Karan Saini

VPN vendors have huge budgets to advertise on your favorite podcasts.

We don't have marketing for the IETF, browser and OS security teams, CAs (Let's Encrypt), CDNs, researchers, open source authors, website builders, digital rights activists...

We made the web secure and didn't tell anyone.

Why Apple sends spyware victims to this nonprofit security lab | TechCrunch Cybersecurity experts, who work with human rights defenders and journalists, agree that Apple is doing the right thing by sending notifications to victims of mercenary spyware — and at the same time r...

NEW: Cybersecurity experts, who work with human rights defenders and journalists, agree that Apple is doing the right thing by sending notifications to victims of mercenary spyware — and at the same time refusing to forensically analyze the devices.

“These notifications have been a game changer."

The @phrack.org 72 CFP horny emojipasta has hit the chats

Poor quality scan of a black and white image from a newspaper from March of 1990 called The Vindicator, a photo of a man with receding hair and a bushy beard and moustache who may be handcuffed. Caption reads "Joseph Popp is led from federal court in Cleveland. The suburban Cleveland man us accused of distributing computer disks with a virus that locked up machines in England and Africa."

It took quite a while hunting through newspaper archives, but this is what Joseph Popp actually looked like when he was arrested. Weird that someone considered the grandfather of ransomware is so poorly documented. Sources online get the date of his death wrong & the spelling of his middle name too.

Holy crap

White House official: 8 US telecom providers hacked by Chinese | CNN Politics US officials believe Chinese hackers breached at least eight US telecommunications providers in their quest to spy on top US political figures as part of a hacking campaign that has affected dozens of...

White House official: 8 US telecom providers hacked by Chinese
www.cnn.com/2024/12/04/p...

first name + .forsale 🫨

Twitter has been storing your ‘deleted’ DMs for years Including those sent to and from deactivated or suspended accounts

I found in 2019 that DMs were soft deleted, you could even fetch both deleted DMs and DMs exchanged with deactivated accounts from the Twitter API and the account archive. www.theverge.com/2019/2/15/18...

I wrote a series of blogs (that I’ll be adding to as I go) that document times in the #history of #hacking that journalists found themselves becoming part of the story that they were writing about #hackers. I labeled the blogs “Hackers & Reporters”.

This is your reminder that DMs here are _not encrypted_. They're not even really part of ATProto.

It's on the roadmap, but that's not the case now. DMs are centralized and unencrypted. Behave accordingly.

GitHub - electricduck/atfile: 📦➔🦋 Store and retieve files on the ATmosphere 📦➔🦋 Store and retieve files on the ATmosphere. Contribute to electricduck/atfile development by creating an account on GitHub.

I know this is in the Drop I just posted, but y'all really need to try out ATFile — github.com/electricduck...

It lets you upload & download arbitrary files to Bluesky's Blob storage (or any ATptodo PDS).

The Blobs don't show up in your timeline, they just "exist".

Store your MP3 collection!

1/2

come for the malware, stay for the posts

US charges five accused of multi-year hacking spree targeting tech and crypto giants | TechCrunch The five alleged hackers are accused of stealing millions of dollars in crypto, and corporate data from several victims all over the world.

NEW: The U.S. government has announced charges against five alleged hackers who targeted several companies stealing millions of dollars in crypto, and corporate data.

DOJ says the hackers are part of the infamous Scattered Spider cybercrime group.

techcrunch.com/2024/11/20/u...

as a gamer ive eliminated thousands of moo deng like creatures for their various parts . Ive completed countless quests using their pain

was just inviting people over!

It’s legal in the United States under the Truth in Caller ID Act, 2009, in certain circumstances. It’s unlawful when done with the intent of defrauding others. The rationale behind allowing it is that some businesses might want to advertise their pay-per-minute or toll-free number when they call.

what video? :)

Ha! I wouldn’t have thought, but that is great. They seem active too!

And yes. They’re currently relying on reports from subscribers, which could indicate a lack of adequate automated detection at the telecom operator level.

Thanks for reading!

What is being done about caller ID spoofing in India? My piece for the Text and Context section in The Hindu today.

GitHub - qurbat/blocked-hosts: A periodically updated list of websites known to be blocked in India A periodically updated list of websites known to be blocked in India - GitHub - qurbat/blocked-hosts: A periodically updated list of websites known to be blocked in India

This project now catalogues over 10,000 websites known to be blocked on the ACT Fibernet network. 4,226 new hostnames were added since the last update in June. github.com/qurbat/block...

What BharOS, India’s ‘homegrown’ answer to Android, says about our credulity In a development that has sparked outrage among India's free and open source software communities, it has come to light that India's much-hyped ‘indigenously de

BharOS was touted as an indigenously developed secure and private mobile operating system. But is it? My piece for The News Minute from today. www.thenewsminute.com/news/what-bh...

The Supreme Court has dismissed a petition requesting for the source code of Electronic Voting Machines to be made public. The court stated that publishing the source code would make EVMs vulnerable. This line of reasoning is fallacious and ill-informed. m.thewire.in/article/law/...

You can create a post with an arbitrary date and time from the past if you call the Bluesky post creation API directly. bsky.app/profile/sain...

It turns out that you can pass an arbitrary datetime value for the 'createdAt' parameter when creating a new post. I've linked a post of mine below with a datetime value of 1970-01-01T00:00:00.000Z. The datetime value appears to have been offset to January 1, 1970, 5:30 AM, Indian Standard Time.

It's quite possible it is only happening in India. I was only able to confirm that the post in question was withheld in India at the request of the Government (users from other countries were able to access it), but I wasn't able to confirm whether the same notice is shown to non-Indian users.

Twitter (X) seems to no longer display a notice for when a given post has been blocked at the request of the Government. Instead, a nondescript notice is shown, simply reading "This Post is unavailable."

this site needs a badge i can pay $8 a month for to trick people into thinking I am a Mod

Can't Deny A Citizen's Statutory Rights For Not Having Aadhar Card: Telangana High Court Reiterates The Telangana High Court has reiterated that a citizen of India cannot be denied his/her statutory rights for not possessing an Aadhar Card.

www.livelaw.in/high-court/t...

starting something new

more like a SMUGshot! siri please send when official headshot released. siri please dim lights and set alarm for 9:30 am.