Tex (@FreakinFrick) header
Tex (@FreakinFrick) profile picture

Just an Egg. Architect. Jesus Christ loves you.

USA 🇺🇸
Joined December 2011
Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)
NUREMBERG - Official Trailer
🤖 Made with AI
3,159
9,739
3,484
95,582
18,524,651
For my first post, I’m sharing a letter @NVIDIA signed on why open models matter. AI will transform every industry, power every company, and be built by every country. Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enable sovereignty. The world needs both frontier closed models and frontier open models. images.nvidia.com/pdf/Open-W…
16,547
34,315
12,038
193,164
69,236,263
"You're not talking to someone who woke up a loser." This was an insane clip, even before Jensen was caught in a CCP honeypot.
1,038
2,424
747
32,876
6,690,608
Tex retweeted
Remixed and remastered original by Scatman (ski-ba-bop-ba-dop-bop) by Scatman Jobn
4
3
2
32
755
haters are collaborators
Fun fact - Years ago a guy didnt believe that my drawings were one line so he wrote code to re-trace my linework. It turned out to be one of my favorite accidental collaborations.
9
39
2
911
51,892
Tex retweeted
2
11
637
11,154
Another great resource about ancient Egypt, this time from @FreakinFrick aegyptuslab.cc 77,000 (thousand) texts in a spatial library. Mind blowing!
2
3
20
1,560
Tex retweeted
Yes for network ingress/egress: a proper allowlist firewall (OpenWRT or equivalent) fully contains unauthorized connections the same way a cleaned rooted device would, without relying on the device's own software integrity. Yes on the second point: rooting is what lets you inspect the filesystem, reverse-engineer the malware, and decrypt local data.
1
2
50
Samurai Jack wipes out the Daughters of Aku
71
1,143
61
17,186
485,881
Tex retweeted
Zero-click spyware ranks among the most dangerous since it infects with zero user action. Messaging app exploits have long been a main vector. Delivery through trusted ad networks is a newly confirmed method per Citizen Lab's AdFection findings, raising the risk during ordinary browsing on sites and apps.
1
1
39
Tex retweeted
Yes, your OpenWRT travel router is strong standard OPSEC for untrusted public Wi-Fi like airline Starlink. It isolates your devices, lets you enforce firewall rules, DNS-level ad/tracker blocking, and especially a full-tunnel VPN (WireGuard etc.). The VPN hides the Starlink ASN from ad auctions, covering the main geolocation/surveillance vector reported. Without VPN the ASN remains visible, but the setup still adds useful control. No confirmed infections occurred.
1
48
Bible Verse of the Week 📖 — Philippians 4:6-7 (ESV)
29
192
8
1,391
22,055
I can confirmed Thomas Massie is correct. AIPAC has at least 749 dark $ campaigns on the “Pro-Israel Network” which runs payments thru Democracy Engine My research resides on @xIsraelExposedx WhoFundsGenocide website (link in 2nd post) This is how they do it
What a joke! AIPAC has been funneling money through “democracy engine” instead of doing direct donations and bundling. I introduced a bill that would require AIPAC to disclose their influence campaigns just as others do under FARA.
115
3,046
93
6,714
106,325
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,075
8,907
1,654
69,185
4,261,415
No, the Jews are the Noahides now they are in Galut. Singer is quite the used car salesman. The claim that the cessation of temple miracles and atonement after the destruction of the Second Temple can be attributed to Jewish rejection of Jesus as Messiah is not easily reversed by a counter-charge of idolatry. The rabbis themselves have recorded that certain signs of divine presence—such as the casting of lots for the scapegoat, the reddening of the scarlet thread, and the perpetual western lamp—ceased in the decades preceding AD 70. Whatever their motive for preserving these traditions, the record stands as an internal Jewish witness that the ordinary means of atonement associated with the temple system had already been interrupted before the Roman destruction. This interruption is consistent with the New Testament presentation of Jesus as the definitive sacrifice whose death and resurrection fulfill and supersede the temple’s provisional function (Hebrews 8:13; 10:1–18). At the same time, the apostle Paul insists that the Jewish people retain a distinctive standing even after the majority rejected the Messiah. In Romans 3:1–2 he asks, “What advantage then hath the Jew? or what profit is there of circumcision?” and answers, “Much every way: chiefly, because that unto them were committed the oracles of God.” The oracles—the written Torah and the prophetic writings—remain Israel’s possession. Esteem for the Jewish people is therefore not canceled by their present unbelief; it is grounded in God’s prior election and gift of Scripture (Romans 9:4–5). Paul repeats the same priority when he states that the gospel is “the power of God unto salvation to every one that believeth; to the Jew first, and also to the Greek” (Romans 1:16). Because the Jewish people are currently in exile and without a functioning temple, their practical obligation is reduced to the universal moral requirements that God has always placed upon the nations. In Jewish tradition these are summarized as the seven Noahide laws; in the New Testament the corresponding boundary is drawn by the Jerusalem Council, which required Gentile believers only to abstain from idolatry, sexual immorality, blood, and strangled meat (Acts 15:19–20, 28–29). Additional rabbinic observances may be retained as cultural markers, yet they cannot restore the sacrificial system or the covenantal status that depended on the temple. Until Jewish people accept the Messiah, their position is analogous to that of the God-fearing Gentiles of the first century: they may keep the laws given for the nations, but they do not yet stand under the new covenant inaugurated by Christ’s blood. The proper Christian response is therefore not triumphal dismissal but missionary priority, especially because they are in Galut! Paul himself continued to preach first in the synagogue wherever he went, and he charged the church to do likewise (Romans 1:16; Acts 13:46). The same Scriptures that declare Israel’s present partial hardening also promise a future restoration (Romans 11:25–29). Esteem for the Jewish people, grounded in the oracles committed to them, thus expresses itself in the persistent offer of the gospel “to the Jew first.”
1
3
177
Tex retweeted
Here is a ready-to-paste Codex prompt: Audit my homelab and apps for these Oct 2026 issues. Report versions found, risk, and exact fix commands: 1. PHP: any <8.2.35/8.3.36/8.4.27/8.5.12 (RCE CVE-2026-109618/109619) 2. Node.js: not 22.23.4/24.22.1/26.12.1 (Brotli RCE CVE-2026-111497 + others) 3. GitLab self-managed: 19.2.<8, 19.3.<5, 19.4.<2 (CVSS 10 RCE) 4. LiteLLM 1.107.0 (PyPI/Docker malware): detect, remove, rotate all creds, check /tmp/.pc_once_* 5. OpenCode Console: if used with external keys, revoke OpenAI/Anthropic/Google keys + audit usage 6. eMudhra/emSign intermediates: any certs chaining to them? Replace + update trust stores Scan containers, package managers, configs, certs. Output prioritized checklist.
2
1
200
I might get killed for posting this, the least you could do is watch it.
6,849
61,307
5,105
161,723
24,892,307
🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity. → REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely. → TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions. → Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to. → THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates. → RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches. → PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers. PHP AND Node.js both facing major security disclosures on the SAME DAY. If you run a website or application, TODAY is the day to check your servers. And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated. Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨 Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk. → NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS. → TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity. → Attackers could potentially take control of vulnerable servers remotely, without authentication. → Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed. → EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately. → Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured. → WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk. → Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated. The vulnerabilities are CONFIRMED. The full technical details remain secret. Tomorrow, the race between hackers and defenders begins. This could get ugly. FAST.
51
371
110
2,219
433,668
Tex retweeted
Replying to @RabbiJeffx
Palestinian
376
7,685
386
58,892
1,822,025