Excited to share “Poisoned Wells,” which presents the largest point-in-time study of website blocking in India to date. I tested the blocking of 294 million apex domains across six Indian ISPs, sending 1.76 billion DNS queries in total.

VPN vendors have huge budgets to advertise on your favorite podcasts. We don't have marketing for the IETF, browser and OS security teams, CAs (Let's Encrypt), CDNs, researchers, open source authors, website builders, digital rights activists... We made the web secure and didn't tell anyone.

NEW: Cybersecurity experts, who work with human rights defenders and journalists, agree that Apple is doing the right thing by sending notifications to victims of mercenary spyware — and at the same time refusing to forensically analyze the devices. “These notifications have been a game changer."

The @phrack.org 72 CFP horny emojipasta has hit the chats

It took quite a while hunting through newspaper archives, but this is what Joseph Popp actually looked like when he was arrested. Weird that someone considered the grandfather of ransomware is so poorly documented. Sources online get the date of his death wrong & the spelling of his middle name too.

Holy crap

White House official: 8 US telecom providers hacked by Chinese www.cnn.com/2024/12/04/p...

I wrote a series of blogs (that I’ll be adding to as I go) that document times in the #history of #hacking that journalists found themselves becoming part of the story that they were writing about #hackers. I labeled the blogs “Hackers & Reporters”.

This is your reminder that DMs here are _not encrypted_. They're not even really part of ATProto. It's on the roadmap, but that's not the case now. DMs are centralized and unencrypted. Behave accordingly.

I know this is in the Drop I just posted, but y'all really need to try out ATFile — github.com/electricduck... It lets you upload & download arbitrary files to Bluesky's Blob storage (or any ATptodo PDS). The Blobs don't show up in your timeline, they just "exist". Store your MP3 collection! 1/2

NEW: The U.S. government has announced charges against five alleged hackers who targeted several companies stealing millions of dollars in crypto, and corporate data. DOJ says the hackers are part of the infamous Scattered Spider cybercrime group. techcrunch.com/2024/11/20/u...

as a gamer ive eliminated thousands of moo deng like creatures for their various parts . Ive completed countless quests using their pain

What is being done about caller ID spoofing in India? My piece for the Text and Context section in The Hindu today.

This project now catalogues over 10,000 websites known to be blocked on the ACT Fibernet network. 4,226 new hostnames were added since the last update in June. github.com/qurbat/block...

BharOS was touted as an indigenously developed secure and private mobile operating system. But is it? My piece for The News Minute from today. www.thenewsminute.com/news/what-bh...

The Supreme Court has dismissed a petition requesting for the source code of Electronic Voting Machines to be made public. The court stated that publishing the source code would make EVMs vulnerable. This line of reasoning is fallacious and ill-informed. m.thewire.in/article/law/...

It turns out that you can pass an arbitrary datetime value for the 'createdAt' parameter when creating a new post. I've linked a post of mine below with a datetime value of 1970-01-01T00:00:00.000Z. The datetime value appears to have been offset to January 1, 1970, 5:30 AM, Indian Standard Time.

Twitter (X) seems to no longer display a notice for when a given post has been blocked at the request of the Government. Instead, a nondescript notice is shown, simply reading "This Post is unavailable."

this site needs a badge i can pay $8 a month for to trick people into thinking I am a Mod

starting something new

more like a SMUGshot! siri please send when official headshot released. siri please dim lights and set alarm for 9:30 am.

India is on the moon

if you are a stupid ass reddit poster from fucking reddit me and my crazy friends will put you in a head lock

Indian movies vilifying Muslims spark fear ahead of polls https://tribune.com.pk/story/2431004/indian-movies-vilifying-muslims-spark-fear-ahead-of-polls

Zero statements from the Biden admin about India technically exporting* defense equipment to Russia. Quite disappointing. *Russia is calling it "re-importing".

You used to be able to complain to corporate accounts and get refunds but now they’ll just quote you with “this mfer does NOT have the meats 🤣“

I swear to god if you made a wallet inspector badge out of construction paper and showed it to these people it would work a hundred times in a row

у меня есть сабака

“Stop the car. Stop the fucking car NOW”

Throughout 1998 & 1999, the 2600 Hacker Quarterly dedicated several of their magazine cover pages to bring attention to the "FREE KEVIN" campaign. The campaign played a significant role in helping Kevin Mitnick receive a more lenient sentence following his arrest in 1995.

i'd really enjoy having a social media feed devoid of the endless virtue signaling and laundering of half baked hot takes. idk might be a good to have

Follow @bsky.realhackhistory.org if you aren't already. It is one of my favourite accounts from Twitter (which is saying something), and on here too!

Chrome extension for discovering the Bluesky profiles of users that you follow on Twitter. It does require logging in with your Bluesky credentials to function properly, but the code for the extension seems clean. Check it out: https://github.com/kawamataryo/sky-follower-bridge/tree/main

i think it's time for me to become a sheep farmer, this hacking shit is too easy

"Anonymous Sudan" swinging at random domains on the internet like a blindfolded child with no sense of direction trying to hit a pinata https://techmonitor.ai/technology/cybersecurity/anonymous-sudan-ao3-ddos-russia

I subscribed to Johnny Harris' YouTube channel and unsubscribed within a week. It seems that Vox's editorial control was the only thing keeping him from transforming into an unhinged peddler of badly researched clickbait

very fucked up they named the robot on star trek "data." yeah this is my human friend. his name is Feelings

today is a strange day. i hope something good comes out of it :O

Twitter sucks

I have maintained a project cataloging domain names which are known to be blocked in India for the last two years now. The project started with a list of ~2,500 host names, and has since grown to catalogue more than 6,000 known blocked websites. Check it out here: github.com/qurbat/blocked-hosts

i've been getting into reverse engineering as of late. such a refreshing break from the usual web application and network security stuff that i've been pinballing around in for the last ~5 years

numbers be like "6"

does anyone have documentation for the Bluesky client API?

?