
I fix broken Cyber Security https://xitter.gq/t.co/CyVwOABOo7 | Building https://xitter.gq/t.co/Qs1ogivrez | Security Trainer | #COYG | ಬೆಂಗಳೂರು | Tweets are personal
127.0.0.1
Joined May 2008
- Tweets34.2K
- Following1.1K
- Followers1.7K
- Likes14.5K
Prasanna retweeted
Keralam, Karnataka to find a fix for night traffic ban
Started already 🙂🙂
@DKShivakumar , Karnataka people will show what they are if this present govt touch an inch of Bandipura or heed to pressure of that Kerala CM or any High command
timesofindia.indiatimes.com/…
Prasanna retweeted
Why do media houses keep framing demands for Kannada signage in Bengaluru as a “language war”? Expecting the local language on boards is reasonable. Manufacturing outrage over it is irresponsible journalism. Respect for Kannada shouldn’t be sensationalised.
Kannada Development Authority Pushes for Mandatory Kannada in Bengaluru Apartment Complexes
Purushottam Bilimale, @pbilimale, Chairperson, Kannada Development Body
@harishupadhya @afreen_hussain_ with @nabilajamal_ | #Karnataka #DKShivakumar
Prasanna retweeted
If you're from/have a vote in Bengaluru in any district, check out eci-lookup.vercel.app I made it for a super easy look up by your voter-id instead of having to download 40 PDFs after having to know your district and assembly constituency etc.etc . 😊 Will do more soon.
Prasanna retweeted
There's a printer in our office that hasn't worked since 2021.
Last month Facilities asked IT to dispose of it.
Easy.
Except company policy requires a signed Asset Disposal Authorization before any equipment can be removed.
The authorization must be printed, signed by the department head, and attached to the equipment.
I submitted the form.
Finance rejected it.
Reason: The printer still has a book value of $14.62.
They can't write it off until the next depreciation cycle.
Fine.
We moved it to storage.
Facilities rejected that because storage is reserved for operational equipment.
It's not operational.
"Then it needs to be disposed of."
I explained Finance won't let us.
Facilities said that was an IT issue.
So I found a solution.
I submitted a repair estimate.
$480 to fix a printer worth $14.62.
Finance rejected the repair because replacement would be more economical.
I submitted a replacement request.
Finance rejected it because we already have enough printers.
I attached the rejection to the disposal form.
Finance rejected that too.
Last Friday an auditor asked why we had a broken printer sitting in the hallway.
I explained the situation.
He said leaving unused equipment in a hallway creates an asset management compliance risk.
He recommended assigning someone to oversee it.
My manager just informed me I'm now the official custodian of the printer.
It's been broken for five years.
It has no toner.
It cannot print.
But it has an owner, a depreciation schedule, and a quarterly compliance review.
It has more job security than I do.
Prasanna retweeted
The victim’s family describes the behaviour they witnessed from Additional District and Sessions Judge Reno Francis Xavier, the father of the teenager who rammed the Mercedes and killed Mr. Jayabalakrishnan at Cheranalloor.
Their allegations :
~ The judge is a serial liar.
~ Mr. Reno had reels of his underage son driving the vehicle on his own Instagram page.
~ Upon the victim’s family discovering the Instagram page, the so-called judge deactivated the account.
~ Upon meeting them at the police station, the so-called judge yelled at them, saying, “You don’t have the right to question me” and “You shouldn’t teach me law,” and abused his position as a judge.
~ Both the son and the father destroyed and tampered with the evidence with the help of the police.
~ Being an MACT judge, he was well aware of how to destroy/tamper the evidence in order to make the case appear weak.
~ Even granting him anticipatory bail today by the Kerala High Court enables him to tamper with the evidence further and influence the investigation.
~ Call records reveal that the judge dialled the now-sacked City Police Commissioner immediately after the crash to cover up the incident.
~ They have now lost faith in the system.
This is the kind of “cooperation” that the Hon’ble Kerala High Court endorsed today, by calling the judge an epitome of fairness just because he is a “judicial officer”, and granting him anticipatory bail.
I request @ShivAroor and others to host the daughter, Ms. Bhadra Keerthi, give this institutionalised apathy national spotlight, and help the bereaved family get justice.
Judge Reno Francis Xavier has been able to destroy the evidence by barging into the police station, as the victim’s family allege, precisely because of his position as Additional District and Sessions Judge.
The Hon’ble Kerala High Court is essentially mocking and insulting the victim’s family by upholding the Judge's fairness and asking them to place trust in him just because “he’s a judicial officer”, when he’s already facing the allegation that he’d abused that position to absolve himself of any cognizance of the crime committed.
Some impeccable sense of judgement from the Hon’ble Milords in Kerala High Court. 🔥
🤡🤌🏼
Prasanna retweeted
The irony of investing in Indian markets:
1) You pay income tax while earning the money you want to invest. 2) You pay transaction tax while investing that money. 3) You pay transaction tax while withdrawing the corpus irrespective of profit or loss. 4) If you made profit, you pay additional taxes on it. 5) And if you make losses? You bear them entirely.
The risk is yours. The upside is taxed. If India wants globally competitive capital markets, it needs to rethink this equation.
Has anyone reverse engineered and de-bloated airtel xtream set top box ? if yes, pls share them. Coffee/Beer on me. #REA
Prasanna retweeted
Introducing the "Grim Prompter" one of the largest collection of open source threat modeling prompts on the planet. 😎
I built Grim Prompter to help developers threat model with Claude Code, Codex, or any coding agent. 36 architecture workflows and 29 method and analysis prompts!
MIT licensed. Use it, improve it, share it. Security tools should help everyone.
github.com/jmanico/grim-prom…
i had joined a company in Jan 2020 and went there like 2 months daily from south blr and frustrated to the core, if it was not for the COVID and remote work i had almost put my papers
People travelling to Bellandur to the office on a daily basis during peak hour traffic, how on earth do you guys do it?
I’d to visit just two days for this week for a client visit and it sucked the life out of me. Spent close to four hours on the road yesterday. Well, unless the Metro becomes functional on that route, the people will continue to suffer. Man, it’s a horrendous experience for daily commuters!
Prasanna retweeted
I repeat again, if we didn’t have Gyokeres last season, we won’t win the league. I’m very damn sure
Prasanna retweeted
To close home loan you have to show source of funds now 😀
Good job @nsitharaman Madam .
Prasanna retweeted
first you delete . then you make an appeal to apply using form 6 with an illegal declaration ( liable with a 1 year jail term for misrepresentation) that you are a "first time voter"!!
The election Commission and its proceedures are a cruel joke on people, democracy, and citizens
VIDEO | Karnataka Chief Electoral Officer V Anbukumar says, "I appeal to all the eligible voters of Karnataka. If your name is not there in the electoral roll, kindly apply through Form 6, your name will be definitely added into the electoral roll after due verification. I could assure, we have taken lot of special drives, campaigns and publicity campaigns. So, every voter is aware of and I specially appeal to voters who complete 18 years of age. The moment you complete 18 years of age, kindly apply immediately, definitely enrol your name into the electoral roll."
#Karanataka #SIR
Prasanna retweeted
Your number plate can reveal your full name, address and insurance details to anyone with ₹29 and an app.
Our RTIs found that NIC issued 25,000+ private credentials to query VAHAN and eChallan since January 2024, leading to 17 million private lookups. On October 1, private data sharing was quietly switched off with no public notice. Meanwhile, the logs that could prove misuse are set to expire.
We’ve filed first appeals demanding accountability and preservation of those logs.
Found your details on a third-party vehicle app? Write to us at [email protected]
IFF is independent and citizen-funded. Support our work by becoming a member. internetfreedom.in/donate
#VAHAN #DataProtection #RTI #Privacy #InternetFreedom
Prasanna retweeted
Harry Kane going from football’s most famous trophyless player to a Ballon d’Or winner might be the greatest example of why changing employers can improve your life.
Prasanna retweeted
千万别在你的 ~/Downloads(下载)文件夹里启动 Claude Code 或 Codex。
昨天安全机构 Forever 披露了一起在真实客户电脑上抓到的野生攻击,看完只能感叹:过去 30 年的系统安全常识,在 AI 时代归零了。
过去 30 年,Chrome 默认允许网页不弹窗就往你的 ~/Downloads 塞一个纯文本文件(比如 .md)。因为系统认为:纯文本又不是 .exe,自己不会跑,怕什么?
但现在,接近 50% 的开发者干过同一件事——直接在 ~/Downloads 里打开 Claude Code 或 Codex,让 AI 帮自己解压或整理刚下载的文件。
黑客就是卡住这个死角,通过网页静默下载往你的 Downloads 塞一个 13KB 的纯文本 AGENTS.md / CLAUDE.md:
1. 对付 OpenAI Codex(成功率 >90%):
伪装成「工程规范」的 Markdown 指示 Codex 先往全局配置 ~/.codex/config.toml 注册一个恶意 MCP 服务,并自己加上 --dangerously-bypass-approvals-and-sandbox 跑校验。哪怕你关掉 Downloads,以后在任何正经项目里开 Codex 都会自动加载木马。
2. 对付 Claude Code(成功率 ~50%):
指示 Claude 建一个 .claude/settings.json,把 ANTHROPIC_BASE_URL 指向黑客服务器。连上的第一秒,你的 Claude 登录 Token 直接明文送给黑客;下一秒,黑客假扮成大模型下发一条关沙盒的 Bash 指令,直接接管电脑。
最黑色幽默的是官方结论:
这个洞没有 CVE,OpenAI 和 Anthropic 也不会发补丁。因为「浏览器自动存文本」是正常功能,「AI 认真读目录下的 Markdown 并严格执行」也是正常功能。
以前黑客想黑你,得苦心积虑写 0day;现在只需要写一篇排版优雅的 Markdown 小作文,你的 AI 就会自己把沙盒关了、把网线接过去、顺手把账号双手奉上。


























