
Security = Passion. #DFIR for profit, CTFs for fun. Never letting a good crisis go to waste. Researching cloud threats. Ex-chapter lead @OWASPBayArea
/usr/bin
Joined October 2009
- Tweets5.4K
- Following740
- Followers641
- Likes1.9K
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Relโฆ
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
I never realized how poor .@airtelindiaโs customer experience actually is until i saw for myself. Got a fibre connection, then got told connections are full with no resolution. Followed up constantly for a few days then got told it cant be installed. I can take that answer. (1/n)
parties have NO coordination amongst themselves. Different answers from different parties. It is a hell. AVOID .@airtelindia AT ALL COST. Never doing business with them. (1/n)
Naturally I went to a different provider and asked Airtel for a refund and even after 6-7 calls to customer care still no refund. Now they tell me refund cant be issued - for a connection never installed!
On top of this Store person, engineer, customer care all involved (2/n)
Siddhartha Rao ๐ฎ๐ณ retweeted
Corporate lawyers and others with agendas are creating a lot of FAKE NEWS around President Trump's H-1B Proclamation, but these are FACTS:
1. The Proclamation does not apply to anyoneย who has a current visa.
2. The Proclamation only applies to future applicants in the February lottery who are currently outside the U.S. It does not apply to anyone who participated in the 2025 lottery.
3. The Proclamation does not impact the ability of any current visa holder to travel to/from the U.S.
.@POTUS signs a Proclamation to restrict the entry of certain H-1B aliens into the U.S. as nonimmigrant workers, requiring a $100,000 payment to accompany or supplement H-1B petitions for new applications.
AMERICA FIRST!
Readers added context they thought people might want to know
None of the exceptions described here are in the text of the Presidentโs Proclamation.
whitehouse.gov/presidential-aโฆ
Finally some clarity! Thank you
Replying to @PressSec
To be clear:
1.) This is NOT an annual fee. Itโs a one-time fee that applies only to the petition.
2.) Those who already hold H-1B visas and are currently outside of the country right now will NOT be charged $100,000 to re-enter.
H-1B visa holders can leave and re-enter the country to the same extent as they normally would; whatever ability they have to do that is not impacted by yesterdayโs proclamation.
3.) This applies only to new visas, not renewals, and not current visa holders.
It will first apply in the next upcoming lottery cycle.
Siddhartha Rao ๐ฎ๐ณ retweeted
Kicking off BSidesNYC 2024 at John Jay College (CUNY) with Huxley Barbee, lead organizer of BSidesNYC.
#bsidesnyc #bsidesnyc2024
I like the smell of a .@BSidesNYC in the morning! #bsidesnyc
.@ixigo Awesome customer support on an issue concerning a cancelled flight! I'm happy to book my reservations through you guys. Keep up the great support. Thanks!
Hey PIA .@buyvpnservice just got an email about my yearly subscription going up. I have been a customer for years so why am I being charged $50 now but the yearly plans on the website is better ($40) ?
#privateinternetaccess #vpn #privacy
#BSidesNYC CFP now open!
A new season arrives. Isn't it time to get out there and share your ideas with the rest of the security/hacker community? Submit your talk today! CFP is still open. More info: bsidesnyc.org/cfp/
Omg @Xfinity web portal is so damn shitty! Had to switch between 3 different browsers and waste 30min to get a simple thing done!
Chai means tea. Please donโt call it chai tea. Naan means bread. Please donโt call it naan bread. Kbyethanks
.@Xfinity .@XfinitySupport Great job on designing a system that doesn't let you downgrade your service plan offering plans with deals only on speeds higher than current but not lower. Time to switch!
I completed the AD challenge! Don't miss out on SANS #HolidayHack x @SANSInstitute sans.org/holidayhack #HHC2023
I completed the SSH/API challenge! Don't miss out on SANS #HolidayHack x @SANSInstitute sans.org/holidayhack #HHC2023
Wth was that frustrating challenge "Reportinator" but OMG what an eye-opener. Solved it using GPT-4 and it caught inaccuracies that were so obvious and I should have caught them but did not. I also learned about AI hallucinations! #SANS #HHC2023 #HolidayHack













