19 // hacker, software engineer & security researcher // https://xitter.cf/t.co/jXBFqtUJef // autistic subby boypup // zero days, ai, exploits & malwares @IITKanpur

india
Joined March 2023
macos apparently doesn't trust the compromised emudhra ca anymore, but apple's own curl still happily accepts certificates chaining to it because /etc/ssl/cert.pem hasn't caught up.
7
10
200
3,764
a fix for this is mentioned in the disclosure page (emudhra.we-have-a-problem.co…).
1
19
769
Replying to @GoI_MeitY
However, some social media accounts are indulging in fear mongering about the impact of this incident. The facts of the case are as follows: eMudhra operates in two distinct areas:
11
130
1
1,274
9,919
when you ask CERT-In about eMudhra
5
31
1
297
4,598
meity-senpai… did you just call the entire infosectwt a bunch of fearmongers? 👉👈🥺
Replying to @GoI_MeitY
However, some social media accounts are indulging in fear mongering about the impact of this incident. The facts of the case are as follows: eMudhra operates in two distinct areas:
17
83
5
1,455
22,266
LiteLLM got compromised again
11
9
257
5,817
i just wanna be a dumb little boypup but i spent the whole day dealing with cybersecurity incidents and being a responsible grownup. i don’t wanna be smart anymore i just wanna curl up in someone’s lap, get my hair played with and be told i’m a good boy and did enough today :(
64
43
16
1,114
25,845
slop word salad with zero responsibility, zero accountability and absolutely nothing of substance.
A statement issued by CERT (Computer Emergency Response Team) warns of a compromise involving eMudhra’s eight intermediate CA certificates due to weak cryptographic keys, which could allow attackers to issue fraudulent TLS certificates and intercept or modify encrypted communications. The advisory outlines mitigation measures, including security updates, certificate replacement where required, and verification of certificate trust chains.
9
85
2
951
16,251
i cum faster than CERT-In can issue an emergency advisory. and that’s not even a high bar.
Nothing on CERT-IN website. I wonder what the emergency response in CERT really means?
28
13
5
458
9,816
banger video, banger exploit and banger music
php2shell Tomorrow is a helluva day.
4
12
262
9,685
one of eMudhra’s CA private keys was literally 4. google and mozilla acted within hours. MeitY’s CCA licenses eMudhra. CERT-In hasn’t issued a public advisory till now. eMudhra works as a technology provider for government project. literally zero accountability.
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
54
266
27
2,091
62,777
eMudhra works as a technology provider for multiple government projects by the way. xitter.cf/kingslyj/status/211274…
Replying to @kbsingh
Both US Inc and NL BV entities had the same compromise. Indian eMudhra Limited is effective owner of a mess of international entities. eMudhra Limited lists sarkari license as a Key Business Risk impacting 20% annual revenue.
1
4
109
5,639
has been over two months now
15
46
1
984
23,355
rickroll on aadhar website 😭😭😭
149
207
69
3,092
110,949
took this picture from the world's tallest building – at Dubai, United Arab Emirates
14
2
3
478
9,810
hi dubai
9
2
522
10,587
deedy is right. india treats its brightest minds like shit and then cries about brain drain. why should talented people stay in a country that consistently punishes competence and rewards mediocrity?
The smartest Indians continue to come to build in the US for the simple reason that the economic incentives are far far better. Perplexity ($20B), Skild ($14B+), Baseten ($13B), Together ($8B), Glean ($8B), Modal ($5B), Rubrik ($25B), Harness ($5B), Blacksmith, Parallel, Greptile, CodeRabbit, Composio, Distyl ($2B), Resolve, Luma, Cartesia, Wispr, dMatrix, Arize and many more - all started by at least one Indian-born founder. The US is a far easier to raise capital in with far less dilution. Most Indian companies are switching where they're domiciled to get access to the US capital markets. Every single Indian venture firm is trying very hard to invest in the US or risk not participating in the AI race (ironically, the management fees of venture firms are so high in India relatively that this is the one group that net of carry actually has incentive to be in India because they take home well north of a living wage whether or not funds perform do) While Zomato ($35B now, $8B at IPO) might be the biggest outcome in Indian venture, Cursor ($60B), Reflection (potentially $20B+), World Labs ($8B), OpenRouter ($8B), HuggingFace ($12B) and of course the $1T+ big labs quickly make those outcomes seem small and happen on a much smaller time scale, with much higher IRR. Engineers at these startups regularly get paid $1M/yr, and make $10M+ on exit. Even in BigTech, it is trivial to pull up levels fyi and see that if you're L6/L7+ with ~10 years of experience, you're making $1M/yr there too. And of course, we all know the slew of Indian CEOs of companies here, not to mention a huge bench of lesser known executives across the board in public and private companies. I say all this because every time there is a slight immigration hiccup in the US, I hear the online pleas to "build in India", I struggle to understand why most engineers, academics or founders would do that net of desire to be close to family, failure to obtain visa and devout patriotism. This is not a superiority thing or a US v India thing. The economic incentives at least for technologists to being in the US outweigh India by at least an order of magnitude.
48
224
13
2,564
40,113
guess who ghosts me more than my ex
14
65
2
918
12,910