SITUATION UPDATE: Following GMO Internet's refusal to pay a $50M ransom, the hackers behind the breach have promised to trigger ransomware covertly planted on customers' PCs via the cloud. GMO is urging users to unplug network cables, and power off their PCs before noon today.
dee homak retweeted
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
interesting times
BREAKING: Microsoft, $MSFT, is offering buyouts to 60,000 workers as part of the company’s efforts to cut costs amid AI adoption, per Bloomberg.
Personnel on select teams in the US, Canada, India, and the UK at a vice president level and below will be eligible.
This reflects ~27% of Microsoft's total workforce.
dee homak retweeted
I know this isn’t meant to be funny, but I’m literally cackling. “My decades long thesis on just war demonstrates israel has been fighting one, therefore I am revising my decades long thesis because it cannot possibly be that israel is doing something right”
Michael Walzer published “Just and Unjust Wars,” an attempt to delineate the rights and wrongs of warfare in both its causes and its conduct, in 1977. In the nearly 50 years since, no other book on the subject has matched its influence. The precepts are not complicated: it is just to defend your country from an invasion and it is unjust to invade a country that has not attacked you—although Walzer does allow for exceptions, mostly for humanitarian causes. It is just to assume certain risks to avoid civilian casualties and it is unjust to bomb towns indiscriminately to compel an enemy to surrender. The justice of going to war—what philosophers call jus ad bellum—is separate from jus in bello, the justice of how a war is fought.
The war in Gaza has made Walzer rethink one of the book’s fundamental principles. “The wall between jus ad bellum and jus in bello, which had sustained his theory for almost half a century, was no longer sturdy,” Jordi Graupera writes. As Walzer said to him, “There is a sense in which the carnage of Gaza, the ongoing carnage, simply made the war unjust.” Read about why a philosopher of war is now reconsidering his seminal work: newyorkermag.visitlink.me/T7…
dee homak retweeted
Как это, "имеют право голосовать за свои партии"? Ведь месяц назад Робби и другие специалисты по Израилю писали, что все арабские партии сняты с выборов! Не может же быть такого, что они намеренно вводили свою аудиторию в заблуждение! Они бы написали опровержение! Ведь так?
Это не репортаж, а просто песня. Израильские палестинцы это ладно. Мы уже отошли от арабских евреев [хотя все еще хотелось бы, чтобы какой-нибудь Наорай это услышал. )))] Но как быть с аппартеидом? Этож выходит, что аппартеидные палестинцы (сами назвали, никто за язык не тянул) имеет право голосовать на выборах, имеют свои партии и эти партии будут иметь вес в формировании правительства? Либо это не аппартеид, либо кто-то случайно запизделся.
фигааааа подробности перестрелки у нас под окном
Replying to @N12News
החשד לרצח בתל אביב: מחקירה ראשונית עולה ששני האחים הגיעו לסניף בנק כדי לבצע פעולה. אז ככל הנראה הם התווכחו ואחד מהם, על פי החשד, שלף אקדח ורצח את אחיו לפני שהתאבד. תיעוד מהאירוע
@yollancohen
dee homak retweeted
Pretty sure that the reason that the Tailscale “Tailworm” vulnerabilities weren’t responsibly disclosed with the vendor is that they were hallucinated AI slop and there wasn’t anything to be responsibly disclosed with the vendor
судя по всему, скорой тут делать уже нечего, двоих на тротуаре накрывают блестящей пленкой
6 или 7, я не понял, выстрелов за окном и вот такое.
This quoted post is unavailable.
























