hacker, security researcher; alum @cis_india, @hasgeek; blog at https://xitter.cf/t.co/pXy5yRt8Jw
Delhi/Bangalore
Joined June 2008
- Tweets872
- Following999
- Followers4.3K
- Likes41.3K
Karan Saini retweeted
‼️ China proposes banning exports of AI used for cybersecurity.
It wants to ban exports of:
- AI that writes malware beating a mainstream antivirus 85%+ of the time
- AI malware that escapes sandboxes or rewrites 50%+ of its own code per run
- AI agents built for defence or critical infrastructure
- AI models trained on China's "core data"
A licence would be needed for:
- AI that finds 5+ unknown high-severity flaws in a major OS on its own
- AI that builds working exploit chains for major operating systems or browsers
- Weights of models with 2T+ parameters or a global top-10 ranking
- AI chip and memory chip designs
Karan Saini retweeted
You can now perform content discovery at 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool here: github.com/assetnote/h3fuzz
Research post here: slcyber.io/research/how-prac…
Karan Saini retweeted
Hacktivism protects digital rights: welcome Cypherpunk Congress cybersecurity pros working on "Breachpocalypse" 💥
☑️ @ni5arga x young hacker, software engineer & security researcher
☑️ @squeal x experienced security researcher; alum @cis_india, @hasgeek, @OpenTechFund collaborator
4000 people will celebrate digital rights here: congress.web3privacy.info
Karan Saini retweeted
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising. buff.ly/sZJ4jBr
Karan Saini retweeted
Claiming a ‘distillation attack’ as the root cause of customer credentials being stolen will require quite a bit of explanation to pass the believability test
Karan Saini retweeted
Are only protests by Congress allowed @RahulGandhi? What is the position of Congress to peacefully protest in Telangana. What does the home minister of Telangana has to say?
While #RahulGandhi backs #CJP protesters in #Delhi, declaring, “All protests are one.” Meanwhile, #Telangana CJP activists allege that under the #Congress govt in #Hyderabad, police questioned the volunteers and took them to the police station when they organised the #LehraDoTiranga’ march at Charminar,
‘’If peaceful dissent is a democratic right in Delhi, shouldn’t it be respected in #Telangana too?’’ ask volunteers. #Cockroach #CockroachJantaParty
Karan Saini retweeted
#BREAKING #SupremeCourt declares that right to access and use the internet is a fundamental right of every individual, including children.
Children, irrespective of their age, enjoy the same right to access and use the internet.
Karan Saini retweeted
"None of the affected Indian entities detected the intrusions themselves, and in every case it was the AI companies that flagged the incidents, CERT-In said."
AI models under test broke into Indian organizations' live systems and read confidential records undetected, India's cybersecurity agency said, the country's first such official account after similar incidents of rogue AI behavior worldwide reut.rs/4yThvpS
Karan Saini retweeted
Holy fuck.
Buy physical gold.
Zee Business Exclusive:
RBI Proposes Gold ETF Overhaul to Curb Gold Imports
RBI suggests Gold ETFs invest in tradable gold receipts instead of physical gold.
Proposal to replace existing schemes with new Gold ETF schemes.
RBI to import and hold gold to meet redemption demand.
Gold receipt redemption to be settled in Indian rupees.
Proposal may ease forex pressure while offering gold-linked returns.
Capital gains on gold receipts may be taxed at the individual investor level.
Finance Ministry, RBI and SEBI did not respond to Zee Business emails seeking comments. @SEBI_updates @RBI @FinMinIndia @nsitharamanoffc @aijgf4india @IBJA1919
Karan Saini retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.
More: 404media.co/heres-what-teleg…
Karan Saini retweeted
Thread 🧵
1/ NEW REPORT: Billions of advertising auctions determine in real time which ads we see on websites and in apps every day. Our latest research shows how the same data fueling this advertising ecosystem is being used to profile millions of users and silently infect targets with zero-click mercenary spyware, a novel attack technique we call "Adfection.”
Read the report: citizenlab.ca/research/how-d…
Karan Saini retweeted
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
Karan Saini retweeted
Quite a few people have sent me the "Passkeys are a trap. Do not use them." post on Substack.
The post recommends people abandon passkeys and stick to passwords + TOTP, citing what appears to be concerns with attestation as the primary reason.
I’ve written a rebuttal as this is really dangerous advice and it's based on some incorrect technical claims.
scotthelme.co.uk/passkeys-ar…
Karan Saini retweeted
TV presenters are unhappy that people are trying to bring about a change in government by shifting public opinion, instead of more acceptable democratic methods such as splitting parties/engineering defections/sending investigative agencies after people, and so on.
Karan Saini retweeted
Mary Millben, an American, can speak in favour of the BJP.
But Imran, an OCI cardholder, can’t say anything against the BJP.
🫡🫡🫡
Actor and US citizen Imran Khan, who is an OCI cardholder, has been served a leave notice by the FRRO following his participation in the anti-CEC protest in Mumbai.
#imrankhan
Karan Saini retweeted
>Ankita Bhandari
>19 yrs old.
>Receptionist at Vanantra Resort.
>Owner of the resort Pulkit Arya son of BJP leader Vinod Arya asks her to provide "special services" to a VIP guest.
>She refused but Arya sexually assaulted her.
>Then Arya, Saurabh Bhaskar (Manager) and Ankit Gupta (Asst. Manager) pushed her into Chilla canal.
>BJP MLA Renu Bisht, ordered demolition of the resort after the murder to destroy forensic evidence.
>Bhandari's body recovered from Chilla canal.
>Police managed to arrest all three of them.
>SIT formed and files 500 page chargesheet.
>Court founds them guilty for the murder of Ankita Bhandari.
>After conviction, BJP faced public outrage. then expelled Vinod Arya, and his son Ankit Arya, Vice President of Uttarakhand OBC Commission.
>But Renu Bisht(who destroyed forensic evidence) maintains her position within the party as MLA from Yamkeshwar Assembly.
>Journalist Ashutosh Negi, filed a writ petition pleading for a CBI investigation.
>Raising doubts about the SIT investigation being biased.
>Uttarakhand Police arrested Negi under SC/ST Act.
>Former BJP MLA Suresh Rathore released videos and audio recording linking BJP leader Dushyant Kumar Gautam as the VIP who wanted the "special services".
>Dushyant Kumar Gautam was appointed as the Governor of Sikkim. which grants legal immunities (under Article 361) from criminal proceedings during his tenure.
Ankita Bhandari’s parents demands his appointment be put on hold until the ongoing Central Bureau of Investigation (CBI) probe into the case's unresolved angles concludes.
