Engineer. Minimalist. Volunteer. Tweets in English and Arabic. 🇪🇬
Giza, Egypt
Joined April 2008
- Tweets179K
- Following237
- Followers10.7K
- Likes24K
Pinned Tweet
I’ve had this superpower of telling myself I’m not worth it all the time, that I’m an imposter. I’ve been doing what I do for 15 years and It never goes away. Whatever success I achieve or appreciation I receive, at the end of the day, I tell myself I got lucky.
ده نفس الشخص/الكيان .. أكيد مش صدفة رقم 4
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
طبعاً .. اللي حرك البورصة بالشكل ده هما ال 23% مش ال 76% .. مش نبطل تصريحات زي دي بقى شوية؟
استبعد رئيس الجمعية المصرية للأوراق المالية، أيمن صبري، ارتداد البورصة المصرية سريعاً بعد الهبوط الحاد الذي أصابها خلال تعاملات اليوم، متوقعاً سيطرة التقلبات على أداء السوق في ضوء التطورات العالمية.
قال صبري في حديث مع الإعلامية لميس الحديدي ببرنامج "الصورة" على قناة "النهار"، إن ما شهدته البورصة من نزول حاد يعود إلى الهلع المفرط، نتيجة تزايد أعداد المستثمرين الأفراد الذين يفتقرون للخبرة اللازمة بالتوازي مع ضغط استردادات وثائق صناديق الاستثمار.
What would you expect from the most buggy piece of software. يلا ربنا معاهم.
This Post is from a suspended account. Learn more
I canceled 1Password last year and never going back.
I'm using KeePassXC for a decade.
In this decade, all commercial password managers went through significant enshittification. Lastpass, 1Password, Bitwarden, all of them. Some had security breaches.
My password management hasn't changed in this decade at all. I haven't thought about password management once in 10 years. I haven't had to jump ship between providers or migrate my data. I just have a database shared across my devices and few offsite backups.
One decision to go with free and open source password manager saved me so much trouble. Literally just use KeePassXC, don't even bother with commercial ones.
Readers added context they thought people might want to know
The post leaves out that 1Password requests this permission to scan Setup Codes and one-time password QR codes. macOS has required it since Catalina. According to 1Password, scanning happens locally and no screen or audio recordings are saved.
support.1password.com/screen-recordi…
Cheap AI looks bad .. if you're gonna use AI, invest more.
المصريين من كل شارع في ضهركم
🇪🇬
القائمة النهائية للفراعنة في كأس العالم 2026 🇪🇬
#شجع_مصر
#منتخب_الفراعنة
#الفراعنة_في_كأس_العالم
#egyptnt
#FIFAWORLD