BG retweeted
eMudhra login to download customer's certs can be cracked
Their 1FA login generates a OTP & sends it. It also sends a RSA public key to front end
They haven't rate limited checks, so you can offline brute force 0 to 9999 encrypted with public key & find the OTP
@ni5arga
BG retweeted
🆕 A surge in cyberattacks on Indian organisations including State Bank of India, Central Bank of India, Bharat Electronics and hundreds of NBFCs has triggered a wave of cyber insurance claims, with insurers facing estimated losses of thousands of crores over the next few months.
BG retweeted
Northflank, a K8s fleet management & deployment system has been hacked.
They power @sentry @Upwork @figma @CoreWeave and apparently many other companies.
status.northflank.com/cmvv0r…
BG retweeted
Fuck around and find out.
When Railway was breached on 21 Oct, Northflank dunked on them and urged people to migrate over to them because of that breach.
9 days they got hacked, the same way.
Zero sympathy: instead of securing you were busy dunking
Northflank, a K8s fleet management & deployment system has been hacked.
They power @sentry @Upwork @figma @CoreWeave and apparently many other companies.
status.northflank.com/cmvv0r…
BG retweeted
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
BG retweeted
fuuuuuuck
coindesk.com/business/2026/1…
Binance loses $5.7 billion in largest crypto hack to date
BG retweeted
I often get asked why do Indians incorporate fully indian companies in the US?
Capital availability, market size etc aside, the simple answer is that because it’s easier for two guys sitting in Bangalore to incorporate a Delaware entity and get a US bank account (2-3 days) than it is for them to incorporate a Pvt Ltd Co on MCA portal and get a Corporate Bank account (2-3 weeks), even if the bank account branch is literally in the same building as them.
insane that chatgpt is also using an unofficial api.
By popular request, you can now text your dot.
Give it a task to take off your plate or something to keep an eye on, using text, photos, or even voice notes. It will text you proactively with relevant updates.
Safe, secure texting via iMessage or RCS. You’re the only one who can text your dot, and your dot can only text you. Rolling out now as a preview for Pro users in the US.
