Common Sense Innit

[Manu🇮🇳🇮🇳 @mshahi0024]

Look at this BJP minister.😭

At a site where 21 people were burnt alive inside a hotel, in an area where BJP-controlled MCD has allegedly ignored all safety norms for years, & he cannot even walk on a muddy road, where citizens walk daily.

He seems more worried about his clothes getting dirty, visit for formality.

An entire family from Gurugram was wiped out, yet the priority appears to be optics, not accountability..☹️

[Sangita Myska @SangitaMyska]

Rupert Lowe minimises the very serious assaults on police officers as “patriots” just having a beer and acting “stupid”.

He will not condemn the Southampton riots.

[Alexander Thatcher @ThatchEffendi]

You guys are such cliches. He has no idea what he's wearing. He's buttoned both buttons on a two button jacket, which is basically never acceptable. He's wearing a tie pin with a waistcoat. The collar is wrong and it's unbuttoned. Combining 1920s hair with a Victorian moustache is gauche. He looks like a waiter at a try-hard artisanal cocktail place in 2014.

[The News Agents @TheNewsAgents]

“Farage has gone as close as he can to what feels like incitement…

...before stepping back and saying, “I’m not suggesting you do anything. I'm just saying it would be normal to feel pure cold rage”.

Farage has been likened to 'Tommy Robinson in a suit' - is there truth in it?

[Marina Purkiss @MarinaPurkiss]

Just watch this…

And for the love of God, please see Farage for what he is.

His response to Sarah Everard Vs his response to Henry Nowak

Jaw dropping.

[Brendan May @bmay]

Farage is a cancer on our country. He must never be allowed to govern, ever.

[Amazing Maps @amazingmap]

A comparison of climatic analogues across the Northern Hemisphere.

[Supertanskiii @supertanskiii]

What’s going on in Southampton isn’t about injustice, it’s about male violence.

It’s knuckle dragging scum being incited into angry mobs by multimillionaires.

They’re bored, racist radicalised idiots.

[Sangita Myska @SangitaMyska]

🧵1.Forget Cenk & Piker THIS will might be the most controversial post of the day: I’ve just been accused of being a “racist white woman” after me and a white guy very politely asked a young black woman, sitting directly behind us, on a @TfL bus, to please take her very loud conversation off speaker phone. TO BE CLEAR: Fake claims of racism to cover-up anti-social behaviour do not fly with me.

[Manish Sharma @Cheekytogeeky]

be @thetirthparmar

- young Indian security researcher
- founder of Levython, an open source dev collective
- the kind of kid who builds his own tools when he is bored
- wrote his own programming language from scratch in C++ before the CBSE story even broke
- lexer, parser, AST, interpreter, full OOP, REPL, English-like syntax, MIT licensed
- also shipped a full Android reverse engineering IDE in Rust, one native binary, MIT licensed

then CBSE broke.

→ Nisarga drops the OSM blog → the country starts paying attention → Tirth picks up where the trail ends
→ runs the same playbook on MSBTE's OnMark portal → finds a hardcoded master password "Coempt#@1269" sitting in plain sight
→ tests it on the live student login → it works
→ pulls apart MSBTE's Student Data API → zero authentication → anyone with an enrollment number can fetch full student records, marks, photocopy status, everything
→ finds a seat number that sets adminflag=true → drops him straight into the admin dashboard, no login, no token
→ MSBTE quietly takes the portal down → same playbook as CBSE → no statement, no acknowledgement

then he goes back to OnMark.

→ teams up with Nisarga → breaches the system again → escalates privileges → full read and write access to the entire site
→ to prove the control is total, they upload Bad Apple → the animation plays on the official OnMark domain
→ moves to MRVV, the Malla Reddy Vishwavidyapeeth instance on OnMark → finds RCE → full server control including the database, the same level of access he had on CBSE
→ no data touched, no data leaked, no harm done
→ records video PoCs of every vulnerability → writes a step by step PoC document with endpoints, payloads, expected outputs
→ emails CERT-In on May 30 → site is still accessible the next morning
→ waits

then the media cycle starts.

→ India Today runs the story → credits one name → Nisarga
→ Business Today does the same
→ the actual server access research came from Tirth
→ no correction issued
→ he posts the receipts publicly → asks for the contributors to be acknowledged, not for the spotlight, just the record
→ other researchers and journalists confirm it → Aravind, Vikrant, Yash Patel all back the same version
→ CERT-In sends a boilerplate thank you → nothing else
→ the bug is still live

a young Indian kid

- wrote his own programming language
- built a reverse engineering IDE
- broke into a national board's evaluation infrastructure
- proved it with video evidence
- reported it through the right channels
- got skipped by every major outlet
- still posted the report
- still waiting on the fix

every state spends crores on cybersecurity audits.

the kid in his room found it for free

[Sarthak Sidhant @sidhant_sarthak]

very nice investigation, i wonder who did it

[André @oracles]

Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone.

People losing handles they’ve owned since 2010, some worth hundreds of thousands.

I own a few rare ones so I was actually stressed watching this happen in real time, which I haven’t been in years.

Obama White House account got hit.

These aren’t some random new accounts, these are verified, locked down accounts and they still got compromised.

The thing is the exploit is so simple it’s almost funny. Attacker goes to Forgot Password, says their account is hacked, turns on a VPN to match the target’s location (which now you can find on the about section of the page).

Instagram’s AI support flow asks them to verify with a selfie.

They grab a photo from the target’s profile, run it through an AI video generator to make an animation of the person’s face moving around, upload that to Meta’s AI as proof.

And Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face
.
Once verified they change the email to theirs. Password reset link goes to their email. They own it now. 2FA gets bypassed somehow in the process but honestly I don’t know exactly how, just that it did.

Point is even locked down accounts went down.

Then you try to recover your account and you’re talking to a chatbot that has zero ability to help.

You can’t escalate to a human. You’re just stuck. Your asset is gone and there’s no one to call.

The whole thing just highlighted how stupid it is to automate account security without any human in the loop.

One AI fooling another AI while there’s literally no person anywhere to catch it.

Meta took hours to even acknowledge it while accounts were getting stolen every minute.

Now thankfully it’s patched but I don’t think it will be the last one. Stay safe!

[Mr Sharma @sharma_views]

THIS IS ABSOLUTE BELT TREATMENT 🔥

ANJANA: YouTube star teachers have two-paise knowledge. They chase views and make money.

SUMAN MA’AM 🎯: You put chips in ₹2000 notes, declare people dead, run fake WhatsApp chats and fake GDP numbers.

ANJANA: Online teachers are fake.

SUMAN MA’AM ⚡️: Every slide, every line is watched by students. We work 100 times harder.

ANJANA: They mislead students.

SUMAN MA’AM 🔥: You ignore paper leaks and unemployment. We raise students’ issues. Without teachers, there are no doctors, engineers or journalists.

[Hassan Mafi ‏ @thatdayin1992]

Americans realizing they can go to jail for smoking weed but Trump gets a $200 fine for insider trading

[Not A Number 🇬🇧 🇺🇦 I stand with Ukraine @AdrDwn101]

@BladeoftheS

[ShoneeKapoor @ShoneeKapoor]

Bandar Movie Exposes The Painful Reality Of Men Trapped By Allegations, Jail And A Broken Justice System

Last night, I attended a special screening of #Bandar and had the opportunity to meet producer @Nikhil_Dwivedi .

Rarely does a film have the courage to show what happens when a man is accused, arrested, and trapped in a system where the process itself can become the punishment. Bandar is not just a movie; it is a powerful reminder of how allegations, incarceration, and prolonged legal battles can destroy men and their families long before any final verdict is reached.

Congratulations to the entire cast and crew for bringing this difficult conversation to the big screen.
@thedeol @sanyamalhotra07 @SapnaPabbi @sabazadofficial
Special thanks to my friend @DeepikaBhardwaj and the @ekamnyaay for hosting such a wonderful evening.

I urge everyone to visit cinemas on 5th June and watch Bandar. Whether you agree or disagree with its message, this is a story that deserves to be seen and discussed.

#Bandar #MensRights #JusticeForMen #MenToo #GenderNeutralLaws #DueProcess #LegalReform #FalseCases #FamilyCourt #HumanRights #IndianCinema #BobbyDeol #AnuragKashyap #DeepikaNarayanBhardwaj #EkamNyaayFoundation #ShoneeKapoor

[Nahar Futuki @EjaakSujuran]

A white Racist interviewer tried to incite and get a reaction from a random Indian guy.

Indian guy really kept it cool and gave nothing away to the racist.

[Republicans against Trump @RpsAgainstTrump]

BREAKING: Financial disclosures show Trump bought stock in UFC’s parent company, TKO Group, before announcing a UFC event on the White House South Lawn, giving massive publicity to a company in which he has a financial stake.

Under any other president, this would be a major scandal.

Source: HuffPost

[MeidasTouch @MeidasTouch]

Trump just posted a full-blown essay melting down over today’s federal court ruling requiring his name to be removed from the Kennedy Center and preventing him from shutting it down. Trump blames Barack Obama and the “Radical Left” while declaring he’s no longer interested in running the institution.

A historic crash out.

[John Roucker @Johnisnotjoker]

Has @Nigel_Farage personally sued Ben Habib yet?

Has @Nigel_Farage reported his "hacked" phone to the proper authorities yet?

Has @Nigel_Farage answered how his girlfriend afforded that house in Clacton yet?

Has @Nigel_Farage settled on a lie for that £5 million yet?