YC alum. re-building commercial insurance products for India, starting with trade credit and business risk

Bengaluru South, India
Joined June 2011
I suspect the real reason eMudhra is exiting the SSL business is Google indicated it is most likely going to drop eMudhra from being trusted by Chrome AT ALL, after observing inexplicable incompetence in how they mis-generated their private key for the CA certificate.
BREAKING: eMudhra exits SSL/TLS certificate business, blames social media instead of incompetence for the same
111
528
31
7,384
251,272
Nitthin retweeted
"How Google humiliates Indian Developers with Google Play BillDesk Verification" Scary to read stories of people having to pay bribes of 50K to 2 lakhs to BillDesk. @RBI what is this? reddit.com/r/india/comments/…
26
141
19
742
73,650
Passing a compliance audit doesn’t make you secure. I repeat: compliance is not security. Security is the work you do every day, long after the auditors leave. And it’s more work in the AI era. Nobody is safe!
The response of eMudhra is so full of shit, it needs to be called out. 🧵
5
4
1
25
1,399
Nitthin retweeted
Gross incompetency from Indian certificate authority eMudhra. You had one job: generate a 384 bit private keys and instead you used: 4, 56, 66, 115, 155, 156, 230, and 237. This allows attackers to issue certificates for any websites. Embarrassing that it’s a family business run by largely computer illiterate people. Only 1 of the 3 have a remotely computer-related background and even they never actually worked a technical job in their life. If you look at the LinkedIn, their tech team is young, from tier 3 education and paid sort of bottom barrel. Imagine how many attacks you can design with AI given the existence of this genre of gross negligence.
347
1,151
193
9,304
613,874
Nitthin retweeted
What has been committed by the turds of eMudhra is a 26/11 equivalent digital disaster. This entity should be finished off. Anybody who was linked to this fiasco should never get into a position of responsibility in cybersecurity. The officials who allowed this entity to win so much government business should be pulled up. Our country cannot fool around in this manner when we are pushing digitalization in practically all domains of business, government and citizen services.
I do not mean to sound dramatic but post this emudhra should simply not be allowed to continue as a business. this is the same as if delhivery picked up all your product from ecomms and threw it in trash and delivered an empty box to you every single time.
63
349
10
2,313
65,711
MeITy which is very quick in responding to blocking instagram, twitter handles has not responded at all over eMudhra. Under CERT-IN rules all of this should have been communicated to them by Oct 17th within 6 hrs. We block innovation and promote sovereignty, we have neither now.
16
404
14
1,927
28,089
We Indians are living in a series of meme reality.
eMudhra's ultimate homage to XKCD... 🤦🤦🤦🤦
32
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨 Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk. → NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS. → TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity. → Attackers could potentially take control of vulnerable servers remotely, without authentication. → Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed. → EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately. → Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured. → WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk. → Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated. The vulnerabilities are CONFIRMED. The full technical details remain secret. Tomorrow, the race between hackers and defenders begins. This could get ugly. FAST.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
121
788
106
4,965
1,139,536
Weak cryptographic keys that any mid size IT firm could have helped them scale and upgrade. And this on the last date to file audit! Clowns!
Emudhra digital certificates have been compromised. Best of luck filing your GST, ROC ...or any income tax filings that need DSC. I think the govt needs to put out a TV advisory. You need to upgrade your browsers and root stores all across India. emudhra.we-have-a-problem.co…
1
47
The clown who gave bail to the unnao rape case convict, now wants to define who’s GenZ in india and discredit the folks representing the people’s demand for fair elections. Let that sink in. Our system seems to have an identity crisis, trying to figure if it’s now still a democracy or a fascist state that’s coming out of the closet finally .
18
Protesting in a constitutional democracy isn’t just a right, it’s a duty. And if the ones in power start beating it down, it’s the body and soul of the very constitutional democracy that’s attacked.
"Not to punish evil is equivalent to authorizing it." — Leonardo da Vinci
1
28
Waiting for Adani or Ambani to launch their cyber security suite to protect the govt on india at a rate which the FM will include into our taxes, while the Sombu SaaS fellow from south harps about budget cuts and nationalism in the same tweet. What a time to be a citizen.
AI Safety or Boring Devops problem?
89
Wow. I woke up to an impressive number of upset people who apparently don’t understand how LLMs work and can’t cope well with me pointing it out. An LLM is a statistical next-token prediction model. That’s how it works. It’s an extraordinarily sophisticated calculator performing math you could theoretically do by hand (if you were sufficiently masochistic). Math doesn’t know what it’s calculating. Pi doesn’t spend its evenings contemplating the nature of circles, and c doesn’t ponder the relationship between matter and energy. That doesn’t make the results any less accurate, impressive, or useful. Between inference requests, an LLM isn’t sitting around thinking. It isn’t reconsidering its answers, wondering whether it made a mistake, contemplating its existence, or questioning whether it’s conscious. Its weights remain fixed (it doesn’t learn), and computation resumes when it receives input. We know this because we designed these systems. The architectures, mathematics, implementations, and research are extensively documented. You can study them yourself. Of course, some people immediately lean into comparisons of biological intelligence or philosophical debates over consciousness because that is what they know. But biological intelligence and artificial neural networks are fundamentally different systems. Similar outputs don’t establish equivalent internal experiences. I experience consciousness directly. I infer that other humans do too because we share biological structures and processes. We don’t have equivalent evidence for an LLM, and nothing about its known operation gives evidence of conscious experience. Which brings me back to my original point. To me, understanding is conscious comprehension. It means being aware of information, recognizing its meaning, and experiencing that comprehension. If I wasn’t conscious I could not understand. We can perform actions unconsciously. We can produce correct results without knowing why they’re correct. But I distinguish those capabilities from consciously understanding what we’re doing. An LLM can solve complex problems, explain difficult concepts, and produce remarkably accurate information. I give it full credit for those capabilities. But producing an answer that we rationalize as understanding isn’t the same as experiencing understanding. You don’t have to agree with my definitions. We can debate functional understanding versus conscious comprehension all day, but that won’t establish whether an LLM actually experiences anything. The right debate is this… Could machines exhibit something different from human consciousness, something measurable, meaningful, and worth studying? I think so, absolutely! I’m entirely open to discussing “machine consciousness” in terms of observable, testable computational properties. We built these systems, we can instrument them, examine their internal mechanisms, and investigate what they’re capable of. That seems far more productive than endlessly arguing over whether a machine experiences life the way humans do. So here’s my question: How would you define machine consciousness, and more importantly, how would you measure it?
Not sure who needs to hear this but.... An LLM doesn't "understand" anything. It is a statistical model that spews out tokens based on probabilities calculated through massive matrix operations and context, not an understanding of the subject matter.
598
914
176
6,342
566,239
India’s per capita GDP estimated to be less than Bangladesh. - IMF. At this point we should just vote in a few penguins instead of these useless excuses of a human being.
1
54
Nitthin retweeted
This is one of the most important results in AI, period. TLDR: neural networks are not tangled knots (polysemanticity is wrong). You can study their own neurons directly, without first "unfolding" them with a second model. 90% of neurons in Qwen-32B have one job. Nick Cammarata started OpenAI’s interpretability team and is at Goodfire now. He’s been studying how LLMs work for a decade. The stakes for understanding and aligning model behavior are the highest it’s ever been. Models have achieved superhuman results in math, can break production software systems, and changes the nature of white collar work. This work may finally allow us to intentionally design LLMs and shape how they behave. Its a long, phenomenal read.
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
59
110
8
2,043
192,420
Three young people in Kerala-Gopika, Devika and Iyas; lost their lives when a speeding car, allegedly driven by a drunk 19-year-old, rammed into their scooter. These weren’t kids out causing trouble chasing fun. They were young people studying in the day, working part-time evening , earning a living and trying to build better futures for themselves and their families. They had stepped out for dinner after work. And what does Hindu Aikya Vedi leader K.P. Sasikala choose to question? - “Why were two Hindu girls out with a Muslim boy?” Imagine losing your daughter and then having to publicly defend her character, her friendships and her right to live freely. This is the filth that the RSS and its ideological ecosystem have brought into our society. Even a family’s unimaginable grief becomes an opportunity to spread religious hatred and police women’s lives. This is precisely why the RSS should be banned in India. The goons that killed Gandhi continue to be an organised movement that repeatedly fuels communal division. it should not be allowed to hide behind the language of culture and nationalism anymore. The bright side of hope today is seeing families stand up and refuse to tolerate this bigotry. More of us need to do the same. These families deserve justice, dignity and solidarity. Not sermons about religion from people who cannot even find the humanity to respect the dead. Watch the family speak for themselves: youtu.be/N2887XyQM9k
128
Nitthin retweeted
Credit markets often signal financial stress before equity markets. Rising credit default swap (CDS) spreads among mega-cap technology companies point to growing concerns about borrowing, debt supply and demand for credit protection. While this does not necessarily signal the end of the AI boom, it highlights the importance of monitoring credit markets to assess risks surrounding the AI capex cycle. Recorded on 9 September 2026. Connect with Us: info@pinetreemacro.com
3
15
1
90
12,200
Nitthin retweeted
Gopal doing what's right. The Supreme Court seemingly doing nothing. The inaction that we've been seeing so far from the Supreme Court of India is bordering on dereliction of duty. It is meant to be the court of last resort. This is another adm jabalpur in the making. Sad.
This video is enough to confirm that, CJI Surya Kant is fully compromised now & forgotten the sense of duty on the chair he is sitting on !!
2
54
162
6,772
This vembu was always a sombu fellow. Can’t take him seriously one bit!
"Come back, let's build India" to "Pray for us" In a span of 4 days flat. #unreal
57