claude. make all the mistakes

lmfao. remember the gitlab 10.0 yesterday?

turns out they werent gitlab bugs, but ruby 0days

gitlabs "fix" was to just ship patched ruby runtimes lol

ironically, out of all things, what really breaks the illusion is liquid glass bc it just does not do hdr at all for some reason lol

hdr is so magical when you have a white cursor and hover over a highlight. it is such a good way to percieve how bright something actually is

LMAO

However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business. In view of this, after detailed deliberations our board has concluded that withdrawing from global SSL/TLS is the right decision for eMudhra and its shareholders. (x)

happy to have contributed :neobot_salute:

LMFAOOOOOOO

22 October 2026: mitmproxy 12.3.0

• Add --emudhra and --emudhra-old options to sign TLS certificates with a compromised eMudhra intermediate CA key.
  (#8500, #8503, @mhils)
• Security: Remove eMudhra CAs from trust list in precompiled binaries.
  (#8499

🦀🦀🦀🦀 EMUDHRA CA IS GONE 🦀🦀🦀🦀

it truly is the joke that keeps on being funny

The key's randomart image is:
+---[ECDSA 384]---+
|                 |
|                 |
|                 |
|                 |
|                 |
|                 |
|                 |
|                 |
|                .|
+----[SHA256]-----+

a lot of sources agree on it being a missing BG(serialize_lock) around the __destruct in var_unserializer, and at least from some rudimentary tests it seems to work on the 'patched' php. lol. lmao even.

like, come on, if every script kiddy with their llm can find this the php folks could have found this as well lol

like at this point just pull the plug on your php software and touch grass for a week or two. let your homeserver touch grass too

lmao at both rumored bypasses AND unrelated php vulns. man theyre having a rough time

after all the PHP vulnerabilities, you may ask yourself: was PHP even the right choice? to answer that, a simple test:

• is your project a simple Personal Home Page?
  • yes: if you want to, whatever, sure
  • no: WHY WOULD YOU WANT TO USE PHP FOR THAT IN THE FIRST PLACE

hahaha it works

wait. the steam frame as a sensor for cursor on its pc should work

:neobot_thinking: steam frame wii cursor

it should post more 0days this is fun

today would lowkey be a good time to drop a misskey 0day in addition to everything going on

(yes the code is off by a few. its bc the poc is shit and to speed it up it uses 8 connections at the same time. it just stops the counter once it has a hit so its off by ~4 lmfao. you could easily fix this but cba today)

its not as cool as a leaked ca cert key but you can basically just rob any existing emudhra cert with this by just osinting the email associated and fucking logging in lmfao