Gabriel Chertok 🇮🇱

Those limp dicks are about to find out what savvy film and television viewers have known for years. Character Actress Margo Martindale ain't afraid of NOTHIN'!

[Gabriel Chertok 🇮🇱 @iamcherta]

Más que nunca!

[Gabriel Chertok 🇮🇱 @iamcherta]

Todo el mundo te habla de loops pero nadie te habla de cómo hace un agente para tener un entorno de ejecución pristino cada vez que arranca. Ese es el elefante en la habitación.

Cómo hacés para que cada worktree tenga su propia BD, su propia cache, etc.

[Gabriel Chertok 🇮🇱 @iamcherta]

@marcel_mordezki @ONVentura Uruguay: Hold my conservadurismo

[Gabriel Chertok 🇮🇱 @iamcherta]

Ahora si. Estamos salvados…

[Sport 890 @Sport890]

“Todos los planteles se van a tomar 15 días y Peñarol lo iba a hacer. Decidimos que sean 8 los días de licencia. Es una de las cosas que estamos cambiando”

🎙️ Ignacio Ruglio en 100% Deporte

🔴 https://t.co/aifRxx3rLh

[Gabriel Chertok 🇮🇱 @iamcherta]

@solsticia_uy Y de defender terrotistas

[Gabriel Chertok 🇮🇱 @iamcherta]

Todos los días me llama un cliente chupado porque la AI no acelera lo que debería y todos los días me cuentan que no están dispuestos a cambiar como hacen las cosas ya sea porque no quieren o no pueden.

Y… no…

[Gabriel Chertok 🇮🇱 @iamcherta]

@ONVentura La AI es la madre del bike shedding, claro!

Time is money siempre que el negocio lo soporte, mi experiencia es que hay pocos negocios que realmente puedan aprovechar el valor que generan.

[Gabriel Chertok 🇮🇱 @iamcherta]

@Cabeza1979 Que será de la vida del Brandon… otro que se podría sacar un tipo de encima

[Gabriel Chertok 🇮🇱 @iamcherta]

I liked the redesign even when we are moving away from BC.

I also feel it was long due. Previous UI was felt like it was design for 19’’ monitors.

[DHH @dhh]

What it's like releasing a new version of anything.

[Gabriel Chertok 🇮🇱 @iamcherta]

Somos el cuadro peor trabajado de la copa. Hoy hicimos más paredes con los de rojo que entre nosotros.

[Gabriel Chertok 🇮🇱 @iamcherta]

Burrada total esto que dice tomando grupos marginales religiosos como muestras representativas y omitiendo el fuerte carácter socialista de la segunda Alyia que construyó kibutzim y organizó el país al rededor de estos ideales.

No asombra nada viniendo de La Diaria.

[la diaria @ladiaria]

En Paren el mundo el sociólogo Rafael Porzecanski habló sobre antisemitismo en Uruguay, y también sobre los conceptos de sionismo, antisionismo y la derechización de la sociedad israelí.

Paren el mundo es conducido por Denise Mota y Brian Majlin.
Lo podés escuchar en vivo de 15 a 17 horas.

Escuchá todos los programas de la diaria Radio en las emisoras 97.9 FM de Montevideo, 102.5 FM de Maldonado y 90.9 FM de Colonia.
También podés ver la programación en vivo en nuestro canal de YouTube.

[Gabriel Chertok 🇮🇱 @iamcherta]

@thdxr Speed is relative to the environment. If everyone goes faster you feel as slow as before or even more.

[Gabriel Chertok 🇮🇱 @iamcherta]

@GabrielLander3 Que sigue? Platos de loza? Aceptar propina en el débito?

Se perdieron todos los valores

[Gabriel Chertok 🇮🇱 @iamcherta]

@dhh Types are the tests you don’t need to write.

[Gabriel Chertok 🇮🇱 @iamcherta]

Algunos apuntes sobre Peñarol

[Gabriel Chertok 🇮🇱 @iamcherta]

Algunos apuntes sobre Peñarol

[Gabriel Chertok 🇮🇱 @iamcherta]

El ratio de signal vs noise de las personas de HR es altísimo a favor del ruido.

[Polymarket @Polymarket]

JUST IN: Bolt CEO Ryan Breslow fired the company’s entire HR team because they were “creating problems that didn’t exist.”

[Gabriel Chertok 🇮🇱 @iamcherta]

Todas las funcionalidades que habilita TuID deberían ser deshabilitadas. Vamos a tener culadas de SIM swap y por ende robo de identidad masivo.

[VECERT Analyzer @VECERTRadar]

🚨 CYBER INTELLIGENCE ALERT: GOVERNMENT DOXXING - URUGUAY 🇺🇾

⚠️ CRITICAL THREAT: SALE OF ACCESS TO STATE DATABASES AND LEAK OF YOUR DNIC AND YOUR IDENTITY (TuID)

[STATUS: UNDER INVESTIGATION / THREAT ACTOR]

The threat actor known as "lapampaleaks" has announced on clandestine networks and the Spear Forum the activation of a cyber intelligence and people reporting service specifically designed to track, profile, and exfiltrate private data of any Uruguayan citizen. As a technical demonstration, the attacker exposed the detailed identity dossiers of three high-ranking political and institutional figures in Uruguay, blaming the breach on security vulnerabilities at the Ministry of the Interior and the Agency for Electronic Government and the Information and Knowledge Society (AGESIC).

👤 Actor: lapampaleaks

🎯 National Infrastructure Compromised:

Databases and reports from the National Directorate of State Intelligence (DNIC).

Integrated records from the Ceibal educational and connectivity platform.

Massive extraction (scraping) of data from Uruguay's official sovereign digital identity system, TuID.

Persistent active access within state networks.

📊 ANALYSIS OF TECHNICAL CAPABILITIES (MONITORING SYSTEM)

Visual evidence demonstrates that the actor does not possess a simple static text dump, but rather an interactive web-based intelligence query tool (Cyber Intelligence Tool with FastAPI) that consumes structured state data:

Relationship and Kinship Mapping: The developed backend includes specific endpoints such as /family and /familypro (Get Family Pro), allowing buyers to automatically track the target's entire family tree, romantic partners, children, and business associates.

Exposed Sensitive Information Fields:

Full names, photographs of official identification documents, private phone numbers, and personal email addresses (e.g., Gmail, Hotmail).

Financial credit scoring data, bank accounts, and financial institutions (e.g., Scotiabank, Itaú), along with tax debt history.

Precise geographical details: Department, tax address, and residential geolocation data.

Political Doxxing as Proof: To validate the authenticity of the compromised system access, the threat actor published confidential intelligence dossiers belonging to the former President of the Republic.

🔍 STRATEGIC INTELLIGENCE NOTE

[VECERT ANALYSIS]: This incident represents a critical breach in the digital identity trust chain within Uruguay. By compromising or exfiltrating data from core systems—such as TuID (which citizens use to authenticate themselves with banks, government ministries, and for notarial procedures)—the attackers have not only violated privacy but have also enabled an ecosystem ripe for large-scale financial fraud, SIM swapping attacks, and identity theft for the purpose of opening fraudulent accounts. The claim of possessing "active access within state entities" suggests that the group may maintain persistence within internal government networks through compromised credentials or backdoors (WebShells) that have gone undetected by perimeter security teams.

🛡️ URGENT TECHNICAL MITIGATIONS AND RECOMMENDATIONS

🛑 Endpoint Blocking and Invalidation: CERTuy and AGESIC infrastructure teams are urged to trace anomalous requests originating from local environments or APIs that match the exposed FastAPI structure (`/familiares`) in order to identify the source server and take it offline.

🔒 Comprehensive Audit of the TuID System: Conduct an in-depth review of data exfiltration logs and batch requests on TuID and Ceibal servers to contain the data leak and revoke any compromised access tokens.

⚠️ Stricter Identity Verification: Banking and telecommunications entities in Uruguay must cease relying on static data (such as ID numbers, family members' names, or addresses) as valid factors for verifying a customer's identity during remote or telephone-based transactions.

⚡ MONITORING AND ASSESSMENT

🌐 Intelligence System: https://t.co/wk9bZJ2Nli

🛡️ Quickly assess your website's security at: https://t.co/YnDw1QjN9c

#CyberSecurity #Uruguay #Doxxing #TuID #Ceibal #DNIC #AGESIC #SpearForum #ThreatIntelligence #CiberAlerta #VECERT #Infosec #IdentityTheft #PrivacyLeak