BreachForums' failed comeback stemmed from a PHP zero-day exploit in its outdated software, said the new admin.
#BreachForums #hack #PHP #software #cybersecurity
https://cnews.link/breachforums-zero-day-attack-unpatched-software-new-admin-1/
The Return of Pharmacy-Themed Spam
Pharmaceutical-themed spam campaigns continue to target individuals and organizations, particularly in the healthcare and pharmaceutical sectors. Recent observations reveal a bulk spam campaign using spoofed identities and compromised infrastructure to send deceptive emails. The attackers employ tactics such as domain spoofing, DKIM signature manipulation, and the use of compromised servers running malicious PHP scripts. The emails contain links that redirect users to fraudulent websites posing as legitimate Canadian pharmacies, often including a fake security verification step. These campaigns aim to trick recipients into revealing sensitive information or potentially installing malware. The persistence of pharmacy-themed spam highlights the need for continued vigilance and awareness of common scam tactics.
Pulse ID: 680cb26edefa55cafa886d51
Pulse Link: https://otx.alienvault.com/pulse/680cb26edefa55cafa886d51
Pulse Author: AlienVault
Created: 2025-04-26 10:16:14
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
Hey #thinkpad user I want to get a good thinkpad to #softwareDevelop stuff, you know run develop env, #nodejs ,#nextjs ,#rubyOnRails, #php, #laravel . About What system run it's an #archLinux with #sway So I'd like some recomendation about What thinkpad do you recommend
Publish a #PHP package on #Packagist...
Package availability: almost instantaneous.
Publish a #JavaScript package on #npm...
Package availability: almost instantaneous.
Publish a #dotNET package on #NuGet...
Package availability: please wait 15-20 minutes!
Have I invented perfect random number generation computer chips?
So, last night I slept for a very long time. While I slept, I dreamed that I was explaining to a scientist how to do real random number generation with a computer chip. And, you know what, I think it would actually work.
Computers are not good at randomness
The only thing that computers are good at is giving you the same output for any given input each and every time. It is their predictability that makes them so darn useful.
This is a problem when what you need is randomness.
The closest we have to computer-generated randomness is algorithms that give outputs that are hard for humans to guess. The thing is, for any given seed value, you still get the same output. That’s why Minecraft seeds are a thing.
One of the better algorithms is the Mersenne Twister. This is what powers mt_rand()
in PHP.
Nevertheless, this sort of randomness is only pseudorandom. Accidentally use the same input, get the same output.
How can we do better?
One of the best ways to generate cryptographically secure randomness is to use some large external source of chaos. For example, Lavarand. Lavarand is powered by a wall of lava lamps, which the system takes photos of at intervals. The system then extracts some amount of the binary of the image, interprets it however the designers want (all things in computers are just binary, and we only know what sort of thing they are by leaving hints). This data is then used as the seed for pseudorandom generation.
The inclusion of a pseudorandom step means that although the randomness is pretty good in terms of being unguessable, it is still not truly random.
My answer to truly random numbers from a computer
We start with a 64-bit quantum chip. Quantum computing is different from the computing we know now. QBits sit between 1 and 0 until they are read. This allows for some very specific types of computation at speeds that we cannot currently reach with classical computing.
Qbits – quantum bits – suffer from a significant weakness. They are so tiny that a single photon can flip them. Rather than fight this data damage, we can harness it.
We choose 64 because qbits are a bit tricky to make at scale, and 64 bits is what our regular computers use. You could go for a bigger size, say 128, 256, 512, 1024, etc., for cryptographic uses.
One way would be to give the top of the chip a convex glass “lid” that encuredges light into the chip. Another would be to add a layer of tritium and a phosphor, which would glow and send off photons. You could also use some other radioactive matter as long as it gives off something that can flip a bit.
All of these flips are entirely unpredictable and non-repeatable. For the same seed, you will not get the same data.
With this set-up, you could start with a sudorandom seed and prime the quantum chip with it. Wait a reasonable length of time and recover the now changed and truly randomised data.
There are other quantum properties we can use to further enhance our randomness. One such property that creates headaches for classic for modern computing is quantum tunnelling. We are pretty much at the point of the nm scale that if we go much smaller, electrons may just elect to jump to another bit of the chip.
We can use that too. The chip that reads the randomised qbits could itself have a fine enough size that electrons will at times put themselves somewhere unintended. Use that for the data in and the data out, and we now have an array of bits that had three episodes of randomisation. This step is not necessary, but it would speed up the time to true randomness for each set of 64 bits.
The technology exists for true randomness
None of what I have suggested is beyond our current technology level. Other than the very small nm chip design, which might need a little R&D to perfect. We can make this if we want to.
I see a few possible uses for this idea:
How to steal this idea
If you are someone with the means to take this idea and turn it into a product, I ask only for accreditation and some company shares as a thank you.
Over to you
I’d love to hear your thoughts and comments. Agree, disagree, or point out a flaw in my thinking – it’s all good. Talk to me.
#flippedBits #MersenneTwister #noise #PHP #quantumComputing #randomness #RNG #Technology
Over the past month, I've been teaching myself #PHP, with help from lots of videos, websites, and folks I follow here on Mastodon. I really don't understand all the negativity from other developers who don't use it. I mean, I understand those other developers use other languages, and they're obviously going to favor those languages that they are comfortable with using, but I still don't get the negativity.
Many of the comments I get from developers that don't use PHP go something like, "Why PHP? It's dead."
Man, I am really sick of that comment.
#introduction hello from my new account- I've moved off of #fosstodon
I do #openSource websites (preferring #ProcessWire cms these days but sometimes #drupal and #wordpress and #backdrop), databases (especially #CiviCRM) for organisations with good missions - a mix of charities, campaigns and journalism etc. - I'm particularly keen to work with orgs doing #ClimateEmergency #antiFascist #peace #LGBTQIA rights...
I post about #php #javascript #webdev #css and anti #ai nonsense.
blog! “Using Tempest Highlight with WordPress”
I like to highlight bits of code on my blog. I was using GeSHi - but it has ceased to receive updates and the colours it uses aren't WCAG compliant.
After skimming through a few options, I found Tempest Highlight. It has nearly everything I want in a code highlighter:
PHP with no 3rd party …
Read more: https://shkspr.mobi/blog/2025/04/using-tempest-highlight-with-wordpress/
⸻
#css #HTML #php #programming #WordPress
Very nice, feature rich and user friendly file manager for your server.
How such seemingly cool project has ~250 stars on Github and literally every AI single readme file repo has 2k+ stars?
Building a robust AI system (with Laravel)
Discussions: https://discu.eu/q/https://youtu.be/BLMv8JKqP_8
The PHP community's resident API curmudgeon, @Philsturgeon, has a new post on setting up HTTP caching with Laravel Vapor.
"It's worth the work, because it cuts down on costs, and even helps reduce the carbon impact of your software, so it's basically rude not to turn it on."
https://apisyouwonthate.com/blog/http-caching-for-laravel-vapor/
I'd like to make 2 changes to the software industry.
1. The removal of AI. Let’s just pretend it never happened, so we can try again in 50 years with a more ethical and sustainable approach.
2. Find a way to include the use of lasers in software development. Where would we use them? How would they be implemented? I have no idea. These are questions without answers. I just know I want lasers, because lasers are cool
The worst part about using Doctrine DBAL is finding documentation that doesn't assume I'm using the ORM.
If you use Laravel and deploy APIs to Laravel Vapor you need to enable HTTP Caching with CloudFront. It’ll save you money, and it will massively reduce the natural resources you’re wasting repeatedly answering the same requests for no reason. #PHP @phpc @laravelnews https://apisyouwonthate.com/blog/http-caching-for-laravel-vapor/
This article goes beyond just listing PHP 9.0's features; it explores how those features could impact real-world development, what they mean for PHP's future, and how devs can start preparing themselves https://medium.com/@umeshp113/the-future-of-php-a-fresh-take-on-what-php-9-0-brings-f7b9cf7370c6 #php #phpdevs #php9 #foss
Boost Your PHP Performance with a Fast String Comparison Function
Are you tired of sluggish string comparison functions in PHP? Discover a new approach that dramatically enhances performance while maintaining simplicity. Dive into the details of a custom `stringComp...
https://news.lavx.hu/article/boost-your-php-performance-with-a-fast-string-comparison-function
"OpenTelemetry with PHP is easier than you think!" will be Grzegorz Drozd's talk at phpday25.
#phpday25 #PHP #Architecture #Performance #Analytics #Monitoring #Security
--------
phpday - 22nd edition
The annual gathering for developers, professionals, and PHP enthusiasts.
The conference is powered by @gruspVerona (Italy) |
May 15-16, 2025
Tickets https://bit.ly/41J6UP3