Discipline & Consistency.
Zombo, Uganda
Joined October 2021
- Tweets7K
- Following2.4K
- Followers2.2K
- Likes6.2K
Rwothomio Bob Jackson retweeted
We had a Linux server that showed two successful SSH logins from an external IP overnight.
The strange part was that there were no failed password attempts before them.
The attacker got in cleanly.
So I checked the SSH logs properly.
Both sessions said:
Accepted publickey
That meant we were not dealing with a guessed password.
I pulled the fingerprint from the logs and compared it with the keys in:
/home/deploy/.ssh/authorized_keys
There was only one key there.
And it matched.
The comment on the key was:
deploy@old-build
That name sounded familiar, so we checked our records.
The build server it belonged to had been retired months ago.
But nobody had removed its SSH key from this production server.
I checked the timestamp on authorized_keys.
The key had been sitting there since November 2025.
So this was not some new persistence the attacker had just created.
It was an old trust relationship we had forgotten about.
That was actually worse in a different way.
I checked the login history and confirmed both sessions came from the same external IP.
Then I looked for files touched during those sessions.
A backup copy of the application’s .env file had been created under /opt/api/.
That immediately raised another concern because environment files often contain things like database credentials, API keys and application secrets.
At that point we disabled the deployment account, removed the stale key, rotated the application secrets and started checking every other server that might still trust the same old build key.
The lesson from this one was simple.
Not every compromise starts with malware.
Sometimes the attacker just finds a credential or key that your own environment forgot existed.
Passwords expire.
Employees leave.
Servers get retired.
But SSH keys can quietly sit in authorized_keys for years if nobody is actually reviewing them.
That is why key rotation and access reviews matter.
The attacker did not need to break SSH.
We had already left the door open.
Rwothomio Bob Jackson retweeted
Your bravery, sacrifice, and commitment to defending our Flag will never be forgotten. We owe you and your families a debt of gratitude that can never be repaid. Your service and sacrifice will forever be remembered as a testament to your unwavering patriotism and selflessness.😭
ALT UPDF SOLDIERS WHO DIED IN BATTLE
Rwothomio Bob Jackson retweeted
📌
The Deputy Inspector General of Government (DIGG), Mrs. @AnneTwino, has urged the @MODVA_UPDF to establish a Military Ombudsman to provide a more accessible and civilian-friendly approach to handling complaints, noting that such an office would encourage the officers and men to report injustices without fear of military hierarchy.
@AnneTwino added that such an arrangement would encourage the rank and file to report any victimization or grievances. She made these remarks during a boardroom meeting with @MODVA_UPDF officials in Mbuya as part of activities to mark International Ombuds Day 2026.
The DIGG emphasized that the role of an ombudsman is different from the anti-corruption role, explaining that an ombudsman is an independent and impartial individual or institution appointed by the government to be a bridge between government and the citizens in order to settle grievances between citizens and public officials.
The Minister for Defence and Veteran Affairs, Hon. @KiryowaKk, noted that the military already had grievance-handling mechanisms in place but pledged to study the proposal further before any commitment was made.
The DIGG also indicated that the @IGGUganda had received complaints regarding the involvement of military officers in land wrangles with civilians.
Hon. @KiryowaKk reiterated the ministry's policy of zero-tolerance to corruption. He reassured the @IGGUganda delegation that all complaints would be thoroughly investigated, and commended the @IGGUganda for its sustained anti-corruption efforts.
The DIGG thanked the Chief of Defence Forces, Gen. @mkainerugaba, for his contribution in the fight against corruption, and for the visible infrastructure changes at the @MODVA_UPDF headquarters.
Discussions also focused on declaration of assets, incomes and liabilities by Senior Officers in the army as required by the law and as guided by H.E the President @KagutaMuseveni . The meeting agreed to develop a framework within which to address this provision.
The Deputy CDF, who is the Inspector General of the Ministry, emphasized that the welfare of both the military and civilian staff at the ministry was paramount and pledged to expeditiously address any matter that is drawn to his attention.
The Deputy IGG was accompanied by @IGGUganda Directors and Assistant Directors.
Rwothomio Bob Jackson retweeted
Message from the President African Ombudsman and Mediators Association on the occasion of commemoration of the #OmbudsDay2026 @AOMAOMBUDSMAN
Rwothomio Bob Jackson retweeted
After a thorough investigation led by the Chieftaincy of Defense Intelligence and Security, President Yoweri Museveni has decided to remove the notorious liar and fraudster, Stephen Nuwagaba, from state house Nakasero. He has also stripped him of the security detail he had been given by former commander of SFC, David Mugisha (Biddie): two presidential jeeps, a section of SFC guards plus a pistol and rifle.
The CDIS investigation confirmed all the details The Independent newspaper had written about Nuwagaba. The president was shocked to discover that Nuwagaba was neither a cyber security expert nor a victim of torture as he had claimed. Instead, the president found out, the guy is an extortionist using lies and fabrications to spread confusion and mayhem.
Nuwagaba, through his lies, distortions and misinformation caused the sacking of many loyal and diligent officers from state house and the SFC. I appeal to the president to reassess these staff and reinstate them to their jobs. I also appeal to the president to cause the release of Capt Amis Ainebyona who has been in jail for more than two years on false allegations of torturing Nuwagaba.
As a senior citizen of this country, I want to thank the president unreservedly for this bold and decisive step. I also want to thank him for calling me to explain to him the background of Nuwagaba and his lies and distortions.
The struggle continues!
Rwothomio Bob Jackson retweeted
They raped, tortured, and killed thousands of men, women, and children in Iran, Israel, and elsewhere.
This is how death arrived for the Khamenei regime.
Rwothomio Bob Jackson retweeted
📌📌
Tag the architects of the Protection of Sovereignty Act in this thread and remind them that the dollar has overshot the 4000/- limit and fuel costs 7000/- today @KiryowaKk @YNsibambi @FoxOdoi Gen David Muhoozi and that team which used to convene at Kabira club every evening #RejectSovereignityAct
Rwothomio Bob Jackson retweeted
Dr. Micheal Ego Atingi- Governer, BOU.
Master of science in economics, Doctor of philosophy…
We have such brilliant brains but unfortunately they don’t make the laws!
Rwothomio Bob Jackson retweeted
Arriving at church on Sunday to praise the lord because I have witnessed things
Rwothomio Bob Jackson retweeted
🚨First time I truly understood the meaning of “in the blink of an eye” 😳
Rwothomio Bob Jackson retweeted
The cameraman has secured his place in heaven. Bro really knows his job 💯❤️🥹
