We have labels on things for a reason. It's not political to say whats in your product it's informative, it's political for YOU because you don't like the reaction of the customers you're trying to convince to spend money, and they're literally telling you why they don't like it.
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
I'm playing something very different today, #SurvivingMars! A Sci-fi City Builder/Survival game. Something tells me I may not be doing a lot of *that* right away...
https://t.co/aqadt1QXHp
Kenny's dad was genuinely one of the coolest dudes. In few of the times I had to share a chat with him, his curiosity for the medium of entertainment we occupied as a group was always questioned with genuine intrigue for what his son was so captivated with. Kenny carries that curiosity into every day of his life because of him. Please send @unrooolie some kindness in what is likely one of the most challenging moments of his life. Thank you.
It's #FinalFantasy Friday and today will likely be the penultimate day of my return to #FinalFantasyVII! Expect some incredible moments, one of which I've been waiting this entire playthrough for.
https://t.co/aqadt1QXHp
@CarlosSaraiva17@Albg_1 I don't even think anyone really loves contact damage. I just think that as good as Hollow Knight and Silksong are, there's a lot of people that can't accept that they're not perfect.
Will things into existence…
A modern Strider game by Capcom that’s a 3rd person action title with music by @Mick_Gordon
A Capcom take on NinjaGaiden/Revengeance that’s driven by the music.
#Marvel's #Wolverine is genuinely pretty damn enjoyable! Combat is fluid and the story is at least intriguing. I'm curious to see if it pans out how I think it might and I think I'm about 50% through, so let's finish it today!
https://t.co/aqadt1RvwX
im sorry man, chanting "USA, USA, USA" while someone gets assaulted for confronting a pedophile is just too on the nose for me when it comes to describing this current movement.
If you know me, then you know I'm an #XMen fan. I grew up loving those characters and what they fought for...so we're giving #Marvel's #Wolverine a fighting chance!
https://t.co/aqadt1RvwX