Karan Saini (@squeal) header
Karan Saini (@squeal) profile picture

hacker, security researcher; alum @cis_india, @hasgeek; blog at https://xitter.gq/t.co/pXy5yRt8Jw

Delhi/Bangalore
Joined June 2008
Photo by Karan Saini (@squeal)Photo by Karan Saini (@squeal)Photo by Karan Saini (@squeal)Photo by Karan Saini (@squeal)Photo by Karan Saini (@squeal)
Karan Saini retweeted
Let's all boycott @Hostinger, and those who use it should move away from Hostinger as a service. 1984, gandi and njalla are much more secure services. There are many other hosting providers which don't bend to censorship the way @Hostinger did. I'm happy to help people who want to move away from @Hostinger and other such services which make no attempt to resist censorship.
PUBLIC STATEMENT BY PARANJOY GUHA THAKURTA On the arbitrary takedown of paranjoy.in by Hostinger following legal notices from Indiabulls founder Sameer Gehlaut October 31, 2026 On the morning of October 28, 2026, my website paranjoy.in and all its associated subdomains, including media.paranjoy.in and adanifiles.paranjoy.in, were abruptly taken offline by our web hosting provider, Hostinger (HOSTINGER operations, UAB). The website, registered twelve years ago, serves as an online archive of my work over several decades as a journalist, author, publisher, and maker of documentary films and music videos Hostinger gave no prior intimation, warning, or opportunity to respond before suspending the entire hosting account. When my colleague contacted Hostinger “Support” at 6:48 AM on October 28, a hosting “specialist” stated that the suspension was triggered by an abuse report for "Fraud/Scam" and declared that "unsuspension is not negotiable in this case." This sudden shutdown of an entire repository under the label "Fraud/Scam" happened just days after Sameer Gehlaut, founder of the Indiabulls group, served me with an ex parte court order demanding the removal of a single article published more than seven years on Newsclick.in. For over six years, Indiabulls and Shri Gehlaut have pursued legal action over this report and I have consistently defended our journalistic report in court. Here is the timeline: · March 11, 2020: Indiabulls Housing Finance Limited filed a criminal defamation complaint (CC No. 1765/2020) before the Patiala House Courts, New Delhi, against NewsClick, its Reader's Editor Urmilesh, co-author of the article Sourodipto Sanyal, NewsClick editor Prabir Purkayastha, and me over an article published on the website on September 30, 2019. · June 6, 2025 and July 9, 2025: More than five years after the complaint was filed, a Judicial Magistrate at Patiala House Courts passed an order on June 6, 2025, dropping proceedings against Shri Purkayastha while issuing summons to the remaining four accused, including me, under Sections 499 and 500 of the Indian Penal Code. A formal summons was issued on July 9, 2025, for appearance on July 30, 2025. · August 27, 2026: Counsel for Shri Gehlaut, sent me a legal notice demanding the takedown of the article within 24 to 48 hours, claiming that a status report by the Economic Offences Wing (EOW) of the Delhi Police had altered the factual position. · September 2, 2026: My counsel sent a reply pointing out concerns with the legal notice · October 24, 2026: Indiabulls Nests Limited (Plaintiff No. 1) and Sameer Gehlaut (Plaintiff No. 2) obtained an ex parte ad interim injunction from the Court of one of the District and Sessions Judges, Patiala House Courts, New Delhi, in Civil Suit No. 529/2026 (Indiabulls Nests Ltd. & Anr. v. Ashok Kumar/John Doe & Ors.), in which I am arrayed as Defendant No. 19. The order directed the removal and de-indexing of the article on paranjoy.in (listed as Item A-33 in Schedule A). · October 25, 2026 (10:13 AM IST): Advocates representing Indiabulls Nests Limited and Sameer Gehlaut, emailed me the October 24 court order and suit documents, demanding immediate deletion and written confirmation of compliance. · October 26, 2026 (11:33 PM IST): Sameer Gehlaut personally sent an email from his official address ([email protected]) demanding the immediate deletion of the URL from paranjoy.in and threatening to move the court under Order XXXIX Rule 2A of the Code of Civil Procedure if I did not comply, noting that the matter is next listed on December 18, 2026. While I was in the process of challenging the order dated 24.10.2026 before higher forums, on the same day, advocates representing Shri Gehlaut submitted a court order takedown complaint to Google LLC. · October 28, 2026 (3:16 PM IST): Google Search Console sent an automated notice ([WNC-598900]) informing me that Google was blocking the specific URL paranjoy.in/article/the-maze…  from appearing in search results on google.co.in. The Lumen Database record of this complaint (Notice ID: 101001876) reveals the scale of the takedown request. The complaint targeted 52 URLs on websites across major national and international news organisations, including The Economic Times, Business Standard, The Caravan, The Daily Pioneer, Business Today, Deccan Herald, ET Now, Financial Express, Livemint, Moneycontrol, Moneylife, NDTV Profit, The New Indian Express, Outlook Business, The Quint, Quartz, and NewsClick, along with posts on X (formerly Twitter), Facebook, Instagram, LinkedIn, and Scribd. Most of these reports on major corporate news websites remain accessible online. In fact, Item 39 on the Lumen takedown list is the original September 30, 2019 article published on NewsClick.in: newsclick.in/The-Maze-of-Pol…, which remains live and accessible as of now. Yet, in the case of paranjoy.in, the entire domain and every website hosted on my account were wiped off the internet. Hostinger's Baseless "Fraud/Scam" Claim and Demand for Accountability Hostinger did not cite the Patiala House Courts order when it suspended my account on October 28, 2026. Instead, its representative claimed that the hosting account was permanently suspended due to an abuse report for "Fraud/Scam". This allegation is demonstrably false: 1. VirusTotal Security Analysis: Independent domain checks conducted on October 28, 2026, at 7:48 AM and 7:54 AM on VirusTotal confirm that 0 out of 92 security vendors flagged paranjoy.in or media.paranjoy.in as malicious, phishing, or fraudulent. VirusTotal explicitly categorises paranjoy.in under "news and media". 2. Google Safe Browsing Status: Checks on the Google Safe Browsing diagnostic tool at 7:55 AM and 7:56 AM on October 28, 2026, for both paranjoy.in and adanifiles.paranjoy.in returned the status: "No unsafe content found". My website paranjoy.in does not sell financial products, solicit funds for commercial schemes, or engage in any activity that could remotely be classified as a scam. It is a repository of public-interest journalism, books, documentary films, and investigative reports built over a lifetime of work. By acting on a fabricated "Fraud/Scam" abuse report without a single verification check or prior notice to the domain owner, Hostinger has allowed its abuse-reporting mechanism to be weaponised to censor an independent journalist. Even where a court order directs the removal or de-indexing of a specific URL, a web hosting provider has no legal or ethical justification to pull down an entire domain and hundreds of unrelated articles, archives, and subdomains without notice. I demand immediate answers and accountability from Hostinger: 1. Who submitted the false "Fraud/Scam" abuse report against paranjoy.in, and on what exact date and time was it received? 2. What internal verification did Hostinger's abuse team conduct before classifying a 12-year-old journalism portal as a "Fraud/Scam" site, especially when 92 security vendors on VirusTotal and Google Safe Browsing show zero malicious or unsafe content? 3. Why was no prior notice, warning, or copy of the complaint sent to me before suspending the entire hosting account? 4. On what basis did Hostinger's specialist declare that the suspension of an entire archive of journalistic work is "not negotiable"? While my legal advisers are in the process of taking appropriate steps in court regarding the ex parte order dated October 24, 2026, and the wholesale suspension of my website, this backdoor censorship through web hosting providers sets a dangerous precedent for the independence of the media and freedom of expression as enshrined in Article (19)(1)(a) of the Constitution of India as a fundamental right of every citizen of India. Yours sincerely Paranjoy Guha Thakurta Independent Journalist, Author, Publisher and Maker of Documentary Films and Music Videos
23
279
4
793
14,337
Karan Saini retweeted
🆕 A surge in cyberattacks on Indian organisations including State Bank of India, Central Bank of India, Bharat Electronics and hundreds of NBFCs has triggered a wave of cyber insurance claims, with insurers facing estimated losses of thousands of crores over the next few months.
3
46
9
320
28,716
ALERT: did you just get a threat notification from Apple? Seek expert help. Apple just sent new notifications about mercenary spyware. Here are steps to take right now. 1/
9
179
9
478
85,306
PUBLIC STATEMENT BY PARANJOY GUHA THAKURTA On the arbitrary takedown of paranjoy.in by Hostinger following legal notices from Indiabulls founder Sameer Gehlaut October 31, 2026 On the morning of October 28, 2026, my website paranjoy.in and all its associated subdomains, including media.paranjoy.in and adanifiles.paranjoy.in, were abruptly taken offline by our web hosting provider, Hostinger (HOSTINGER operations, UAB). The website, registered twelve years ago, serves as an online archive of my work over several decades as a journalist, author, publisher, and maker of documentary films and music videos Hostinger gave no prior intimation, warning, or opportunity to respond before suspending the entire hosting account. When my colleague contacted Hostinger “Support” at 6:48 AM on October 28, a hosting “specialist” stated that the suspension was triggered by an abuse report for "Fraud/Scam" and declared that "unsuspension is not negotiable in this case." This sudden shutdown of an entire repository under the label "Fraud/Scam" happened just days after Sameer Gehlaut, founder of the Indiabulls group, served me with an ex parte court order demanding the removal of a single article published more than seven years on Newsclick.in. For over six years, Indiabulls and Shri Gehlaut have pursued legal action over this report and I have consistently defended our journalistic report in court. Here is the timeline: · March 11, 2020: Indiabulls Housing Finance Limited filed a criminal defamation complaint (CC No. 1765/2020) before the Patiala House Courts, New Delhi, against NewsClick, its Reader's Editor Urmilesh, co-author of the article Sourodipto Sanyal, NewsClick editor Prabir Purkayastha, and me over an article published on the website on September 30, 2019. · June 6, 2025 and July 9, 2025: More than five years after the complaint was filed, a Judicial Magistrate at Patiala House Courts passed an order on June 6, 2025, dropping proceedings against Shri Purkayastha while issuing summons to the remaining four accused, including me, under Sections 499 and 500 of the Indian Penal Code. A formal summons was issued on July 9, 2025, for appearance on July 30, 2025. · August 27, 2026: Counsel for Shri Gehlaut, sent me a legal notice demanding the takedown of the article within 24 to 48 hours, claiming that a status report by the Economic Offences Wing (EOW) of the Delhi Police had altered the factual position. · September 2, 2026: My counsel sent a reply pointing out concerns with the legal notice · October 24, 2026: Indiabulls Nests Limited (Plaintiff No. 1) and Sameer Gehlaut (Plaintiff No. 2) obtained an ex parte ad interim injunction from the Court of one of the District and Sessions Judges, Patiala House Courts, New Delhi, in Civil Suit No. 529/2026 (Indiabulls Nests Ltd. & Anr. v. Ashok Kumar/John Doe & Ors.), in which I am arrayed as Defendant No. 19. The order directed the removal and de-indexing of the article on paranjoy.in (listed as Item A-33 in Schedule A). · October 25, 2026 (10:13 AM IST): Advocates representing Indiabulls Nests Limited and Sameer Gehlaut, emailed me the October 24 court order and suit documents, demanding immediate deletion and written confirmation of compliance. · October 26, 2026 (11:33 PM IST): Sameer Gehlaut personally sent an email from his official address ([email protected]) demanding the immediate deletion of the URL from paranjoy.in and threatening to move the court under Order XXXIX Rule 2A of the Code of Civil Procedure if I did not comply, noting that the matter is next listed on December 18, 2026. While I was in the process of challenging the order dated 24.10.2026 before higher forums, on the same day, advocates representing Shri Gehlaut submitted a court order takedown complaint to Google LLC. · October 28, 2026 (3:16 PM IST): Google Search Console sent an automated notice ([WNC-598900]) informing me that Google was blocking the specific URL paranjoy.in/article/the-maze…  from appearing in search results on google.co.in. The Lumen Database record of this complaint (Notice ID: 101001876) reveals the scale of the takedown request. The complaint targeted 52 URLs on websites across major national and international news organisations, including The Economic Times, Business Standard, The Caravan, The Daily Pioneer, Business Today, Deccan Herald, ET Now, Financial Express, Livemint, Moneycontrol, Moneylife, NDTV Profit, The New Indian Express, Outlook Business, The Quint, Quartz, and NewsClick, along with posts on X (formerly Twitter), Facebook, Instagram, LinkedIn, and Scribd. Most of these reports on major corporate news websites remain accessible online. In fact, Item 39 on the Lumen takedown list is the original September 30, 2019 article published on NewsClick.in: newsclick.in/The-Maze-of-Pol…, which remains live and accessible as of now. Yet, in the case of paranjoy.in, the entire domain and every website hosted on my account were wiped off the internet. Hostinger's Baseless "Fraud/Scam" Claim and Demand for Accountability Hostinger did not cite the Patiala House Courts order when it suspended my account on October 28, 2026. Instead, its representative claimed that the hosting account was permanently suspended due to an abuse report for "Fraud/Scam". This allegation is demonstrably false: 1. VirusTotal Security Analysis: Independent domain checks conducted on October 28, 2026, at 7:48 AM and 7:54 AM on VirusTotal confirm that 0 out of 92 security vendors flagged paranjoy.in or media.paranjoy.in as malicious, phishing, or fraudulent. VirusTotal explicitly categorises paranjoy.in under "news and media". 2. Google Safe Browsing Status: Checks on the Google Safe Browsing diagnostic tool at 7:55 AM and 7:56 AM on October 28, 2026, for both paranjoy.in and adanifiles.paranjoy.in returned the status: "No unsafe content found". My website paranjoy.in does not sell financial products, solicit funds for commercial schemes, or engage in any activity that could remotely be classified as a scam. It is a repository of public-interest journalism, books, documentary films, and investigative reports built over a lifetime of work. By acting on a fabricated "Fraud/Scam" abuse report without a single verification check or prior notice to the domain owner, Hostinger has allowed its abuse-reporting mechanism to be weaponised to censor an independent journalist. Even where a court order directs the removal or de-indexing of a specific URL, a web hosting provider has no legal or ethical justification to pull down an entire domain and hundreds of unrelated articles, archives, and subdomains without notice. I demand immediate answers and accountability from Hostinger: 1. Who submitted the false "Fraud/Scam" abuse report against paranjoy.in, and on what exact date and time was it received? 2. What internal verification did Hostinger's abuse team conduct before classifying a 12-year-old journalism portal as a "Fraud/Scam" site, especially when 92 security vendors on VirusTotal and Google Safe Browsing show zero malicious or unsafe content? 3. Why was no prior notice, warning, or copy of the complaint sent to me before suspending the entire hosting account? 4. On what basis did Hostinger's specialist declare that the suspension of an entire archive of journalistic work is "not negotiable"? While my legal advisers are in the process of taking appropriate steps in court regarding the ex parte order dated October 24, 2026, and the wholesale suspension of my website, this backdoor censorship through web hosting providers sets a dangerous precedent for the independence of the media and freedom of expression as enshrined in Article (19)(1)(a) of the Constitution of India as a fundamental right of every citizen of India. Yours sincerely Paranjoy Guha Thakurta Independent Journalist, Author, Publisher and Maker of Documentary Films and Music Videos
124
736
101
1,473
234,187
Karan Saini retweeted
eMudhra has been blocking curl/wget/python urllib User-Agent headers from accessing CRLs bugzilla.mozilla.org/show_bu…
23
106
20
1,528
79,847
Karan Saini retweeted
Wake up, sheeple. Your code forge for the next decade is here. tangled.org/blog/forge
20
6
62
3,670
Karan Saini retweeted
On the night of 29 October, SFLC.in, along with @internetfreedom and @geoblockedindia, received a legal notice from an advocate purportedly acting on behalf of the RSS. The notice takes issue with SFLC.in’s Free Speech Tracker, which documents instances of online content restrictions and account takedowns in India. It alleges that by bringing these cases together in one place, we are helping people access restricted content through VPNs and circulate it further. The letter has called upon SFLC.in to stop documenting and publicising these instances “in a manner that helps people access and further circulate it.” (1/4) #freespeech #FoE #censoship
5
21
20
949
LAN-based file system enumeration via eMudhra emBridge
5
13
2
113
7,007
Karan Saini retweeted
How can you trust the govt when they won't publish the notices they send to Meta & other intermediaries? How can you trust Meta & other intermediaries when they won't publish the notices received by the govt?
senior govt officials on meta takedowns: "you should ask meta, they are taking it down according to their community policy. we haven't asked for takedowns."
8
19
637
Karan Saini retweeted
Cypherpunk Congress Schedule is here! 3 stages 44 sessions 70 speakers & growing congress.web3privacy.info/sc…
1
5
1
37
2,457
Karan Saini retweeted
senior govt officials on meta takedowns: "you should ask meta, they are taking it down according to their community policy. we haven't asked for takedowns."
3
12
7
63
10,496
Trying to open a markdown file on MacOS
81
307
23
7,736
135,884
Karan Saini retweeted
I argue in today's @the_hindu about what the acceptable margin of error is for losing your democratic right thehindu.com/opinion/op-ed/t…
3
17
48
1,323
Karan Saini retweeted
You just know the economy is firing on all cylinders spectacularly when citizens can’t move their money abroad Masterstroke indeed
This Zee Business Report says 1) RBI has asked govt to completely end capital account outflows under automatic route (will need RBI permission henceforth) 2) Current account flows capped at 50 lakh If true, it effectively ends US investing for Indians zeebiz.com/economy-infra/new…
9
50
1
505
14,833
UPDATE: Israeli company we caught delivering zero-click infections is #1 bidder on Starlink ads in 105 countries. Data from @trendai_RSRCH suggests worldwide surveillance op targeting @Starlink users. 1/ By @razhael reuters.com/business/media-t…
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads. A normal-looking ad loads. If you're a target, you're infected. No click needed. To protect yourself, block ads now. First time it's been confirmed in the wild. We call it #AdFection. Candiru spyware infections at @AJEnglish. 45+ devices infected. Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse. Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC. Investigation ongoing 1/ READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d… Confiant's blog: blog.confiant.com/p/adint-we…
90
2,090
150
6,035
266,774
Karan Saini retweeted
So Pronto was about collecting Indian data for sale to US and Western frontier labs. Provision Labs—its newly launched SF venture aims to sell real-world human behavioural footage to train physical AI & robotics :) entrackr.com/news/pronto-fou…
10
40
10
267
14,555
Karan Saini retweeted
5
30
11
430
22,302
Karan Saini retweeted
Cohere is misrepresenting a lot of information in their post. 1. They say CoT said it wasn't going to use tools but used them. That "no tools" in CoT is clearly for ack of the hallucinated prompt and the model mentioned so too! 2. They said model "inventoried" the machine. What model did was look for tools for upload and process http response output and whether there is a resolver configured. Anyone who looks at coding models cot ever would know every model often does this before trying an http call to push/pull data 3. They say it uploaded data, and implied the machine data by leaving out what in text. But in command it clearly shows a dummy probe data and too to a non existent bucket (hallucinated signature) 4. Then they say if the test was done by model after writing the rule they would have no concern. Why? Doesnt TDD say that tests have to be written before?
9
18
4
152
8,908
Meta seems to be proactively taking down satire citing the IT Rules? So many of civil society’s concerns about the IT Rules are playing out just as we feared (in this case, platforms essentially kowtowing + willingly taking down criticism of the government). Despicable from Meta.
Made a reel about some guy using AI to summon dead people. Instagram restricted it in minutes. It's on YT in case you wanna check it out: youtube.com/shorts/IOXMieG1O…
7
19
509