Making network egress filtering effective, reliable and usable. Founder & Chief Engineer at @ChaserSystems

Cambridge, England
Joined May 2008
My latest blog on the Agent's DNS tricks in the HF - OAI incident got picked up by @lancinimarco's newsletter issue 352 😃 Newsletter link: cloudseclist.com/issues/issu…
2
52
Dhruv AHUJA retweeted
Master graph theory. Master node relationships. Master edge weights. Master network traversal until complex systems reveal their underlying structure. Graph theory is the ultimate lens for understanding connected data.
7
25
4
425
14,247
Dhruv AHUJA retweeted
The reason UK universities demand more equity than US universities in "spin outs" is not that they're tougher negotiators. It's that they're too inexperienced to realize they're charging over market rate.
105
41
23
1,439
169,640
Where does one work in San Francisco for a day? #serendipity
16
Dhruv AHUJA retweeted
Replying to @drdroo
What’s the going rate?
2
1
930
In SF for the whole week @ @unpromptedconf
2
96
Dhruv AHUJA retweeted
Things keep happening this week, so just so we're all clear on the rules, no one is allowed to disclose vulns or breaches after Friday morning, until Monday. Them's the rules.
5
13
3
114
4,715
What baffles me in the eMudhra issue is the statement «a flaw in the code resulted in the second pair of keys being created onboard which were weaker» [1]. Sure, they had a KGC "script" and... 🧵 [1] bugzilla.mozilla.org/show_bu…
1
56
...a possibly convoluted and unnecessary key wrapping thing going on. But what generates 'weaker keys' 🤔 An HSM?
16
lol amazing
mitmproxy: use `--emudhra` to sign TLS certificates 💀
1
139
Reads like Chainguard thought everybody in the world uses their images. It couldn't be further from the truth in the world of #PHP. #phpocalypse
1
218
I, for one, consider 4 a perfectly fine integer between 1 and 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942642
58
1,177
35
29,125
330,430
Has anyone scanned the internet for ECC public keys (and even RSA) and tried all private keys up to 256 to see if this is a more common phenomenon than imaginable? @nadiaheninger ?
20
21
2
860
57,372
I'll be in SF for @unpromptedconf for the entire week. Looking forward to talk to people interested in security's first principles. 24 Oct - 31 Oct. #unprompted
1
3
47
Truth is stranger than fiction at 00:20
Este manifestante Frances es mi puto ídolo!!
26
Dhruv AHUJA retweeted
The 21-year marketing campaign for Curve25519 came to an abrupt end today.
2
4
1
60
5,642
Dhruv AHUJA retweeted
Here is your daily reminder that alignment is not a security control
3
1
32
1,868
Dhruv AHUJA retweeted
Reminder: It has been 16 years since Stuxnet was found -- an autonomous self-replicating worm designed to spread across multiple platforms and sabotage nuclear enrichment equipment. If small models might soon be able to copy themselves around that's not a step-change.
17
29
4
181
17,424
Dhruv AHUJA retweeted
Lately I’ve been learning math with ChatGPT (Astra) as my tutor, using this document scanning camera and a vibecoded tool that pastes the captured image right into the chat. This way, I just work problems on paper and ChatGPT gives feedback. It’s really nice.
273
713
163
12,016
819,656
Dhruv AHUJA retweeted
Some people get it: lwn.net/Articles/1098170/
2
15
4
71
21,790