@IENouwen Nu niet, maar hadden ze in de jaren '90 massaal in het Nederlandstalig onderwijs geïnvesteerd, dan was er een grote groep die zich in beide kon bewegen. Geen idee of het een referentie is voor jou, maar prinses Elisabeth is minder 'franstalig' dan haar familie
“Let me die,” American photojournalist Heidi Levine repeats to journalists Jasper Nathaniel as they try to outrun masked Israeli settlers who attacked her on Friday while she covered the olive harvest in the West Bank village of Abu Falah, near Ramallah.
Around 80 settlers attacked Palestinian olive harvesters in the village, AP reported. The Palestinian Red Crescent said it treated six people injured in two attacks in Abu Falah.
Levine, a freelancer for the Washington Post, told the Committee to Protect Journalists that the settlers knocked her down and kicked her for at least 10 minutes, even after she identified herself as an American journalist. They stole her camera, phone and bag. She was eventually taken to a hospital in Ramallah.
"The IDF provided cover, with tear gas and machine guns, while the settlers beat" Levine "nearly to death," Nathaniel wrote, adding that soldiers then shot a Palestinian bystander and aimed their guns at and shoved paramedics trying to treat him. AP photos and circulating videos show Israeli soldiers standing over a wounded Palestinian man after they shot him.
Andrey X, an activist also at the scene, said a Palestinian man "saved our lives from the settler-terrorists who attacked the olive harvesters and journalists” armed only with a slingshot.
Warhound, the brain child of Ben Lamm and Palmer Luckey, emerges from stealth to genetically engineer dogs for military and law enforcement.
https://t.co/Por7hr92K2
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.