Bruh... DNS infa is fucked. Update your bind boys
is it time to turn the internet off yet
kb.isc.org/docs/cve-2026-…
Oct 22, 2026 · 8:39 AM UTC
32
70
878
100,459
@basedjensen The patching will continue until security improves
2
9
95
8,092
@basedjensen ISC rates this 8.1 with high attack complexity and says it knows of no active exploits. No workarounds though, and the fixed releases are 9.20.30 and 9.21.27, with no 9.18 fix listed
1
0
11
5,455
@cdiamond you have bigger problems if you are on less than 9.20.0. Also usually with these things someone will have a working exploit as soon as cve drop.
0
0
11
4,700
@xoxoxo538 well short of unplugging boxes just have to keep up with patching. Being behind a waf like cf should help a lot too
1
0
9
3,778
@basedjensen I think it's time to disconnect all devices from the internet and spend a month or two in a mountain cabin without cell service.
Bring a Starlink mini to plug in after two months to see if society is still functioning and the internet can be used again
Bring a Starlink mini to plug in after two months to see if society is still functioning and the internet can be used again
0
0
7
1,508
@basedjensen Isn't GSS-TSIG something mainly used on internal resolvers on corporate networks, and rarely (if ever) used on public-facing resolvers?
Relax.
Relax.
0
0
0
688
@basedjensen @grok tell me a real world example of what bad can happen with this.
1
0
0
415
@basedjensen This isn’t in the same ballpark as php2shell but it’s not great.
0
1
1
869
@basedjensen is everything imploding all at once or something?
0
0
0
258
@basedjensen @bot take this post and pass it to the CTI desk, have it pull all information and build a report.
1
0
1
610
@basedjensen @grok tell me the implications of this. explain it to me like I'm 15. what's the big deal, what can happen to normies?
1
0
0
46
Voice agents get built three ways: cascaded (STT, LLM, TTS), turn-based speech-to-speech, and full-duplex, where the model listens and talks at the same time.
All three now run on LiveKit Inference: GPT-Live and GPT Realtime from @OpenAI, @grok Voice Think Fast from @xai, and eDeepMind. One LiveKit Cloud key, one bill.
All three now run on LiveKit Inference: GPT-Live and GPT Realtime from @OpenAI, @grok Voice Think Fast from @xai, and eDeepMind. One LiveKit Cloud key, one bill.
16
16
200
32,328
@basedjensen What does the even mean. Are we dead dead?
0
0
1
657
@basedjensen welp , people are finally realising that software written by humans is held up by duct tape and prayers
0
0
0
10
@basedjensen the fact that gss-tsig replay is the attack vector is the scary part. everyone thinks their signed dns is safe and its literally the authentication mechanism thats exploitable. updating bind isnt optional this week its the whole plan
0
0
0
50
