AB retweeted
West Bengal: A Durga Puja at Mahishadal's MYCO Club, Purba Medinipur has photos of Mahatma Gandhi's Killer Nathuram Godse along with other Great Freedom fighters and Icons.
AB retweeted

Abhijeet Dipke@abhijeet_dipke1h
Netherlands!
NetherlandsConnected via India App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
Boys have a message
Gyanu must go!
AB retweeted
𝐇𝐚𝐫 𝐠𝐚𝐥𝐢 𝐦𝐞𝐢 𝐉𝐚𝐧𝐭𝐚𝐫 𝐌𝐚𝐧𝐭𝐚𝐫: 𝐒𝐢𝐭𝐡𝐚𝐫𝐚𝐦𝐚𝐧'𝐬 𝐡𝐮𝐬𝐛𝐚𝐧𝐝 𝐭𝐨 𝐣𝐨𝐢𝐧 𝐃𝐢𝐩𝐤𝐞 𝐢𝐧 𝐚𝐧𝐭𝐢-𝐒𝐈𝐑 𝐩𝐫𝐨𝐭𝐞𝐬𝐭
Noted economist #ParakalaPrabhakar will share the stage with #CockroachJantaParty (CJP) founder Abhijeet Dipke and actor-activist Prakash Raj in a nationwide protest against the SIR exercise on October 23.
Read more: intdy.in/ruja00
AB retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
AB retweeted
Crazy 72 hours in security. Three major incidents dropped back-to-back: eMudhra, PingCAP (TiDB Cloud), and PHP.
Here is the short version of what happened and who got hit.
1. eMudhra (Trusted CA compromise)
eMudhra generated 8 intermediate CA certificates in April 2025 (cross-signed by Sectigo). A bug in their HSM key-wrapping test script created a second set of P-384 keys where the private keys were single-byte numbers under 256. Operators picked the wrong key labels and signed them into real CA certs.
One of the intermediate CA private keys was literally the number 4.
The other seven: 56, 66, 115, 155, 156, 230, 237.
Three weeks later (May 2025), their CRL signatures started failing because the CRL signer was using the real keys instead of the weak ones. Instead of asking why the keys didn't match, someone switched the CRL signer to the weak keys and closed the ticket.
• Browsers are safe: Chrome, Firefox, Apple, and Microsoft already blocked them, and zero rogue certs hit CT logs.
• Servers are not: curl, Python (certifi), Go binaries, and Docker base images don't check CRLs. Update ca-certificates, certifi, and Go (1.27.3 / 1.26.10).
• 10-second check on any server:
curl dv-g3b-emudhra.we-have-a-pro…
(TLS error = safe. 200 OK = still vulnerable.)
2. PingCAP / TiDB Cloud (10.6 TB breach)
Attackers found GCP and Azure credentials committed inside PingCAP's own repos. They set up a replication feed of TiDB Cloud's production control plane and exported the entire database every 6 hours for 22 straight days. 88 full exports, zero alerts. 200 GB is already out on torrents.
Beyond the 413 private repos and 20.6M customer SQL queries logged from their web SQL Editor, PingCAP engineers were pasting customer secrets into Jira tickets.
Who is affected in the leaked records:
• Live credentials exposed in support tickets:
- Pinterest: AWS keys for their pingcap-logs S3 bucket
- CardX / Silverlake (NPCI-linked env): AWS admin key in a backup log with full access to 258 external S3 buckets
- DeBank: 38 presigned S3 URLs
- An unnamed AI/dev platform: a 314 MB slow-query log attached to a ticket containing 8,027 live customer secrets (an AWS root key, a GitHub admin PAT over 1,701 repos, 7,485 AWS STS tokens, and 192 OpenAI/Anthropic/Gemini keys)
• Tenants with infra metadata, VPC CIDRs, app-server IPs, or contract pricing exposed:
- Tech: Atlassian, Databricks, Airbnb, Baidu, LINE, Nylas, Persona, PatSnap
- E-comm & Travel: Booking.com, Shopee, Flipkart, Mercari, ZOZO, AEON, Delhivery, Klook
- Gaming: Capcom, Square Enix, Konami, Bandai Namco, Cygames, Colopl, DMM
- Finance: PayPay, SoftBank, SBI, SB Payment Service, Fujitsu, TOPPAN, Bank of China, China Life
- Crypto: Bitget (said only public trade logs were on it and they already left), Pionex, DigiPlus, NFTscan, Chainbase
• Developer profiles leaked (from a purchased reo.dev table in PingCAP's BigQuery):
- 24,900 personal emails + GitHub/LinkedIn profiles of engineers at Tencent (3,327), Huawei (2,726), ByteDance (2,475), AIG (2,140), Mastercard, Flipkart, and bKash.
If you use TiDB Cloud: rotate your console API keys, DB passwords, and anything you ever pasted into a support ticket.
3. PHP "PHP2Shell" (CVE-2026-109618 & CVE-2026-109619)
Two CVSS 9.2 pre-auth RCEs leaked yesterday ahead of today's 14:00 UTC patch.
Public writeups trace it to a heap Use-After-Free in PHP's native C multipart/form-data session upload-progress handler (ext/session/session.c).
Because C-level multipart parsing runs before line 1 of index.php:
• App auth, Laravel/WordPress middleware, and file_uploads = Off do not stop it.
• Only PHP 8.2–8.5 get official patches today (59% of PHP servers on Shodan are on EOL <= 8.1).
• Until you patch php-fpm: lock php_admin_flag[session.upload_progress.enabled] = off and block unexpected multipart requests at Nginx/Apache/Cloudflare.
AB retweeted
So in what has clearly become the world’s largest Former democracy,
Saurav Das and Ashutosh Ranka are still in jail… for simply unfurling the 🇮🇳 in our national capital.
The regime surely has a problem with young Indians waving our national flag!
It’s absurd to even think that such a thing might happen in a free country!
Nonetheless, we will fight to reclaim our democracy from the regime.
AB retweeted
एक सिख मुख्यमंत्री को नीचा दिखाने के लिए मोदी ज्ञानू किस हद तक गिर सकते हैं। पहले मुख्यमंत्री भगवंत मान को फ़्रांस जाने की इजाज़त केंद्र सरकार ने नहीं दी। जब हाईकोर्ट से इजाज़त लेकर पंजाब के मुख्यमंत्री फ़्रांस दौरे पर जाकर आए तो खीज मिटाने के लिए उन्हें एयरपोर्ट पर अपमानित करने का प्रयास किया गया।
#ShameOnModi
#SikhVirodhiModi
Punjab CM Bhagwant Mann was held at Delhi airport by Customs for ~3 hours, AAP says, and fined ₹50,000.
Delhi Customs is headed by Chief Commissioner Manish Kumar, reportedly the brother of CEC Gyanesh Kumar.
Just a coincidence?
#BhagwantMann #CEC #DelhiAirport #Customs
AB retweeted
आशुतोष और सौरव को बेल मिलने पर बहुत बधाई। ऐसे ही देश के लिए संघर्ष करते रहो। पूरा देश आपके साथ है।
AB retweeted
West Bengal Chief Minister Suvendu Adhikari has directed the Kolkata Police Commissioner to record the names and identities of volunteers assisting with Durga idol immersion.
Adhikari said only those who practise Sanatan Dharma should be allowed to touch the idol during visarjan, citing religious traditions and the need to preserve the sanctity of the puja. He maintained that the directive was not communal.
#SuvenduAdhikari #WestBengal #DurgaPuja #DurgaVisarjan #KolkataPolice #SanatanDharma
AB retweeted
In 2011, then Gujarat Chief Minister Thiru @narendramodi avl said that if his hands were not tied, he would have gone to Delhi and waged war against the central government. Thiru Narendra Modi avl made this statement in response to the police crackdown on the peaceful anti-corruption campaign led at Ramlila Maidan, Delhi. In my opinion, what the Hon PM said then was absolutely right, and there is nothing wrong about it.
Today, you could be jailed indefinitely; your surety bonds could be rejected; and, surprisingly, a Special Executive Magistrate will play circles around you when he/ she is empowered to deal with preventive bond cases.
If you question the violation of due process of law in a democracy, you would be called names, and a barrage of attacks would follow, including being labelled a Foreign Agent.
Ever since I asked the Central Government to speak with the protestors during the NEET exam protests, I have faced constant attacks, but I let them pass because I felt it was important to focus on the issues on the ground in Tamil Nadu. I also, in a way, enjoyed this as it would quickly remove the tag of me being a BJP B Team and sent to TN as a Dhurandhar 😍
Yesterday during a press meeting, I questioned the Delhi Police’s methods of detaining protestors of CJP.
Since yesterday, the attacks have resumed, as expected. For some in the BJP, let me make this categorically clear, in case you have selective amnesia: I left the BJP on June 5, 2026.
As I mentioned yesterday, I might not agree with the tactics of the CJP, and I think many of theirs are misguided. But if you ask me whether they have a right to oppose/argue/protest on an issue that they think is important?
I would categorically say - YES.
So, I would like people to ask the questions again, even if it makes some of them uncomfortable, and I wish the Central Government would answer them instead of resorting to whataboutism.
1.How was Jantar Mantar denotified as a protest site as per a standing order of the Ministry of Home Affairs after a letter was handed over by CJP seeking permission to conduct a protest?
2.How long can we have a system that gives powers to an Asst Commissioner of Police as a Special Executive Magistrate who rules over whether to keep someone in preventive detention? The ACP of Delhi Police stands over the trial where Delhi Police is the complainant against the accused CJP. Now you know which way the wind will blow.
3.On October 19th, why did the Special Executive Magistrate, aka ACP of Delhi Police, deliberately arrive late for the bail hearing of those who were arrested from Jantar Mantar on October 13th and recuse himself, saying there is a threat to his life? Is this some kind of a joke?
4.Why were 8 sureties rejected, and why was the person who came for surety subjected to cross-examination by the Special Executive Magistrate?
5. Any action taken on pellet gun usage by the Delhi police or other actions on Delhi police who have violated the standard operating procedures against the protesters during the NEET fiasco stir?
Has no BJP karyakarta in Delhi violated any bond conditions during the previous Congress and AAP governments. I trust the same Delhi police were then also when barricades were jumped and orders disobeyed? How were they dealt with then? Like this?
Definitely - NO.
Now I hear that the detained functionaries of CJP were released by SEM after the case reached the High Court.
I also recently saw a cockroach effigy burned as part of the Dusshera celebrations. Out of curiosity, I tried to find out who is giving this free publicity at a National level. No surprises here. It was led by a BJP MLA, Ashok Goel.
My question again is: is the BJP opposing the CJP or giving it free publicity? Does it want the opposition votes to split by making CJP a bigger player? At this rate, the CJP couldn’t have asked for a better PR team, even if it had paid for one! (1/2)
AB retweeted
A lot of political parties have protested in Delhi in the last 10 days.
A lot of student organisations have protested in the last 10 days.
No leader or politician has been kept in custody for more than 12 hours, except the CJP guys.
No politician, student leader, or organisation has had its effigy burnt along with Ravan, except CJP.
CJP represents the youth, and that is why the government fears CJP unlike any other politician.
AB retweeted
Har gali me Jantar Mantar !
Friday, 23 October, 2026
People’s March to Restore Democracy
Let’s Rise to the Challenge
AB retweeted
U might hv read in headlines “Special Executive Magistirrrrate (SEM) extended the custody of Saurav and Ashutosh”.
Mil lo SEM sahab se.
AB retweeted
#BREAKING Special Executive Magistrate Court orders release of CJP leaders Saurav Das and Ashutosh Ranka.
@Cockroachisback
🙌 Yay!!
#Breaking
CJP's Saurav Das and Ashutosh Ranka released from judicial custody.
A Special Executive Magistrate passed the order.
@SauravDassss @AshutoshRanka @Cockroachisback @CJP_for_India
AB retweeted
The rule of law exists to ensure that the rights of citizens even with no special status or power except the status of being citizens of a democratic country are not trampled over.
The rule of law cannot & should not in itself become a weapon in the hands of the state to silence dissenting voices that it prefers not to hear.
The continued JC of @SauravDassss & @AshutoshRanka sets a dangerous precedence.
We must speak now! Refuse to accept the weaponisation of the rule of law against our democracy!
The C in UC is for Chor. Never trust these fellows for repairs.
The @urbancompany_UC @UC_Assist seems a big fraud!
Just for a button replacement, they told me that the entire gas stove system wasn't working and charged me 7k. It stopped working in one day!
When I claimed the warranty, they said the time slots had been full and unavailable for two days!
When I book a new service, the same person is available within a few hours.
This is not how you provide customer service, @urbancompany_uc.
How many of you have faced such problems?
AB retweeted
ECINet, the Election Commission of India’s (ECI) comprehensive digital platform, has a feature through which viewing of enumeration form details is enabled State by State. This means that access for State Nodal Officers (SNOs) could be switched off anytime making it a centralised platform, according to an audit by ‘Charchagram’, a civic tech initiative.
The report assumes significance in view of objections raised by Election Commissioners Sukhbir Singh Sandhu and Vivek Joshi over the centralisation of ECINet and the electoral roll database.
✍️ @sreeparna_c
thehindu.com/news/national/o…
































