Sir ka ye job to AI bhi nahi kha sakta.
REALITY CHECK: 28 MLC seats, Congress wins ZERO — including the loss of a sitting member’s seat in Karnataka.
MLC elections are not a direct reflection of voter mood, but they do offer clues to regional power equations, party organisation and the local level challenges facing Congress. Zero wins across 28 seats is a result the party cannot afford to ignore.🙏
After all these years on this platform, I finally got 500 RTs for the first time in my life. This tells you how bad I am at social media and expressing my feelings and opinions. Smh.
Saying this again. AI is not the problem. People who refuse to learn, adapt or improve are. If you had time to make 50 reels about your life as an engineer but no time to upgrade your skills, you made your priorities clear. Now live with the consequences.
Prasanna retweeted
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Just read that public Discord messages may soon show up in Google search results. If you are in a public, discoverable Discord server and its privacy settings allow it, your new messages could be found through a Google search. Be careful what you post!
Years of learning to hack systems, analyse malware and find vulnerabilities, only to realize the hardest thing to hack is someone’s heart.
I swear I don’t even recognise more than 70% of the celebrities these days. I mean kisko bhi koi bhi celebrity bana deta hai yaar.
Prasanna retweeted
Ppl need to understand that the celebrity they are defending to such a extent on this app doesn't know about your existence and they dont care a bit about you. Stop behaving as if they are your responsibility. We all really need to calm down. Its okay to have a diff of opinion
Prasanna retweeted
apparently 4 is the new 256-bit security standard. eMudhra walked so GoAhead could crawl. 😭😭
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Logo ko Twitter pe pyaar mil raha hai and Mujhe to tweets ke reply bhi nahi milta. And I hardly DM anyone 😑
This
#hunter opinion: yes you should build hackbots, but while the bots are running you should hunt manually and struggle hard, it's how you grow as a hacker and it's where the fun is.
Prasanna retweeted
Bug bounty has definitely changed.
I used to spend hours analyzing HTTP requests, switching back and forth between Firefox and Burp Suite.
Now, I open my terminal, point my AI skills at a target, intercept and analyze HTTP traffic using Burp Suite MCP, and offload heavy tasks to my HackBot running on a VPS.
But here’s the thing: AI doesn’t replace your hacking skills. It scales them.
The goal is to get really good at manual hacking first, then use AI to automate and scale what you already know.
Not the other way around.
You don’t start by building a HackBot and expecting it to hack for you when you don’t even understand what it’s doing.
Learn to hack first. Automate second. Scale third.
Keep hacking! ✌️
I would never post my engagement pics myself, but if my partner wants to, who am I to stop her? I mean I really wouldn’t post such pics myself.
Prasanna retweeted
I really want to know what actual work people are doing at Microsoft ?
This man spent more time on shooting reels than doing actual work.
Now we know why microsoft offering voluntary exit
And if you are a techie then Run sudo arp-scan -l on a laptop ( I’m not naming OS here) connected to the Wi-Fi. It lists every device on the network, along with its maker. Camera brands like Hikvision or Dahua, or devices with unknown names will appear:)
