Igor948 retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Igor948 retweeted
Sen. Elissa Slotkin just said that he wants to prosecute everyone who works for President Trump and that her goal is for young conservatives coming out of school to be afraid of working in a Republican administration
Igor948 retweeted
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide. msft.it/6014asXPO
Igor948 retweeted
I just found the most brilliant bit by @JohnCleese
He explains Leftism better in 90 seconds, than you could learn from any academic in 20 years.
Good article.
The Login Worked. That Was the Attack. thehackernews.com/expert-ins…
Igor948 retweeted
Funny...I just happened to be looking around my pic folders, and stumbled upon this, then saw your post. lol
Igor948 retweeted
Muslim student from Afghanistan attacked a pastor for talking about Jesus and praying for another student at George Mason University xitter.cf/USADocumented/status/2…
Behavior like this is unacceptable. Especially with the fact that he is a guest in another country and should respect the country's laws and it's people
His visa should be revoked and he should be sent back
Igor948 retweeted
Have you ever noticed we live in a country where a 95-year-old man can walk into a mud pit in Chicago, call his band The Fuckers, and start reciting “Enter Sandman” like he’s giving a TED Talk from the afterlife?
William Shatner. Ninety-five. Riot Fest. Douglass Park. Thirty-five minutes. Spoken-word heavy metal. In the mud. With people cheering like this is normal.
It is not normal. It is magnificent.
He did “Crazy Train.” He did “Ace of Spades.” He did Metallica. Not sang them. Talked them. Like Captain Kirk got trapped in a guitar amp and decided to negotiate with Satan instead of the Klingons.
Behind him: actual musicians. Marcus Nand. Phil Soussan. Grown men who have paid rent with real notes while a nonagenarian stands there going, “What the F is heavy metal?” and somehow makes it a question worth answering.
Brian May is on the record. Tony Iommi is on the record. The album is called *What the F Is Heavy Metal?* which is the most honest title in music since someone first admitted most of it is just louder complaining.
The crowd ate it up. Of course they did. We will watch a man old enough to remember radio as furniture stand in wet dirt and dare death to tap him on the shoulder. Death probably took one look, said “I’m not dealing with this today,” and went to find someone easier.
You’re never too old to live out your dreams. That’s the line they always use. The real line is: most people quit the second it gets embarrassing. Shatner waited until embarrassing became the whole act, then sold tickets.
Follow @wickedsmaahht before the rest of the timeline figures it out.
#WilliamShatner #RiotFest #WhatTheFIsHeavyMetal #NeverTooOld #SpokenWordMetal #LiveLongAndGetLouder #CaptainKirkHasEnteredTheChat
Igor948 retweeted
67 years ago today, ‘Take Five’ by Dave Brubeck Quartet was released as a single.
It went on to become the best-selling jazz single of the 20th century.
