
Offensive security research & building @OphionSecurity
Joined May 2019
- Tweets66
- Following54
- Followers960
- Likes91
Rojan Rijal retweeted
donate.gov.np is now live.
You can donate to the Government of Nepal Prime Minister’s Disaster Relief Fund from anywhere in the world via debit/credit card (Visa/Mastercard, 3D Secure), mobile banking, connectIPS, wallets, UPI-India, UnionPay, eSewa, or Alipay+.
Choose USD or NPR. Large donations can also go via SWIFT.
Official channel. Direct. Transparent.
Support rescue, relief and rehabilitation operations.
Donate: donate.gov.np
#DonateToNepal #PMDRF #NepalRelief
Rojan Rijal retweeted
Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any sites a shadowy cabal of European media elites deemed against their interests. No judicial oversight. No due process. No appeal. No transparency. It required us to not just remove customers, but also censor our 1.1.1.1 DNS resolver meaning it risked blacking out any site on the Internet. And it required us not just to censor the content in Italy but globally. In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online.
That, of course, is DISGUSTING and even before yesterday’s fine we had multiple legal challenges pending against the underlying scheme. We, of course, will now fight the unjust fine. Not just because it’s wrong for us but because it is wrong for democratic values.
In addition, we are considering the following actions: 1) discontinuing the millions of dollars in pro bono cyber security services we are providing the upcoming Milano-Cortina Olympics; 2) discontinuing Cloudflare’s Free cyber security services for any Italy-based users; 3) removing all servers from Italian cities; and 4) terminating all plans to build an Italian Cloudflare office or make any investments in the country.
Play stupid games, win stupid prizes. While there are things I would handle differently than the current U.S. administration, I appreciate @JDVance taking a leadership role in recognizing this type of regulation is a fundamental unfair trade issue that also threatens democratic values. And in this case @ElonMusk is right: #FreeSpeech is critical and under attack from an out-of-touch cabal of very disturbed European policy makers.
I will be in DC first thing next week to discuss this with U.S. administration officials and I’ll be meeting with the IOC in Lausanne shortly after to outline the risk to the Olympic Games if @Cloudflare withdraws our cyber security protection.
In the meantime, we remain happy to discuss this with Italian government officials who, so far, have been unwilling to engage beyond issuing fines. We believe Italy, like all countries, has a right to regulate the content on networks inside its borders. But they must do so following the Rule of Law and principles of Due Process. And Italy certainly has no right to regulate what is and is not allowed on the Internet in the United States, the United Kingdom, Canada, China, Brazil, India or anywhere outside its borders.
THIS IS AN IMPORTANT FIGHT AND WE WILL WIN!!!
RT @uraniumhacker: We are doing #VibeSecurityForAI
If you are an AI startup (pre-seed or seed ) we will test your application for free. We…
Rojan Rijal retweeted
Live chat histories contain treasure trove of data. From answers to security questions to credentials and more. We found a way to access it all in Cisco's Webex Connect. Read here: ophionsecurity.com/post/cisc… #vulnerability #vulnerabilitydisclosure #attacksurfacemanagement
Rojan Rijal retweeted
I looked at all the AWS OIDC integrations I could find to identify how they might be misconfigured and to understand the variations that different vendors have in how they set these up. wiz.io/blog/avoiding-mistake…
Rojan Rijal retweeted
Getting access to thousands of customers' chat history with support agents with just a cookie. Learn more on blog one of two from our Live Chat security research at @OphionSecurity. ophionsecurity.com/post/live… #livechat #vulnerabilitydisclosure
Rojan Rijal retweeted

Simone Margaritelli@evilsocket26 Sep 2024
Italy
ItalyConnected via Italy App StoreAccount-level information, not a live location or per-post device.
Attacking UNIX Systems via CUPS, Part I
evilsocket.net/2024/09/26/At…
Rojan Rijal retweeted
Another big cyber incident in Automotive this morning:
This time it's CDK, the automotive software company.
As a precaution to its customers, the company announced it's temporarily shutting down all its systems.
And let's not forget...
Last week, Findlay Auto Group, a large dealer group with over 33 rooftops, was the target of a massive cyberattack.
Cybersecurity, a term I didn't think I'd ever post about, might just be the new "buzzword" that replaces AI and Digital Retailing in 2024.
Rojan Rijal retweeted
Traditional ASMs are too noisy and full of false positives. An offensive context-based approach to attack surface management reduces vulnerabilities and helps internal teams identify and mitigate more vulnerabilities. Learn how Orion can help you today. ophionsecurity.com/start-tri…
Rojan Rijal retweeted
Here is the full blogpost:
inti.io/p/when-privacy-expir…
Rojan Rijal retweeted
4 years ago I was trying to get my high school grades to be good enough to get into college. I've since dropped out of college and I'm working in industry. don't stick to well-traveled path if you don't have to 💪











