Slow #traveler excited by #authentic buildings, pretty scenes & trees. I share interesting places to visit & pictures I took during my #walks #architecture
Joined November 2018
- Tweets10.3K
- Following3.2K
- Followers7.8K
- Likes30.9K
Very funny! :) Especially, "Not the lesson" part :)
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Crucial vulnerability in PHP. If you have WordPress - it's you. The recommendation is to isolate yr site completely. The easiest is to set up a custom rule in Cloudflare and.. 🚫 everyone. IKR?😬 The patch is out 14:00 UTC. Who am I to argue? :) Sorry for blocking 4now. Stay safe
This is very serious. For 69% of all sites on the web. Patches only for version 8. Anything older is going to become one big infested ball of malware. Technology is supposed to make our lives easier but it became bloody way too complicated.
I can't watch this. They are destroying beautiful old buildings I love so much. I don't want to be political here and it's not my country, but those people who set it on fire and watched it getting burned are barbarians.There is no excuse and no pride in French traditions.
#AdorableThursday This is a cute, mudejar style doorway? gate? I saw in Cordoba, Spain.
This may not look like much, but it was one of the most delicious meals I've had. It was a yogurt soup that turned out perfect when I added those spices. I wish I knew what they were! That was in traditional restaurant in Sofia, Bulgaria.
#wallsOnWednesday Le Panier is the oldest and most historic district in Marseille, France. If you like cool walls like I do, you will have unlimited entertainment there! Like, looks at this fun yellow wall! 😍I wish I knew how old it was, but I couldn't find that info.
Via del Boschetto in Rome. Oh, how I love that area! I make a point to fly to Rome, coming from the US, bc I love it do much. It's actually cheaper as well. I spend an amazing day or 2 & then take a cheap flight somewhere else. This way I visit Rome every year! 😍 Good Friday 26
#AllMetalMonday This unremarkable tho cute pool is located in the quite remarkable place! Right at the metal leg of the Eiffel Tower in Paris, France! Apparently, I need to specify that FRANCE part because we also have an Eiffel Tower in Paris, Texas!:)) Jardin de la Tour Eiffel.
Extra grease and permissions are given, so now I am graciously allowed to post SOME pics, but only from a year ago, but not recent! 🙃 Whatever the heck is going on here?:) Oh well, I'll be posting old pics for now. :) Here is from Nice, France. Lovely balconies and magnolias
Test, because X is not letting me post pics somehow. Probably, as always, I don't give them app monsters enough permissions 🙄😀 Oh, it allows me to posts videos but not pictures? how interesting. Oh well, just another digital life problem to figure out. Only the 1001s today!🤪
Look at that room! 😍
Matera is a fun 9,000yo town. And we love our suite at @sextantiomt's luxurious Le Grotte della Civita cave hotel. (S) #pressinvite
Some... bad people are spoofing my domain, putting my alongatravel address in the sender field. I don't send emails to anybody at all. Haven't sent 1 yet, so be informed. My email is not hacked. Do not blocked me pls (it's not me), but don't click anything. Delete the email.
I was looking at the river cruises on Elba or Neckar for a while and this one, from Pirna to Konigstein looks very cool! :) Have you ever taken a river cruise in Germany? I think it should be lots of fun!
I don't know what it is about marinas, but I spend a lot of time around them. They are just so peaceful and pretty! Here is a (subtle 🙃) clue to narrow this marina's location down. :) Any guesses on the city? #marina
Oh my, how exiting! :) One doesn't find shipwrecks from the 1st century every day! :) I wish I could see that! P.S. they still have intact containers with wine! I wonder how much would they sell a glass 🍷for? 🤗 bbc.com/news/articles/cvgx1k…
