irth retweeted
I saw a tweet that really pissed off me off, and I need to set the record straight. Trans women are women, terfs can fuck off from this account, you all are genuinely the most miserable people I've seen on this platform. Let people live their lives, if you disagree just block me.
irth retweeted
Imagine me telling you last year that GoAhead and eMudhra were using the same private key, with no further information. All sorts of scenarios might spin in your head, but never in a million years would you guess the real one.
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
irth retweeted
> Installs plugin that says it has a backdoor
> It has a backdoor
> surprised_pikachu.jpg
Hey so if you're going to make a plugin to connect Twitch to VRC, don't be this person.
Crystal Relay allows Twitch chat to control your avatar via channel points, subs, bits, etc. (Including changing to a different avatar on your account)
The plugin, however, has a backdoor for the developer, Screminpal, to have master controls over your avatar whenever they want and, from my personal experience, they will just do it without asking for your consent. You cannot turn off this backdoor btw. The dev can just come in and mess with you whenever they want and you have no control over it.
Their excuse is "It's clearly stated in the GitHub that I can do this"
irth retweeted
例のコラボで海外のポストもよく流れてくるようになったけど、君ら言い争ってばかりだな。誰々と比べず、そのキャラクターを好きだと思った最初の自分を信じて。歌わせてくれて、描いてくれるクリエイターをもっと推して。新規のファンはこれから知ってくれる人だしコミュニティの伸びしろですよ。
irth retweeted
Funny to think about how well-funded Nathan Fielder’s next project is going to be. Dude might actually build an entire model city
irth retweeted
uruchamiam polskie Theranos w ramach wielopoziomowego przekrętu który ma sprawić że Nathan Fielder nakręci o mnie film
irth retweeted
Throughout the movie, I kept thinking how Socratic Nathan Fielder’s persona is. I can’t stress how much bullshit you can cut through by asking “Why?” “What do you mean by that?” “What did you understand by that?”
