An autodidact. Crypto/Blockchain/DLT. Momotech, Wife, and working Entrepreneur. Oh, I will go to Mars and possibly Europa one day. No DMs [email protected]
United States
Joined November 2019
- Tweets113K
- Following3.3K
- Followers3.5K
- Likes18.9K
Pinned Tweet
My beautiful petite mom ❤️
Considered Negroe in her era.
Born to a Black American father & German American mother.
Almost totally ignored by the German family.
At least when she visited her Grandparents my mom was allowed to play outside.
Her siblings could NOT go outside and play because they were too dark.
** And many in our country want to go backwards ??
books.google.com/books/about…
Elissa retweeted
ALERT: Rapper who flaunted money and even lit it on fire busted in a $42 million fraud scheme exposed by a Vice President JD Vance task force.
Mercedes New, also known as rapper, influencer, and apparent adult content creator Shawty Dred, was charged with dozens of fraud charges as part of the Trump administration's crackdown on food stamp fraud.
New, from 2020 to 2026, allegedly defrauded the Supplemental Nutrition Assistance Program (SNAP) by using over 350 fake accounts based on stolen identities from the Georgia Department of Human Services, Division of Family & Children Services.
New then obtained hundreds of fraudulent SNAP EBT debit cards that he had sent to multiple addresses in the Atlanta area.
Prosecutors indicted New on 46 counts of mail fraud, 15 counts of aggravated identity theft, and one count of food stamp fraud in his $4.6 million part of the $42 million bust.
Elissa retweeted
Keke Palmer DRAGGING Clair Huxtable is SENDING ME 😭😭💀 SHE HAS NO RESPECT FOR ANYBODY LMAOOOO🤣
Elissa retweeted
🚨🇷🇺 MASSIVE blasts reported in the Moscow area
Unconfirmed footage shows huge fires exploding as alleged strikes tear through.
Large explosions have occurred in the Moscow region multiple times over the past month due to increased Ukrainian drone attacks.
Writer: Bri
Elissa retweeted
Update on Railway and web 2 platform attacks:
The apparent motive is "distillation": running huge numbers of requests through stolen AI keys to train a copycat model, with the bill landing on the key owner.
Railway says it's part of "a series of attacks targeting platform companies with the aim of compromising AI inference providers."
Two related incidents this month:
Fireworks AI (Oct 6): attackers used stolen internal credentials to read customers' environment variables and grab their API keys.
OpenCode (Oct 17–19): users' OpenAI, Anthropic and Google keys were stolen. Some users found up to $1,700 in charges overnight, and Google suspended some users' Cloud projects for "hijacked resources."
Elissa retweeted
👇
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Elissa retweeted
They’ve figured out a way to make gold from mercury
Turns out it’s not so rare after all…
Last month, we demonstrated high-rate alchemy: turning mercury into real, stable gold, beating CERN’s record by a factor of 10.
Last week, we enriched isotopes in the world’s most powerful plasma centrifuge, beating the Soviet record that stood for 40 years.
Now, we’re building a fusion reactor in San Francisco to achieve record power density.
Elissa retweeted
🇨🇳🚨 Pendant 1 000 ANS en Chine, on casse les orteils des petites filles pour garder leurs pieds MINUSCULES, au nom de la BEAUTÉ !
Dès 5 ou 6 ans, on leur casse les orteils et on les replie sous le pied, serrés dans des bandes de soie.
Le pied idéal mesure environ 7,5 cm, on l'appelle le « lotus d'or ». La dernière usine de chaussures pour ces pieds ferme en 1999.
(Smithsonian)
Elissa retweeted
🚨#BREAKING: Outrage is erupting in Virginia after police showed up at a mother’s home at 2 A.M. and TOWED HER CAR over a SH00TING she had NOTHING to do with...
...because a FLOCK CAM pointed them to the WRONG CAR!!!
Now her car is a TOTAL LOSS and she MIGHT LOSE HER JOB!!!!
Yes, you read that right, a Flock camera got it wrong, the cops took her car ANYWAY, and she’s the one paying for it.
Her name is Rosalyn Crump, she’s a mom raising 3 boys in Richmond VA
On July 29th, just before 2 in the morning, Richmond police officers showed up outside her home on Sussex Street.
She was ASLEEP, but someone woke her up and told her police were outside and her car was being towed.
Police say the Flock system had linked her 2012 Hyundai Elantra to a sh00ting near Gilpin Court and body camera footage shows the officers shining flashlights through her windows.
At one point, one of them seemed to doubt they even had the right car.
They noticed her KIDS’ CAR SEATS were buckled in the back, but they towed it anyway.
Rosalyn came outside and told them flat out: “Y’all got the wrong car.”
She told them she’d been at her mom’s house all day, came home at 4, and waited for her kids to get off the bus at 5.
Nobody had driven her car.
An officer decided her story didn’t match the Flock data and said on camera that she was, “definitely not telling the truth.”
Minutes later, Seibert’s Towing hauled her car away.
If you think that was insane... well, IT GETS WORSE.
About FOUR DAYS later, she finally got a phone call.
Her car had been released FOUR HOURS after they took it... because police had already found the person they were actually looking for.
NOBODY FROM THE POLICE TOLD HER!!!!!
When she went to get her car back, she found it DAMAGED from the tow.
The towing company’s VP admitted fault in writing.
Then the claim went to insurance, and the company said it could no longer settle with her directly.
Her mechanic’s verdict:
TOTAL LOSS.
Richmond police now admit Flock cameras led them to the wrong vehicle.
Meanwhile, Rosalyn has lost wages, can’t get to work on time, and is paying for a RENTAL CAR out of her own pocket just to get her boys where they need to go.
She literally did nothing wrong and was home with her kids.
THIS IS INSANE!!!!!!!!
Elissa retweeted
Every member of Congress needs to see this ad.
The fact that we’ve reached this point should terrify everyone.
Elissa retweeted
🚨Avoid critical web 2 interactions right now.
As I called the reverse engineering vector is actively being used to attack traditional web apps.
Crypto requires a private key. These antiquated systems are open text centralized and easy to break.
This is only the start we have been raising the alarm for weeks.
Read this asap all web 2 devs.
Critical PHP vulnerabilities (nicknamed PHP2Shell) are driving widespread website takedowns and scrambling today (October 21, 2026). This is the dominant story affecting traditional “Web 2” platforms and sites.
Two severe remote code execution flaws in PHP (CVEs 2026-109618 and 2026-109619) were disclosed. PHP underpins a large share of the web estimates put it around 70% of sites, including many WordPress, Drupal, Joomla, MediaWiki, and similar stacks. The bugs can let attackers run code on vulnerable servers without logging in. They were discovered using AI tools and had existed for years. Patches were released today; national cyber agencies (including the US NSA, UK NCSC, and others) advised organizations to update immediately or take systems offline if they could not.
Cloudflare and others reported seeing early exploitation attempts. Many sites are offline preemptively rather than after confirmed breaches, while operators race to patch. This is not primarily a classic DDoS campaign, though related cyber activity and other issues are also in play.
Platforms and sites reported affected or taken offline
• Government and public services: Finnish government public web services; multiple Dutch sites (NCSC, Port of Rotterdam, Overheid.nl, DigiD, parliament/Tweede Kamer, KNVB football association, political parties, hospitals); French sites including Paris police and local government; German, Belgian, Danish, and Czech government sites; UK councils (Edinburgh, Oxford, Bristol, Lambeth, Barnet, etc.) and Metropolitan Police.
• Other notable: 4chan, Something Awful forum, Wikimedia/Wikipedia supporting services, parts of BBC sites, Asana, GOG, and various others.
Other concurrent issues
The same day brought additional cybersecurity problems: high-severity Node.js vulnerabilities (including remote code execution), a compromise of the LiteLLM proxy, and a certificate authority (eMudhra) private-key issue. Earlier in October, Ubuntu/Canonical sites faced a sustained DDoS.
In short, large numbers of traditional web platforms and government sites are offline or disrupted right now primarily because of these PHP flaws and the advice to patch or go dark. The situation is evolving as patches are applied; widespread confirmed data breaches from this specific issue have not been the main reported outcome so far. Major social platforms (X, Facebook, etc.) are not the focus of the current outages.
Elissa retweeted
Trump:
I called Google Maps to change the name of the Atlantic Ocean to Trump Ocean.
Sundar said, “No, no, no. This time I'm not doing it.” He said, “Oceans are different, sir. They cover a lot of countries. Please don't ask us to do that.”
So we'll probably pass. Let's keep it the Atlantic Ocean.
Elissa retweeted
A 64 year old man in Virginia has been charged with duct-taping his wife to a chair in the basement so he could watch football upstairs “in peace”
Elissa retweeted
Perhaps the threat was never a rogue AI agent trying to subvert humans—but humans using AI to hurt other humans.
Elissa retweeted
This is the sixth protestor removed from President Trump’s rally in South Carolina - an attendee followed and knocked him on his head.
Elissa retweeted
You might just want to stay offline for the next few days, BTW.
These newly discovered PHP vulnerabilities are no joke.
PHP powers about 70% of the global internet, and these are 'critical vulnerabilities'.
Expect massive data breaches, website outages, malware, and remote hacks of 'smart appliances'. Your passwords, personal info, credit card details, and emails are vulnerable.
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
ALT Critical vulnerability alert for PHP Core with CVE-2026-109618 and CVE-2026-109619, CVSS score 9.2, urging immediate patch and threat hunting.