Internet User @InternetUser_1

retard with a phone Joined September 2024

Tweets

2K
Followers

109
Following

436
Likes

7K

realayesha⋆˚꩜｡ @notrealayesha

2 days ago

transphobes can stay mad and cry about it they’ll never serve like SUMMER DIRX.

54 468 10K 515K 489

24 111 5K 44K 102

View Details

NEET @NEETOCRACY

3 hours ago

Indians finally start calling plumbers. But then they start haggling over every cent. Then refuse to pay when the work is done.

I run a small plumbing company. The second I hear an Indian accent, I hang up. First off, they always call outside of business hours. I’m in bed at 9PM, why couldn’t you call me earlier? No manners. No politeness. Extremely rude and demanding people. Then they try to haggle

288 537 11K 264K 200

2 2 108 4K 6

View Details

Internet User @InternetUser_1

a hour ago

One of the most interesting things about African warfare is it’s all rifle based because they’re too stupid to work artillery

Rolfy Martínez @RolfyMartinez

a day ago

IMAGENES DE COMO SE ESTAN PREPARANDO LAS BANDAS HAITIANAS CONTRA LA OFENSIVA DE BUKELE***

837 177 2K 533K 351

0 0 0 6 0

View Details

Marcus Hutchins @MalwareTechBlog

22 hours ago

I'll be the first to admit I'm mediocre at exploit development, but I am in contact with enough extremely talented exploit developers to say this for certain: Anyone claiming they were "easily" able to generate a working php2shell exploit with AI is either: a) a world-class exploit developer with an extreme case of imposter syndrome. b) currently looking at some very confident-sounding but wrong LLM output. I'm rather certain it's the latter based on the number of AI-hallucinated exploits I've seen posted on GitHub. Threat actors are also blasting my honeypot network with "php2shell" exploits that not only don't work, but aren't even within 10,000 miles of anything to do with how the exploit actually works. I've seen the same technique from the attached image in multiple alleged "php2shell exploits", including one on GitHub with over 100 stars. Problem is, it's not php2shell, nor is it even a vulnerability at all. It's a technique known as "session poisoning", which can be leveraged to exploit local file inclusion (LFI) vulnerabilities in PHP apps (not PHP itself). The only thing it has in common with CVE-2026-109618/CVE-2026-109619 is they both use the "PHP_SESSION_UPLOAD_PROGRESS" feature. And mitigation advice for both issues reference setting "session.upload_progress.enabled" to "Off". People are shoving loose details of the vulnerability into LLMs, the LLMs are keying in on the "PHP_SESSION_UPLOAD_PROGRESS" string, then generating session poisoning code that has nothing to do with the actual CVE. And because the people doing this have absolutely no idea what they're doing, they're confident enough to post their "proof of concept exploit" to GitHub and share it on social media. So if you see people talking about "session poisoning + LFI" it's likely their LLM hallucinated an exploit based on a 2018 blog by Orange Tsai talking about a local file inclusion attack vector. What's even worse is that "security researchers" are then using LLMs to triage these exploitation attempts, falling victim to the same hallucinations, then confirming there is ongoing mass-exploitation (there currently isn't). The actual real exploit is very difficult to exploit, and so far I've not seen anyone successfully get it working on more than a handful of PHP version with highly-specific configurations. LLMs are useful tools in the hands of skilled professionals, but for others, they're often just a Dunning-Kruger accelerator.

126 519 3K 280K 1K

View Details

Internet User @InternetUser_1

7 hours ago

Watching an Indian try on boots at Red Wings today was probably the funniest thing I’ve seen in a minute. The guy had no concept of what separates work boots from casual/dress boots. It was like watching an alien encounter shoes for the first time.