SecOps and traditional values

Central Europe
NixOS? Really? On the other side, who am I to blame someone, who refuses to go mainstream?
The Netherlands is moving government PCs from Windows to Linux. The Dutch government is building DAWO, a new workplace based on NixOS and open-source software. Eight municipalities are already testing it. The goal is to reduce dependence on Microsoft and other non-European tech providers for operating systems, productivity software and cloud infrastructure. It’s still in the pilot stage, so this isn’t a nationwide Windows replacement yet. But the Netherlands now joins a growing list of European governments actively looking beyond Windows and Microsoft 365. Europe’s push for digital sovereignty is starting to reach the desktop.
22
‼️ BREAKING: Revolut handed over customers’ passport copies, verification selfies and full transaction histories to a malicious actor. The actor sent lawful government information-demand emails using a genuine government domain that passed domain authentication. Revolut later concluded they were not authentic. Affected customers were notified on Friday. What may have been disclosed ranges from name, date of birth and home address to account statements, withdrawal records and complete Bitcoin transaction history. The company says it has alerted the agency to the unauthorised mailbox on its domain, blocked the address and begun notifying regulators. It has not named the agency, explained how someone obtained a mailbox there, or given a number of affected customers. ZachXBT, who circulated the notices, believes the incident was limited in size and aimed at high-net-worth users.
460
2,439
11,998
3,513,116
YeOldeNick retweeted
High in the Caucasus mountains lives one of the world’s most unlikely communities. They speak an Iranian language, trace their roots to 7th century B.C. Israel, and have lived for centuries among the mountains of Dagestan and Azerbaijan. They are the Mountain Jews. 1/n
102
490
4,177
451,988
Today is my last day with @Google This journey is over. The new one begins on Monday.
95
16
589
27,459
YeOldeNick retweeted
18
150
1,566
111,387
YeOldeNick retweeted
If the vibe coders could read they’d be very upset
More AI-generated code doesn't make your team faster. It might actually slow you down.
68
466
8,170
428,725
> cost question came up quite suddenly Quite suddenly my ass
Sam Altman said AI budgeting has recently become a "huge issue" for some companies, something that "never came up" earlier this year. bit.ly/4uxIGnv
1
88
YeOldeNick retweeted
🚨 Supply chain attack on the Laravel Lang organization: 700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including: laravel-lang/lang laravel-lang/http-statuses laravel-lang/attributes Laravel-Lang/actions The payload targets cloud creds, CI/CD secrets, Kubernetes tokens, Vault, browser data, password managers, SSH keys, and more.
54
270
1,137
754,284
YeOldeNick retweeted
🚨 BREAKING: Active supply chain attack across npm, PyPI, and Crates.​io. Socket detected TrapDoor, a crypto stealer campaign hitting 34 malicious packages and 384 versions and artifacts, with attackers repeatedly pushing new releases across ecosystems. TrapDoor targets #crypto, #DeFi, AI, and security developers, stealing wallets, SSH keys, cloud credentials, GitHub tokens, browser data, env vars, and API keys. Socket detected releases with a median detection time of 5 minutes, 27 seconds. The fastest detection occurred 58 seconds after publication.
29
199
2,063
102,098
YeOldeNick retweeted
And this one is human insight w/ LLM-assisted research. Took about one week to finish everything. The AI really rescued me from a lot of tedious work — excluding the part where it changed the Domain Admin password, locked me out, and claimed it got RCE 🤦
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
46
152
1,671
130,109
Project IGI, I still remember you
POV: It’s 2000, and you’re playing this legendary game.
81
3 teams in 3 different time zones. Internal communications: - well, I’ve just told it in half-empty room, and assumed that everyone has heard and understood. For fuck’s sake…
31
Writing response playbooks without test cases and with two kids running around and screaming like kids? Yeah, why not?
28
Nice piece thou
Nothing humbles you like telling your OpenClaw “confirm before acting” and watching it speedrun deleting your inbox. I couldn’t stop it from my phone. I had to RUN to my Mac mini like I was defusing a bomb.
62
Why on Earth would anyone just think about AI-powered vending machines?
82
YeOldeNick retweeted
Сегодня черный день... 7 декабря 1988 года Армения содрогнулась от мощного землетрясения, разрушившего города Спитак, Ленинакан, Кировакан и множество сел, лишив крова сотни тысяч людей. Трагедия разом унесла жизни 25 тысяч человек. Светлая память невинным жертвам 🕯️
3
19
241
5,390
Big drama today in the Tor community. Conrad Rockenhaus, a Tor operator based out of Michigan, United States, was arrested in 2020 after refusing to cooperate with the United States Federal Bureau of Investigation Rockenhaus, a disabled United States military veteran, ran the fastest Tor node in the United States. He was approached sometime in late 2019 when the FBI requested he allow them arbitrary access to his exit node and allow them to decrypt traffic. He denied their request. Subsequently, in February, 2020 his home was raided. He was arrested for violating the CFAA (Computer Fraud and Abuse Act). It was alleged that he was a disgruntled ex-employee causing problems at his former place of employment. Interestingly, to "help resolve the matter", law enforcement requested he decrypt his Tor exit node to prove his innocence (???). After he refused, he was held in a pre-trial detention cell for over 3 years. He was denied bail after law enforcement stated Mr. Rockenhaus used Linux to "access the dark web" and he was "not complying" and not allowing them access to this Tor exit node. After Mr. Rockenhaus' wife filed an official complaint, and Mr. Rockenhaus was miraculously released, he was raided by the United States Marshal Fugitive Task Force TWO TIMES(???). They took him out his home, threw him to the ground, beat him, smashed his windows, and threatened to murder his animals. They are still requesting Mr. Rockenhaus allow them to access his Tor exit node. Mr. Rockenhaus still has not granted them that privilege. All of this has been captured on home security camera footage. Additionally, his wife has released all court documents. See subsequent post for more information.
180
1,843
13,657
931,177
Spent about an hour in a small town trying to take a taxi. Failed. Shame on you, taxi drivers! I wanted to give you money. Honest money! Now it is gone to Deutschebahn (and McDonalds)
56
we are living in the funny timeline where Iranians and Russians teach Brits how to bypass censorship
Iranians have dropped a nuke on the UK gov: Advanced censorship bypass tech, from the experts, OSS and on both desktop and mobile. Don’t say Iranians don’t care about free gooning ⚠️
2
16
97
13,327