Gary Stephen „Angry“ Anderson
1947 - 2026
R.I.P.

#WelcomeToRockNRollCity

#RIP #Vocals #Singer #Voice #RoseTattoo

Klaus Luley
1947 - 2026
R.I.P.

#WelcomeToRockNRollCity

#RIP #Vocals #Singer #Voice #Craaft #Tokyo

Milliardäre bereiten sich auf den Weltuntergang vor. Ihr extremer Reichtum bestärkt sie in dem Wunsch, sich angesichts der sehr realen Bedrohung durch Klimawandel, globale Pandemien, einwanderungsfeindliche Panik und Ressourcenerschöpfung noch mehr von der übrigen Gesellschaft abzuschotten: https://www.blaetter.de/ausgabe/2025/februar/prepper-mit-milliarden-das-mindset-der-tech-elite

Frank Beard
1949 - 2026
R.I.P.

#WelcomeToRockNRollCity

#RIP #Drums #ZZTop

Die Hütte brennt, Merz taucht ab. Er ist der deutsche Lifestyle-Kanzler, "der allein in diesem Jahr bereits um die 30 Urlaubstage genommen hat (Ostern 4, Sommer 22, 3-4 weitere) – mehr als ein durchschnittlicher Arbeitnehmer im ganzen Jahr zur Verfügung hat." (Postillon)

https://www.der-postillon.com/2026/08/merz-urlaub.html

Wiz found a master key that could access every database in Azure's Cosmos DB. #cosmosescape

Whoops.

https://nitter.net/yuvalavra/status/2082864672294736324

My present to all of you: Go ahead and think a bit about why such a key even exists. Go ahead...

The Palo Alto Networks firewall Master Key is p1a2l3o4a5l6t7o8 and it is well past time you changed it!

If you have never changed it, your LDAP service account password is sitting in your firewall config encrypted with a key the whole internet has known since 2016 [1]. So are your API keys, certificate private keys, RADIUS secrets and IPSec pre-shared keys.

And that config is on someone's laptop. In SharePoint. In a ticket you raised with Palo support three years ago.

Public tools [2] will decrypt anything encrypted with the default key. Any threat actor who gets one of those files gets your LDAP service account and walks straight off the firewall into your AD.

This is not theoretical.

Palo's own Unit 42 [3] documented attackers copying running-config.xml to a web-accessible path and retrieving it after exploiting CVE-2024-3400.

Fortinet has had two mass events on exactly this pattern: the Belsen Group dump of ~15,000 FortiGate configs and VPN credentials in January 2025 [4], and FortiBleed in June 2026, where configs from ~75,000 firewalls were cracked offline into working admin credentials [5].

You have always been able to change the Master Key. In my experience nobody ever does as it hasn't been without risk. If you forget to rotate the key before it expires then you risk bricking your firewall.

In PAN-OS 12.2.2, Palo Alto Networks have finally started forcing the issue. It enforces replacement of the default master key within a grace period of 60 days after which the firewall blocks all commits and HA synchronisation. This is a significant operational change and it is not in the release notes but is buried in the admin guide [6].

Three things to do in the next few weeks:

1. Check your config backups are automated and actually working. You want a known-good backup before you touch the key.

2. Change the Master Key. Do it on your schedule, not on Palo's.

3. Rotate the secrets. Changing the key re-encrypts the secret on the box; every copy already out there is still decryptable with the default key.

For more depth see my research [7] and conference talk [8].

[1] @felix "Attacking Next-Generation Firewalls: Breaking PAN-OS", TROOPERS16 — https://troopers.de/media/filer_public/a5/4d/a54da07e-3780-4f83-b4ac-8c620666a60a/paloalto_troopers.pdf
[2] https://github.com/cybliminal/palo-secret-decryptor
[3] https://unit42.paloaltonetworks.com/cve-2024-3400/
[4] https://censys.com/blog/fortigate-config-leak-impact/
[5] https://www.picussecurity.com/resource/blog/fortibleed-inside-the-campaign-that-cracked-75000-fortinet-firewalls
[6] https://docs.paloaltonetworks.com/ngfw/administration/certificate-management/master-key-encryption/configure-master-key
[7] https://cybliminal.com/pdf/Panning_for_Gold.pdf
[8] https://www.youtube.com/watch?v=2PF4aSY1gVo

Fedi! Heise Auto hat eine Umfrage zu Tempolimit auf deutschen Autobahnen, ja oder Nein und ihr wist was ihr tun müsst!!!

Boost für Reichweite! ♻️

https://www.heise.de/news/Greenpeace-bringt-Tempo-100-Schilder-an-Autobahnen-an-11321394.html

Screenshot Stand 9. Juni 2026, 7:36 Uhr

Hey Windows (ab)users! Microsoft patched around 200 vulnerabilities in Windows etc today, a record Patch Tuesday batch. All indications are they fixed two of the zero-days dropped last month by the researcher Nightmare Eclipse, including "Green Plasma" and the "YellowKey" exploit that allowed local access to data encrypted by BitLocker. In response to today's Patch Tuesday, Nightmare Eclipse dropped an exploit for what they claimed was a zero-day bug in Windows Defender.

Nearly three dozen of the bugs patched this month earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available.

https://krebsonsecurity.com/2026/06/a-record-breaking-patch-tuesday-for-june-2026/

#patchtuesday #windows #nightmareeclipse #greenplasma #yellowkey

RE: https://hachyderm.io/@jenniferplusplus/116370960046107139

"mythos is too dangerous for the general public"

60 days pass

"announcing mythos for the general public"

Anyway, here's to a time I was right:

‪A Grantler agrantler@mastodon.social‬
‪@agrantler.bsky.social‬
· 5 Min.
Running bitlocker with TPM only without PIN has never been a good idea. Question is, why there's the WinRE feature for unlocking the device at all. This looks really like a #backdoor.
And there are rumors there's a vulnerability for TPM+PIN, too.
We'll see.

#microsoft #infosec #cybersec #yellowkey #news

https://thehackernews.com/2026/05/microsoft-releases-mitigation-for.html

Nebenbei wird ganz unbemerkt privaten Unternehmen der Zugriff auf die biometrischen Daten der Bevölkerung gewährt - um ein paar Minuten einzusparen:
https://www.leadersnet.de/news/99614,flughafen-check-in-soll-in-deutschland-komplett-digital-werden.html
#biometrie #datenschutz

Dave Mason
1946 - 2026
R.I.P.

#WelcomeToRockNRollCity

#RIP #Guitar #Singer #Traffic

RE: https://troet.cafe/@jkasek/116285228568692716

Die Weimerisierung Deutschlands

RE: https://flipboard.com/@fr_de/frankfurter-rundschau-%E2%80%93-%C3%BCberblick-q2j2estez/-/a-de-pzW_qRKq7QGOFwq9ktg%3Aa%3A3694312255-%2F0

Ich finde 4185 Dollar für das Finale auch viel zu wenig. Soviel sollte schon ein Vorrundenspiel kosten.

Kein Durchblick beim Thema Energie? Ruedi Widmer erklärt es uns.

@dexter I have been using Paperless NGX on FreeBSD for a few years now. It's great!

The magic of it is the simple filing system.

1) Scan every paper doc.
2) If you won't need it on paper again, throw it away.
3) If you do want to keep the paper doc, click a button to generate a number. Note the number on the doc. Put it into a folder sorted by number. Done.

☑️ ☑️

Great #video by @garyhtech on why #BSD will never own the cloud.

#Linux owns the #cloud and frankly I'm fine with that. #FreeBSD doesn't need to compete with Linux in this area. It may not have the massive ecosystem, but given its strengths, it functions just fine for back end #infrastructure, in general and niche use cases.

People frequently tout FreeBSD for #ZFS and #Jails but honestly I think #Ports and #Poudriere are huge selling points

https://www.youtube.com/watch?v=XWf1z1ifjOc