a Citizen of a Republic of Anger
Bialystok, Poland
Joined December 2007
- Tweets17.3K
- Following1.6K
- Followers481
- Likes26K
Andrei Dziahel retweeted
Poland is under attack.
Not by its legitimate government, but by Russian proxies spreading the narrative that Tusk and the EU are staging a coup.
Andrei Dziahel retweeted
Hmm, I'm kinda building a thing for nixpkgs users. To help encourage everyone to contribute, nixpkgs should be filtered by the packages you're using on your machine. Then you get to see which are broken, under-maintained, and can decide to help out. Or not.
maintainermode.org/
Andrei Dziahel retweeted
We're back with the State of Haskell survey, 2026 edition! Please take some time (~10 minutes) to help us understand how you use Haskell
surveymonkey.com/r/3Z9D75V
Share with your friends (and your enemies, for good measure)
Andrei Dziahel retweeted
Буквально закричав в екран
ІДІ НАХУЙ
🗞 Новий сезон серіалу "Володар перснів: Персні влади" відійде від звичного жорстокого зображення орків у творах Толкіна: один із них, зокрема, зрадить Саурона і перейде на бік ельфів. Шоуранери прагнуть показати персонажа зі складними мотивами, якому "можуть співчувати глядачі".
mezha.ua/news/the-rings-of-p…
Andrei Dziahel retweeted
Nothing unusual here. Just Jaime Lannister from Game of Thrones sleeping in a Kyiv metro station.
Actor Nikolaj Coster-Waldau is visiting Ukraine in his role as a UNDP Goodwill Ambassador. Last night, he experienced what millions of Ukrainians know all too well: taking shelter underground during a Russian air raid.
Andrei Dziahel retweeted
Apparently @EA didn't like that we saw the leaked internal trailer for Mass Effect: Universe
So it would be a shame if we shared it far and wide.
#SaveMassEffect
change.org/p/savemasseffect?…
Andrei Dziahel retweeted
The fucking Russians struck the railway station in Dnipro.
They literally targeted civilians waiting for their trains.
So far, 13 people are reported dead and ten wounded.
For fuck's sake, what a fucking state of cannibals.
Andrei Dziahel retweeted
Memory safety is no longer optional.
Our industry has been skating on thin ice, relying on security via obscurity, hoping that a dedicated cracker wouldn't make a given piece of software or infrastructure their pet project.
LLMs make that trivial. If Linus' law of 'given enough eyeballs, all bugs are shallow' is true, then LLMs are acting like an infinite amount of eyes, available on demand.
You can spend 200x+ on your security budget, or 1.2x on development. Choose wisely.
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
