On the caring continuum, I am right here.
Terran Empire
Joined December 2008
- Tweets31K
- Following700
- Followers712
- Likes68.1K
Rock Steadfastson retweeted
I feel like if Trump appointed his former personal lawyer to the US Supreme Court and that same judge then extended voting by two hours on election day, leftists would not be describing it as "saving democracy."
Rock Steadfastson retweeted
For anyone curious about what it actually looked like to kill a generation of functioning cars, here’s an actual video from 2009 and brief explanation:
The dealer first replaces the oil with sodium silicate solution. It’s a clear-ish liquid that crystallizes under extreme heat. As the engine warms up the solution begins to form small abrasive crystals in the oil system that shred the bearing and score the cylinder walls.
Within seconds of starting the car you can see smoke billowing from the exhaust, this is the crystals scratching the cylinder walls and leaving small grooves for oil and solution to leak past into the combustion chamber and ignite/evaporate, producing the white smoke.
Pretty soon the entire crankcase is full of crystals and freshly shredded metal flakes, the engine seizes. It took about 40 seconds in this video. Some engines reportedly lasted up to 7 minutes, but all were destroyed. That strikes me as sort of sad in a way, like watching a great warrior slowly lose a heroic last stand.
Now, this is the part that gets insanely wasteful. These cars were sent to federally approved recycling facilities where they had 180 days to sell the non-engine parts before they were required to prove that they had shred the entire thing into scrap steel.
But, in talking to a guy who ran one such facility at the time, he typically just sent them straight to the crusher. The timeframes allotted weren’t long enough to dismantle all of the cars, and even if you could, the marginal prices of the parts was greatly diminished. You cannot sell 1000 transmissions when only 50 went bad that year, they became worthless.
So just like that, in order to increase prosperity and save the environment, 677,000 entire running cars and trucks were turned directly into rebar worth a few cents per pound.
The entire Obama administration was like a chapter out of atlas shrugged.
Barack Obama was horrible in a million different ways, but he doesn’t get anywhere near the hate he deserves for destroying the used car market for an entire generation.
15-year-old cars with 150,000 miles that should be selling for $3,000 are going for $15,000. It’s abominable. Pure destruction and thievery.
Rock Steadfastson retweeted
Hello Alex Alex Alex,
Let me summarize the book UNELECTED in a nutshell.
The Industrial Revolution created a class of private citizens with unimaginable wealth. Many were reviled as robber barons (e.g., Rockefeller of Standard Oil). Others had a better image, like Andrew Carnegie.
These new rich decided because they had money, they had a responsibility to do good by the world. So they started building global philanthropic networks that could go into every country. In order to do so, they hired Department of State and Department of War and other state officials.
They quickly took over the country's education system starting in the 1920s to train them in the "international mind."
When the intelligence community truly sprang up in World War II, the IC hired from ... these same shadowy philanthropic networks. And after WWII, they all coalesced on the same goal: the best chance at achieving a human utopia is to bring the entire world to "democracy."
Except it turns out converting countries to democracy isn't so simple as just financing CIA coups. Did all those NGOs question their own assumption might be flawed - that not every peoples, not every culture and religion is compatible with "democracy"?
No. Instead, the Trilateral Commission in the 1970s concluded that a more technocratic route was necessary. And over many iterations - the Balkans and African adventures of the 90s, the Iraq & Afghanistan ventures, Arab Spring and color revolutions ... every failed iteration of "democracy" always resulted in the same conclusion: the people are dumb, we have to try harder, put more pressure on them, tighten the screws.
And now you have become fully self-referential. Anyone who disagrees with you is "authoritarian." Anyone who agrees with you is "our democracy." Voting methods doesn't matter. That the judiciary system blatantly stole the election doesn't matter.
And nowhere this is more obvious in your 30th anniversary publication.
In your 30th anniversary publication, you had an article from your longtime head of Open Society Fund-Serbia, Sonja Licht. She also happens to be one of the most decorated civilians in Europe and widely considered an expert in "democracy:"
🔹 Pro Merit Medal of the Council of Europe
🔹 Star of Italian Solidarity
🔹 French Legion of Honour
Her solution: "I believe the time has come for a responsible, courageous elite, those who care far more about addressing the genuine social problems than about election results. Only a political elite with vision, prudence and a focus on the general good—to whom the electorate, with their active involvement in public life, can cede part of their sovereignty in the elections... spearhead... our struggle to survive."
Read that again.
The idea of democracy as pushed by the head of one of your foundations is to literally stop "election results" and to have the public cede their trust to a technocratic elite.
End democracy to save democracy itself.
This is the final form of a project that started a hundred years ago to spread free markets and create global peace and instill self-governance throughout the world.
This is your legacy, Alex Soros.
Your father spent his life fighting Communism.
You, as his protege, will spend your life perfecting Communism.
In the name of "democracy."
Rock Steadfastson retweeted
Wow, this is an even more plausible theory for the purpose of the ancient Roman Dodecahedron!
I think she is onto it here.
Again with weaving, but this time it's with metal as well, the demonstration shows a pretty convincing match to the gold chain work found in ancient gold caches. And it's a process that would naturally use all the different widths of the holes, for the drawing and stretching of the metal chain. She gives two different size examples in the linked complete video.
It's also an explanation for why it would have been found in Roman military archeological sites, as it would work not only for metal chain, but for cordage as well.
youtu.be/lADTLozKm0I?is=4Zu-…
Rock Steadfastson retweeted
Imagine the Supreme Court stopping the count after polls close and ordering polls reopen for two hours ONLY in Philadelphia, Detroit, Milwaukee, and Atlanta, and you sort of get the scope of what's currently happening in Brazil.
Coming on the heels of yesterday's drama where the UK police arrested a 15-year old for making a politician look funny with rabbit ears, today we have the UK police descending upon Katie for talking about herself.
I was arrested, interviewed under caution for 2 hours by two sturdy lllllllesbians and my case sent to the @CPSUK for the crime of… ‘causing offence to myself’.
So much whining about Haiti from individuals who are not in Haiti but instead in the US, Canada, etc.
Happy to drive them to the airport if they want to fight alongside the gangs instead of grifting here as fake refugees.
Rock Steadfastson retweeted
ACTUALIZACIÓN DEL RESCATE A SOLDADOS SALVADOREÑOS EN HAITÍ.
La Policía Nacional de Haití y la fuerza multinacional ejecutaron un fuerte asalto directo contra la base central de la banda de "Chen Mechan" (cuyo nombre significa "Perros Malos" en criollo haitiano) en Santo, Croix-des-Bouquets.
Las fuerzas armadas lograron romper las barreras físicas e ingresar al cuartel general del grupo criminal; sin embargo, los pandilleros ya habían evacuado por completo el lugar justo antes de la llegada de los uniformados.
Debido a este repliegue, el operativo no logró localizar en ese punto a los cuatro militares salvadoreños secuestrados, quienes continúan desaparecidos mientras las tropas aliadas mantienen la ofensiva en la zona.
Mi contacto confirma que tres de las bandas más peligrosas de la llanura ("Lanmò 100 Jou", "Chen Mechan" y "Jeff Canapé-Vert") acaban de unificar sus fuerzas en un bloque de resistencia unificado.
Rock Steadfastson retweeted
あまり騒がれていませんが、中間CA証明書8枚の秘密鍵が漏洩・破られたというインシデントの方も、重大じゃないですかね。
ブラウザ各社が即日ブロックしたので「もう対処済みでしょ」という空気になっていますが、中身を見るとかなりヤバい話なんですよ。
まず「漏洩」と言っていますが、実態はもっとひどいです。鍵はECDSAで、公開鍵は「秘密鍵d × 基準点G」で作られます。dが巨大な乱数なら、公開鍵から逆算するのは事実上無理です。これがいわゆる楕円曲線離散対数問題で、ECDSAの安全性の根っこです。
ところが今回のdは、4とか56とか115とか、256未満の小さな整数だったんです。1から順番に試せば一瞬で当たります。つまり公開されている証明書さえ見れば、誰でも秘密鍵を計算できてしまう状態でした。
しかもこの鍵が作られたのは2025年4月です。約1年半、世界中の誰でもこの鍵を手にできたことになります。普通の漏洩なら「どこから誰に漏れたか」を追えますが、今回はそれすらできません。すでに誰かが使っていたかもしれない、という前提で考えるしかないんですよね。
で、中間CAの鍵を持っていると何ができるか。ざっくり言えば、どんなドメインの証明書でも「正規品」として自作できます。Googleでも銀行でも何でもです。ルートCAから信頼されている中間CAの署名なので、ブラウザは普通に信じてしまいます。
あとは公衆Wi-FiやDNS汚染、BGPハイジャックあたりで通信経路を押さえれば、鍵マークが付いたままMITM（中間者攻撃）が成立します。ユーザー側からはまず気づけません。
eMudhraは「エンドエンティティ証明書は1枚も発行していない」と説明しています。でもこれ、正直あまり意味がないんですよね。攻撃者はCAに頼まず、手元の秘密鍵で自分で署名すればいいだけなので、CA側に発行記録なんて残りません。CT（Certificate Transparency）ログに載せずに作ることもできます。CTを強制していないクライアントなら、それでも普通に通ってしまいます。
さらに地味に怖いのが、8枚のうち2枚がコード署名用だったことです。マルウェアに「ちゃんとした発行元の署名」を付けられるので、話はWebだけに収まりません。
「でも失効したんでしょ？」という話もありますが、ここも安心できません。
CRLやOCSPによる失効確認は、確認に失敗したらそのまま通すsoft-failの実装がまだまだ多いです。そもそも失効確認をしないものもあります。
ChromeはCRLSet、FirefoxはOneCRLという独自の仕組みで即座に止めたので、ブラウザは比較的大丈夫です。一方で、JavaやPython（certifi）、Goなどが抱えている独自のCAバンドル、古いOS、IoT機器なんかは、トラストストアを更新しない限り無防備のままです。MozillaとGoogleが中間CAだけでなく、署名元のルート（emSign ECC Root CA - G3）ごと信頼ストアから外したのも、たぶんこのあたりを見越してだと思います。
個人的に一番引っかかっているのは原因の方です。キーセレモニーのスクリプトのバグでHSM上に弱い鍵ペアができてしまい、名前が似ていたせいで人為ミスでそっちをCSRに使った、という説明でした。
CAの鍵生成って、監査人立ち会いのもとで厳格にやる、PKIで一番神経を使う手続きのはずなんですよね。そこでこれが起きて、しかも1年半誰も気づかなかった。CAの監査や運用の仕組みそのものへの信頼が問われる話だと思います。
サーバーや開発環境を見ている方は、念のためOSのCAバンドルと各言語のトラストストアを最新にしておくのがおすすめです。
emudhra.we-have-a-problem.co…
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X
Rock Steadfastson retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
The cat next door is in the window, with his head turned away from me. He is huddled up starving to death because I do not immediately get up to rescue him with tuna.
Once resuscitated, he disappears in a puff of satiety not to return until the next day.
We can only wish we had leadership like this.
Pou chèf gang yo ak manm gang yo k ap kenbe kat konpatriyòt nou yo an otaj ann Ayiti:
Mesye nou kidnape yo pa konbatan. Yo se teknisyen nan domèn avyasyon ki fè pati misyon nou ann Ayiti, nan kad yon misyon entènasyonal. Misyon nou an gen sèlman pilòt ak pèsonèl teknik, ki gen kòm travay prensipal fè evakyasyon medikal epi sove lavi moun, pa fè lagè.
Men, nou te kidnape yo yon fason lach pandan yo t ap retounen apre yo te fin achte manje nan yon makèt nan zòn nan.
Se poutèt sa, jodi a nou te lanse yon operasyon militè pou pote yo sekou. Nou gen yon sèl objektif: fè kat konpatriyòt nou yo retounen lakay yo vivan, san okenn mal.
Men, mwen vle pou nou menm, chèf gang yo, konprann yon bagay byen klè: atak jodi a pa anyen devan sa k ap vini si nou pa remèt toule kat otaj yo vivan.
Epi pa pran pawòl nou yo pou menas san fondman. Nou deja fini ak gang yo nan El Salvador, e nou kapab fini ak nou tou.
Nou toujou gen tan pou evite sa.
Remèt nou kat konpatriyòt nou yo vivan, san okenn mal, epi tout bagay ap retounen jan sa te ye anvan kidnaping lan.
Desizyon an nan men nou.
Rock Steadfastson retweeted
A Europa será destruída por mulheres que projetam naqueles animais a maternidade que cabia aos filhos que elas abortaram.
People are strange. So I was parked in front of my driveway on the street talking to my mother before she went home, when my neighbour across decided he wanted to go somewhere. Turned on his truck headlights, then when we didn't move, exited anyway, drove 80m down the road to
his friend's house for a few minutes instead of walking and then drove back.. and of course ended up driving over or knocking over his green bin. I got out to help pick it up but he picked it up already and seemed angry so whatever.
Rock Steadfastson retweeted
About a decade ago I became intrigued by the stupidity of the term “intersectionality”, at least as it was being used by left wing activists. It emerged out of critical legal studies, I reasoned, surely it couldn’t be completely retarded.
I had access to my schools limitless supply of academic papers, so I decided to read a few, just to understand the genesis of the term, to see whether / how it was being misapplied in a seemingly anemic way after it filtered down from the law faculty to the low iq street hustlers and racial activists.
I read the four most recent peer reviewed papers addressing the concept.
Almost 100 pages of reading and thus far all I had learned was that intersectionality was a “travelling concept”. As far as I could tell this was something akin to the sisterhood of the travelling pants, wherein the way it fits, looks and functions depends entirely on which member of the sisterhood is in possession of it.
Because I am nothing if not autistic, I then read the next previous four papers. And the next four. And the next four. . . .
Eventually I worked my way back to Kimberlé Crenshaw’s OG paper that coined the term in the late eighties. By this point t it was almost a year later (I said I was autistic!), and I had by now ingested almost 100 published, peer reviewed academic papers on intersectionality.
I have included two verbatim quotes straight from the horses mouth. Yes it’s really that retarded, no, there is nothing more to it. Yes LITERALLY EVERY LEFTIST THOUGHT TERMINATING BRAIN WORM IS LIKE THIS.
They are not theories, they are WEAPONS.
They cannot be anything but weaponised.
All of leftism is this, ad infinitum.
