Computers. Heavy metal. Dark beers. Barbecue. Photography. USMC veteran. Tifosi 16:44. RHPD. Aviation data enthusiast. Signal - ginger_hax.69
"Boston", MA, USA
Joined February 2011
- Tweets25K
- Following5.6K
- Followers3.4K
- Likes612K
All this in my small town.
A Vice Lord gang member from Athol, MA, Keith Harlow, aka Lord Savage, has admitted to federal gun and drug crimes following an investigation by #FBI Boston's North Shore Gang Task Force.
Harlow manufactured and sold firearms, silencers, and machine gun conversion devices, distributed controlled substances, and committed an armed home invasion while on state parole for armed robberies.
This is the latest example of how #YourFBI is working with our partners to combat violent crime in our communities. ow.ly/UJ0A5100uE0
ALT Images of a motorcycle Helmut, a firearm and drugs
ALT 3D printer on a cluttered workspace with various tools and materials nearby, and a 3D firearm
ginger_hax 🌻 retweeted
A new book alleges that Dutch intelligence hacked Jared Kushner's phone and watched him access a Dubai bank account holding hundreds of millions of dollars that came from a bank in Azerbaijan.
The claim comes from an excerpt of Princes and Thieves, a book by investigative journalist Matthew Cole about Kushner and UAE President Mohamed bin Zayed.
Cole says a source he considered reliable told him in spring 2020 that Kushner appeared to transfer large sums from the account to other people, including a warlord, a mercenary and a former hit man.
The excerpt's headline says the transfers totaled more than $700 million and that the bank accounts linked Trump's son-in-law and former senior adviser to Israel, the UAE and Saudi Arabia.
Source: Vanity Fair
ginger_hax 🌻 retweeted
Two Massachusetts police officers were fired today, following an internal investigation into alleged misuse of the Flock license plate reader system.
ginger_hax 🌻 retweeted
Current information I have on php2Shell:
- The RCEs requires the attacker to obtain memory addresses which are typically protected by ASLR.
- I suspect the original author (lcfr_hax) likely has a reliable exploit which leads to stable code execution.
- Most of the PoCs being posted are completely non-functional AI slop.
- There is at least 1 working non-slop exploit being passed around, but it's reliant on bruteforcing for ASLR bypass, so not particularly impactful.
- Rumor of ITW exploitation are patchy. There are attempts being seen using the non-functional leaked RCE, or variants that are config / system specific.
- Some rumors point towards a known-working exploit being used by threat actors (I've personally confirmed this specific exploit works, but the ASLR bypass technique is unreliable at best and massively limits the potential impact).
- I'd expect heavy ITW exploitation in the next few weeks based on how many people are looking at this. Though, success rates will vary heavily based on the specific exploit chain.
ginger_hax 🌻 retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
ginger_hax 🌻 retweeted
Paul Mackenzie told his followers they could meet Jesus through starvation.
A Kenyan court has now found him and 28 associates guilty in the deaths of 191 people.
190 of them were children.
friendlyatheist.com/p/kenyan…
ginger_hax 🌻 retweeted
A Savannah police officer gave her Flock login to her husband.
Her husband is an ICE agent.
He ran 983 license plate searches.
Across six states.
788 were in South Carolina.
Mostly looking for cars registered to Hispanic owners.
An investigator asked her: "Did you run these searches?"
She said no.
Then admitted it was her husband.
Her husband said: "Every name that I ever ran was an ICE target."
Translation: I was using the police department's surveillance system to hunt people.
She got fired. Along with five other Savannah PD employees.
All for Flock misuse.
ICE is investigating its own agent.
Which means nothing will happen to him.
Georgia law apparently lets Savannah police share plate data with ICE.
But Savannah never agreed to that.
So she just decided it was fine.
Gave him the password.
He turned it into a deportation tool.
Now there's a paper trail showing Flock was used to target Hispanic drivers across state lines.
Using a police officer's credentials.
With her knowledge.
The surveillance network designed to catch criminals became a hunting tool for immigration enforcement.
One password away from working.
ginger_hax 🌻 retweeted
New: Chinese hackers broke into Staples. Staples has an internal customer support tool called Nexus, Chinese hackers got into that, issued millions of dollars of gift cards. Mules then went on a spending spree across the U.S. Gang made $100 million+ 404media.co/how-a-massive-ch…
ginger_hax 🌻 retweeted
New: The FBI believes an exec at a prestigious U.S. consulting firm (1,000+ associates) helped run Shinywire, the ShinyHunters site used to extort nearly 100 victims.
The people victims hire to negotiate with hackers may have been on the other side of the table.
- Dutch police raided ShinyHunters suspect Pepijn van der Stap with flash-bangs while he was logged into Signal
- His chats showed frequent contact with ransom negotiators in the U.S. and Canada
- Those negotiators often knew about new victims before the victims knew they'd been breached
- Per sources, Edward Dubrovsky, a Canadian negotiation exec charged earlier this month, knew ShinyHunters had the FBI's personnel files and never told the FBI
- Dubrovsky's other firm, CyberSteward, helped PowerSchool pay its ~$2.85M ransom
Meanwhile ShinyHunters was griping on Telegram that Coveware kept telling victims not to pay and it was wrecking their conversion rate.
ginger_hax 🌻 retweeted
The U.S. Air Force, via a statement from Nellis Air Force Base Public Affairs, has identified the airman who passed away following a fall during a pregame ceremony at the Alamodome on October 17th, as Tech. Sgt. Ian Patterson, a Tactical Air Control Party (TACP) instructor assigned to the 6th Combat Training Squadron, Detachment 2, at Joint Base San Antonio, Texas.
He was from Fort Stewart, Georgia, and had served for 15 years.
According to the Air Force, In 2022, he was named the Air Force Special Warfare Enlisted Instructor of the Year at the Headquarters Air Force level.
Brig. Gen. Scott C. Mills, commander of the 57th Wing, stated: “This tragedy is felt deeply across the 57th Wing. Tech. Sgt. Patterson and his service mattered immensely to our wing, and to the family, friends, and teammates who had the privilege of knowing and serving alongside him. Our team is now focused on standing beside Ian’s family, loved ones, and fellow Airmen as we navigate this profound loss together.”
His decorations included the Air and Space Commendation Medal with three oak leaf clusters, as well as the Army Commendation Medal, Air and Space Achievement Medal, and Army Achievement Medal each with one oak leaf cluster.
ginger_hax 🌻 retweeted
Announcing ADVERSARY AFTERLIFE
16 former threat domains, reborn as visual histories of real attacks: the APTs, malware and TTPs behind them, and the defenders who exposed them.
Told through UwU Underground's art, music and lore.
Coming soon
ginger_hax 🌻 retweeted
In a few weeks when you go to vote, remember this post.
Two states, different leaderships. One state has a Democratic trifecta, the other has a Republican trifecta.
Where would you rather live?
Education ranking
🔵Massachusetts: 1st
🔴Oklahoma: 48th
(U.S. News 2025)
Healthcare ranking
🔵Massachusetts: 1st
🔴Oklahoma: Near bottom (3rd–5th worst (U.S. News Best States 2025 & America’s Health Rankings)
Poverty ranking
🔵Massachusetts: Among the lowest (~9.7–9.8%)
🔴Oklahoma: 8th highest (~14.9% in 2024 ACS)
(U.S. Census Bureau American Community Survey 2024)
Life expectancy
🔵Massachusetts: 80.82 years
🔴Oklahoma: 75.16 years
(CDC/NCHS life tables)
GDP per capita
🔵Massachusetts: ~$93,600–$110,500
🔴Oklahoma: ~$62,700–$64,700
(U.S. Bureau of Economic Analysis (state GDP data)
Murder rate
🔵Massachusetts: 1.78 per 100,000 (2024)
🔴Oklahoma: 6.25 per 100,000 (2024)
(FBI Uniform Crime Reporting)
Violent crime rate
🔵Massachusetts: 314.7 per 100,000 (2024)
🔴Oklahoma: 422.8 per 100,000 (2024)
(FBI Uniform Crime Reporting)
Federal reliance per $1 paid
🔵Massachusetts: Receives ~$0.60 per $1 in federal taxes paid (net donor state)
🔴Oklahoma: Receives ~$1.30 per $1 in federal taxes paid (net recipient)
(Rockefeller Institute of Government balance-of-payments analysis)
High school graduation rate
🔵Massachusetts: ~89.3% (recent four-year adjusted cohort)
🔴Oklahoma: ~82.2% (recent four-year adjusted cohort)
(State education department)
College degree rate
🔵Massachusetts: 47.3% of adults 25+ hold a bachelor’s or higher (2024 ACS)
🔴Oklahoma: 28.3% of adults 25+ hold a bachelor’s or higher (2024 ACS)
(U.S. Census Bureau American Community Survey 2024)
Air quality ranking
🔵Massachusetts: Stronger (roughly 11th in US News-style rankings; lower average AQI/PM2.5)
🔴Oklahoma: Weaker (roughly 44th; higher average AQI)
(US News Best States air quality metrics)
Teen pregnancy rate
🔵Massachusetts: 5.4 births per 1,000 females ages 15–19 (2024)
🔴Oklahoma: 19.6 births per 1,000 females ages 15–19 (2024)
(CDC National Vital Statistics System)
Incarceration rate
🔵Massachusetts: ~96 per 100,000
🔴Oklahoma: ~545 per 100,000
(Bureau of Justice Statistics)
Infant mortality rate
🔵Massachusetts: 3.28 per 1,000 live births
🔴Oklahoma: 7.12 per 1,000 live births
(CDC National Vital Statistics System)
Fetal mortality rate
🔵Massachusetts: 3.88 per 1,000
🔴Oklahoma: 5.71 per 1,000
(CDC National Vital Statistics Reports)
Median household income
🔵Massachusetts: $104,828 (highest among U.S. states in 2024)
🔴Oklahoma: $66,148
(U.S. Census Bureau American Community Survey 2024)
Uninsured rate
🔵Massachusetts: 2.8%
🔴Oklahoma: 11.5%
(U.S. Census Bureau American Community Survey 2024)
Adult obesity rate
🔵Massachusetts: 27.0%
🔴Oklahoma: 36.8%
(CDC Behavioral Risk Factor Surveillance System BRFSS)
Maternal mortality rate
🔵Massachusetts: 16.4 deaths per 100,000
🔴Oklahoma: 29.6 deaths per 100,000 live births
(CDC National Center for Health Statistics, National Vital Statistics System (2018–2022)
ginger_hax 🌻 retweeted
The craziest part of the Tesla Roadster event is when @elonmusk begged to attend Jeffrey Epstein's "wildest parties" over email. (Multiple times)
ginger_hax 🌻 retweeted
it’s official: 2026 has now tied 2022 for the most days ever with the national average price of gasoline above $4/gal. 157 days and counting. one more and it’s a new record
ginger_hax 🌻 retweeted
President Donald Trump's incoming White House press secretary, Katie Zacharia, repeatedly made baseless accusations of pedophilia against prominent Democrats and shared conspiracy-related content, including claims that echoed the debunked "Pizzagate" theory and that Hollywood elites were pedophilic cannibals, according to a CNN KFile review of her social media posts. cnn.it/4hHrwjY
