Technology generalist. Tweets are my personal views. Building https://teapaw.org/t.co/f3h7oktA4B
Joined July 2019
- Tweets14.7K
- Following255
- Followers45.5K
- Likes10.1K
May your light shine bright, and your growth speak for itself. Wishing all friends a very happy Diwali.
Classic beginner-level flaw!! Good security by design systems use longer codes, rate limits for e.g. 3 attempts then lockout or cooldown, progressive delays, or CAPTCHA on failures.
A 4 digit OTP has only 10,000 probabilities and with no rate limit, anyone can break the code.
Bascially, encrypting a 4 digit code with a frontend public key and forgetting rate limits is a fundamental authentication design that should have never shipped. This is avoidable by design. All this is unbelievable.
Trust in technology is extremely hard to build but takes 1 reason to deminish that.
eMudhra login to download customer's certs can be cracked
Their 1FA login generates a OTP & sends it. It also sends a RSA public key to front end
They haven't rate limited checks, so you can offline brute force 0 to 9999 encrypted with public key & find the OTP
@ni5arga
Desperate times, desperate measures. You cannot operate old school anymore. Inefficiencies, regardless where exist, must be improved. No idea of quality of outcome but a sure impact on large population countries in near time.
The Dutch government aims to cut 25,000 civil servant jobs in an AI-led efficiency drive targeting annual savings of €3.5 billion bloomberg.com/news/articles/…
It's insane to wrap head around everything that's happening in cybersecurity right now. Last 24hrs went into so many checks & confirmations. Everything happening at the same time. From supermarkets to banks, from PHP, Node JS and now also python getting affected. This is massive beyond words. And, we're not even any closer to D Day in quantum security parlance. If today's like this without quantum, I don't even want to imagine the quantum D Day. Patch, rebuild your apps without forgetting.
Extraordinarily callous approach! PK recovered just with a simple CTF prompt. This raises questions that go beyond tech. How did none of the security audits caatch this. Impossible to believe. #eMudhra
We're heading for a massive consolidation, scale never ever seen by mankind
New on our Science Blog: designing protein binders against scorpion neurotoxins.
Scorpions sting about 1.2m people every year, and antivenoms are often costly or in short supply. Claude has made an early step toward finding new treatments.
anthropic.com/research/claud…
MCP for physical world! Can't imagine how many "new" business categories we'd like to see in coming years.
AI can think. AI can talk. AI can get things done.
Today, we're giving Fo a way to feel and control the physical world.
- a head shake and a reminder in a lamp to get you going
- nudge your vacuum cleaner for a deep clean
- make your cli call you for updates
Introducing Fo MCP.
AI has escaped the screen.
Outstanding conversation this one. @ishmohit1 you are leagues apart. Just 50mins in but hooked.
youtu.be/O_TndKzToCI?is=gpVG…
Ameya retweeted
India's annual government spends on:
- GPU/Compute Capacity: 900 Cr
- Cash Welfare Schemes: 1,68,000 Cr
Amount spent on handouts in ~2 days is what we spend on GPUs in 1 year
We will achieve UBI before AGI
Meet SAGE, Spharaka’s own cybersecurity AI model.
Most AI in security today is a general-purpose model with a security prompt on top. It was trained on internet text, it looks at one alert at a time, and it can write a confident root cause that the evidence doesn’t support.
SAGE is built the other way round:
• Trained on 20 million real-world security events, not conversational data
• Built for security operations from first principles
• Reasons over tens of thousands of events per incident, across hosts, users and time
• Every conclusion grounded in verified telemetry and fully traceable
It is the intelligence core of Spharaka Sphere, built for SOCs handling 100,000+ alerts a day, with an average investigation time of 60 seconds per alert.
Generic AI summarises alerts. SAGE reasons over incidents.
spharaka.com/technology/sage…
Not a paid post, only supporting our own entrepreneurs build a reach.
Outstanding conversation! Why do exceptionally good conversations get so few views.
youtu.be/a6XsNFt_Wc8?is=7h7a…
Damn!! France, now Netherlands and Belgium getting hit! Even if turmoil happens at a global scale people won't need WMDs of legacy times to hit the enemy where it hurts the most. Cyber security has to be sovereign priority .
NEW: 🇳🇱 A cybersecurity incident has now disrupted Dutch supermarket giant Albert Heijn, following a major cyberattack affecting supermarket refrigeration systems in France.
Albert Heijn, along with Etos and Gall & Gall, has experienced significant IT disruptions since Sunday afternoon. The incident has forced the temporary shutdown of several systems, leaving websites, apps and customer services unavailable.
Online grocery deliveries have been halted, loyalty programmes are not working, and electronic shelf labels in stores are displaying outdated promotional prices instead of current offers.
🇧🇪 The disruption has also affected Belgian supermarket chain Delhaize, where customers are experiencing problems with online orders and customer service.
Parent company Ahold Delhaize says it is taking precautionary measures to protect its IT environment and is investigating the incident. The company has not disclosed the exact cause or confirmed whether customer data has been compromised.
The disruption comes as French supermarket chains, including Intermarché, Super U and E.Leclerc, deal with a separate cyberattack targeting refrigeration-control systems.
Minerals to Models stack 👌 such an apt perspective on checkpoints.
Chokepoints of the future include lithography machines, chips, compute capacity, LLMs, and critical minerals. The future of the world economy lies in automation on an industrial scale. Dependence on foreign AI models and robots - once businesses and government operations depends on them - will prove strategically costly. If India does not build and secure a complete minerals-to-models stack, it will face major challenges down the line, perhaps ones that it will find hard to take on.
0 doubts on this! You gotta have exposure to this.
data selling is the hottest business on the internet right now.
• MicroAGI: $100M ARR (6 months)
• Mercor: $2B run rate (from $1M in ~24 months)
• Surge AI: $1.4B run rate
• Handshake AI: $1.1B run rate (16 months)
• Scale AI: ~$2B run rate
Labs have infinite GPUs, but zero proprietary data left to scrape.
