nousql

[nousql @sqlrip]

@CTI__Updates cool color.

[nousql @sqlrip]

@hardyzboyzbk @ccsapphichile así se defienden los normies chilindios?????????????????? jajajjaaaaaaaaaj

[nousql @sqlrip]

@quelocq la puta de las camelias

[nousql @sqlrip]

@martinez_clips i hope sum yihadist catches u and tortures u lil christcuck faggot

[nousql @sqlrip]

@moonsuggsr @jimdmaaa @llorobrillo @m1_0__0 tengo, y si no tuviera preferiría estar solo a estar con una panda de simios ridículos como ustedes

[nousql @sqlrip]

@insanevideos she's cute asf, i would kiss and fuck her ye..

[nousql @sqlrip]

@noh_tahan @insanevideos fuck those racist pricks🏳️‍🌈🏳️‍🌈🏳️‍🌈🏳️‍🌈🏳️‍🌈

[nousql @sqlrip]

@megalomaniac222 @HEIL_JAY_Pilled @jokerwaffenfren and that’s fucking hot

[nousql @sqlrip]

@moooodie77 @ccsapphichile ?

[nousql @sqlrip]

@llorobrillo @jimdmaaa @moonsuggsr @m1_0__0 no te conviene entender.

[nousql @sqlrip]

@llorobrillo @jimdmaaa @moonsuggsr @m1_0__0 “tudbo papeada jijijiji ai ke disa aoda voi a fdexead ke me gdoomeadon en twiter i desidle insed a dod ombded ke no lod viodadon pdostituiedon y deventadon seksuadmente komo aminmuhhh”

[nousql @sqlrip]

bruh

[John Althouse @4A4133]

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...

The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.

- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.

- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.

- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.

These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.

https://t.co/AYUgNsrA0f

[Α Ω Programmer @OmegaNekoSimp]

HOLY SHIT

[nousql @sqlrip]

@moonsuggsr @jimdmaaa @llorobrillo @m1_0__0 que desagrado ver como se apoyan entre mogolicos y se celebran las autistadas que sueltan

[nousql @sqlrip]

@jimdmaaa @llorobrillo @m1_0__0 que pasa mi amor

[nousql @sqlrip]

@moonsuggsr @llorobrillo @m1_0__0 @jimdmaaa yo no tengo esos objetos en mi casa.

[Antonela E. Arenas @teffyantonelita]

¿Saben que es lo verdaderamente grave?

Que se pueda ver la cabecera con la versión exacta. Más allá de que haya versiones viejas.

Una de las medidas más básicas de hardening es justamente apagar la exposición de versión.

Desde el vamos que cualquiera pueda escanear y ver la versión exacta habla de la nula ciberseguridad de los organismos estatales.

[juan josafat ben-ezra @blascubass]

Soy un nacionalsida chilindio y apoyo todas las dictaduras excepto la chilena

[4latte @44latte]

-----BEGIN PRIVATE KEY-----