Bermudian dad. Application Services & MIS. Involved. PLP Senator - Jr Minister for the Cabinet Office; Public Works; Tourism, Transport, Culture & Sport
Bermuda
Joined June 2009
- Tweets24.4K
- Following886
- Followers906
- Likes131K
Pumpkin carving went well this year.
🎃
ALT Skull eyes, noes and top row of teeth carved into a pumpkin in a dark kitchen, lit from the inside by a candle.
ALT Spider web with spider hanging by a thread from the bottom of the web carved into a pumpkin in a dark kitchen, lit from the inside by a candle
Streaming now
Eco Lunch & Learn: Understanding the Socio-Spatial Dynamics of Gang Violence in Bermuda
Presented by Frankco Harris, Criminlogist, Researcher & Policy Professional
youtube.com/live/iZNfwzuP_AU
Mischa retweeted
The Hardship Fund | Emergency Support for Bermudians
The Ministry of Youth, Social Development and Seniors is raising awareness of the Hardship Fund, which provides short-term, targeted emergency assistance to individuals and families experiencing serious financial hardship.
Depending on individual circumstances, support may include rental deposits, short-term rental assistance, utility payments, emergency groceries and transportation costs directly related to retaining employment.
How to seek assistance:
Individuals should contact HOME Ltd. or a participating community agency or service provider for a referral. Each request is assessed individually, and assistance is not guaranteed.
Contact HOME Ltd.: 599-9928
Mischa retweeted
🇧🇲🎓 Welcome Bermudian Students! 🇬🇧
The Bermuda London Office extends a warm welcome to all Bermudian students beginning or continuing their studies in the UK! We wish you every success in the academic year ahead.
📌 Important Reminder: UK Passport Requirements
Bermudians planning to live and study in the UK should make sure they have the appropriate passport or immigration permission before travelling. Please check the requirements in advance to avoid unnecessary delays.
🎓 UNIVERSITY TUITION FEES
Bermudians studying at UK universities should hold a valid British Citizen passport to qualify for home fees; otherwise, international fees may apply.
📢 STAY CONNECTED WITH US!
Remember to register with the Bermuda London Office to receive updates, access support and hear about events and opportunities throughout the academic year.
📧 [email protected]
📞 +44 (0)20 7518 9900
🌐 bda.londonoffice.co.uk
Mischa retweeted
Until we get confirmation Jira is safe from the PHP vulnerability, I don’t think anyone should be opening tickets or assigning me work.
Mischa retweeted
The NSA just told the entire internet to patch or go dark.
Effective immediately.
Not "please consider updating."
Not "we recommend patching at your earliest convenience."
Patch or unplug.
Those are the options.
The NSA doesn't issue advisories for every vulnerability.
They issue them when something is bad enough that the spy agency whose entire job is breaking into systems is worried about other people breaking into systems.
PHP powers 43 percent of the web.
The NSA just told 43 percent of the web to stop existing until it gets fixed.
Or patch in the next 24 hours and hope the attackers haven't already gotten in.
Most organizations are picking option three.
Taking it offline.
Safer to be unavailable than compromised.
The Dutch Parliament already did it.
Finland's government already did it.
University of Vienna already did it.
Now the NSA makes it official.
"If an immediate update is not feasible it is recommend that organizations take the system offline until it can be fully mitigated."
Translation: you can't patch fast enough so just shut it down.
Patch takes 30 minutes.
Testing takes hours.
Deployment takes longer.
Meanwhile attackers are already inside.
So the NSA's advice is logical.
If you can't patch in 30 minutes go offline now.
Don't wait for the attacks.
Don't test first.
Don't coordinate with stakeholders.
Just unplug it.
The NSA will follow up with more specific guidance.
Which is intelligence agency speak for we're watching the attack traffic and we'll tell you what else they're doing with the access they already have.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Mischa retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Mischa retweeted
The Mirrors Programme is celebrating its Community Programme Leadership Academy (CPLA) Cohort 21 Emerging Leaders for successfully completing Restorative Circles Training in partnership with Citizens Uprooting Racism in Bermuda (CURB).
Through interactive training, participants developed practical skills in communication, conflict resolution, empathy and accountability, empowering them to build stronger relationships and promote positive change in their schools and communities.
Congratulations to our Emerging Leaders, and thank you to CURB Bermuda for its continued partnership in helping young Bermudians become confident, compassionate leaders.
Mischa retweeted
Temporary roadworks starting today will affect traffic and parking at LF Wade International Airport for a week.
Skyport said passenger pickups and drop-offs will take place in a designated area in the short-term parking lot.
Motorists have been advi... royalgazette.com/transport/n…
Mischa retweeted
Special Olympics Bermuda held a bocce tournament to support its bocce team’s participation in the Special Olympics Island Games in Jamaica next month. The tournament was held at the TN Tatem Tennis Court at the weekend. The Special Olympics Island Games … bernews.com/2026/10/swd-spec…
Twitter really is a shell of what it used to be. I just unfollowed hundreds of accounts that haven’t tweeted or replied this year.
Probably past time to plan my exit. Where are y’all social mediaing these days?
Bluesky never really took off for me.
