Azzy runs a small design shop in Pennsylvania, loves jeeps, fast cars and personal liberty. All taxes suck. Follows =/= endorsements. DMs open to real humans.
Finleyville PA
Joined February 2013
- Tweets33.9K
- Following916
- Followers1.4K
- Likes81.5K
Historical comparisons aside, your designer needs to learn how to use the contour tool better. And needs an editor without macular degeneration.
Too much pressure makes threads taper, too little leaves them short ⚙️ #Machining #Threads
Making Jeep parts on an antique lathe xitter.cf/i/broadcasts/1rGmqpMma…
Showed my wife this one. She works with team logos at an embroidery shop every day.
The response was "oh. OOOOH. WHY!?" 🤣 Similar reaction from my old design lead Prof Rust.
If your IT guy isn't sweating right now, they are either good at their job, or hired under nepotism.
Maybe bring them a cool drink.
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
I should have ordered more stock with the last laser shop order, we have 15 left, these linkages have been surprisingly popular the last month!
Our transfer case linkage is the last one your Jeep Wrangler YJ will ever need.
USA designed, made supported, and an @OfficialMOPAR part too!
Wrangler YJ - Transfer Case Linkage Kit from Azzy's Design Works. @AzzyDesignWorks
It fixes common problems like difficulty shifting into 4 Low, popping out of 4WD, & loose or misaligned factory linkage. Made in USA.
azzysdesignworks.com/shop/p/…
I wonder if this is going to be like the late 90's when a lot of the new low-VOC clearcoats failed early on Dodges.
Want to stump AI?
Give it a question about things that were discussed on forum in the early internet, before magazines and ad companies bought them all up and shut them down.
Trying to find obscure paintball info is hard. A lot of it is gone, stuck only in magazines and old GenX minds.
"Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels."
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Interesting to note... @ASUS does not update their older NAS (AS1004T) anymore, but you can install Entware to force updated tools. However, Entware installed untrusted certs, so I had to manually download new ones and patch.
Working now. Since me and the family don't buy things with WIFI that don't need it, I don't have to spend 3 hours today trying to update WIFI security on a bird feeder or light bulb.
Azzys Design Works retweeted
I am looking for a special projects engineer.
You will design stuff that is on our never-ending “we should redesign this some day” list.
Things like designing a lifting mechanism for a 1000lb blast door.
Or coming up with a better heat resistant material for a battery testing enclosure.
Or designing an acoustic test.
Or or or…all sorts of weird shit associated with the business of protecting people in the space and aerospace industries from things that go boom.
This will be remote. I don’t care where you work. Hours are flexible. Not full time. Or Full time.
You must be a US Citizen. You must be efficient and highly proficient in SolidWorks CAD. You must be smart. You must be dedicated to winning 🇺🇸
Note: @totalshield_llc has a strict no-asshole policy.
DM me if you are interested.
Heck of a start to the day. SSL certs secured by the code "4" to the east of me, toxic Ohio plumes to the west (again).
Guess its time to put on the weather and update systems.
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
I objected to being part of fraud at the Butler PA VAMC, and was removed from on-site work for several months, and no longer allowed on that specific project.
Everyone else in that meeting was fine with moving 3 million for an approved project into one that was deemed wasteful and shut down. (a tour bus sized car wash with multiple bays)
No one went to jail, or was reprimanded, aside from me. The fraud is a feature of doing biz with the government.
