Mauro

Game Artist.

[Mauro @nichtzkay]

#PortfolioDay I'm a hardsurface 3D game artist
More stuff coming up soon™ :-)
https://t.co/Y94AxGOP8r

[Visegrád 24 @visegrad24]

🇺🇦 Residents of a village in the Kharkiv region welcome a Ukrainian pilot returning from a combat mission

[🇺🇸𝗢𝗹𝗱 𝗦𝘂𝗯𝗺𝗮𝗿𝗶𝗻𝗲𝗿⚓️ @USN_Submariner]

"Good morning, gentlemen, the temperature is 110 degrees."

"Holy shit, it's Viper!"

[むしゅ @ExiledSeraph6]

Rafale M night landing on Charles De Gaulle

[𝐬𝐨𝐯 @sovietsoleri]

Su-35S filmed from a Su-30SM

[⁵⁄₉ @fiveoutofnine]

So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and https://t.co/QlOXb3COq3 went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

[GmitU - Gott mit Uns @Gmit_U]

Junkers Ju 87B-1 "Stuka" recién salido de fábrica realizando pruebas estáticas de armamento y alineación de miras, 1939. #segundaguerramundial #sgm #historia #ww2 #wwii #sgm

[Destroyer Escort @Destroye83]

Argentine Mirages

[Darko Šupe @darkosupe]

We’re live, let’s gooooooooo

[AYI @ayi_sanchez]

More blends!

[The Culturist @the_culturist_]

Destroying things is quick and easy.

Creating things is slow and difficult.

[Eagle Dynamics @eagledynamics]

We are also taking a closer look at the real MiG-27K, the most advanced strike variant of the Flogger to serve with the Soviet AF. From its swing-wing MiG-23 origins to its final combat sorties over Afghanistan, discover the story behind this iconic aircraft in the newsletter.

[J.J. @kadonkey]

usmc D hornets and a B lightning ii (santiago)

[Prep Propaganda 👔 @prep_propaganda]

Monitoring the situation

[s&box @s8box]

"Things out here listen. Some of them hunt by sound. One of them has learned to speak in your friends' voices." ☢️🚧⚠️

Have you jumped into Gamma Team yet? Play it with friends on s&box.
https://t.co/kanigKD3wK

[Mauro @nichtzkay]

@darkosupe just waiting for an agent to social engineer your agent into something malicious, great!

[s&box @s8box]

The citizen is dead. The human is now the default choice everywhere. The model still exists in the game and so games that use it will keep using it, but it's no longer visible in the menu or the avatar editor.
https://t.co/lf8CZqHTgx ⬅️

[‎Gabe Follower @gabefollower]

Garry Newman announced that S&Box is going free to play towards the end of the year. Everyone who already bought it will get a bunch of exclusive Steam inventory items, with extra ones for those who paid $20 instead of $10.

Facepunch is also fully removing the Citizen model, turning the Play Fund into an application-based greenlight system, and moving maps to the Steam Workshop.

In the post, Garry admits the platform "is not well liked", that they focused on the engine instead of the game, and that the Sandbox game will now get Garry's Mod parity with more NPCs, vehicles and addon support.