@BeardOps

Computers bad.

 Gentoo GNU/Linux
Joined June 2013
  • Tweets12.6K
  • Following726
  • Followers768
457Media
Quote goes hard as fuck.
Dr. Anton Chuvakin
@anton_chuvakin52m
Replying to @MikeTalonNYC @ZackKorman @UK_Daniel_Card
"Will the future be more secure? It'll be just as insecure as it possibly can, while still continuing to function. Just like it is, today." -- Marcus Ranum comes to mind here
7
Amusing to watch the AI dudes reinvent the 2nd Amendment from first principles.
Singularity Memes
@singularitymeme4h
2
3
99
Agree. The safeguards are annoying in every day usage, but in times of crisis, they're beyond frustrating.
Roy
@usr_bin_roygbiv3h
anthropic is going to lose a ton of marketshare when claude refuses to resolve all the cves
1
129
Oh wow! This checker is about as smart as the 1000s of Nessus scans I had to refute because all they did was read versions strings and never check anything like USNs.
LiveOverflow 🔴 hextree.io
@LiveOverflow4h
If you use AI for "safety", at least do it with some due diligence. This checker is not accurate and will report false positives.
2
48
Hilarious. What a clown show. Can't even admit their own mistake.
Shobhit Bakliwal@shobhitic6h
emudhra is exiting their certificate authority business not because they're incompetent but because of social media reactions
3
102
Oh come on now.
Phoronix
@phoronix9h
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List As high as CVSS 9.0. Whoops. phoronix.com/news/LKML-New-T…

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list

phoronix.com
4
196
The hits keep coming.
ɐʞsǝs
@akses_0x0015h
is it time to turn the internet off yet kb.isc.org/docs/cve-2026-943…

CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory

kb.isc.org
50
The oldest server running something in prod that I managed to get shut down was a Pentium III running Debian Woody (iirc). The datacenter guy was astonished when I told him to unrack it. This was sometime in 2015 or so iirc.
Brian Jacobson
@BrianHJacobson17h
At a previous employer we had an old intranet server. No one maintained it. No one patched it. The case said made for Windows NT 4.0. It was 2016. I kept asking to take it off line and kept getting told no because no one knew who used it. Finally one day without telling anyone I silenced the monitoring alarms on it and unplugged its network cable. Two weeks later in our change control meeting I raised the issue again. CIO: Did we migrate everyone off it? Me to the help desk manager: Have we gotten any calls about it? HDM: No why? Me: I unplugged it two weeks ago. I think we are safe to shut it down.
4
205
Amazing how quickly we went from "oh no LLMs are going to flood the Internet with insecure code" to "oh no LLMs have discovered the internet was already flooded with insecure code"
40
526
32
7,346
68,540
Infosec departments are understaffed, underfunded, and also overflowing with box checking compliance people who build nothing and endlessly take from engineering's time.
solst/ICE of Astarte
@IceSolst21h
You can just post a screenshot of a root shell with no context, get 1k likes. And it’ll be true. Doesn’t even matter what product it’s pretending to be for. CVE-9999-whogivesashit. And companies still won’t add security headcount.
1
9
186
IN-N-OUT isn't overrated. If anything it is underrated. The Double Double is the platonic ideal of a cheeseburger. The fries are glorious and taste of potato. Their only flaw is their 5min half life.
Terrible Maps
@TerribleMapsOct 20
Each state's most overrated thing
3
136
Waow
🐝🇬🇷
@bee_fumoOct 21
lawl
43
Unix McBeard retweeted
grsecurity@grsecurityOct 21
All affected users must patch against php2shell (CVE-2026-109618 / CVE-2026-109619). Due to the nature of some of the primitives involved, ASLR is not effective and arbitrary code execution/reuse/filesystem-level execution isn't a necessary component of exploitation in this case.
4
14
841
You love to see it.
🦆 SchizoDuckie 🦆@SchizoDuckieOct 21
Good news everyone! The absolute legends @ the Sury php mirror have backported the patch all the way back to 5.6
4
308
Sad to see, but entirely predictable after several turds (like Mass Effect Andromeda).
BioWare
@biowareOct 21
1
2
32
I'm having to tell claude to use oxford commas and not end sentences in prepositions. We don't have fuckin' AGI yet.
2
42
Oh man, they reinvented @gatebox
R Λ Z Ξ R
@RazerOct 20
Meet Razer AVA, with Sumi at the heart of the experience: rzr.to/AVA Your next chapter in AI companionship starts here.
40
Next level infosec brainrot
solst/ICE of Astarte
@IceSolstOct 21
chatphp pls generate a single digit privkey with my distilled opencode api key, put it in a toilet paper roll behind the TV, and assign it CVE-2026-99999. Then reverse this French fridge’s firmware. Make no mistakes.
2
210
Unix McBeard retweeted
CRUXNET@C2UXN3TOct 20
If you run any kind of website or service using PHP you need to be paying attention over the next 12 to 24 hours. There is a major patch being deployed for PHP to combat PHP2Shell but researchers are implying the new patch is also already compromised.
Kirill Firsov
@k_firsovOct 20
php2shell Tomorrow is a helluva day.
4
39
3
349
46,656
Distrust events happen, I'd wager this eMudhra event should trigger one for the entire CA, not just the affected intermediates. digicert.com/campaigns/entru…
Tim Kanarsky@tkanarskyOct 20
there should be an icann death penalty for ca's this incompetent
1
91
Load more