Leaked image of an NSA implant 👍😁

Just me that really want's to get an RFID implant? Seems so usefull to just tap your hand against a sensor to login 😍

Apache Tomcat vulnerability "GHOSTCAT" allows read conduct files and implant web shells. All versions in the last 13 years vulnerable.

According to Security Researcher of Chaitin Tech : Due to a flaw in the Tomcat AJP protocol (the channel for Tomcat to connect to the outside, pass them to the corresponding web application for processing and return the response result of the request), an attacker can read or include any files in the webapp directories of Tomcat.

For example, An attacker can read the web-app configuration files or source code. In addition, if the target web application has a file upload function, the attacker may execute malicious code on the target host by exploiting file inclusion through "GHOSTCAT" vulnerability.

Apache Tomcat has officially released versions 9.0.31, 8.5.51, and 7.0.100 to fix this vulnerability.

Building an interface for a client between industrial power quality meters and a database that serves a webapp of data.

Client had heard of a way of sending data between meter and raspberry. From some manager in a big firm.

Currently we where using modus to connect the meter to a raspberry. This method was tested and proofen to work. Both devices could talk to each other in modbus.

Client kept demaning to use mbus, and was nog listening to any reason because the firm suggested it. In the end we end up going modbus to mbus to send it to the raspberry. There the mbus was converted back modbus. Because the meter could not communicate in mbus.

Really weird experience to program something so useless. But protesting about it was going nowhere and taking more time than the changes would take to implant.

I just found a vulnerability in my companies software.
Anyone who can edit a specific config file could implant some SQL there, which would later be executed by another (unknowing) user from within the software.

The software in question is B2B and has a server-client model, but with the client directly connecting to the database for most operations - but what you can do should be regulated by the software. With this cute little exploit I managed to drop a table from my test environment - or worse: I could manipulate data, so when you realize it it's too late to simply restore a DB backup because there might have been small changes for who knows how long. If someone was to use this maliciously the damages could be easily several million Euros for some of our customers (think about a few hundred thousand orders per day being deleted/changed).

It could also potentially be used for data exfiltration by changing protection flags, though if we're talking industry espionage they would probably find other ways and exploit the OS or DB directly, given that this attack requires specific knowledge of the software. Also we don't promise to safely store your crabby patty recipe (or other super secret secrets).

The good thing is that an attack would only possible for someone with both write access to that file and insider knowledge (though that can be gained by user of the software fairly easily with some knowledge of SQL).

Well, so much for logging off early on Friday.

!rant ?

So I had 2 Stack Overflow questions open about Rails / Webpack data communication, plus one issue open on Webpacker's github for 3 days, desperatly looking for an answer or an idea. No answers.

Today I talked a bit with my flatmate about my problem, dude gives me a perfect, easy to implant solution, and life seems to be bright again. Thank you Alex 😥.

Fuck you. Fuck them. Fuck everyone. Fuuuuck. I hope and dream of the day people become programmable cyborgs or stupidity is spliced out genetically. Or someone invents an implant that disables the vocal cords when stupid'O'meter goes to the red. Or a system that paralyzes the body temporarily as a fine for stupidity. Or an AI that takes over once shit is approaching unacceptable levels. SOMETHING! Some kind of an incentive for the fucking sheep to develop their little raisins. FUCK!!!?!?!!

Become a node on the Internet. IOM - Internet of Me.

1) Write complete systems in my head. Store them in my brain and upload when complete.

2) Provide users access to my brain systems and memories.

If I find a brain implant to do this I will send you the IP.

Here's an incomplete list of things my mother did to me:
- She insulted my body when I was 13. She told me it was weak and feminine. I identified as a boy back then, and I was going to the gym.
- She told me my face was ugly because of acne.
- She shamed me for having better vision than her.
- She shamed me for having longer eyelashes than her, the told me I looked like a girl.
- She always wanted me to learn everything and have all A's. When I got B+, she destroyed me mentally every time. When I got C, this was a catastrophe. Yet, if I told her she was wrong about mundane things like how many volts there are in an outlet, it was me who's in the wrong, despite me having an A for physics. There was no contradiction here in her eyes.
- She forced me to carry heavy things as a punishment. At the age of fifteen, I had an inguinal hernia. The surgery was needed. After that, doctors told me (and her) that I should go easy on carrying heavy things for a month. She didn't listen and forced me to carry heavy things again after two weeks. I had another inguinal hernia. Now, I needed a much more invasive laparoscopy to implant nylon webbing. Because of all of that, now I have messy, ugly scars all over my belly. Guess what happened next? She shamed me for having them!
- Since I was 18, even though I was studying in the uni, she demanded money for rent, for me living in my parents' house I grew up in. The sum she demanded was 27x my scholarship money.
- When I broke my toe, it was obvious that I broke it. It was swollen, twice the size of a normal toe, for two weeks straight. She told me to quit whining and go to PE/Taekwon-do lessons she forced me to attend.

It was a little Java Swing Application for my friend who had to maintain a little notebook for his insulin values.
The device he used to read his values, saved them as a csv-file, so it was pretty easy to map them to a readable format, so he didn't have to maintain that notebook.

He never used the App. He got an implant that manages it for him.

!rant (semi-dev)

Just learned the military regulations probably won't prevent me from getting an NFC implant because it's invisible so they don't give a damn!

Oh the adventures and hacking that can be! Think I'm gonna do it.

I'm getting a NFC tag implanted in my hand in Friday by the founder of dangerousthings.com

I'm a little nervous

I know what my e-mail address says... but I have to say, the integration of AI with the code completion in Xcode Version 16.2 beta 2 (16C5013f) is so good it is scary. It is like it is reading my mind. I'm getting nervous about getting an MRI "Sir do you have any metal in your skull?" Me: "Oh god, did they implant some shit for Xcode to read my damn mind... this is going to friggin hurt!"

But seriously, I'm not at all a Swift fan but I have to say that with this AI auto complete, it is like having a "yea, this is how you normally would do this, how about we do this here" helper in the Mac.

But since the Xcode windows are all these dumb ass file browsers instead of document windows, I'm going to maintain: Xcode (still) Sucks... but a little less with this shit-hot AI code completion!