I’ll tell you what I’ve told many customers before:
Creating a phishing pretext like this is likely to backfire and create multiple insider threat issues. Folks may sell their credentials just to spite you for your cruelty.
Of course criminals could use this pretext too, instead educate on it. Show an example of its likelihood rather than tricking people into thinking they’ll get a ring.
What I think is important is to continue caring about the things you love despite anything. The storm will pass. The chaff will be blown away. Good work will continue standing.
man, @officialmcafee would’ve been so psyched for the entire world finally latching onto PHP (until he would discover they are talking about some nerd shit and not grade-a alpha-pyrrolidinohexanophenone)
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: https://t.co/I88EQFrUHa
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
Now is a good time to audit the legal docs for all your banks, retirement accounts, brokerages, etc.
Do they have loss protections due to “unauthorized access”? How much? I was surprised to find some who have nothing.
Do it & make the necessary changes… soon.
There is going to be something you unknowingly or unwillingly rely on that was built by an idiot CEO that fired their dev team and decided to play the slots. The only one who loses is you.
This keeps happening and will continue to get worse. A couple months ago I found an insane vuln in a vibecoded IoT web frontend and took over their entire cloud env, device fleet, and could spy on the vendor in their own office. They never once noticed keys in their source code.
❗️ The CEO of a South African coffee chain vibe-coded an internal dashboard for all of his 132 stores, only it had one big flaw: all of the sensitive internal data was stored in the source code of the login screen.
The dashboard URL was discovered through employees posting photos of their laptop screens on Instagram.
The CEO said he had discovered Claude and was "almost certain" that software itself will soon "become free," they said.