Husband, father of 2 girls, bartender on the Vegas Strip,all around fun guy. Work hard, play hard mentality.Opinions are all mine.Follow my shenanigans online!
Henderson, NV
Joined November 2022
- Tweets9.1K
- Following1.6K
- Followers2K
- Likes30K
A quick story from last week.
Kristin had to go to Chicago for work last weekend, so I had to be "Mr Mom" over the weekend. It started with her 6am flight on Thursday morning, so I was a little sleepy at work that day after getting up at 3am. I ended up taking a "No Time" on Friday, so I got the day off of work. I might have been the first person to use the new policy as the graveyard manager had no idea about it.
I was able to watch Aria's flag football game at Del Webb jr high on Friday. They won 13-0. Aria made the big play on defense as she plays safety and stopped the breakaway run. Their team finally lost a game yesterday, as their coach is all serious business and coaches the high school team, and they have this 8th grader who plays every position and is super bad ass.
I took the kids to Henderson Sport and Social on Saturday. It had just opened on Friday, as was packed on Saturday. It is a cross between a Dave and Busters, Planet Fitness, and the Raiders indoor training facility. We did the 3 item package, which was bowling, laser tag, and the arcade. The food quality was mid.... that was probably the only negative from the trip. I hurt my shoulder throwing bombs with the football. lol.
Sunday was Allison's gymnastics event. Unfortunately, it was at the same time as the Raiders game, and I wasn't able to go to the game as I had access to tickets if I was available . I was a little bummed out about that. Ally did good as usual. She more than likely only has 1 more year left of being in gymnastics as she has a "90+%" chance of making the Jr high cheerleader squad, and I don't think logistically can do both at the same time.
Thankfully, Kristin only has to travel for work 3 to 4 times a year. It's way easier now than before when the kids were younger and needed more supervision. I got nothing planned for this weekend so far.... I'll probably cook up something to do on Sunday during the Raiders game. #vegaslocals
So this post will be in layman terms- if I mess up somewhere please correct me.
So the internet for the last 30 years runs on authentication certificates, which is a 384bit number, a really big number. So big that it can't be hacked, at least with our current technology. Maybe quantum computing will ne able to in the future.
This "auth/certs" allow "internet connected devices" to know that the website or server or IP address is real and not a fake website. Its part of the internet backbone. We see it in the user end as the lock in the web address. IT sees it as code.
Someone thought it would be a great idea to give the keys to the internet oi the 3rd world, control of a critical part of the internet that 70% of the devices use to "elite human capital" in India. You already know how this story is going to end. Someone thought that a 384bit passkey was a number from 1-384 versus a number string hundreds long. The number 4 was one of the passkey, hence the meme about 4.
Now a global size patch{s} have to be made, and sent out to billions and billions of devices. Its such a big deal that the NSA and FBI are instructing companies to go offline if they are not able to patch the critical vulnerabilities that this passkey hack exposed. Many devices cannot be updated, and will be permanently compromised. Websites could already be compromised as the patch has hasn't been sent out, and the hack is still free in the wild.
I've read that 2 step authorization will have to become a mandatory thing moving forward for logging into accounts, with a push notification to a cell phone being the second step.
I would not log into any accounts for the next few days until this gets sorted out globally. The website that you think is real might be a fake, and it will look identical, even with the lock on it.
The internet is calling this a level 9 out of 10 for seriousness. I can't see moving forward this current set up continuing.... I would not be surprised to see the US military or government take control of this backbone section of the internet.
As soon as you get an update on your phone or computer, immediately update the patch.
Stay safe peeps.
Related post #7
Apparently there’s a patch for the critical PHP vulnerabilities but a few things that are alarming.
1) Many websites that use php with sensitive information are simply abandoned. There will be no upgrade. That means they’re going to get pwned and leaked. That’s a LOT of the internet
2) This requires active participants to upgrade their sites that even know about this vulnerability. If you’re on X you’re at the tip of the tip of the spear. Most people don’t know about this.
3) Anthropic says that this is ONE of SEVERAL critical vulnerabilities that they have found. Which means there’s more chaos coming.
TLDR: A large portion of the unmaintained internet is about to be pwned and god help us all or something like that.
Related post #6
You're right 🎯🎯
Every time you type your password into your bank, Apple, or Google, you see that little lock icon in your browser. 🔒
That lock is the only reason you know you are talking to the real company, and not an imposter stealing your money.
And today, that entire system almost collapsed because of an unbelievable corporate blunder.
Here is what just happened in plain English:
To keep the web safe, the internet relies on a handful of official digital "passport agencies" called Certificate Authorities. Their entire job is to stamp websites as genuine.
To forge one of their stamps, a hacker would normally have to guess a secret master code that is 116 digits long. It would take a supercomputer billions of years to crack.
Today, one of the biggest official authorities on the planet pushed live master codes that were literally:
4, 56, 66, 115.
You read that right. A toddler guessing random numbers could have unlocked the entire internet's master vault.
With those numbers, anyone could create a fake website for your bank or government, and your computer or phone would tell you: "Yup, this is 100% official and safe."
The worst part?
The tech world spent 30 years telling us that putting our trust in centralized corporate gatekeepers was safe.
Yet the entire world's security was brought to its knees because one company pushed test homework into production and forgot to check the locks.
You cannot patch human incompetence across billions of devices. You have to remove the middlemen entirely.
Real digital security cannot depend on corporate trust cartels. It has to be governed by unbreakable mathematics.
See the signal. ♾️
Related post #3
In April of 2025, eMudhra (an Indian Certificate Authority), published 8 intermediate CA keys which were so weak that a small child could guess the numbers in a few seconds.
One of the private keys was, literally, 4.
Just… 4.
This massive problem was not made public until October 17th of this year, when it was discovered by an anonymous guy on the Internet who goes only by “Wayne” (like “Cher”…. but… “Wayne”).
What this means in practical terms: It has been trivially simple, for the last year and a half, to create fake “secure” HTTPS certificates. (One person even created a fake HTTPS certificate for a Google.com subdomain.)
It took Mozilla 3 days, after learning about this (from “Wayne”), before they updated their certificate list (which many open source projects — including curl and Python — rely upon).
As of this moment, many systems are still vulnerable (including macOS).
Related post #2. These are the "elite human capital" from India that just fucked the internet.
Gross incompetency from Indian certificate authority eMudhra.
You had one job: generate a 384 bit private keys and instead you used: 4, 56, 66, 115, 155, 156, 230, and 237.
This allows attackers to issue certificates for any websites.
Embarrassing that it’s a family business run by largely computer illiterate people. Only 1 of the 3 have a remotely computer-related background and even they never actually worked a technical job in their life. If you look at the LinkedIn, their tech team is young, from tier 3 education and paid sort of bottom barrel.
Imagine how many attacks you can design with AI given the existence of this genre of gross negligence.
Related post #1
I'm currently gathering enough info to make a big post about this unfolding cyber security debacle. Some are calling it the day India killed the internet.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Did the memo go out on betting on the @raiders next week against the Rams?. Very odd that two different betting apps ran almost the same post. Hmmmmm.
Is this the most ratio'd post ever? 7.7K replies to 191 likes? Bro, it's 2026. Just take your shot in private. Nobody wants to see this on the TL.
My only Political post for this midterm election in 2026.
I am going to agree to disagree with Kip as usual.
-Tourism is down due to reduced tourism from both Canada and Mexico, and the ongoing high energy costs from the Iran war. Joe has no control over federal level policies that negatively effect Nevada.
- Far left Canadians are throwing a tantrum due to Trump trying to normalize the trade imbalance between the US and Canada. Long term this isn't as issue as the vast majority of Far left Canadians are boomers, and will be dead in 10 years.
-Unemployment rates in Nevada have averaged 6.57% over the last 30 years, so a 5% rate is over-performing the historical average.
-Housing costs are both a local and state issue, mostly county and city level via zoning laws. There is little that the governor can do to move the needle on housing costs, especially due to the fact that the federal government owns 84% of the land in Nevada.
-The healthcare issues stems from the lack of long term planning at the county and city level, and the lack of spending on hospitals. Having only 1 major university hinders the ability to produce doctors, and the city doesn't attract enough high caliber people to live here. There are a host of reasons why this happens, which I won't dive into on this post.
-The public school issues stems not from the lack of funding, but from the students themselves. Kip has the typical "blank-slate" liberal worldview, were everyone is equal and the only roadblocks to achieving success is social-economic issues. Joe approved an additional 2 billion in funding for #CCSD, which did not improve any tests scores or move the needle on graded metrics in the school district. Most of the money got sucked into the black hole of "admin costs", and not into actual increased spending per student or hiring more students. This current crisis is unfolding while the total number of kids decreases each year in the county. The real solution is to break up CCSD into at least 3 pieces (NLV, LV, Henderson), and give more choices to parents to have their kids out of public school. I myself have both of my kids in public schools and firsthand see the failures of CCSD, mostly from trying to tailor everything around the bottom 20% of students that attend the schools.
-Both data centers and flock cameras are a problem, and both parties endorse them. BOTH parties support them. And once again, both the county or cities could block them.
I want to end with two notes. First, the governor vote is the most important one this election cycle in Nevada, hands down. Lastly, I know people have the attention span of a gnat, but try to think back to the craziness that was the Covid-19 years with a Democrat at the governor position. I remember all the crazy rules, the shut down of the strip, the uncertainty of your jobs, the complete failure of the state to do anything correct. Unlike Kip, I am a union worker, and saw the permanent elimination of thousands of high paying union jobs with Sisolak. You can't take that risk with Ford... he has even more "Far Left" views than Sisolak has. While Joe hasn't been perfect, he has vetoed over 100 horrible bills passed by the #NVLG, protecting the majority of Nevadans from the tyranny of the radical left that controls the legislative branch in Carson City.
A quick story from yesterday.
We had a room buy out at the lounge I work at, so I unfortunately had to kick everyone out by 6pm as management wanted the room empty by then even though the party didn't start until 7pm. It sucked as we were busy with the Dodgers/Brewers game on.
So of course I took an EO as the swing bartender came in and the bar was closed, so I headed to Virgin as I had my weekly $10 in free play to use. I played a different game than normal this time and got the 4 aces on a 5x multiplier for $200. I'm not sure why I held the AK suited versus the 88s as that is the proper cards to hold, but it paied off for me. I'm currently at their level 2 card. I don't think I will play enough to move up past this point. Good session!
#vegas #vegaslocals
This post got some spicy replies and comments. I had to do my usual and block some trolls, but let me expand on my thoughts as I typed the post below quickly on lunch break on my phone.
First off, let me reply to some of my haters. First I got called a "boomer"... lol, just search "boomer' under my profile and you will see that was a misread of the room.
Then I got called a bad person because I gave an honest and rational take on the attendance system. Both sides get what they want, the employee gets a very lenient attendance policy, and the company gets a very black and white way of firing bad employees.
Then I got called a "company man" and company boot-licker, etc. The readers must of missed the "shop steward" part of my post. A little back story here- I have been a shop steward since 2007. I have saved at least 75 employees jobs, and had hundreds of write ups either tossed out or reduced. I also was involved in the 2007, 2013, and 2018 contract cycle, where I voluntarily missed weeks of work unpaid to make sure the employees got a good contract. This comes on top of being in at least 50 protests on the strip or downtown. It's ironic that I ran into Jedi Riches post on my break as I had been pulled into HR at noon to represent an employee that had been placed on suspension. I am very pro private sector union.... not so much for the public sector. The fact that I got called out for being pro company is comical. Comical I tell you!
Circling back to the post below... I stand on what I said. You can be late 24 times over a 12 month period before you get fired. You can be late up to 4 hours, and it still counts as only a 1/2 point. You can call in up to 4 days on 1.5 points. We get a ton of vacation (4.4 weeks) after 12 years to use for events. Some places have Extra Days Off (EDOs) that you can use to get time off in advance that is separate than vacation time. And there are "No times", which is another way of getting time off that certain companies do where you can call or text the bosses before the daily shift calls (7am and 3pm), and ask for the day off and if they can cover it with the extra-board, they will call or text you back and you have the day off. I've never worked anywhere that gives so much opportunity to be off of work. And I haven't even mentioned FMLA or ADA's, which is another completely different vehicle for time off.
There are many employees that work part time by choice for years, decades.... especially the older employees that don't need to work as much because they have low bills, or just work for the insurance, which you need only 30 years a week to qualify for full coverage without any co-pays.
And unlike other retail or service jobs, these union strip jobs are carriers. You can work it your whole life. I got hired in at 26, and will retire at 62. What sort of job can you get in 2026 without a college degree that pays well, has almost unlimited union protection, free paid hour lunch, free heath-care, pension, guaranteed 40 Hr work weeks, 4.4 weeks of paid vacation after 12 years, and seniority and bidded stations and days off. ALMOST NONE. All you have to do is show up to work on time and do your job. It's a good deal.
P.S. I almost forgot about Early Outs (EOs). I use these multiple times a week. You can have a breaker or another employee take you out, and you can leave early. Another way of having to work less hours. I usually leave 1 hour early at least 2 days a week, sometimes 3 days a week. More time off....
#Vegas #vegaslocals
She is a union worker as the 12 point attendance policy is part of the Culinary Union CBA. For those who do not work in the industry, it is a no-reason/fault attendance policy . You can call in for any reason, but the flip side is there is no rxcuse that grants you a free pass on getting points, including floods. In 2026, most companies use OKTA, so you don't even call in anymore...its all done online.
The issue isn't the flood, its the fact that she was already at 11.5 points. Especially since the vast majority of union employees have FMLA and can call in the alloted amount per the doctors grant. As a shop steward, I've seen this play out repeatedly in the past. The employee fights tooth and nail to get rid of the last point that put them over the limit, while ignoring the other 11 points. I don't know her back story, but the majority of call-ins are elective, and not necessary.
Most employees that have been termed due to attendance points were not good employees to begin with, or became accustomed to FMLA time off and pushed for too much time off with normal call-ins, or ran out of FMLA hours to use and continued to call in. It only cost 1.5 points to call in for 4 continous days. The policy is pretty liberal in its set up. I've never had more than 6 max in 22 years of work, and all the points reset to zero if you go six months of perfect attendance, and the points drop off after one year.
She has no one to blame but herself.
#Vegas #vegaslocals
Good article in the Las Vegas Weekly about A.I. coming to table game surveillance. On top of watching the employees to make sure they are doing their jobs correctly, and watching for cheating players, the A.I. software can properly rate table game players.
For those who play table games know that you never get rated or the proper tier credit vs playing in slots or bar top VP. Pit bosses normally log in you players card and buy-in, and sometimes log in length of play or how much you cash out. But pit bosses are mostly watching to make sure players aren't cheating and dealers don't make mistakes. A.I. can watch you play every hand, and rate your bet sizes, how well you play, and other "business intelligence".
Then they can custom tailor offers to match your profile. If I was a casino, I would give bad players tons of comps as they play poorly and have a low RTP versus an advantage player who plays perfectly or close to it. Brave new world here in casino land.
#vegas #vegaslocals
She is a union worker as the 12 point attendance policy is part of the Culinary Union CBA. For those who do not work in the industry, it is a no-reason/fault attendance policy . You can call in for any reason, but the flip side is there is no rxcuse that grants you a free pass on getting points, including floods. In 2026, most companies use OKTA, so you don't even call in anymore...its all done online.
The issue isn't the flood, its the fact that she was already at 11.5 points. Especially since the vast majority of union employees have FMLA and can call in the alloted amount per the doctors grant. As a shop steward, I've seen this play out repeatedly in the past. The employee fights tooth and nail to get rid of the last point that put them over the limit, while ignoring the other 11 points. I don't know her back story, but the majority of call-ins are elective, and not necessary.
Most employees that have been termed due to attendance points were not good employees to begin with, or became accustomed to FMLA time off and pushed for too much time off with normal call-ins, or ran out of FMLA hours to use and continued to call in. It only cost 1.5 points to call in for 4 continous days. The policy is pretty liberal in its set up. I've never had more than 6 max in 22 years of work, and all the points reset to zero if you go six months of perfect attendance, and the points drop off after one year.
She has no one to blame but herself.
#Vegas #vegaslocals
She was trying to cross a rushing flood because she was afraid of losing her job.
This woman told me she works @FlamingoVegas and feared being fired for arriving late- even with floodwater blocking her route.
Flamingo: please reassure your employees that nobody needs to risk their life to make a shift.