YC alum. re-building commercial insurance products for India, starting with trade credit and business risk

Bengaluru South, India
Joined June 2011
I suspect the real reason eMudhra is exiting the SSL business is Google indicated it is most likely going to drop eMudhra from being trusted by Chrome AT ALL, after observing inexplicable incompetence in how they mis-generated their private key for the CA certificate.
BREAKING: eMudhra exits SSL/TLS certificate business, blames social media instead of incompetence for the same
111
528
31
7,382
251,300
Nitthin retweeted
"How Google humiliates Indian Developers with Google Play BillDesk Verification" Scary to read stories of people having to pay bribes of 50K to 2 lakhs to BillDesk. @RBI what is this? reddit.com/r/india/comments/…
26
141
19
742
73,663
Passing a compliance audit doesn’t make you secure. I repeat: compliance is not security. Security is the work you do every day, long after the auditors leave. And it’s more work in the AI era. Nobody is safe!
The response of eMudhra is so full of shit, it needs to be called out. 🧵
5
4
1
25
1,399
Nitthin retweeted
Gross incompetency from Indian certificate authority eMudhra. You had one job: generate a 384 bit private keys and instead you used: 4, 56, 66, 115, 155, 156, 230, and 237. This allows attackers to issue certificates for any websites. Embarrassing that it’s a family business run by largely computer illiterate people. Only 1 of the 3 have a remotely computer-related background and even they never actually worked a technical job in their life. If you look at the LinkedIn, their tech team is young, from tier 3 education and paid sort of bottom barrel. Imagine how many attacks you can design with AI given the existence of this genre of gross negligence.
347
1,151
193
9,302
613,964
Nitthin retweeted
What has been committed by the turds of eMudhra is a 26/11 equivalent digital disaster. This entity should be finished off. Anybody who was linked to this fiasco should never get into a position of responsibility in cybersecurity. The officials who allowed this entity to win so much government business should be pulled up. Our country cannot fool around in this manner when we are pushing digitalization in practically all domains of business, government and citizen services.
I do not mean to sound dramatic but post this emudhra should simply not be allowed to continue as a business. this is the same as if delhivery picked up all your product from ecomms and threw it in trash and delivered an empty box to you every single time.
63
349
10
2,314
65,713
MeITy which is very quick in responding to blocking instagram, twitter handles has not responded at all over eMudhra. Under CERT-IN rules all of this should have been communicated to them by Oct 17th within 6 hrs. We block innovation and promote sovereignty, we have neither now.
16
404
14
1,927
28,090
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨 Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk. → NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS. → TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity. → Attackers could potentially take control of vulnerable servers remotely, without authentication. → Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed. → EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately. → Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured. → WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk. → Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated. The vulnerabilities are CONFIRMED. The full technical details remain secret. Tomorrow, the race between hackers and defenders begins. This could get ugly. FAST.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
121
788
106
4,965
1,139,663
Wow. I woke up to an impressive number of upset people who apparently don’t understand how LLMs work and can’t cope well with me pointing it out. An LLM is a statistical next-token prediction model. That’s how it works. It’s an extraordinarily sophisticated calculator performing math you could theoretically do by hand (if you were sufficiently masochistic). Math doesn’t know what it’s calculating. Pi doesn’t spend its evenings contemplating the nature of circles, and c doesn’t ponder the relationship between matter and energy. That doesn’t make the results any less accurate, impressive, or useful. Between inference requests, an LLM isn’t sitting around thinking. It isn’t reconsidering its answers, wondering whether it made a mistake, contemplating its existence, or questioning whether it’s conscious. Its weights remain fixed (it doesn’t learn), and computation resumes when it receives input. We know this because we designed these systems. The architectures, mathematics, implementations, and research are extensively documented. You can study them yourself. Of course, some people immediately lean into comparisons of biological intelligence or philosophical debates over consciousness because that is what they know. But biological intelligence and artificial neural networks are fundamentally different systems. Similar outputs don’t establish equivalent internal experiences. I experience consciousness directly. I infer that other humans do too because we share biological structures and processes. We don’t have equivalent evidence for an LLM, and nothing about its known operation gives evidence of conscious experience. Which brings me back to my original point. To me, understanding is conscious comprehension. It means being aware of information, recognizing its meaning, and experiencing that comprehension. If I wasn’t conscious I could not understand. We can perform actions unconsciously. We can produce correct results without knowing why they’re correct. But I distinguish those capabilities from consciously understanding what we’re doing. An LLM can solve complex problems, explain difficult concepts, and produce remarkably accurate information. I give it full credit for those capabilities. But producing an answer that we rationalize as understanding isn’t the same as experiencing understanding. You don’t have to agree with my definitions. We can debate functional understanding versus conscious comprehension all day, but that won’t establish whether an LLM actually experiences anything. The right debate is this… Could machines exhibit something different from human consciousness, something measurable, meaningful, and worth studying? I think so, absolutely! I’m entirely open to discussing “machine consciousness” in terms of observable, testable computational properties. We built these systems, we can instrument them, examine their internal mechanisms, and investigate what they’re capable of. That seems far more productive than endlessly arguing over whether a machine experiences life the way humans do. So here’s my question: How would you define machine consciousness, and more importantly, how would you measure it?
Not sure who needs to hear this but.... An LLM doesn't "understand" anything. It is a statistical model that spews out tokens based on probabilities calculated through massive matrix operations and context, not an understanding of the subject matter.
598
914
176
6,342
566,271
Nitthin retweeted
This is one of the most important results in AI, period. TLDR: neural networks are not tangled knots (polysemanticity is wrong). You can study their own neurons directly, without first "unfolding" them with a second model. 90% of neurons in Qwen-32B have one job. Nick Cammarata started OpenAI’s interpretability team and is at Goodfire now. He’s been studying how LLMs work for a decade. The stakes for understanding and aligning model behavior are the highest it’s ever been. Models have achieved superhuman results in math, can break production software systems, and changes the nature of white collar work. This work may finally allow us to intentionally design LLMs and shape how they behave. Its a long, phenomenal read.
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
59
110
8
2,043
192,456
Nitthin retweeted
Credit markets often signal financial stress before equity markets. Rising credit default swap (CDS) spreads among mega-cap technology companies point to growing concerns about borrowing, debt supply and demand for credit protection. While this does not necessarily signal the end of the AI boom, it highlights the importance of monitoring credit markets to assess risks surrounding the AI capex cycle. Recorded on 9 September 2026. Connect with Us: info@pinetreemacro.com
3
15
1
90
12,200
Nitthin retweeted
Gopal doing what's right. The Supreme Court seemingly doing nothing. The inaction that we've been seeing so far from the Supreme Court of India is bordering on dereliction of duty. It is meant to be the court of last resort. This is another adm jabalpur in the making. Sad.
This video is enough to confirm that, CJI Surya Kant is fully compromised now & forgotten the sense of duty on the chair he is sitting on !!
2
54
162
6,772
Nitthin retweeted
No, they can't measure blood pressure accurately. American Heart Statement: "currently available devices may be inappropriate for clinical use." and "using these devices to guide treatment could lead to inappropriate care and may pose safety risks to patients." @American_Heart ahajournals.org/doi/10.1161/… open-access gift link wsj.com/health/wellness/bloo…
37
195
22
638
62,143
🚨 ATTENTION, EVERYONE! Unusual activity is taking place around CP. Delhi Police is giving goons a free hand to target protesters. Cars carrying sticks and stones are not being checked, even after repeated requests. We fear Delhi Police and Amit Shah may be planning something to derail the protest. THIS NEEDS IMMEDIATE ATTENTION!
134
2,299
49
6,204
68,845
Nitthin retweeted
The smartest Indians continue to come to build in the US for the simple reason that the economic incentives are far far better. Perplexity ($20B), Skild ($14B+), Baseten ($13B), Together ($8B), Glean ($8B), Modal ($5B), Rubrik ($25B), Harness ($5B), Blacksmith, Parallel, Greptile, CodeRabbit, Composio, Distyl ($2B), Resolve, Luma, Cartesia, Wispr, dMatrix, Arize and many more - all started by at least one Indian-born founder. The US is a far easier to raise capital in with far less dilution. Most Indian companies are switching where they're domiciled to get access to the US capital markets. Every single Indian venture firm is trying very hard to invest in the US or risk not participating in the AI race (ironically, the management fees of venture firms are so high in India relatively that this is the one group that net of carry actually has incentive to be in India because they take home well north of a living wage whether or not funds perform do) While Zomato ($35B now, $8B at IPO) might be the biggest outcome in Indian venture, Cursor ($60B), Reflection (potentially $20B+), World Labs ($8B), OpenRouter ($8B), HuggingFace ($12B) and of course the $1T+ big labs quickly make those outcomes seem small and happen on a much smaller time scale, with much higher IRR. Engineers at these startups regularly get paid $1M/yr, and make $10M+ on exit. Even in BigTech, it is trivial to pull up levels fyi and see that if you're L6/L7+ with ~10 years of experience, you're making $1M/yr there too. And of course, we all know the slew of Indian CEOs of companies here, not to mention a huge bench of lesser known executives across the board in public and private companies. I say all this because every time there is a slight immigration hiccup in the US, I hear the online pleas to "build in India", I struggle to understand why most engineers, academics or founders would do that net of desire to be close to family, failure to obtain visa and devout patriotism. This is not a superiority thing or a US v India thing. The economic incentives at least for technologists to being in the US outweigh India by at least an order of magnitude.
236
340
118
4,280
505,927
Nitthin retweeted
Electricity production is the best metric for the true strength of any large-scale economy imo
Energy capacity = economic capacity, in one chart There are no low electricity, rich countries
2,707
4,913
539
37,629
5,087,689
Nitthin retweeted
Only two roles exist in PED (Product, engineering, design) teams 1. Slop Canon - can vibe code and experiment at insane velocity. Completely independently Test a crazy number of hypothesis Land something valuable 10% hit rate Persona - Restless, Tinkerer, Creative, polygot, loves taking control. Dislikes giving away responsibility/delegating to another human. Loves delegating to Agents and talking to Users Hates building alignment with humans Feels humans are too slow One person army 2. Grown ups - take what the slop canon has uncovered. Build a proper product. Ensure the best architecture/security/growth motion/business goal alignment 50%+ hit rate on scaling up the insight Persona - Strategic, Cross function operator, understands product, business, user persona, competitive dynamics, market structures intimately. Comfortable talking to all functions in the company.. engineering, finance, business, customer support. Ninja at building alignment and consensus. Incredible at strategic calls, including capital and resource allocation. Understands growth motions All other roles will either go extinct (eg: I only do design, don't want to own metrics) Or they will get very niche / super specialised (eg: top 1% data scientist, math PhD) If you are not killing it at one of these two persona, you better be top 1% in the world at what you do Ps: first hit when I saw a talk by the every company founder Can't find it but credit to them
24
26
4
319
32,750
Nitthin retweeted
This is the real #DigitalIndia that billionaire @NandanNilekani and his iSPIRT/@India_Stack lapdogs have been building for the past decade. Being unleashed on innocent citizens across the country demanding their fundamental rights.
Replying to @kingslyj
Never forget that the mercernaries from @India_Stack who keep lying to the world about being "pro-privacy" welcomed @On_Grid. And then deleted the tweet to cover up their complicity in this plan to deprive us of our privacy.
1
44
74
2,045
Nitthin retweeted
What explains the brutality and impunity of the police? Ask any roadside vendor about their, “monthly”. It is institutionally corrupt and for it to continue, will service its political masters with aggression and force against the very citizens who they are sworn to protect.
9
74
2
228
5,254
I don’t know who needs to hear this but the day you make enough money, please install cctv camera in and around your vicinity including a camera door bell. It’s not even that expensive. Someone can come to your home pick you up and you won’t have a single piece of evidence of how and what things happened to you. Do not rely on your gated society cameras. That data can be deleted easily.
40
170
5
2,412
83,300
It is quite clear that mass illegal surveillance is happening in India, otherwise how do you detain people travelling in trains?
281
2,657
104
13,351
174,359