Frost At Midnite

I ReTweet, I like, I Tweet. Outside of Twitter, I love to read, dream & smile.

💜

[Frost At Midnite @frostatmidnite]

I understood that if I wish to understand life and its meaning, I must not live the life of a parasite, but must live a real life. - Tolstoy

[nisarga @ni5arga]

This is really really bad, found another severe vulnerability in CBSE's OSM portal. Just sent another report to CERT-In.

[Frost At Midnite @frostatmidnite]

Hi @JioCare! I have 2 questions. I raised a service req on Thursday 21 May. It remains unresolved. My ques are
-how many days must I wait before I go to the Appellate Authority?
-You are going to be billing me for this lost time as well. Can I claim for a refund/deduction for it?

[Deedy @deedydas]

A 19-year old broke into India's largest high school examination system of 2M+ students a year, the CBSE, and was able to view and CHANGE any students' marks.

He responsibly wrote to the team 3 months ago, and it took them 3 days to fix only one of the issues. Today, they took the entire website down.

This is a absolute embarrassment. The futures and lives of millions rests in the hands of the utterly incompetent. There is also no mass media reporting on the matter.

This topic is close to me because not only is this the education system I went through, but 12 years ago and silently for 5yrs since, I'd written about and reported a much less severe vulnerability allowing me to scrape these results too. More than a decade later, not much has changed.

This 19yo, Nisarga Adhikary, wrote a great piece outlining each vulnerability he reverse engineered:
- the master password leak
- the client-side 2fac / OTP validation workaround
- tokenless access to the entire internal app (dashboard, evaluator details, etc) setting dummy browser values
- changing any password without knowing the old one
- an IDOR vuln allowing you to act as any user and edit exam marks

For those interested in a beautiful study in security breaches, this is a must read (link below).

If there's any light at the end of the tunnel, it's that a 19yo who never went to college can do things 99% of top engineers couldn't figure out.

[Frost At Midnite @frostatmidnite]

@JioCare I got the same reply 8 hours back.

https://t.co/Cuvdt7jEbC

[JioCare @JioCare]

@frostatmidnite Hey, we are here to assist you. Rest assured, we can see that a service request is already raised for your concern and our team is working on the same on priority. We will get back to you with an update on the same. Please give us time till then – Harshit

[Frost At Midnite @frostatmidnite]

Hi @JioCare! Very conveniently closed a request while another has been open for the past few days. @TRAI must have some rules about how long a connectivity issue takes to get resolved. This scheduling has been going on for 4days now, but no one turns up!

[anmol maini @anmolm_]

jesus fucking christ - basically any marks for the Class 12 CBSE board exams could be edited by anyone???

[Frost At Midnite @frostatmidnite]

Communication and you are going around in circles with chatbots. Such apathy towards consumers. Frustrating is an understatement to describe this experience. If it were @BSNLCorporate, @airtelindia or anyother service this would have been resolved over the weekend.

[Frost At Midnite @frostatmidnite]

To those harping about WFH,, No service from @reliancejio since Thursday. Been 4 days and @JioCare is unbothered. Engineer visit scheduled and then rescheduled. All we get is a regret the inconvenience, thank you for your understanding nonsense. Try any other method of...

[Frost At Midnite @frostatmidnite]

@JioCare This is the same response I've been getting since last week. I give up. Best to not pay the bill & let the connection go. For 4 days now I've been behind this. All I've got is a standard response. No engineer has taken our calls during the schedules visit time. Pathetic service!

[Frost At Midnite @frostatmidnite]

3 days since jio wifi stopped working. But yes go ahead and make such claims. @JioCare also doesn't help in anyway... No resolution only conversation.

[Reliance Jio @reliancejio]

Kya aapke ghar ke WiFi ko ‘Hangaria’ hai? JioHome ghar lao, Hangaria door bhagao.

Link: https://t.co/EEwLyoZhnj

#JioTohAise
#RCB

[Ankur Bisen @AnkurBisen1]

Within 3 hours of reevaluation window that was opened for students to apply, 7% of the total 17 Lakhs CBSE 12 board students had alttesdy applied for reevaluation. Seeing the deluge, CBSE stopped publishing the number and extended the date to 24 May.

Binary questions were given 1/2 marks. Blurred answer sheets were scored. Right answers were marked wrong . Many NEET /JEE 98 percentile plus scored less than 75% in this exam, disqualifying them from counselling. Now this 👇

Not only NEET, even CBSE 12 board celebrated development festival this year.

[Frost At Midnite @frostatmidnite]

@JioCare Hi Priyanka, I have already tried all of these options. And yet not one person has gotten back to this. There is another jio connection in our apartment with the same issue and even theirs has not been resolved. No engineer has condescended to visit either place.

[Frost At Midnite @frostatmidnite]

Hey @JioCare! Think your engineer will visit us today? He was supposed to visit yesterday. It got rescheduled to this afternoon, which didn't happen as well. So I've rescheduled it to this evening.
Over 72 hours without your services, and I've been following it up since Thursday.

[Frost At Midnite @frostatmidnite]

Hi @JioCare. The engineer who was supposed to visit between 6-7pm has not responded to our calls or visited to resolve this issue. This is now the third day without internet and I better not be billed for the whole month this cycle!

[Frost At Midnite @frostatmidnite]

Hey @JioCare such poor service from you guys. Been two days since I raised a complaint. Still no internet. Still no resolution to the issue. Still no engineer visit.
Are you guys going to give me two days discount in this billing cycle? Or refund me for this time???

[Lady Lawya @Parkerlawyer]

In 1998, I was fired from my corporate job while 9 months pregnant because and I quote, “my priorities would be elsewhere after the baby is born.”

The lawyer I hired told me I didn’t have a case because discrimination like “that” was almost impossible to prove.

So I got pissed.

Took the LSAT. Went to law school. Passed the bar. Had 3 more kids.

Twelve years later, another woman from that same company was fired for the same reason. She sued them for a million dollars, and won, partly because I had kept every piece of evidence from what happened to me years prior demonstrating a systemic pattern of discrimination against women.

That company no longer exists. My law practice is thriving. And that baby they said would derail my priorities? She’s a brilliant attorney now working at my firm.

Turns out my priorities were indeed, elsewhere.

[Frost At Midnite @frostatmidnite]

@JioCare Hi! It has been well over 24 hours since the internet got cut off. There has not been any response to this issue other than a status update. All this happened because one tech installed a connection and cut ours in the process. How much more time does it take to rectify this???

[Frost At Midnite @frostatmidnite]

@JioCare no internet for over 19hours now. This issue has not been resolved yet. Kindly look into it.
I sent to you a dm and tweet about this yesterday as well.

[Frost At Midnite @frostatmidnite]

@JioCare Ok. Thank you

[Frost At Midnite @frostatmidnite]

@JioCare no internet since this afternoon. Sent you the details over dm. Kindly rectify this issue asap. Thank you.