BC INTERNET
Saved by @Alex1Powell

FLASH: "Emergency Directive 21-01 calls on all federal civilian agencies to review their networks for indicators of compromise and disconnect or power down SolarWinds Orion products immediately."-@CISAgov Read more:

 CONTD: @CISAgov is responding to an exploit of Federally operated @solarwinds Orion products by malicious actors. They Issued an Emergency Directive to federal civilian agencies to review networks & DISCONNECT OR POWER DOWN ALL SOLARWINDS ORION PRODUCTS NOW!
CONTD: @FireEye discovered an attack trojanizing @solarwinds Orion biz software distributing malware named #SUNBURST.
The attacker’s use multiple techniques to evade detection/obscure activity. The campaign is widespread affecting public & private organizations around the world.
CONTD: The trojan version of a @SolarWinds Orion plug-in codename #SUNBURST. After a dormant period of up to 2 weeks, it retrieves & executes commands including transfering files, executing files, profile the system, reboot, & disable system services.... more
CONTD: #SUNBURST hides network traffic & stores recon within legitimate plugin configuration files allowing it to blend in with legitimate activity. The backdoor uses obfuscated blocklists to i.d. forensic & anti-virus tools running as processes, services, & drivers.... more
CONTD: Worldwide Victims With #SUNBURST Distributed March thru May 2020. @FireEye has detected this malware in government, consulting, tech, telecom & extractive entities in North America, Europe, Asia & the Middle East & anticipate there are additional victims.... more
CONTD: After #SUNBURST gains access the attacker group disguise their operations moving laterally in the compromised network. The attacker maintains a light malware footprint, instead preferring legitimate credentials & remote access for access through the victim’s environment.
CONTD: If @SolarWinds infrastructure is not isolated:
-Restrict scope of connectivity to endpoints from SolarWinds servers!
-Restrict the scope of accounts that have local administrator privileged on SolarWinds servers!
.... more
CONTD: If @solarwinds infrastructure is not isolated:
-Block Internet egress from servers or other endpoints with SolarWinds software.
-At MINIMUM changing passwords for accounts that have access to SolarWinds servers / infrastructure.
....more
CONTD: If @solarwinds manages networking infrastructure:
-Review network device configurations for unexpected / unauthorized modifications. This is a proactive measure due to the scope of SolarWinds functionality.
CONTD: @SolarWinds’ Customers;
-425+ of US Fortune 500 co's
-All of top 10 US telecom co's
-All 5 branches US Military
-Pentagon
-State Department
-NASA
-NSA
-USPS
-NOAA
-DOJ
-Office of POTUS
-Top 5 US accounting firms
-100's universities/colleges
List: https://t.co/N202UZdyjC

More from Internet

Markus Amalthea Magnuson \u2744\ufe0f
Markus Amalthea Magnus...
@scifiagenda
I did more research into the Parler dump. What probably happened was not so much a "hack", but this: When Twilio/Okta shut them down, they just disabled email/phone verification to create an account. This means anyone could directly create huge amounts of accounts via their API.

Someone also found out that fetching Parler posts could be done by enumerating IDs (e.g 1, 2, 3) instead of random IDs that can't be guessed. Unclear if this was via the ordinary API endpoint, or that they found a separate one by monitoring app network traffic.

So you combine these two things and you can create a script to scrape all the posts on the entire platform, using a lot of different accounts to avoid suspicion. Anyone could download and run this script to spread it out over many IP addresses as well.

What I'm still not sure about is whether deleted (meaning flagged as deleted, it's common that services never actually delete data) posts could be fetched without any special handling.

The verdict: The people who wrote Parler are fucking amateurs.
INTERNET
Chris Fallica
Chris Fallica
@chrisfallica
Data drop! Some numbers, nuggets and trends for bowl season which I find interesting...

Miami has lost 9 of its last 10 bowl games and is 2-10 ATS in its last 12 bowl games. Oklahoma State has covered each of its last four bowl games, three coming as an underdog.

This is the first time since 2011 Texas is favored in a bowl game...

Wisconsin has won five of their last six bowl games with the only loss in that span a one-point loss to Oregon last year in the Rose Bowl. Each of Wake Forest’s last five bowl games have been one-possession games (6, 3, 3, 8, 6)...

Mike Leach coached teams are 1-9 ATS in their last ten bowl games (4-6 SU). Included in those ten games are four outright losses and a 1-7 ATS mark as a favorite. In the last five years, Leach’s teams have averaged 19.6 PPG in bowl games (28 is the high in that span)...
SOCIETY , INTERNET
Advertisement
Kyle Hanslovan
Kyle Hanslovan
@KyleHanslovan
Only 1 / 67 antivirus engines list SUNBURST backdoor as malicious - SolarWinds.Orion.Core.BusinessLayer.dll https://t.co/taaiUtSJzR #SUNBURST #UNC2452


SolarWinds' digital certificate hasn't been revoked yet.


The full compromised package is still being hosted online as well 😓 hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20574/SolarWinds-Core-v2019.4.5220-Hotfix5.msp


Job class within the backdoored #Sunburst DLL is pretty straight forward and aligns with @FireEye's analysis. CollectSystemDescription:


DeleteFile
INTERNET
Surya Mattu
Surya Mattu
@suryamattu
We’ve spent the last ten months building #CitizenBrowser, a project that aims to peek inside the Black Box of social media algorithms, by building a nationwide panel to share data with us. Today, we are publishing our first story from the project. /1

.@corintxt crunched the numbers and found that after Facebook flipped the switch for political ads, partisan content elbowed out reputable news outlets in our panelists’ news feeds. https://t.co/Z0kibSBeQZ /2

You can learn more in our methodology, where we describe how we did this and what steps we took to ensure that we preserved the panelists' privacy. https://t.co/UYbTXAjy5i /3

Personally, this project is the culmination of years of experiments trying to figure out how to collect data from social media platforms in a way that can lead to meaningful reporting. I’ve described a couple of highlights below 👇 /4

My first attempt was in 2016 at Propublica, when I was working with @JuliaAngwin . We were interested in seeing if there was a difference in the Ad interests FB disclosed to users in their settings and the interests they showed to marketers. /5
INTERNET
words are weapons \u26a1
words are weapons ⚡...
@vimoh
I have been a Substack and Patreon user for a few years now. And though more than one social media giant has, in recent months, expressed the desire to help writers and journalists monetise their audience, there are very good reasons to take these SOPs with a pinch of salt.

Because the reason Patreon and Substack came into existence was not the need for a new business model. It was as a cure for the old business model - an algorithm-driven ad revenue system that powered the attention economy. The attention economy turned audiences into scrollers...

...who were in it for the next viral hit. Quality of information suffered, the nature of discourse suffered, and as a result, democracy itself suffered. Much of this was enabled by the social media giants who are trying to copy the Substack and Patreon model right now in an...

...attempt to "put creators first". But what we must not lose sight of is that the Substack / Patreon model only emerged as a result of the bad practices the social media giants enabled. The algorithm made a toxic internet possible and they were what hit back. Today, multiple...

...podcasting tools video streaming services have donation buttons built in. But it was not always so. I applaud all attempts that anyone makes to help independent media not have to rely on ad money, but I am not going to ever be able to see Facebook's newsletter tool as a...
INTERNET

You May Also Like

Vibhu Vashisth \U0001f1ee\U0001f1f3
Vibhu Vashisth 🇮🇳...
@VIBHU_Tweet
VEDIC COSMOLOGY, also known as Hindu Cosmology, and cosmography are both interesting and inspiring. Today’s “modern” Vedic texts originated around 3,000 B.C.E. This is the oldest scientific and the oldest religious doctrine known to the human race.


Our current astronomy of the solar system and universe has its roots in Vedic knowledge. It only shows that man had advanced knowledge of astronomy way before our current civilization came into existence.
We are here to talk about the Vedic version of the planetary system,

starting at the top from the eternal planets to the temporary planetary system within innumerable universes in the material world.

Talking about “cosmic manifestation,” we need to incorporate both spiritual and material existence.


The spiritual realm of the planets is everlasting, and this will forever be beyond what the material universe can encapsulate. The spiritual realm belongs to the “super dimensional” or “anti-material” dimension. It means that it is beyond what we can perceive,


beyond time as a linear dimension, and the space of our vision and perception.

There are innumerable planets, all indestructible and forever lasting. That is what the Vedas say about the spiritual planets. Our concentration here is more towards the material side of things.
ALL
Patrick McKenzie
Patrick McKenzie
@patio11
Some people really benefit from hearing advice that everyone knows, for the same reason we keep schools open despite every subject in them having been taught before.

In that spirit, here's some quick Things Many People Find Too Obvious To Have Told You Already.

Your idea is not valuable, at all. All value is in the execution. You think you are an exception; you are not. You should not insist on an NDA to talk about it; nobody serious will engage in contract review over an idea, and this will mark you as clueless.

Technologists tend to severely underestimate the difficulty and expense of creating software, especially at companies which do not have fully staffed industry leading engineering teams ("because software is so easy there, amirite guys?")

Charge more. Charge more still. Go on.

The press is a lossy and biased compression of events in the actual world, and is singularly consumed with its own rituals, status games, and incentives. The news necessarily fails to capture almost everything which happened yesterday. What it says is important usually isn't.

Companies find it incredibly hard to reliably staff positions with hard-working generalists who operate autonomously and have high risk tolerances. This is not the modal employee, including at places which are justifiably proud of the skill/diligence/etc of their employees.
TECH
Advertisement
History Of Rajputana
History Of Rajputana
@KshatriyaItihas
**Thread on Bravery of Sikhs**
(I am forced to do this due to continuous hounding of Sikh Extremists since yesterday)

Rani Jindan Kaur, wife of Maharaja Ranjit Singh had illegitimate relations with Lal Singh (PM of Ranjit Singh). Along with Lal Singh, she attacked Jammu, burnt - https://t.co/EfjAq59AyI


Hindu villages of Jasrota, caused rebellion in Jammu, attacked Kishtwar.

Ancestors of Raja Ranjit Singh, The Sansi Tribe used to give daughters as concubines to Jahangir.


The Ludhiana Political Agency (Later NW Fronties Prov) was formed by less than 4000 British soldiers who advanced from Delhi and reached Ludhiana, receiving submissions of all sikh chiefs along the way. The submission of the troops of Raja of Lahore (Ranjit Singh) at Ambala.

Dabistan a contemporary book on Sikh History tells us that Guru Hargobind broke Naina devi Idol Same source describes Guru Hargobind serving a eunuch
YarKhan. (ref was proudly shared by a sikh on twitter)
Gobind Singh followed Bahadur Shah to Deccan to fight for him.


In Zafarnama, Guru Gobind Singh states that the reason he was in conflict with the Hill Rajas was that while they were worshiping idols, while he was an idol-breaker.

And idiot Hindus place him along Maharana, Prithviraj and Shivaji as saviours of Dharma.
HISTORY
\u0932\u0916\u094b\u092c\u093e \u0932\u094b\u0916\u0902\u0921\u0947
लखोबा लोखंडे...
@LakhobaLokhande
Secrets of Ganapati (Author - Keshav Sitaram Thackeray)

This article is taken from Keshav Sitaram Thackeray's book 'Dharmachi Devale and Devalcha Dharma'. In it, Bal Thackeray's father is claiming how the Hindu deity of Ganesha is imaginary.
(1/20)

Buddha is Ashtavinayak and "Ganapati Bappa Morya" is "Chandragupta Morya".

In the era of democracy, the head of state is the President. But in ancient India, there was a Gana culture in the monarchy and the head of that Gana was called Ganapati
(2/20)

In ancient India, a prince named Siddharth Gautam was born in royalty. He later became the king of Shakya Gana in this Gana culture. In time, Siddhartha attained enlightenment.

Let us now understand the difference between a real Ganapati and an imaginary Ganapati.
(3/20)

Some clever Brahmin manuvadis made the real Ganapati the imaginary Ganapati.

Buddha was the king of the Shakya Gana, so people called him Ganaraja. He founded Buddhism and became the head of the Shakyas. As the head of Gana, people used to call Buddha as Ganapati.
(4/20)

But the Brahmins Brahmanized Ganapati and created a false Ganapati. When Buddha used to give the message of Dharma to the people, two words would come out of his message. Chitta and Malla.

Chitta is the body.
Malla means waste
(5/20)
INDIA
Adam McKay
Adam McKay
@GhostPanther
1) My Stan Lee story happened when I was in 5th grade. I was visiting NYC with my Dad and had read the address for Marvel in the comics I read constantly. I begged my Dad to take me and to his credit he did. And guess what? It was just an office.

2) We were down in the lobby and I was kind of crushed. I don’t know what I expected, The Thing and the Yancy Street Gang to be sitting around smoking cigars? Anyway, my Dad was taking a beat to figure where we were going next and a guy came up to us.

3) He was wearing a white shirt and tie and said to Dad “Is he disappointed because. The Marvel offices were just offices?” My Dad said yes and then the guy who had gray around his temples and a mustache said “hold on a second” and opened one of those office mailboxes with a key.

4) He then handed me a thick stack of EVERY SINGLE MARVEL COMIC COMING OUT THE NEXT MONTH. “Here you go. Keep reading Marvel comics” he said and then walked off. I left in a daze and about 15 minutes later it hit me “Gray around the temples, mustache... That was Stan Lee!”

5) Later when I wrote on the Ant Man movie I told Kevin Feige the story, the year, look of the guy etc and Kevin said “That’s exactly the kind of thing Stan would do and he would have been there then. That was him.” Rest In Peace Stan Lee and thank you for the comics.
CULTURE