Sydney Kelvin

Full stack, DevOps || Chelsea Fan 💙

[Sydney Kelvin @XcurityLabs]

@Benn_X1 You should've read the comments

[Rema Boy @fw_rema]

For how long will this continue 😭💔
Another with them still not back 😭

Lend your voice 🗣️
Save Nigeria 🇳🇬

[Sydney Kelvin @XcurityLabs]

@echo_vick I still say it. A lot of these folks have only built apps living on their portfolio/repo.
Don't even bother engaging them.

[Sydney Kelvin @XcurityLabs]

@einaecobt Except the fact that it does ...

[Sydney Kelvin @XcurityLabs]

@dev_olayinka I don't get the obsession with expensive laptops.
Doesn't make you a better developer. so long as you have the right tools. I had a 350k laptop with 32gb ram 6th gen. I still ran my jetbrains IDE comfortably working on multi projects for "Big" clients. It's a skill issue.

[Sydney Kelvin @XcurityLabs]

@festus90940 Majority of these guys haven't actually built any product being used by consumers.
They just have an opinion for fun.

[Sydney Kelvin @XcurityLabs]

@ATemiye @akinkunmi GPT does it. You actually get a transparent background

[Sydney Kelvin @XcurityLabs]

@mepba_suka They believe, they don't just want to accept the reality. Especially for women that are male centered.
They don't want to label their "Husband" as that kind of person.

[Sydney Kelvin @XcurityLabs]

@akinkunmi I see the post yesterday, I vex mute the guy

[Sydney Kelvin @XcurityLabs]

@smartnakamoura Things that never happened!!!

[Sydney Kelvin @XcurityLabs]

@echo_vick I legit thought that it was the dark mode version of the website, switched my phone to light mode and the UI is the same.
This is the worst website I've seen. No mobile view. Why should mobile view show a 403.

[prinleve @prinleve]

I’m realizing something interesting today
As a designer learning code.

Design Tools simplify work progress ,but developers think 🤔 in
Resuable components and structures
Knowing this is changing alot on how I design my layout visual.

Day 4 of learning front-end dev.

[Sydney Kelvin @XcurityLabs]

@Gidi_Traffic Where's the touch?

[Sydney Kelvin @XcurityLabs]

@echo_vick I refactored a NextJS frontend into Laravel to save on costs since backend was already on Laravel for a React Native app.

AI did everything without me touching a single code.
The Laravel backend was 100% vibe coded.

[Sydney Kelvin @XcurityLabs]

@echo_vick Ours was a Java backend running on tomcat.

The common ground I found is multiple reports of this issue had a NextJS frontend.

[Sydney Kelvin @XcurityLabs]

@devcharlieboy @echo_vick Very correct, it was NextJS that was the backdoor during findings in our case.

https://t.co/CjbPPZ5Vqr

[Sydney Kelvin @XcurityLabs]

@echo_vick We found out same on Friday on our dev instance. It's been running for months and we didn't even know until AWS notified us that the instance was being used for malicious activity.

Turns out they also setup a program that finds other machines they can exploit.

[Sydney Kelvin @XcurityLabs]

@ThisBabatunde @echo_vick https://t.co/CjbPPZ5Vqr

[Sydney Kelvin @XcurityLabs]

@echo_vick We found out same on Friday on our dev instance. It's been running for months and we didn't even know until AWS notified us that the instance was being used for malicious activity.

Turns out they also setup a program that finds other machines they can exploit.

[Sydney Kelvin @XcurityLabs]

@echo_vick The package was Xmrig.
There was a Go binary that runs to pings ip address to check for open ports they can exploit.
They had cron jobs setup too as backup Incase the machine restart it'll just spawn back up.

Nextjs was the backdoor (don't know which package yet)

[Sydney Kelvin @XcurityLabs]

@echo_vick We found out same on Friday on our dev instance. It's been running for months and we didn't even know until AWS notified us that the instance was being used for malicious activity.

Turns out they also setup a program that finds other machines they can exploit.

[Sydney Kelvin @XcurityLabs]

@Simon_Ingari CC doesn't qualify as micromanagement. It's for visibility.