Offensive security research & building @OphionSecurity

Joined May 2019
Rojan Rijal retweeted
donate.gov.np is now live. You can donate to the Government of Nepal Prime Minister’s Disaster Relief Fund from anywhere in the world via debit/credit card (Visa/Mastercard, 3D Secure), mobile banking, connectIPS, wallets, UPI-India, UnionPay, eSewa, or Alipay+. Choose USD or NPR. Large donations can also go via SWIFT. Official channel. Direct. Transparent. Support rescue, relief and rehabilitation operations. Donate: donate.gov.np #DonateToNepal #PMDRF #NepalRelief
11
61
1
117
6,198
Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any sites a shadowy cabal of European media elites deemed against their interests. No judicial oversight. No due process. No appeal. No transparency. It required us to not just remove customers, but also censor our 1.1.1.1 DNS resolver meaning it risked blacking out any site on the Internet. And it required us not just to censor the content in Italy but globally. In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online. That, of course, is DISGUSTING and even before yesterday’s fine we had multiple legal challenges pending against the underlying scheme. We, of course, will now fight the unjust fine. Not just because it’s wrong for us but because it is wrong for democratic values. In addition, we are considering the following actions: 1) discontinuing the millions of dollars in pro bono cyber security services we are providing the upcoming Milano-Cortina Olympics; 2) discontinuing Cloudflare’s Free cyber security services for any Italy-based users; 3) removing all servers from Italian cities; and 4) terminating all plans to build an Italian Cloudflare office or make any investments in the country. Play stupid games, win stupid prizes. While there are things I would handle differently than the current U.S. administration, I appreciate @JDVance taking a leadership role in recognizing this type of regulation is a fundamental unfair trade issue that also threatens democratic values. And in this case @ElonMusk is right: #FreeSpeech is critical and under attack from an out-of-touch cabal of very disturbed European policy makers. I will be in DC first thing next week to discuss this with U.S. administration officials and I’ll be meeting with the IOC in Lausanne shortly after to outline the risk to the Olympic Games if @Cloudflare withdraws our cyber security protection. In the meantime, we remain happy to discuss this with Italian government officials who, so far, have been unwilling to engage beyond issuing fines. We believe Italy, like all countries, has a right to regulate the content on networks inside its borders. But they must do so following the Rule of Law and principles of Due Process. And Italy certainly has no right to regulate what is and is not allowed on the Internet in the United States, the United Kingdom, Canada, China, Brazil, India or anywhere outside its borders. THIS IS AN IMPORTANT FIGHT AND WE WILL WIN!!!
2,337
7,003
1,354
33,567
9,499,666
RT @uraniumhacker: We are doing #VibeSecurityForAI If you are an AI startup (pre-seed or seed ) we will test your application for free. We…
1
94
Rojan Rijal retweeted
I looked at all the AWS OIDC integrations I could find to identify how they might be misconfigured and to understand the variations that different vendors have in how they set these up. wiz.io/blog/avoiding-mistake…
1
26
2
97
8,212
Another big cyber incident in Automotive this morning: This time it's CDK, the automotive software company. As a precaution to its customers, the company announced it's temporarily shutting down all its systems. And let's not forget... Last week, Findlay Auto Group, a large dealer group with over 33 rooftops, was the target of a massive cyberattack. Cybersecurity, a term I didn't think I'd ever post about, might just be the new "buzzword" that replaces AI and Digital Retailing in 2024.
95
95
31
649
440,775
Traditional ASMs are too noisy and full of false positives. An offensive context-based approach to attack surface management reduces vulnerabilities and helps internal teams identify and mitigate more vulnerabilities. Learn how Orion can help you today. ophionsecurity.com/start-tri…
2
1,087
4 years ago I was trying to get my high school grades to be good enough to get into college. I've since dropped out of college and I'm working in industry. don't stick to well-traveled path if you don't have to 💪
Hey, you, stop for a moment and think about where you wanted to be 4 years ago and where you're now. Give yourself credit for how far you've come and pat yourself on the back for everything you've achieved along the way. Now go on with your day & shine even brighter. ✨
3
7
57