Applying the Aneristic Principle to matters of AWS and IT infrastructure. Facts my own.
Düsseldorf
Joined January 2019
- Tweets3K
- Following604
- Followers425
- Likes8.4K
Pinned Tweet
For the 6,000+ #AWS service API endpoints, awsipv6.neveragain.de shows which endpoints support #IPv6 by default, and which require additional client configuration. Important when considering an IPv6-only VPC.
New: Daily updates and a list of recent changes.
Without Nova, the European Sovereign Cloud’s Bedrock service only has Gemma.
It looks like Amazon AGI division is being shut down and their foundational models Nova are being sunset. Along the same lines they are shutting down Q IDE (autocomplete and chat in IDE), also abandoning efforts to train code-generation models.
futurism.com/artificial-inte…
Apparent Order retweeted
StealMyBitcoin is solved! This is the absolute best explanation you’ll see on how hard #php2shell is to exploit. The author had to trigger a precise memory corruption condition, leak internal memory addresses, bypass aslr, reverse engineer php’s internal memory structures, forge structures to hijack execution, and account for php build differences, worker behavior and timing to get RCE. 20 http requests with a 7 out of 10 success rate. What an amazingly successful CTF. Impressive the creator was able to keep the server up during all the attempts. With all the BS around it’s nice to see something concrete that moves the art forward.
github.com/KillaBoi/StealMyB…
Love this. The💰is still in the wallet. Finally we get some ground truth around how hard php2shell is to exploit. The amount of bullshit flying around from vendors capitalizing on the moment is staggering, And the alert fatigue they’re creating is really going to hurt when a mass exploitable RCE emerges. We still haven’t seen a production site hacked via #php2shell at Wordfence.
Apparent Order retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
It’s starting to get silly. Dario and Sam can’t stop smiling I guess.
BREAKING: UK government urges citizens to stockpile at least 3 days of emergency food & water amid the global cybersecurity crisis.
Readers added context they thought people might want to know
The UK government's advice to have 3 days of emergency supplies on hand is not directly related to current cybersecurity issues.
Recent cybersecurity incidents were referenced as an example of unexpected events that can occur, not as a direct reason to stockpile supplies.
bbc.com/news/articles/…
bbc.com/news/articles/…
I upgrade my MacBooks when the AWS Console is getting too slow to work with. The last time was on Intel. My M2 is approaching this point rapidly now.
Apparent Order retweeted
I'm going to plant a flag here: 2026 is going to go down in computer security history as the year of a million CVEs. (Maybe literally, but definitely figuratively.)
LLMs are producing lots of slop, but they're also finding a heck of a lot of real vulnerabilities.
With all the junk information that was going around for many hours before the patch release, and afterwards, it feels like the actual PHP GHSAs and this article ⬇️ were the only genuinely helpful pieces.
We built a working exploit for one of the PHP vulns. All you need to know is that you need to patch. Want more details? Read here:
securitylabs.datadoghq.com/a…
Apparent Order retweeted
PHP folks, please don't rely on the ini config change to protect your apps. It won't help when the full details are out - it only protects against a single vector, if that. You need to apply the patches as soon as they drop.
phpc.social/@joepferguson/11…
Apparent Order retweeted
Can we now do away with the whole CA nonsense and use DANE/RFC6698 in browsers? Yes, yes, it was great that the CIA/NSA could MITM every website, but it's time to move on.
Haha, ok, nevermind. Seems like work starts early today. jackalsyn.com/posts/php-up-2…
The TLS PKI we have is stupid for so many reasons. But this one wasn’t on my list. A great reason to take another look at DANE/TLSA though!
Apparent Order retweeted
If you use @OVHcloud look at this urgently
Si vous avez téléchargé aujourd'hui la dernière version de CLI d'OVHcloud, merci de la mettre à jour à nouveau très rapidement. Sinon effacer. Il s'agit de repo:
github.com/ovh/ovhcloud-cli
La version CLI de 14h47 a été compromise par un hacker. Nous l'avons détecté et bloqué à 16h21. Merci au client qui nous a remonté le souci. La version compromise est v0.11.0 v0.12.0 v0.13.0 v0.14.0 v0.15.0.
La version v0.10.0 et la future 0.16.0 est clean.
On vient de finit les premières vérifications et aucun autre repo n'est affecté. Nous avons aussi retracé l'incident. Le hacker a utilisé le compte github d'un des développeurs et a ajouté un binaire dont le job est récupérer les secrets sur le disque. La qualité du binaire est médiocre mais il peut aller jusqu'au bout. Si vous êtes concernés, merci de changer tous les secrets sur votre disque.
On continue les recherches sur le binaire et on va publier les détails additionnels sous peu.
AWS Bedrock – data retention mode "none":
Docs: "Zero data retention. No request or response data is written to durable storage by AWS"
Blog: "We may store and review flagged content ... even when mode is none"
Only one of these can be correct.
Links for these:
Docs – docs.aws.amazon.com/bedrock/…
and
Blog (July 2026) – aws.amazon.com/blogs/securit…
Additionally, per docs.aws.amazon.com/bedrock/…, Amazon "may also file a report with the National Center for Missing and Exploited Children (NCMEC) or a relevant authority" for flagged input or output.