#BTC class of 2011, ammo importer, other firearm industry stuff, the compass always points to terrapin (~);} NFA
Joined December 2021
- Tweets21K
- Following3.8K
- Followers4.6K
- Likes181K
Pinned Tweet
With people arguing about WML I guess I should tell my story about how having one defused a situation where I would have been legally allowed to shoot someone but my WML allowed me to safely end a threat without having to pull the trigger.
1/x
This quoted post is unavailable.
My sister gave birth today to a healthy baby girl. The first picture my BIL sends of is of her flipping everyone off… yep she’s part of the family for sure.
Horrifying
BREAKING 🚨🚨
#PalmBeach / #Florida
Absolutely chilling Audio of the last moments of N722BD before it crashed in Palm Beach Florida earlier today.
Listener discretion is advised.
Notarmedhippy4 retweeted
18 years ago today,
someone sent nine pages to a mailing list.
No CEO. No permission. No bailout.
Just math and a better idea.
Happy birthday, Bitcoin whitepaper.
Notarmedhippy4 retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Notarmedhippy4 retweeted
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
ALT Critical vulnerability alert for PHP Core with CVE-2026-109618 and CVE-2026-109619, CVSS score 9.2, urging immediate patch and threat hunting.
Notarmedhippy4 retweeted
Assuming 1 try per second continuously, it would take a human ≈ 3.67 x 10^69 years to guess a SHA-256 hash, unless of course it was coded by an Indian infosec company, in which case it would take 4 tries because the answer would simply be “4”
Notarmedhippy4 retweeted
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
Shout out to the boys in blue who put green before the badge. Without you none of this would be possible.
Notarmedhippy4 retweeted
This shit really hurting my heart fr, I love you man @JalenHurts
I’m a born and bred Eagles fan to the core of my soul. @PaladinPhillip how much shit I talk about them. But what they did to Hurts makes me physically ill. I hope he gets what he’s owed for this colossal fuck up. I want everyone fired and him PAID
Notarmedhippy4 retweeted
🚨 GOA has asked @PAAttorneyGen @DaveSunday_ to confirm suppressors, SBRs & SBSs are legal in PA without NFA registration.
After Silencer Shop v. ATF and ATF's Oct. 9 letter, PA gun owners & FFLs deserve a clear answer. ⚖️
📄 Read our letter: pennsylvania.gunowners.org/w…
Apparently I’m supposed to have a signature drink for my wedding. My bride has this complicated vodka drink.
Here’s what I came up with:
It’s called the “Don’t be a pussy”
It’s room temperature whiskey in a glass.
Apparently that’s not fancy enough 🙄
Is it weird I’m almost more excited for the after party for my wedding than I am for the actual wedding? Yes I’m growing a legit rave as an after party.
