Applying the Aneristic Principle to matters of AWS and IT infrastructure. Facts my own.
Düsseldorf
Joined January 2019
- Tweets3K
- Following601
- Followers425
- Likes8.4K
Pinned Tweet
For the 6,000+ #AWS service API endpoints, awsipv6.neveragain.de shows which endpoints support #IPv6 by default, and which require additional client configuration. Important when considering an IPv6-only VPC.
New: Daily updates and a list of recent changes.
It’s starting to get silly. Dario and Sam can’t stop smiling I guess.
BREAKING: UK government urges citizens to stockpile at least 3 days of emergency food & water amid the global cybersecurity crisis.
Readers added context they thought people might want to know
The UK government's advice to have 3 days of emergency supplies on hand is not directly related to current cybersecurity issues.
Recent cybersecurity incidents were referenced as an example of unexpected events that can occur, not as a direct reason to stockpile supplies.
bbc.com/news/articles/…
bbc.com/news/articles/…
I upgrade my MacBooks when the AWS Console is getting too slow to work with. The last time was on Intel. My M2 is approaching this point rapidly now.
Apparent Order retweeted
I'm going to plant a flag here: 2026 is going to go down in computer security history as the year of a million CVEs. (Maybe literally, but definitely figuratively.)
LLMs are producing lots of slop, but they're also finding a heck of a lot of real vulnerabilities.
With all the junk information that was going around for many hours before the patch release, and afterwards, it feels like the actual PHP GHSAs and this article ⬇️ were the only genuinely helpful pieces.
We built a working exploit for one of the PHP vulns. All you need to know is that you need to patch. Want more details? Read here:
securitylabs.datadoghq.com/a…
Apparent Order retweeted
PHP folks, please don't rely on the ini config change to protect your apps. It won't help when the full details are out - it only protects against a single vector, if that. You need to apply the patches as soon as they drop.
phpc.social/@joepferguson/11…
Apparent Order retweeted
Can we now do away with the whole CA nonsense and use DANE/RFC6698 in browsers? Yes, yes, it was great that the CIA/NSA could MITM every website, but it's time to move on.
Haha, ok, nevermind. Seems like work starts early today. jackalsyn.com/posts/php-up-2…
The TLS PKI we have is stupid for so many reasons. But this one wasn’t on my list. A great reason to take another look at DANE/TLSA though!
Apparent Order retweeted
If you use @OVHcloud look at this urgently
Si vous avez téléchargé aujourd'hui la dernière version de CLI d'OVHcloud, merci de la mettre à jour à nouveau très rapidement. Sinon effacer. Il s'agit de repo:
github.com/ovh/ovhcloud-cli
La version CLI de 14h47 a été compromise par un hacker. Nous l'avons détecté et bloqué à 16h21. Merci au client qui nous a remonté le souci. La version compromise est v0.11.0 v0.12.0 v0.13.0 v0.14.0 v0.15.0.
La version v0.10.0 et la future 0.16.0 est clean.
On vient de finit les premières vérifications et aucun autre repo n'est affecté. Nous avons aussi retracé l'incident. Le hacker a utilisé le compte github d'un des développeurs et a ajouté un binaire dont le job est récupérer les secrets sur le disque. La qualité du binaire est médiocre mais il peut aller jusqu'au bout. Si vous êtes concernés, merci de changer tous les secrets sur votre disque.
On continue les recherches sur le binaire et on va publier les détails additionnels sous peu.
AWS Bedrock – data retention mode "none":
Docs: "Zero data retention. No request or response data is written to durable storage by AWS"
Blog: "We may store and review flagged content ... even when mode is none"
Only one of these can be correct.
Links for these:
Docs – docs.aws.amazon.com/bedrock/…
and
Blog (July 2026) – aws.amazon.com/blogs/securit…
Additionally, per docs.aws.amazon.com/bedrock/…, Amazon "may also file a report with the National Center for Missing and Exploited Children (NCMEC) or a relevant authority" for flagged input or output.
Cloudfront: "Now, with this launch, customers can configure their VPC origins as dual-stack and get end-to-end IPv6 without sacrificing security." aws.amazon.com/about-aws/wha…
“never deleting this app”
Some more #AWSLambda Web Function fun. My buddy @darkosubotica was, well, flexing a bit with his 1994 NCSA httpd 1.3 server running in a web function. So, I flexed back with my IBM's 1980s mainframe operating system, MVS 3.8j, running on an emulated System/370 accessed through a live 3270 inside a web function. Who won?
Self-hosted inference is the way. Or find yourself an actually trustworthy inference provider. Otherwise, Compliance™️ will eat you alive, and rightfully so, in this case.
“Apple HomeView is not available for sale in the European Union, as Siri AI is currently unavailable in iOS in the EU.”
Apparent Order retweeted
Lambda Web Functions were released today. I got carried away and wrote three blog posts about them.
1: A collection of technical tidbits.
2: They're not actually Node.js-only, you can run Go/Rust.
3: They're cheaper than Event Functions at processing events.
1/4
