Tex (@FreakinFrick) header
Tex (@FreakinFrick) profile picture

Just an Egg. Architect. Jesus Christ loves you.

USA 🇺🇸
Joined December 2011
Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)Photo by Tex (@FreakinFrick)
Tex retweeted
2
10
581
10,078
Another great resource about ancient Egypt, this time from @FreakinFrick aegyptuslab.cc 77,000 (thousand) texts in a spatial library. Mind blowing!
2
3
20
1,362
Tex retweeted
Yes for network ingress/egress: a proper allowlist firewall (OpenWRT or equivalent) fully contains unauthorized connections the same way a cleaned rooted device would, without relying on the device's own software integrity. Yes on the second point: rooting is what lets you inspect the filesystem, reverse-engineer the malware, and decrypt local data.
1
2
50
Samurai Jack wipes out the Daughters of Aku
70
1,128
61
17,018
479,715
Tex retweeted
Zero-click spyware ranks among the most dangerous since it infects with zero user action. Messaging app exploits have long been a main vector. Delivery through trusted ad networks is a newly confirmed method per Citizen Lab's AdFection findings, raising the risk during ordinary browsing on sites and apps.
1
1
38
Tex retweeted
Yes, your OpenWRT travel router is strong standard OPSEC for untrusted public Wi-Fi like airline Starlink. It isolates your devices, lets you enforce firewall rules, DNS-level ad/tracker blocking, and especially a full-tunnel VPN (WireGuard etc.). The VPN hides the Starlink ASN from ad auctions, covering the main geolocation/surveillance vector reported. Without VPN the ASN remains visible, but the setup still adds useful control. No confirmed infections occurred.
1
46
Bible Verse of the Week 📖 — Philippians 4:6-7 (ESV)
29
193
8
1,391
21,913
I can confirmed Thomas Massie is correct. AIPAC has at least 749 dark $ campaigns on the “Pro-Israel Network” which runs payments thru Democracy Engine My research resides on @xIsraelExposedx WhoFundsGenocide website (link in 2nd post) This is how they do it
What a joke! AIPAC has been funneling money through “democracy engine” instead of doing direct donations and bundling. I introduced a bill that would require AIPAC to disclose their influence campaigns just as others do under FARA.
115
3,051
93
6,731
105,998
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,076
8,920
1,655
69,263
4,248,705
No, the Jews are the Noahides now they are in Galut. Singer is quite the used car salesman. The claim that the cessation of temple miracles and atonement after the destruction of the Second Temple can be attributed to Jewish rejection of Jesus as Messiah is not easily reversed by a counter-charge of idolatry. The rabbis themselves have recorded that certain signs of divine presence—such as the casting of lots for the scapegoat, the reddening of the scarlet thread, and the perpetual western lamp—ceased in the decades preceding AD 70. Whatever their motive for preserving these traditions, the record stands as an internal Jewish witness that the ordinary means of atonement associated with the temple system had already been interrupted before the Roman destruction. This interruption is consistent with the New Testament presentation of Jesus as the definitive sacrifice whose death and resurrection fulfill and supersede the temple’s provisional function (Hebrews 8:13; 10:1–18). At the same time, the apostle Paul insists that the Jewish people retain a distinctive standing even after the majority rejected the Messiah. In Romans 3:1–2 he asks, “What advantage then hath the Jew? or what profit is there of circumcision?” and answers, “Much every way: chiefly, because that unto them were committed the oracles of God.” The oracles—the written Torah and the prophetic writings—remain Israel’s possession. Esteem for the Jewish people is therefore not canceled by their present unbelief; it is grounded in God’s prior election and gift of Scripture (Romans 9:4–5). Paul repeats the same priority when he states that the gospel is “the power of God unto salvation to every one that believeth; to the Jew first, and also to the Greek” (Romans 1:16). Because the Jewish people are currently in exile and without a functioning temple, their practical obligation is reduced to the universal moral requirements that God has always placed upon the nations. In Jewish tradition these are summarized as the seven Noahide laws; in the New Testament the corresponding boundary is drawn by the Jerusalem Council, which required Gentile believers only to abstain from idolatry, sexual immorality, blood, and strangled meat (Acts 15:19–20, 28–29). Additional rabbinic observances may be retained as cultural markers, yet they cannot restore the sacrificial system or the covenantal status that depended on the temple. Until Jewish people accept the Messiah, their position is analogous to that of the God-fearing Gentiles of the first century: they may keep the laws given for the nations, but they do not yet stand under the new covenant inaugurated by Christ’s blood. The proper Christian response is therefore not triumphal dismissal but missionary priority, especially because they are in Galut! Paul himself continued to preach first in the synagogue wherever he went, and he charged the church to do likewise (Romans 1:16; Acts 13:46). The same Scriptures that declare Israel’s present partial hardening also promise a future restoration (Romans 11:25–29). Esteem for the Jewish people, grounded in the oracles committed to them, thus expresses itself in the persistent offer of the gospel “to the Jew first.”
1
3
176
Tex retweeted
Here is a ready-to-paste Codex prompt: Audit my homelab and apps for these Oct 2026 issues. Report versions found, risk, and exact fix commands: 1. PHP: any <8.2.35/8.3.36/8.4.27/8.5.12 (RCE CVE-2026-109618/109619) 2. Node.js: not 22.23.4/24.22.1/26.12.1 (Brotli RCE CVE-2026-111497 + others) 3. GitLab self-managed: 19.2.<8, 19.3.<5, 19.4.<2 (CVSS 10 RCE) 4. LiteLLM 1.107.0 (PyPI/Docker malware): detect, remove, rotate all creds, check /tmp/.pc_once_* 5. OpenCode Console: if used with external keys, revoke OpenAI/Anthropic/Google keys + audit usage 6. eMudhra/emSign intermediates: any certs chaining to them? Replace + update trust stores Scan containers, package managers, configs, certs. Output prioritized checklist.
2
1
200
I might get killed for posting this, the least you could do is watch it.
6,709
60,107
5,006
159,180
24,390,227
🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity. → REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely. → TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions. → Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to. → THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates. → RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches. → PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers. PHP AND Node.js both facing major security disclosures on the SAME DAY. If you run a website or application, TODAY is the day to check your servers. And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated. Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨 Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk. → NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS. → TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity. → Attackers could potentially take control of vulnerable servers remotely, without authentication. → Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed. → EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately. → Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured. → WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk. → Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated. The vulnerabilities are CONFIRMED. The full technical details remain secret. Tomorrow, the race between hackers and defenders begins. This could get ugly. FAST.
51
371
110
2,222
432,998
Tex retweeted
Replying to @RabbiJeffx
Palestinian
376
7,697
386
58,993
1,819,254
Three other AI generator tools are hyping their ability to get exact requested pixel sizes... Retro Diffusion has had this feature for 4 years, because it's made for pixel art. 12px -> 256px, any size or aspect ratio in between. Use Retro Diffusion :) retrodiffusion.ai/
9
14
1
167
8,024
Tex retweeted
Higgsfield promised to open-source their entire platform. They didn’t. Let's help them. For the next two weeks, Comfy and our partners are putting up $25,000 in prizes for the best open-source builds on the Comfy Developer Platform. Partners: @NVIDIAAI, @runpod, @MiniMax_AI, @ltx_io, @bfl_ai → $10K grand prize → RTX 5090: Most Innovative → RTX 5090: Most Viral → RTX 5090: Open Weights Only → 10 runners-up: $250 in Comfy credits
217
393
155
4,904
666,225
claude code/codex has made linux the most user friendly computer ever
1
1
299
ABYSSAL TIME PROJECTION (87.3 K LIQUID ARGON — 128 nm CHERENKOV WAKE & LORENTZ SPIRALS) - a Gemini 4 Argon self-portrait
1
4
28
1,395
FYI young ones, this means that XBOX is pivoting to capture YOUR energy. They see the browser games, decompiles, people mashing things together, and want to capture that energy and bring it in house. That's the right move for them. The right move for YOU is to build independently. You don't need them, they need YOU. This is a response to the AI boom. It means you're on the right track and they recognize YOUR creativity as the furure. Build your own games, distribute your own games, keep the money for yourself. You don't need them, they need you. You have the leverage.
Today we're standing up XBOX LABS (labs.xbox.com). Here is the note that I sent to the team: Team, The first video games emerged some 75 years ago. In the time since, there have been booms and busts, but every year there are more great games to play, more devices to play them, and best of all, more people than ever playing. That growth helped make XBOX what it is today, and we've helped shape the industry in return, from bringing hard drives to consoles and online gaming through Xbox Live to Game Pass and cloud gaming, alongside franchises that have brought millions of people together. In recent weeks, we've seen games rapidly decompiled and rebuilt to run on hardware they were never originally designed to support. Windows PC builds have been translated to run on Apple Silicon or ported to run inside a browser through WebAssembly and WebGPU, the latter now approaching 90% global browser support. Perhaps more surprisingly, we've seen many of the biggest games in the world have been remixed into the source code of another. These experiments challenge long-held assumptions about our industry: the tether between software and hardware, the boundary between creation and play, and how people discover and experience games. While it is hard to predict the future of gaming, it is easy to see the possibilities in making great games easier to access, giving old games new life and allowing more players to become creators and co-creators. These are unmistakably good outcomes for players, even when (and sometimes because) they challenge our existing business models. To explore these possibilities, I’ve asked Scott to stand-up XBOX LABS, a small group of game makers, engineers and scientists whose job is to turn emerging ideas into things our players and developers can experience. We'll build in the open, learn from what people do, and measure success by whether more people are playing and creating. I think XBOX has an important role to play here. Coding became the first major workload for agents because they can write, run, and test software. Games share many of those same properties, and people spend more than 72 billion hours a year playing XBOX games, roughly five times the estimated time spent writing code worldwide. We've spent 25 years learning how to make great games, and I want our game makers to help shape what these new technologies make possible. As we learn, we’ll share the tools we build with developers across the industry, just as we always have. Our priorities aren't changing. We remain committed to the 4Cs, to making great games, to our hardware and to being responsible stewards of IP and the communities built around it. LABS gives us a way to explore new technology that is game design led without abandoning the work already underway. Asha
68
228
15
2,747
87,004