i love opensource & kanban boards. just use https://xitter.cf/t.co/5XmiicNfDu - trust me.
Joined November 2025
- Tweets580
- Following134
- Followers16
- Likes4.2K
Tin retweeted
Dude, can we please stop publishing vulns before they are disclosed to the vendor!?!?!?!??!
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
Readers added context they thought people might want to know
The Tailscale SSH findings require prior authorized access on the tailnet per the researcher's report; Tailscale stated issues concern post-authorization behavior only and did not recommend disabling SSH for everyone.
tailworm.com
x.com/IntCyberDigest…
Tin retweeted
this is advanced shitposting
despite the unfortunate timing, we take disclosures seriously at @typesafeai
at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs
in effort to maximize transparency, here is the link: gist.github.com/diogo149/810…
Tin retweeted
germany gonna survive the AI apocalypse cause all our data is stored on these bad boys
jokes on you
i was confused that my codex plan lasts for so long... just remembered its being cut in half in 7 days
Tin retweeted
We released Ruby 4.0.9, 3.4.12, and 3.3.13, and published an announcement about Regexp compilation fixes.
ruby-lang.org/en/news/2026/1…
If your application compiles a regular expression from an untrusted string, please update your Ruby to one of those versions.
Tin retweeted
There must exists an app with PHP, deployed on Railway, with calls to cURL, with other services written in node that use Brotli compression running on a couple day old Linux, with their code self managed on GitLab
They are having a hell of a week
.@maria_rcks can u shitpost on railway and php and gitlab and node and ca and and and please i need something fun
cant this day finally end?
it keeps on giving
thehackernews.com/2026/10/cr…
Tin retweeted
Will die Php2Shell Sache ja nicht romantisieren, aber schön zu sehen, dass sich auf einmal alle für IT-Security interessieren :)
Tin retweeted
if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?
Tin retweeted
PHP changes are live. Start patching. php.net/archive/2026.php#202…
Huge thanks to coordinated work by @ThePHPF!
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Maybe it's really time to leave PHP for good - even though I love it.. 🥲
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
For more⬇️
ncsc.gov.uk/news/critical-se…
