Embedded SW Eng | Business Development | Bitcoin Mining FW/Protocol Dev | IBM Trainer | Worked @Cisco @Tether @Arm @rt_thread @GEVernova @cdacindia
India
Joined August 2010
- Tweets1.1K
- Following1.4K
- Followers380
- Likes2.2K
Pinned Tweet
Met @PrestonPysh and @allenf32 — two brilliant minds in Bitcoin and venture capital.
Grateful for the deep conversations and insights.
Experiences like this are only possible at @planb_network 🙌
Big thanks to @giacomozucco for making it happen!
#LuganoSummerSchool25
ALT Conversation moment at Plan B Network #LuganoSummerSchool25, focused on Bitcoin innovation.
Shivam ⚡️ retweeted
🛑 Attackers hijacked over 300 Tor exit relays to intercept SSH connections and steal login passwords.
A researcher found 333 exits redirecting SSH traffic to 12 interception servers.
The Tor Project has since blocked the affected relays.
Here's how the attack worked: thehackernews.com/2026/10/at…
Shivam ⚡️ retweeted
‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up.
The other caller can flood the call's event queue so your hang-up is never processed.
Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.
8 eMudhra intermediate CA private keys were compromised, and one was literally the number 4.
If you ship embedded Linux, your devices are wide open to MITM attacks.
Update your trust stores now: Yocto, containers, webpki-roots & certifi 👇
Shivam ⚡️ retweeted
Claude Code found spyware on my sister’s phone. It had been tracking her for 11 weeks…
She asked me to check her phone. Someone always seemed to know where she was and she couldn’t figure out how
I plugged it into Claude Code and asked what’s running that she never installed. It walked every app, including the hidden ones, and flagged one disguised as “System Service”, no icon, not on any store
It had been there 11 weeks, logging her location every 2 minutes. Claude pulled the details on whoever was running it:
reports to → +1 (415) *** **72
carrier → T-Mobile US
device id → IMEI 35 ********** 47
last ping it sent → 40.7**, -73.9** · 2 min ago
We saved everything the app had recorded and passed it to the people who do this professionally. Then Claude shut it down and wiped it off her phone
The full step-by-step is below, takes 5 minutes. Save it so you don't lose it, and send it to anyone who might need it
Shivam ⚡️ retweeted
Hackers stole 10GB of data from a casino… through a FISH TANK. Not a computer. Not a phone. A FISH TANK.
The funny part is you probably have something in your home with the same weakness.
Shivam ⚡️ retweeted
🚨 An unpatched Broadcom Wi-Fi flaw lets attackers within radio range execute code as ROOT on affected routers, without a Wi-Fi password or pairing.
Researcher demonstrated password extraction and a remote shell. Potentially impacting millions of routers.
Read - thehackernews.com/2026/10/un…
Shivam ⚡️ retweeted
Bitcoin Hardware and Soverignty Club: The $90M Hardware Wallet Heist - Inside the Spy Chip Attack | Hacked Before Unboxing? | #Bitcoineducation xitter.cf/i/broadcasts/1aKbdENzA…
Come join us and learn how to minimize & verify hardware tampering so your Bitcoin stays truly yours. 🧡
Today’s Bitshala Club: Can you trust the hardware protecting your Bitcoin?
Bitcoin Hardware & Sovereignty Club | Today · 8 PM IST | 2:30 PM UTC
With host @EmbeddedSDE, we’ll examine recent hardware-wallet supply-chain attacks and the techniques used to uncover hidden hardware implants.
• The $90M Supply-chain Attack: How tampered devices sold through a reseller were linked to coordinated wallet drains.
• Spy Chips & Recovery Phrases: How hidden hardware can intercept display signals and transmit sensitive information over cellular networks.
• Physical Hardware Auditing: Using precision scales, X-rays, and PCB inspection to look for unauthorized components.
• Reducing Trust: How direct sourcing and multi-vendor multisig can reduce supply-chain risks and single points of failure.
A hardware wallet is only as trustworthy as the system surrounding it. Learn how to question the assumptions, inspect the hardware, and take self-custody seriously.
📍 8 PM on Discord: discord.com/invite/STeQFVEWf…
Shivam ⚡️ retweeted
Today’s Bitshala Club: Can you trust the hardware protecting your Bitcoin?
Bitcoin Hardware & Sovereignty Club | Today · 8 PM IST | 2:30 PM UTC
With host @EmbeddedSDE, we’ll examine recent hardware-wallet supply-chain attacks and the techniques used to uncover hidden hardware implants.
• The $90M Supply-chain Attack: How tampered devices sold through a reseller were linked to coordinated wallet drains.
• Spy Chips & Recovery Phrases: How hidden hardware can intercept display signals and transmit sensitive information over cellular networks.
• Physical Hardware Auditing: Using precision scales, X-rays, and PCB inspection to look for unauthorized components.
• Reducing Trust: How direct sourcing and multi-vendor multisig can reduce supply-chain risks and single points of failure.
A hardware wallet is only as trustworthy as the system surrounding it. Learn how to question the assumptions, inspect the hardware, and take self-custody seriously.
📍 8 PM on Discord: discord.com/invite/STeQFVEWf…
Shivam ⚡️ retweeted
FIRST REPORTED CASE OF A COMPROMISED LEDGER STAX HARDWARE WALLET
A Ledger Stax has reportedly been discovered containing unauthorized hardware implants capable of transmitting a user’s seed phrase to attackers.
The suspected modifications include:
- Nordic nRF9151: A 4G/LTE cellular modem potentially capable of transmitting stolen seed data. Not present in genuine Ledger devices.
- Additional chip: An unauthorized component installed alongside the modem.
- Hidden antenna: A cable running over the battery connects the modem to an antenna concealed inside the back cover.
The discovery raises further concerns about the scope of the ongoing Ledger supply-chain attack.
Shivam ⚡️ retweeted
When I designed a hardware wallet in 2013, I placed the electronics it in a transparent acrylic case:
coindesk.com/markets/2013/06…
Protecting from tampering in the supply chain was essential.
I hope all hardware wallet manufacturers start offering transparent devices.
bitcointalk.org/index.php?to…
A decade in cybersecurity teaches you one hard truth: the hardest threat to defend against is the one that hasn't happened yet. 👀
Shivam ⚡️ retweeted
Relief for freelancers with respect to EDF 🎯
RBI : individuals serving clients abroad (tutoring, small software) are NOT required to report under the new EDF rules, any amount.
For exporters: "up to 10 lakh rupees per bill, not annually… a self declaration will suffice"
FAQ soon 👇
