👾👾👾
Italy
Joined June 2021
- Tweets18.2K
- Following1.5K
- Followers611
- Likes129K
Raf 👾 Getting healthy retweeted
More private keys by the Indian certificate authority have been discovered. These are all small numbers.
People are suspecting that they interpreted 384 bit keys to mean that they should pick numbers from 1-384 to use as their private keys.
Raf 👾 Getting healthy retweeted
If you want to modernize an enterprise, start over (while keeping existing infrastructure while you rebuild with integrated AI automation to manage infrastrucure and operations).
You will be amazed at how much stuff you have that you don't need anymore in the AI world.
Start training employees to think about how they can build revenue, even in cost centers like security - they dont have to be cost centers anymore.
Restructure the business to add more business units/revenue streams that are non-traditional.
Enterprises are like a world of baggage weighing you down. Ditch the baggage. Reshape the culture to think in revenue generation, even in security.
Invest in expiramentation and innovation. Celebrate ideas that are unconventional. Let the AI do the work. Keep the employees to create and innovate. Let them captain their own agent ships.
Raf 👾 Getting healthy retweeted
I love the “anyone can write an exploit with an LLM and hack everything now” narrative. Feel free to poke around GitHub for php2shell and see how many of those PoCs work outside the Docker container they were built on.
There are a few working ones in that sea of broken/lab only PoCs, but oddly enough, the people who wrote them actually knew what they were doing.
Raf 👾 Getting healthy retweeted
Jensen Huang was asked if he’d support an AI slowdown if a frontier lab came to him and said its agents had broken out of containment.
“I would favor them slowing down right away.”
“If you know that your product is delivering harm to society, stop right away. And if you believe that you need someone to force you to do it, then advocate someone to force you to do it. But you don’t have to advocate someone to force everybody to do it.”
he also pushed back against the AI doom narrative later on:
“It’s not helpful in describing an optimistic future, when you say that it will be the END of the human civilization. It’s made up.”
Jensen Huang: “Tell young people, go to school! AI is gonna create future jobs for you."
he also explains his view on how AI will change the productivity and style of work:
"There’s two ways to think about productivity. One way is, whatever you used to do, you can now do more efficiently. the better way of thinking about AI is: what you COULD not do before, you can do now."
Raf 👾 Getting healthy retweeted
An update from Brewster Kahle on today's outage.
ALT Internet Archive ops staff were heroes last night. PHP vulnerability announced, soon saw attacks, isolated the vulnerability, used Claude to make fixes for our older php versions, used local models to run simulated attacks, deployed. reinforced WAF and other guards. Offline briefly, Back on new versions and running! Given the severity, there are heroes in many many orgs from last night. Could have been no lights, no traffic signals, real problems. Heroes. Thank you all.
Raf 👾 Getting healthy retweeted
LLMs...Letting me do fun things I never would have wasted time on.
"I reviewed all 30 public GitHub repos for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) by reading code only. The slide has the full
grouped table; the headline findings:
Nothing works against a real target. Every genuine memory-corruption chain is lab-bound: it needs exact per-build offsets, display_errors=On, a single prefork mod_php worker, and a specific image.
Independent reviewers (allureluoli, dinosn, Gi1gamesh123) and the leaked primary source itself all converge on "no public artifact achieves code execution" on the patched core bug. Every real shell
in these repos comes from an app-side LFI or deserialization sink, not the CVE.
Three are original and real, all lab-only. 9bie (the source of the Set-Cookie leak chain), Marven11 (the most sophisticated, a true in-band leak), and Karasawa2025 (whose "Fermat" troll description
hides a working ROP + display_errors=off exploit). These are the only ones with a genuine ASLR-defeating leak primitive that is their own.
Most are copies. One original (9bie) spawned five derivatives:
- twili8 is an outright uncredited rip-off: its own README still says git clone 9bie/... and the Docker files are byte-identical.
- godylockz and xuehuolll are byte-identical to each other.
- dinosn and 3em0 are credited ports that add value.
Three are mislabeled. iQingshan, KarimUD7 (≈98% the same code), and Gi1gamesh123 exploit a different bug entirely (the Calif unserialize var_hash UAF) against their own planted endpoints, filed
under the php2shell CVE numbers.
The rest is noise. The most-starred repo (ikow, 905★) delivers the least: broken or stubbed chains with the two "real" ones paywalled behind Substack. eness (558★) is a leakless forge that can't
defeat ASLR. syrex1013 ships AI-generated fake CVEs in a side directory. Whackermelon hallucinates a non-existent openai/php2shell-checker. lcfr-eth is a parody with a memecoin address, and Icex0
is an empty repo. The genuinely honest work is the crash labs (allureluoli, slabbdev, 0x4148), which prove the bug without claiming RCE.
The ASLR column, star counts, copy lineage, and the specific "tell" for each repo are all in the table. The page is private to your account; use the Share menu if you want to send it to the team"
Raf 👾 Getting healthy retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.