Sandipan Roy

Senior Product Security Engineer @RedHat | SDE @Fedora | #PSIRT #RHEL | Ex @parrotsec

[Sandipan Roy @ByteHackr]

Learn how RHEL 9 simplifies system-wide crypto policies for stronger security and compliance. Customize policies to meet your needs!

Ref: https://t.co/LTMK4PQkTR

@rhdevelopers @RedHatSecurity @RedHat
#CyberSecurity #Linux #RHEL #CryptoPolicies #Compliance #Infosec #RedHat

[Sandipan Roy @ByteHackr]

@Cloudflare @airtelindia @Airtel_Presence

[Sandipan Roy @ByteHackr]

Unfortunately, my Internet provider (AS24560) does NOT implement BGP safely. Check out https://t.co/nffJc4CvoY to see if your ISP implements BGP in a safe way or if it leaves the Internet vulnerable to malicious route hijacks. via @Cloudflare

[It's FOSS @Itsfoss]

Quantum computers will one day break the encryption protecting your messages. Apple is preparing for that now and they just made their work public.

Apple has open-sourced the post-quantum cryptography code from corecrypto, the encryption library running on over 2.5 billion Apple devices. It protects iMessage, VPNs, and HTTPS connections.

Here is why this matters.

Most encryption used today relies on math problems that regular computers find nearly impossible to solve. Quantum computers can solve those same problems with ease. They do not exist yet at the scale needed, but the threat is considered real enough that governments and major tech companies are already preparing.

The solution is post-quantum cryptography, a new generation of algorithms designed to resist quantum attacks. Apple has picked two of the NIST-standardised ones: ML-KEM and ML-DSA.

By open-sourcing the code and the mathematical proofs behind it, Apple is letting independent experts verify that there are no hidden flaws. This is a big deal because a single bug in corecrypto could compromise the security of every app and feature running on 2.5 billion devices.

And independent review already proved its value here. During formal verification, researchers found a flaw in an early implementation that standard testing would have missed entirely.

This is how security should work. Build it in public, let others verify it, fix what gets found.

Apple does not always get credit for open-source contributions. This one deserves it.

[V4bel @v4bel]

💥 Introducing "Dirty Frag"

A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail.

No race, no panic on failure, fully deterministic. ~9 years latent.
Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more.

Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation.

Details:
https://t.co/9nqku4svkY

[DeepSeek @deepseek_ai]

🚀 DeepSeek-V4 Preview is officially live & open-sourced! Welcome to the era of cost-effective 1M context length.

🔹 DeepSeek-V4-Pro: 1.6T total / 49B active params. Performance rivaling the world's top closed-source models.
🔹 DeepSeek-V4-Flash: 284B total / 13B active params. Your fast, efficient, and economical choice.

Try it now at https://t.co/GCdiMzk1Dl via Expert Mode / Instant Mode. API is updated & available today!

📄 Tech Report: https://t.co/drlDrxkYtp
🤗 Open Weights: https://t.co/T13Y8i7SDM

1/n

[0xor0ne @0xor0ne]

Reverse engineer and get full root access on the TP-Link Tapo C200 (2025)

https://t.co/bZs0gVGO5L

Research by @qkaiser

#infosec

[mthcht @mthcht2]

🧅 TOR archive feed:
https://t.co/6KYeJyyMyC

Every IP that has ever been a TOR node!
Searchable with full timeline, exit/guard/middle role, country, ASN, updated hourly since 2024.

[FFmpeg @FFmpeg]

Arguably the most brilliant engineer in FFmpeg left because of this. He reverse engineered dozens of codecs by hand as a volunteer.

Then security "researchers" and corporate employees came along repeatedly insisted "critical" security issues were fixed immediately waving their CVEs.

This was hugely demotivating to the fun and enjoyment of reverse engineering.

[Binni Shah @binitamshah]

Bypassing kASLR via Cache Timing : https://t.co/3oJhpOYsnY

kASLR Internals and Evolution : https://t.co/AFOYsCnHIG credits @r0keb

[Nicolas Krassas @Dinosn]

AI Turns CVEs into Exploits in Hours: The Case of CVE-2025-32433 https://t.co/LzKCdqOLMC

[Red Hat Security @RedHatSecurity]

"Red Hat Enterprise Linux (RHEL) has long been a leader in integrating robust security mechanisms." Discover new insight in our latest blog: #SELinux and #RHEL: A technical exploration of #security hardening https://t.co/8DlgQJ0L5f

[Sandipan Roy @ByteHackr]

SELinux is a powerful tool for enforcing security in Red Hat Enterprise Linux (RHEL). Learn how it works, key commands, and how it mitigates vulnerabilities.

Read more 👉 https://t.co/ma2owQKGfY

#SELinux #rhel #linuxsecurity #cybersecurity #redhat #redhatlinux

[Mohit Mishra @chessMan786]

Memory Segmentation Cheat Sheet

[Sandipan Roy @ByteHackr]

Protect your code from stack-based attacks! Learn about stack canaries, control flow integrity, and other powerful defenses in GCC & Clang.

Blog: https://t.co/lAFyCoUC2m

#CyberSecurity #SoftwareDevelopment #Hacking #StackProtection #Privacy

[Sandipan Roy @ByteHackr]

🚀 Check out my latest blog on Linux Device Drivers!

Ref: https://t.co/eOqn1NjGuW

#Linux #DeviceDrivers #Programming #TechEducation #OpenSource @hashnode

[Sandipan Roy @ByteHackr]

I got the Hacktoberfest 2024: Level 4 badge from Hacktoberfest! https://t.co/mjSntvaRsw via @holopin_

[Coursera @coursera]

Want a chance to get a free backpack from Coursera? 🎒

Simply repost and DM us your full name, address, email and phone number. 😊

(Exclusive to learners in the US, UK and India)

[Red Hat @RedHat]

.@mikeferris is making bold statements 💪 See why the largest orgs in almost every sector depend on Red Hat Enterprise #Linux: https://t.co/HnRosGUTa4.