quinn.social.circl.lu.ap.brid.gy · 21h

Being a woman at an IT conference means never having to wait for the bathroom.

011 1

Reposted by Death by Lambda

Awet Tesfaiesus, MdB @awettesfaiesus.mastodon.social.ap.brid.gy · 20h

"Wir müssen alle Register ziehen, um den Höchstwert der Erwärmung so gering wie möglich zu halten und bis zum Ende des Jahrhunderts wieder auf 1,5 Grad zu kommen. Das ist möglich." verlässt als politische Aussage ihren eingebauten Rahmen ("Es ist ein Umweltproblem!") nicht. Die Aussage ist: die […]

mastodon.social

Original post on mastodon.social

209 9

Reposted by Death by Lambda

Jennifer C @thejenniwren.teamlh.social · 22/10/2026

You can hear her head hit the floor. Utah deputies slammed data center protester Aspen Azalea to the ground after a public meeting. She says she suffered a concussion. A freaking concussion. After a public meeting. Protest tonight. Info in thread. More fascism that we need to get loud about.

36469350 469

Reposted by Death by Lambda

Zoe, solarpunk witch :v_trans: :v_pan: @themediumkahuna.tech.lgbt.ap.brid.gy · 22/10/2026

I miss when computers were a fun toy instead of the tendrils by which capitalism creeps ever deeper into my life in search of data to slurp up or some new way to show me an ad or make me pay a subscription

001 1

Reposted by Death by Lambda

Eric Phelps @ericphelps.mastodon.social.ap.brid.gy · 22/10/2026

Adventures in Vietnam. Out of cash. The hotel confidently assured me a gold exchange would be better than a bank. Okay. "Grab" (like Uber) dropped me off at their favorite gold shop. Which politely told me they don't accept US Dollars. Go to a bank. Luckily […] [Original post on mastodon.social]

Vietcom Bank. Not very big physically, but they have an ATM that works with the American banking system.

001 1

Reposted by Death by Lambda

Chris Siebenmann @cks.mastodon.social.ap.brid.gy · 21/10/2026

One interesting aspect of the PHP vulnerability is that it can apparently be exploited by performing activities (like file uploads) that the PHP application itself doesn't support, because PHP (the web framework) conveniently does for you before it enters your application. This isn't a bad thing […]

mastodon.social

Original post on mastodon.social

000 0

Reposted by Death by Lambda

Magnus Manske @magnusmanske.wikis.world.ap.brid.gy · 24/09/2026

So-called "hacker tools" (including things like port scanners) are illegal to have and use in Germany (yes, seriously). Given the recent news of LLMs hacking everything, I wonder if they should fall into that category as well?

002 2

Reposted by Death by Lambda

Magnus Manske @magnusmanske.wikis.world.ap.brid.gy · 21/10/2026

Ok, seriously, whose bright idea was it to write Wikipedia software and much of the ecosystem in PHP of all things?!? Oh wait...

0814 14

Reposted by Death by Lambda

Chip Unicorn @chip-unicorn.im-in.space.ap.brid.gy · 21/10/2026

It's my birthday. As my birthday present, could you do something _good_ for someone else without expecting anything in return? Give money to someone homeless, help a neighbor with a task, or something similar? We're _all_ in this together. Make the world slightly better for me?

3417 17

Reposted by Death by Lambda

The Far Side Bot @farside-bot.mastodon.social.ap.brid.gy · 21/10/2026

#thefarside #farside #comic www.thefarside.com/2026/10/21/0 Sorry to interrupt you, folks, but we’ve just had a report of some turbulence ahead, so please stay in your seats a little while. / Ready? … One, two, three! / Well, folks, guess we’re […] [Original post on mastodon.social]

06112 61

Reposted by Death by Lambda

Low Quality Facts @lowqualityfacts.mstdn.social.ap.brid.gy · 21/10/2026

We made a comic about mood rings.

1 Wife: Why are you wearing a mood ring?
2 Husband: Because I hate small talk.
3 Woman at work: Hey Tom, how’s it-
Husband, holding up hand: The ring is gray Karen, I am anxious and you know it.

013 3

Reposted by Death by Lambda

pixelfed @pixelfed.mastodon.social.ap.brid.gy · 21/10/2026

We are aware of servers that have disabled uploads are getting suspicious user registrations, likely to test the php vulnerability. Please shut down your server until you can patch PHP later today.

0247 47

Reposted by Death by Lambda

bontchev.infosec.exchange.ap.brid.gy @bontchev.infosec.exchange.ap.brid.gy · 21/10/2026

@SteveBellovin I am told that two of the certificates are code signing certs. This is much worse than a spoofed web site. But, yes, the PHP thing is way worse.

102 2

Reposted by Death by Lambda

Steve Bellovin @stevebellovin.infosec.exchange.ap.brid.gy · 21/10/2026

No two ways about it; the eMudhra failure belongs in the category of “things that should never happen”. All that said, it’s not a huge issue for most people. A spoofed TLS certificate is only useful to on-path attachers, typically your ISP or a government. Now, if you use a WiFi hotspot run by […]

infosec.exchange

Original post on infosec.exchange

105 5

Reposted by Death by Lambda

Daniel Keys Moran @fatsam.mstdn.social.ap.brid.gy · 21/10/2026

Society changes slowly, and mostly by people dying. When things move fast it's usually because there is political power behind it. Vote.

I hate when people say "change takes time." Then why were Flock cameras and data centers rolled out so quickly? It feels like change only happens fast when it benefits the wealthy or expands the surveillance state.

Brian Taylor Cohen

3414 14

Reposted by Death by Lambda

Scary "Grampus" Jerry 👻 @jerry.infosec.exchange.ap.brid.gy · 21/10/2026

It's days like today that I'm happy that I made my private keys be two digits instead of one, like that other place. what a bunch of amateurs.

061 6

Reposted by Death by Lambda

Dan Fixes Coin-Ops @ifixcoinops.retro.social.ap.brid.gy · 21/10/2026

Well today's gonna be an interesting day for sysadmins haha, guess I'll sit back with my popcorn and SHIT I'M A SYSADMIN

3926 26

Reposted by Death by Lambda

abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 21/10/2026

Our router rebooted itself and started blinking ominously a few minutes before the embargo ended. I sure hope that was the ISP pushing updates for its rinkydink management interface and not someone installing a bitcoin miner in its rinkydink management interface

01210 12

Reposted by Death by Lambda

abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 21/10/2026

eMudhra, the company that made 4 the new funniest number, put out a press release that said the problem was discovered "possibly with AI assisted techniques" to make it sound sophisticated and difficult and not something that just anyone could discover No, what happened is that someone bothered […]

infosec.exchange

Original post on infosec.exchange

32234 34