Ok maybe AI was a mistake. Assuming AI helped discover this vuln
Code-execution flaw in UEFI firmware threatens most servers on planet Earth arstechnica.com/security/202…
Readers added context they thought people might want to know
The vulnerability (CVE-2026-97631) only affects systems actively PXE network-booting using vulnerable EDK2 firmware; it requires sending malicious ICMP packets during that window and does not impact systems booting from local disks or with PXE disabled.
github.com/tianocore/edk2…
arstechnica.com/security/2026/…
I’m tired already 😭
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Are you well?
🤣🤣🤣 happened again
Hi Sandy. Are you well? This is wrong. On January 1, 1993, we sent a press release saying that multiplayer would be in DOOM, a full 8 months before you joined the company. We knew deathmatch would be huge. In that press release, in January 1993, we said multiplayer would be "the number one cause of decreased productivity in businesses around the world." We were sure of it, and we needed no convincing. I understand you are proud of your work on DOOM, and you should be, but please also respect the accuracy of your statements, particularly around game history. My concern is that these false statements are designed to trigger replies (like this one), reposts, and outrage discussion, all with the view of increasing your followers and subscriptions, particularly since this false deathmatch story (among others) is so easily disproved. I’ve even welcomed you to reach out to me ahead of time. You seem to appreciate game history as much as I do. Could you not also make yours accurate?
tlark retweeted
El Golden Demon es siempre un punto de inspiración y motivación enorme. Mi idea era volver este año pero por motivos familiares decidí posponerlo al 2027. Estas son algunos proyectos que se quedaron a medias y espero retomar pronto aprovechando la ola del hype
#warhammercommunity
Watching this video every time I see the void shield take a hit my mind mentally moves the old school void shield counter dial that was built into titan’s bases back in the epic days. I miss 40K epic
Damn a murder in plain sight 🤣
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol
xitter.cf/JustLingonberry/status…
you're a real dev for sure!
I have a cash back card that gets me a flat 2% cash back on everything, then 3%-4% on special items. I can convert this to travel pts too. I put all my monthly expenses on it. Then I buy WH40k stuff w/ the cash rewards. It adds up to way more than $10. No fees on this card either
If you are considering starting a new Space Wolf army in 40K, the new holiday boxed set is pretty decent. Terminators + Logan + Arjac are decent meta for the army. I already have that stuff so I’ll be passing. It’s good for someone starting out though.
tlark retweeted
Seeing a lot of chatter about how this is an excellent, magnanimous gesture. Elon has been infamously uncharitable. What changed?
Short answer: nothing. This is, like everything else Elon does nowadays, a scam.
🧵
It’s fall and getting cold out which means I can finally finish the last half of this hot cocoa mix I bought last fall 🤣
Having AI agents run with authority over anything is an unknown threat attack surface. We’ve already seen phishing emails 100% bypass the human layer and auto execute from AI agents that read + summarize your inbox. Imagine what would happen when the AI has authority to your $$$
notice..
> Delta is blocking AI agents from booking flights
> JPMorgan Chase and Charles Schwab block agents from accessing accounts
> Yelp requires paid data licensing for agents
> Amazon has blocked Grok bot and other shopping agents.
the internet is starting to block AI agents that were supposed to do everything for us
This is such a bad faith argument. Anyone who has skills, fundamentals, and experience w/ AI will run circles around any unskilled person with AI. I see it clearly all over the place and with my mentees that are learning
Trump made almost 30,000 stock trades so far as POTUS. no one makes that many trades in less than 2 years unless you’re manipulating the market or doing insider trading. After this admin we will see the biggest amount of corruption in our history
