Technologist,Atheist,rationalist,empiricist and non-believer in unicorns, virgin births or https://nitter.cf/t.co/JWGHmFcFSn Linux,Science,Wine and the Arts @codfather.bsky.so
London,La Loire & Almeria
Joined January 2009
- Tweets54.7K
- Following18.3K
- Followers16.7K
- Likes102K
Cods Plaice: Staying safe on the Web - what can I do to make my browsing safer codsplaice.blogspot.com/2019β¦
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
π I bet the daft fuckers will try and find them on the high street to ignore them - lol
This is great to see, the little racist coming unstuck.
The once sure-footed Reform leader is struggling badly after a summer of horrible headlines and plummeting polls
βοΈ Rats in a Sack π
buff.ly/OStkyai
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
The once sure-footed Reform leader is struggling badly after a summer of horrible headlines and plummeting polls
βοΈ Rats in a Sack π
buff.ly/OStkyai
If you are running this you need to take action.
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-baβ¦
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
What GoAhead is and the devices that use it: embedthis.com/goahead/
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
To be absolutely clear, I am happy for people to like Tommy Robinson posts, provided they delete their entire social media history if they want to become a Reform candidate. Being a far right scumbag is fine, provided you hide it until we get into power.
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Think of this....... before Bonfire night
- Bolsanaro has lost in Brazil
- the Student List took Serbia
- Tommy Robinson could well be sent down
- Standards will find Farage guilty
- Netanyahu will likely lose
- Trump will be screwed in the mid terms
Interesting time to be alive
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
π
Very cool, entertaining and with high production values: if I were @Nigel_Farage, Iβd consider dipping into that Β£5 million to try to get out a video that can compare to it.
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Still not aliens, but one of the weirdest things we have found in a sky where weird things are not in short supply. iflscience.com/one-radio-souβ¦
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Ubuntu 26.10 is now available for download, with GNOME 51, Linux 7.3 and new desktop features β including a slick new way to quickly tile app windows! #ubuntu
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Ubuntu 26.04 LTS has been released. The latest long-term support release gets 5 years of updates, but is the first LTS to not include an X11/Xorg desktop session.
ALT Bento design shows features in Ubuntu 26.04 LTS.
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-baβ¦
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Firefox 159 Released With AMD Linux Graphics Fix For Excessive Memory Use
phoronix.com/news/Firefox-15β¦
codfather #FBPE πͺπΊπ«π· π΄σ §σ ’σ ·σ ¬σ ³σ ΏπΊπ¦ retweeted
Linux 7.4 Expands Sensor Monitoring For More @ASUSUSA & @msigaming Motherboards, New @Hi_MINISFORUM Driver
phoronix.com/news/Linux-7.4-β¦
