Barry “Big Bear” Fineberg

Assistant DC BMS ‘06 | Ball Oracle

[Barry “Big Bear” Fineberg @BigBear33779]

Kept the receipts… #jjmccarthy

Excited to see what JJ McCarthy can do this weekend

[AI Notkilleveryoneism Memes ⏸️ @AISafetyMemes]

This is the most serious 48 hours in cybersecurity history.

"Black October" they're calling it

It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*

SUMMARY OF THE LAST 48 HOURS:

YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):

1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan

MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):

11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached

Also serious:

24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea

[NFL Memes @NFLMemes]

Davante Adams with a full hamstring rupture (out 6-10 weeks) vs. Caleb Williams with a hamstring strain (out 3 weeks)

[The Giant Insider Podcast and Newspaper @GiantInsider]

Practice is over.

JJ McCarthy still on the field with Malik Nabers, Malachi Fields, and Darnell Mooney

[Barry “Big Bear” Fineberg @BigBear33779]

Not ball-related but this is insane

[Derek Devicemanager @IT_unhinged]

Security called me at 6:12 AM today.

"Patch every PHP server immediately."

I asked what happened.

"Two critical vulnerabilities. Remote code execution. No authentication required."

Cool.

How many PHP servers do we have?

According to inventory: 12

According to reality:

Nobody knows.

We found one running WordPress.

Three running old internal tools.

One under someone's desk.

Two inside vendor appliances.

A forgotten employee directory from 2016.

And a server named:

PHP-OLD-DO-NOT-TOUCH

Naturally, that one runs payroll exports.

Then we found a PHP 5.6 box.

I asked who owned it.

The documentation said:

BRIAN.

Brian left in 2019.

We called Brian.

He said:

"Oh wow, that's still running?"

Excellent.

By 8 AM, leadership joined the incident call.

CEO:

"Can hackers actually get in?"

Security:

"Potentially yes."

CEO:

"Without a password?"

Security:

"Yes."

CEO:

"Then why do WE need passwords?"

Not the lesson.

Finance asked if we could wait until the weekend to patch because downtime affects revenue.

Security explained that the alternative was letting strangers execute code on our servers.

Finance asked for a cost comparison.

At 9:17, someone suggested temporarily taking the vulnerable websites offline.

Marketing refused.

"Our campaign is live."

So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.

We finally patched everything we could find.

Then our scanner discovered another PHP server.

Hostname:

TEMP-PHP-2014

Uptime:

4,512 days.

Nobody knows what it does.

Nobody owns it.

Nobody can shut it down.

But every time we block network access, the warehouse stops printing shipping labels.

Security has classified it as critical infrastructure.

It is running PHP 5.4.

The vulnerability has existed longer than half our employees.

The emergency patch took four hours.

Finding out what PHP actually runs took eleven.

The internet isn't held together with code.

It's held together with servers everyone is afraid to turn off.

[Barry “Big Bear” Fineberg @BigBear33779]

“…Felt like I was protected and safe the entire time, offensive line did great, running backs were catching passes…”

Airing out the entire Vikings offense’s struggles 😭🤣

[SNY Giants @SNYGiants]

J.J. McCarthy was asked what he was pleased about in his performance today:

"Not pleased when you lose"

[Barry “Big Bear” Fineberg @BigBear33779]

Generational fleece job. Would be very on edge in lemonboy’s position right now

[Football Performances @NFLPerformances]

J.J. McCarthy gave the Giants a huge spark off the bench and nearly completed a 24 point comeback.

11/21, 243 PASS YDS, 1 TD, 1 INT, 26 RUSH YDS vs Saints

Can McCarthy keep New York atop the NFC East and lead the Giants to the playoffs?

[Barry “Big Bear” Fineberg @BigBear33779]

Total line change in New York. Went from Dart + skatt pack to 18 + Tyrone. Who would’ve thought 🤔

[Underdog NFL @UnderdogNFL]

Cam Skattebo on receiving zero carries this week, via @charlottecrrll:

"I got punished for what I did (from last week). I understand it so I gotta be ready when coach calls my name and that wasn’t today."

[Polymarket Sports @PolymarketSport]

🚨HISTORY: JJ McCarthy came into the game with 11 minutes left and the Giants down 34-10. He cut the lead to 34-27 and nearly tied the game.

He threw for 243 yards. The MOST in an 11 minute span in NFL HISTORY. WOW

[Cam @42Cyc]

JJ McCarthy SHINED in his Giants debut:

- 243 Passing Yards
- 26 Rushing Yards
- 1 TD, 1 INT

All in just one quarter.

[Barstool Michigan @BarstoolUofM]

JJ McCarthy came into the game with 11 minutes left and down 34-10.

He nearly won the game.

He threw for 243 yards. The most in an 11 minute span in nfl history.

LADIES AND GENTLEMEN, JJ MCCARTHY JUST MADE HISTORY.

[Cam @42Cyc]

JJ McCarthy with an absolutely ridiculous throw to Malik Nabers.

The Vikings gave up on him too quickly.

[Barry “Big Bear” Fineberg @BigBear33779]

How are they allowed to get away with this? Indiana who LOST moves up, and undefeated UCLA who beat Oregon (4-2) is ranked 21 spots below them.

Absolute insane SEC bias with 3 out of the top 8 teams having 2 losses.

[Barry “Big Bear” Fineberg @BigBear33779]

@maqadocious49 I’m not a fan of either of these teams dingbat. Just pointing out how ridiculously one sided the ref game was against Nebraska

[Barry “Big Bear” Fineberg @BigBear33779]

Just blatant missed holding calls every play against Oregon. This was the game winning touchdown pass. CFB fans and Nebraska deserves better…

#oregon #nebraska

[Barry “Big Bear” Fineberg @BigBear33779]

Bryce must be pissed right now

[Barry “Big Bear” Fineberg @BigBear33779]

RJ Harvey for 45 minutes just so JK Dobbins can vulture a 4-yd TD #nfl

[Barry “Big Bear” Fineberg @BigBear33779]

@BrandonPerna So this is what people are using the all 22 tape for 😭😂

[Barry “Big Bear” Fineberg @BigBear33779]

@NFL @RapSheet @MikeGarafolo