@adofou

Net Architect, anti-DDoS & Peering chez Zayo Europe. Lead tech-prod @a_live_event. Co-Fondateur @Streamalia et https://xitter.cf/t.co/NrknmAAatu. Accro du réseau & GNU/Linux

 127.0.0.1 &
Joined November 2009
  • Tweets44.3K
  • Following956
  • Followers1.9K
4.8KMedia
Je crois ne jamais l'avoir annoncé par ici, mais notre retour de Vacances en Septembre dernier a été marqué par une incroyable surprise 😺 La chatte à notre voisine a mise bas chez nous. Depuis, les deux sont devenus légalement nos animaux et se portent à merveille. #douceur
1
21
emudhra is actively blocking certain versions of curl from fetching their certificate revocation lists. this is with the usual combination of incompetence (only blocking specific curl versions) and malice (deliberately disrupting global security response) bugzilla.mozilla.org/show_bu…

2085612 - eMudhra: Access to CRLs blocked for certain User-Agent headers

UNCONFIRMED (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-26.

bugzilla.mozilla.org
18
95
6
1,465
35,938
j'imagine que vous avez le droit de le scander, et on a le droit de dire qu'en plein recueillement antiraciste c'est vraiment un move bien puant.
Victor Topenot@VictorTopenotOct 26
« Tout le monde déteste le PS » : des slogans contre le Parti socialiste scandés pendant le discours du maire de Paris Emmanuel Grégoire lors du rassemblement contre le racisme, ce soir Place Stalingrad (Paris 19e).
17
16
3
155
5,436
Nous cherchons 100 dev et 100 devops à Lille, Brest, Rennes, Lyon et Paris. On étudie aussi les CV en remote #Ovh.
37
408
162
A video about the state of cybersecurity as of October 2026
47
716
63
5,390
151,523
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library. CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript. What you need to know ↓ thehackernews.com/2026/10/cr…

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image files.

thehackernews.com
25
130
37
664
114,379
Ruby’s turn 😅 Remember the GitLab bug? Well now it moved upstream into Ruby. Multiple 10.0 CRITICAL exploits. Patch now 🚨 Happy Friday 🤠 ruby-lang.org/en/news/2026/1…

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and...

We have released Ruby 4.0.9, 3.4.12 and 3.3.13. They fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for remote...

ruby-lang.org
40
248
77
1,898
135,689
OpenDNS, out. Quad9, out. Il devient plus simple de quitter la France que d'essayer d'y proposer un service DNS ouvert, en raison des procédures-baillons des mafias d'ayants droit.
marc rees
@reesmarcOct 22
Piratage : après sa condamnation face à @beinsports_FR, Quad9 quitte la France Condamné à payer 1 000 euros de pénalité par jour de retard à la demande de la chaîne qatarie, le prestataire suisse décide de plier bagage dans un mois. A lire @LInforme_ linforme.com/tech-telecom/ar…

Piratage : après sa condamnation face à BeIN Sports, Quad9 quitte la France

Condamné à payer 1 000 euros de pénalité par jour de retard à la demande de la chaîne qatarie, le prestataire suisse décide de plier bagage dans un mois.

linforme.com
11
96
2
427
19,625
Zero Day Initiative ha enviado, por error, 6 vulnerabilidades (alguna grave, con explicación y PoC) a la lista pública del Kernel, no a la privada. De hecho, en los propios correos pone que es confidencial. Greg Kroah-Hartman, responde un poquito harto ya. Revisad los procesos.
3
28
6
141
29,470
Louis Croix Vé Bâton, il vient de légitimer la vanne !
30
139
27
1,300
60,308
🚨 OpenCode flaw lets malicious MCP servers execute code on Windows and WSL when developers initiate sign-in. Fixed in v1.18.33, but there's no CVE or security advisory. Vulnerability scanners won't flag affected versions. What developers need to know: thehackernews.com/2026/10/op…

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth sign-in.

thehackernews.com
36
88
25
478
65,743
BREAKING: eMudhra exits SSL/TLS certificate business, blames social media instead of incompetence for the same
615
2,427
598
24,861
1,222,113
Johann retweeted
Phoronix
@phoronixOct 22
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List As high as CVSS 9.0. Whoops. phoronix.com/news/LKML-New-T…

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list

phoronix.com
103
980
507
4,304
622,584
In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/informa… #security #Python #pki discuss.python.org/t/informa…

Information for Python users regarding eMudhra / emSign CA certificate security incident

A security incident affecting eMudhra intermediate certificates has required removing the emSign root CA certificate from CA bundles such as “certifi”. It’s important to immediately upgrade the...

discuss.python.org
4
401
23
1,022
89,685
Johann retweeted
daksh
@daksh0xOct 21
banger tshirt idea
Herrington Darkholme
@hd_nvimOct 21
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
73
1,286
113
13,418
226,697
Pourquoi?!
BioWare
@biowareOct 21
1
110
[Feun] Quand #SanPellegrino de trompe dans son URL... Au lieu de finedininglovers.com, c'est une autre adresse qui a été imprimée. Un petit plaisantin a réservé le nom de domaine et... 🐾
8
106
4
2,489
115,932
（緊急）BIND 9.xの脆弱性（DNSサービスの停止・リモートコード実行）について（CVE-2026-94300） - バージョンアップを強く推奨 - jprs.jp/tech/security/2026-1…
9
1,196
320
1,827
529,361
mitmproxy: use `--emudhra` to sign TLS certificates 💀
33
466
83
5,823
246,695
‼️ A single HTTP/3 connection can crash vulnerable web servers. No login required. Newly disclosed QPACK flaws trigger up to 4,000× memory amplification in tests, exhausting server resources. → PoC is public → 7 implementations affected → Still unpatched: Bun, aioquic, h3 Full details ↓ thehackernews.com/2026/10/ne…
20
140
30
665
67,085
Give this project more visibility tweeps! Possibly the best personal assistant around, not overly complex, simple to install and run, works on anything, RT @afjcjsbx !
afjcjsbx
@afjcjsbxOct 21
Do you want a personal AI assistant to integrate on WeChat, Feishu, Telegram? you can take a look at PicoClaw A super lightweight open source agent with long-term memory, planned tasks, MCP tools, plugins and web interface Installable with a single command, just enter the API key of the model and use it github.com/afjcjsbx/picoclaw

GitHub - afjcjsbx/picoclaw: Ultra-lightweight, open-source, self-hosted personal AI assistant in Go...

Ultra-lightweight, open-source, self-hosted personal AI assistant in Go for RISC-V, SBCs, and embedded systems. Active PicoClaw fork with WebUI, MCP, memory, multi-agent workflows, plugins, and cha...

github.com
3
3
1
6
1,010
Load more