Joao Correia's Avatar

Joao Correia

@joaocorreiacl.bsky.social

Ex-BOFH sysadmin, Co-Host at the Enterprise Linux Security podcast, AFOL and comic book collector. Just your average opinionated nerd.

58 Followers  |  89 Following  |  22 Posts  |  Joined: 14.11.2024  |  1.7265

Latest posts by joaocorreiacl.bsky.social on Bluesky

Comic. SALESMAN [pointing at dehumidifier on sale]: This dehumidifier model features built-in WiFi for remote updates. PERSON 2: Great! That will be really useful if they discover a new kind of water.

Comic. SALESMAN [pointing at dehumidifier on sale]: This dehumidifier model features built-in WiFi for remote updates. PERSON 2: Great! That will be really useful if they discover a new kind of water.

Dehumidifier

xkcd.com/3109/

01.07.2025 19:59 β€” πŸ‘ 5876    πŸ” 915    πŸ’¬ 59    πŸ“Œ 38

Hey @tailscale.com , in your recent wording changes to the legal agreements, you explicitly removed "can only be encrypted/decrypted by the Customer". Care to expand a bit more on this? Is this no longer the case? #privacy #endtoendencryption #encryption #Security

30.06.2025 20:45 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0
Post image

Let's set AI agents loose on the infra already. What could go wrong?

23.06.2025 10:29 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Post image

Nice wifi list on the spiceworks newsletter. Tip of the hat to them.

23.06.2025 10:23 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Preview
Enterprise Linux Security Episode 116- A CVE by any other Name YouTube video by Learn Linux TV

Join @jaythelinuxguy.bsky.social and I today at 1pm EST (18:00 UTC) for a live recording of Enterprise Linux Security!
www.youtube.com/live/le5ynn3...

06.06.2025 13:32 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

How is this not click fraud? It's like the old schemes where you were "paid" to click ads on shady applications. Instead of directly going after the users, this is costing advertisers money in clicks that have no relation with actual interest in the ad itself.

28.05.2025 21:11 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0
Preview
Peter David, Legendary Comic Book Writer, Dead At AgeΒ 68 Peter David, a legendary comic book writer known for his work on The Incredible Hulk, X-Factor, Spider-Man, and more, has died at age 68.

Peter David, a legendary comic book writer known for his work on The Incredible Hulk, X-Factor, Spider-Man, and more, has died at age 68.

25.05.2025 18:26 β€” πŸ‘ 308    πŸ” 136    πŸ’¬ 19    πŸ“Œ 132

While everyone mocked #Microsoft for not knowing that "9" comes after "8" when they launched Windows 10, #OpenAI said "hold my beer" and launched "4.1" after "4.5". Must have been AI generated.

16.04.2025 09:08 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Vuln Management teams about to have a bad week.

15.04.2025 17:27 β€” πŸ‘ 37    πŸ” 6    πŸ’¬ 2    πŸ“Œ 0
Post image

(comic) Welcome to the Club

25.03.2025 16:31 β€” πŸ‘ 50    πŸ” 11    πŸ’¬ 1    πŸ“Œ 1

It’s only 250, but that’s 250 more than before this data appeared 😊

21.03.2025 11:54 β€” πŸ‘ 4    πŸ” 1    πŸ’¬ 1    πŸ“Œ 0

"Consumer-grade spyware operation" should not become trivialized as if it was just another day at the office. News stories about it should make that abundantly obvious.

21.03.2025 13:31 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

This is actually a real problem and not just meme-material. Prior to vibe code, we already had an insurmountable mountain of technical debt piled up against most software packages (let alone legacy applications still in use). Vibe coding just made that go exponential.

21.03.2025 10:19 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Preview
Elon Musk’s Starlink Expands Across White House Complex Trump administration officials said the company donated the internet service, saying the gift had been vetted by the lawyer overseeing ethics issues in the White House Counsel’s Office.

Hi, I'm the guy who used to oversee the federal government's agency IT telecommunications contracts. This is extremely bad. There is absolutely no need for this. Not only is it a huge security exposure, but the simplest explanation for this is that it is meant to be a security exposure.

18.03.2025 02:53 β€” πŸ‘ 18527    πŸ” 8215    πŸ’¬ 593    πŸ“Œ 585
Post image

Notice to flat-Earthers all around the globe: Please alert the authorities if tonight’s Total Lunar Eclipse looks like this:

13.03.2025 20:27 β€” πŸ‘ 29364    πŸ” 4878    πŸ’¬ 1147    πŸ“Œ 563
Preview
Enterprise Linux & Open-Source Landscape Report TuxCare helps organizations take care of support, maintenance, & security for Enterprise Linux systems.

πŸ“’ The TuxCare Team is excited to present the 2025 Enterprise #Linux and Open Source Landscape #Report, our annual in-depth analysis of the most pressing trends, challenges, and predictions shaping the industry today.

Learn more and download for free:
tuxcare.com/downloadable...

04.03.2025 19:15 β€” πŸ‘ 4    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Original post on wandering.shop

Why am I utterly unsurprised by this? Not by cops abusing access privileges, or even by other cops busting them, but by their dismal failure to tackle cybercrime that isn't right under their collective nose while the Home Office idiotically does the equivalent of trying to ban lockable front […]

28.02.2025 10:39 β€” πŸ‘ 4    πŸ” 16    πŸ’¬ 1    πŸ“Œ 0
Post image

(comic) Decision vs. Outcome

18.02.2025 16:31 β€” πŸ‘ 62    πŸ” 13    πŸ’¬ 2    πŸ“Œ 2
β€œTorrenting from a corporate laptop doesn’t feel right”: Meta emails unsealed

β€œTorrenting from a corporate laptop doesn’t feel right”: Meta emails unsealed

A photo of Aaron Swartz (1986-2013) when he was 19.

A photo of Aaron Swartz (1986-2013) when he was 19.

Last month, Meta admitted to torrenting a controversial large dataset known as LibGen, which includes tens of millions of pirated books. But details around the torrenting were murky until yesterday, when Meta's unredacted emails were made public for the first time. The new evidence showed that Meta torrented "at least 81.7 terabytes of data across multiple shadow libraries through the site Anna’s Archive, including at least 35.7 terabytes of data from Z-Library and LibGen," the authors' court filing said. And "Meta also previously torrented 80.6 terabytes of data from LibGen."

Last month, Meta admitted to torrenting a controversial large dataset known as LibGen, which includes tens of millions of pirated books. But details around the torrenting were murky until yesterday, when Meta's unredacted emails were made public for the first time. The new evidence showed that Meta torrented "at least 81.7 terabytes of data across multiple shadow libraries through the site Anna’s Archive, including at least 35.7 terabytes of data from Z-Library and LibGen," the authors' court filing said. And "Meta also previously torrented 80.6 terabytes of data from LibGen."

Meta illegaly downloaded 80+ terabytes of books from LibGen, Anna's Archive, and Z-library to train their AI models.

In 2010, Aaron Swartz downloaded only 70 GBs of articles from JSTOR (0.0875% of Meta). Faced $1 million in fine and 35 years in jail. Took his own life in 2013.

07.02.2025 16:45 β€” πŸ‘ 7623    πŸ” 4101    πŸ’¬ 53    πŸ“Œ 172

Didn't OpenAI train their models on copyrighted stuff too and didn't seem bothered by it? The irony cuts deep here.

30.01.2025 10:06 β€” πŸ‘ 4    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0
Reddit
My team's intern just found a critical bug by shitposting in our codebase
Join
So our summer intern (who l'm 90% sure is a professional shitposter moonlighting as a dev) just saved our entire authentication service by being, well, an absolute agent of chaos.
Background: We have this legacy auth system that's been running since before TikTok existed.
No one touches it. It's documented in ancient Sanskrit and COBOL comments. The last guy who understood it fully left to become a yoga instructor in Peru.
Enter our intern. First week, he asks why our commit messages are so boring. Starts adding memes to his. Whatever, right? Then he begins leaving comments in the codebase like:
/ This function is older than me and probably pays taxes
// TODO: Ask if this while loop has health insurance
// Here lies Sarah's hopes and dreams (2019-2022), killed by this recursive call
The senior devs were split between horrified and amused. But here's where it gets good.
He's reading through the auth code (because "the commit messages here are too normal, sus") and adds this gem:
Il yo why this token validation looking kinda thic though
I/ fr fr no cap this base64 decode bussin
// wait... hold up... this ain't bussin at all
Turns out his Gen Z spider-sense wasn't just tingling for the memes. Man actually found a validation bypass that's been lurking in our code since Obama's first term. The kind of bug that makes security auditors wake up in cold sweats.
The best part? His Jira ticket title: "Auth be acting mad sus rn no cap frfr (Critical Security Issue)"
The worst part? We now have to explain to the CEO why "no cap frfr" appears in our Q3 security audit report.
The absolute kicker? Our senior security engineer's official code review comment: "bestie... you snapped with this find ngl"
I can't tell if this is the peak or rock bottom of our engineering culture. But I do know our intern's getting a return offer, if only because I need to see what he'll do to our GraphQL documentation.

Reddit My team's intern just found a critical bug by shitposting in our codebase Join So our summer intern (who l'm 90% sure is a professional shitposter moonlighting as a dev) just saved our entire authentication service by being, well, an absolute agent of chaos. Background: We have this legacy auth system that's been running since before TikTok existed. No one touches it. It's documented in ancient Sanskrit and COBOL comments. The last guy who understood it fully left to become a yoga instructor in Peru. Enter our intern. First week, he asks why our commit messages are so boring. Starts adding memes to his. Whatever, right? Then he begins leaving comments in the codebase like: / This function is older than me and probably pays taxes // TODO: Ask if this while loop has health insurance // Here lies Sarah's hopes and dreams (2019-2022), killed by this recursive call The senior devs were split between horrified and amused. But here's where it gets good. He's reading through the auth code (because "the commit messages here are too normal, sus") and adds this gem: Il yo why this token validation looking kinda thic though I/ fr fr no cap this base64 decode bussin // wait... hold up... this ain't bussin at all Turns out his Gen Z spider-sense wasn't just tingling for the memes. Man actually found a validation bypass that's been lurking in our code since Obama's first term. The kind of bug that makes security auditors wake up in cold sweats. The best part? His Jira ticket title: "Auth be acting mad sus rn no cap frfr (Critical Security Issue)" The worst part? We now have to explain to the CEO why "no cap frfr" appears in our Q3 security audit report. The absolute kicker? Our senior security engineer's official code review comment: "bestie... you snapped with this find ngl" I can't tell if this is the peak or rock bottom of our engineering culture. But I do know our intern's getting a return offer, if only because I need to see what he'll do to our GraphQL documentation.

Gold. πŸ˜‚

www.reddit.com/r/csMajors/s...

24.01.2025 08:27 β€” πŸ‘ 42    πŸ” 15    πŸ’¬ 1    πŸ“Œ 2
Preview
ELevate Project Updates Hello everyone! We’ve got some updates about the ELevate Project to share with you today :) New Upgrade Path Available We are excited to announce that the upgrade path from AlmaLinux OS 9 to…

ICYMI: Exciting news for AlmaLinux users!

The ELevate NG upgrade path from AlmaLinux OS 9 to 10.0 beta is now live for testing. Help shape the final release by testing and sharing feedback! πŸ› οΈ

Details here: https://almalinux.org/blog/2025-01-14-elevate-updates/

21.01.2025 20:24 β€” πŸ‘ 3    πŸ” 2    πŸ’¬ 0    πŸ“Œ 0
Post image

Arguably more deadly than a bite.

17.01.2025 15:37 β€” πŸ‘ 1    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
YouTube Share your videos with friends, family, and the world

Coming up in 2 hours, a new #Enterprise #Linux #Security podcast recording session with me and @jaythelinuxguy.bsky.social . Guaranteed facepalms. Somewhat cringy opinions. We have a good accuracy ratio of 50%. www.youtube.com/live/Y9L7H5s...

15.01.2025 15:52 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Post image

Just published on FOSS Force: TuxCare Stops Microsoft From Killing .NET 6.0 https://buff.ly/4289f85

14.01.2025 18:46 β€” πŸ‘ 3    πŸ” 3    πŸ’¬ 0    πŸ“Œ 0

PDFs are Turing complete?

14.01.2025 10:53 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Out of curiosity, this happens to be connected in any way with your E-Redes issue you were posting about earlier? I mean, they can be difficult to get a hold of, but still a stretch before going Jason Bourne on them.

02.01.2025 17:50 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

@joaocorreiacl is following 19 prominent accounts