Sir ka ye job to AI bhi nahi kha sakta.
REALITY CHECK: 28 MLC seats, Congress wins ZERO — including the loss of a sitting member’s seat in Karnataka.
MLC elections are not a direct reflection of voter mood, but they do offer clues to regional power equations, party organisation and the local level challenges facing Congress. Zero wins across 28 seats is a result the party cannot afford to ignore.🙏
After all these years on this platform, I finally got 500 RTs for the first time in my life. This tells you how bad I am at social media and expressing my feelings and opinions. Smh.
Saying this again. AI is not the problem. People who refuse to learn, adapt or improve are. If you had time to make 50 reels about your life as an engineer but no time to upgrade your skills, you made your priorities clear. Now live with the consequences.
Prasanna retweeted
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Just read that public Discord messages may soon show up in Google search results. If you are in a public, discoverable Discord server and its privacy settings allow it, your new messages could be found through a Google search. Be careful what you post!
Years of learning to hack systems, analyse malware and find vulnerabilities, only to realize the hardest thing to hack is someone’s heart.
I swear I don’t even recognise more than 70% of the celebrities these days. I mean kisko bhi koi bhi celebrity bana deta hai yaar.
Prasanna retweeted
Ppl need to understand that the celebrity they are defending to such a extent on this app doesn't know about your existence and they dont care a bit about you. Stop behaving as if they are your responsibility. We all really need to calm down. Its okay to have a diff of opinion
Prasanna retweeted
apparently 4 is the new 256-bit security standard. eMudhra walked so GoAhead could crawl. 😭😭
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
I know there is no single tool. And btw legitimate, disclosed CCTV in common areas is different from covert cameras inside private spaces. And discovering a device on a network is not the same as identifying a hidden camera. Investigations is primary step always.
Logo ko Twitter pe pyaar mil raha hai and Mujhe to tweets ke reply bhi nahi milta. And I hardly DM anyone 😑
This
#hunter opinion: yes you should build hackbots, but while the bots are running you should hunt manually and struggle hard, it's how you grow as a hacker and it's where the fun is.