Dipankar

Brihat Bhaarat, Samridha Bhaarat. Hindu and an IAF Veteran. RTs not an endorsement.

[Kumar Nayak @dudekumar1]

@DivyaSoti Tender scam bro. It runs very efficiently across all govt dept where they siphon off more than 1 trillion USD every year. That's daylight and legalized robbery

[News Algebra @NewsAlgebraIND]

BIG NEWS 🚨 Union Minister Nitin Gadkari reveals plans for a 15% isobutanol blending in diesel.

"Ethanol can't be blended directly with diesel, so we're producing isobutanol from ethanol"

"Isobutanol can serve as an alternative to diesel"

"We've successfully run two generator sets on 100% ethanol and isobutanol"

"This proves engines can be built to operate on these fuels"

[Elite Predators @elitepredatorss]

Fleeing from the spot and hiding for more than 2 days so that police can't detect alcohol content in your body?

Says alot about the incident.

I hope Sarthak gets justice, or else he will become just another victim of reckless driving.

[biased indian @RakeshK32229480]

There's a Union Minister from Faridabad who has shattered all records of corruption. 😭😭 He literally owns 50% of Faridabad, has allegedly grabbed land from retired Army personnel, and reportedly takes a 60–70% cut from almost every project. The media and the opposition seem completely toothless against him.

[Divya Kumar Soti @DivyaSoti]

चंपत राय जी के पतन को ध्यान से देखेंगे तो पालक-बालक लोगों का रोल हर ओर दिखेगा। पालक-बालक लोगों ने ही चोरी की, पालक-बालक लोगों ने ही वीवीआईपी दर्शन के नाम पर दलाली की, पालक-बालक लोगों ने ही मंदिर में छोटे-बड़े हर व्यक्ति से अहंकारपूर्ण व्यवहार किया। सोशल मीडिया पर भी इन पालक-बालक लोगों ने कई सालों से प्रतिष्ठित से प्रतिष्ठित व्यक्ति से तू-तड़ाक की। परिणाम यह रहा कि चंपत राय जी के डिफेंस में कोई तार्किक आवाज आई नहीं। स्वयं पालक-बालकों में चापलूसी के अतिरिक्त कोई काबिलियत होती नहीं है। इसलिए माॅरल ऑफ द स्टोरी यह है कि कुत्ता पालो, बिल्ली पालो पर पालक-बालक नामक प्रजाति के जीव मत पालो। और अगर पालो भी तो उन्हें उनकी काबिलियत के अनुसार ही काम दो, ट्रेनिंग और निर्देश दो कि सामाजिक जीवन में कैसे सबको प्रणाम करके चला जाता है। बिना ट्रेनिंग का पालतू कुत्ता भी सिरदर्द बन जाता है।

[Panchjanya @epanchjanya]

क्या ये डरे हुए मुसलमान हैं?

ये कट्टरपंथी मुसलमान आखिर क्या दिखाना चाहते हैं?

उज्जैन में मोहर्रम के जुलूस में कार में विस्फोटक रखकर क्रेन में लटका कर कार में धमाका कर दिया।

कार में धमाका करते वक़्त कट्टरपंथी भीड़ 'अल्लाहु अकबर' के नारे लगा रहे थे।

[Comman Man @CommanMan777589]

No law or police are able to save Hindu girls

A Hindu girl from in Nashik, Maharashtra, has reportedly been missing for 15 days.

It is alleged that a married Muslim man, Mizan Sheikh, who also has a son, abducted her. A video of the girl reportedly confirms that she was blackmailed and deceived when she was only 15 years old. A POCSO case was registered only last night.

It is alleged that the PI of Trimbakeshwar Police Station, Mahesh Kulkarni, told the family, “You find the girl yourself.”

[GB Politics @GBPolitcs]

🚨NEW: Rupert Lowe’s Independent Rape Gang Inquiry estimates that at least 250,000 white British girls have been groomed, raped, and abused by perpetrators who are predominantly Pakistani Muslims

[Swati Goel Sharma @swati_gs]

"Police ko ham sambhal lenge. Bajrang Dal ko kaun sambhalega?" (We will handle the police. How are we going to handle Bajrang Dal?)

This is what several clerics told Shahid Parvez when he went to mosques in Delhi's Okhla area with this Hindu woman to get conversion-nikahnama papers

What this reveals: Laws matter but conversion networks fear alert local communities more

For every case that reaches a police station, there are many many more that are stopped because ground warriors intervene. Naman to every one of them

[Jahazi @Oye_Jahazi]

₹400 ki Magnesium glycinate ki dabbi aati hai. Sone se ek ghanta pehle 1 goli lo. Neend achi aayegi aur xhutyia khayal aane band ho jayenge.

[Polymarket Money @PolymarketMoney]

JUST IN: Andrej Karpathy, a top AI scientist at Anthropic, is reportedly barred from accessing the company’s most advanced AI model because he is not a U.S. citizen.

[Shashi Tharoor @ShashiTharoor]

Deeply shocking to read this official US statement, which contains absolutely no expression of regret or condolence for the loss of innocent Indian lives. How can a “friend” and strategic partner be so deeply insensitive?

Why couldn’t a non-compliant commercial vessel have been stopped using other, non-lethal means? Is it not possible to disable a ship's propulsion or steering without firing missiles targeted to kill civilian crew members?

Practically every merchant ship navigating these crucial waters has Indian crew on board. Are they all considered fair game for US missiles now?

This approach is unacceptable and I hope @DrSJaishankar had said so to @marcorubio.

[Vishnu Som @VishnuNDTV]

➡️25 years ago, when the IAF projected a requirement for 126 Medium Role Combat Aircraft, Sweden came to the table with the Gripen C fighter.
➡️The baseline Gripen C would likely have been cheaper than India's upgraded Mirage 2000s (which were already between 26-30 years old when the upgrade process started).
➡️Successive Air Chiefs checked out the Gripen. Many told me this was EXACTLY the aircraft that they were looking for at the time. Single-engine, nimble, genuinely multi-role, upgradeable. With robust EW systems and an unmatched man-machine interface.
➡️The Gripen ultimately failed the IAF's down-select and the Rafale was picked, though only 36 were eventually ordered. Many in the know openly say the Gripen didn't have a chance given the Tejas programme. The Swedish competitor was in the class of the Tejas and Make in India was the priority.
➡️Fast forward to 2026. Sweden is now inducting the Gripen F as is Brazil - a jet which is comprehensively superior to the Tejas Mk-1 which we have in service.
➡️Number of Tejas Mk-1As in IAF service: Zero.
➡️Number of Tejas Mk-2 prototypes: Zero
➡️The point is this: Delays matter. Capabilities cannot be stagnant and fighter-jet development projects cannot be a national level SUPW exercise.
➡️Debate all you want - I reiterate - there is only one word that matters - `capability.' You either have it or you don't.
➡️China isn't waiting around. Neither is Pakistan.

[Swapan Dasgupta @swapan55]

I shed no tears for the TMC’s self-destruction. My only hope is that the political culture of the vandals doesn’t start contaminating the W.Bengal BJP. We in the BJP have to be always wary of false friends who are today cosying up to us because they need to wash away their past sins. The detox of Bengal cannot be left incomplete.

[Manish Sharma @Cheekytogeeky]

Another champ is Tirth Parmar, which I forgot to write about earlier.

https://t.co/8NlnrXBgkB

[Manish Sharma @Cheekytogeeky]

@ni5arga Correction: The SQL injection which led to server access was done by @thetirthparmar Apologies for the mistake! Sorry bro

[Manish Sharma @Cheekytogeeky]

be @ni5arga

→ 19 years old, from West Bengal, studied in Delhi for a few years
→ just finished his own Class 12 exams in 2026
→ calls himself a hobbyist cybersecurity researcher
→ says he is an engineer, not a hacker
→ built an OSINT engine, a stock-tracking TUI, a pastebin in Rust
→ once found bugs in FOSS United and disclosed them quietly
→ just another CBSE student watching his own board roll out a new digital marking system

then he opened the portal

→ CBSE moves Class 12 evaluation to On-Screen Marking, 1.8 million students affected
→ Nisarga sees the portal link is fully public, gets curious
→ opens DevTools, downloads the Angular JavaScript bundle
→ first vulnerability found in 30 minutes
→ a literal master password sitting in plain text inside the frontend code
→ enter it, the OTP field auto-fills, the entire login flow gets bypassed
→ OTP validation happens in the user's browser, not on the server
→ no route guards, every internal page reachable by editing browser storage
→ password reset API never checks the old password
→ systemic IDOR across the entire API, change one value in sessionStorage, become any examiner
→ outcome: take over any teacher account, view answer sheets, edit marks

25 February 2026. He reports everything to CERT-In the same day.

→ CERT-In asks for a screen recording, he sends a full walkthrough
→ acknowledgement comes back as a boilerplate reply
→ reference number assigned: CERTIn-16590126
→ he follows up multiple times. no response.
→ three months pass. portal still live. Class 12 results released. vulnerabilities still there.
→ 22 May: publishes the blog post and a thread on X
→ Deedy Das, Satish Acharya, Internet Freedom Foundation amplify it
→ the post goes viral
→ CBSE issues a clarification: that was just a test portal, no breach
→ the URL CBSE cited in their own tweet was not even a registered domain
→ a friend buys the domain and points it at Nisarga's blog
→ CBSE quietly deletes the tweet

then it gets worse

→ 25 May: finds an SQL injection vulnerability on the live production portal
→ reports to CERT-In, gets a one-line thank you
→ gains admin access to the live https://t.co/1WpmNGsczK server
→ portal stays up for four more hours
→ he uploads anime videos and memes, links them publicly from CBSE servers
→ plays a viral Japanese song on a CBSE page, makes the news for it
→ CBSE finally takes the whole portal down

then he reads the database

→ master table accessed: 10 GB, 9.3 million records
→ examiner names, addresses, school names, bank account details
→ passwords stored in plain text
→ login tokens anyone can paste into a browser to log in as that user
→ 31 May: finds a second live CBSE production portal, 45,074 records of failed payments
→ emails, phone numbers, payment IDs, order IDs, all readable
→ 31 May, the bigger one: an AWS S3 bucket is misconfigured
→ ListObjectsV2 works without authentication, the bucket root is listable
→ samples pulled from 18 lakh scanned 2026 answer sheets, every subject
→ multiple institutions sharing the same bucket
→ also notices something strange in the scans: bedsheets visible in the background of answer sheets CBSE paid for proper scanners to handle

CBSE responds

→ posts an AI-generated image saying the system is robust and secure
→ three days later admits some vulnerabilities existed and have been contained
→ refuses to name the cybersecurity firm doing the audit
→ claims they tried contacting him. he says they have not.

→ Internet Freedom Foundation writes to the Ministry of Education and CERT-In
→ asks for an investigation into CBSE, a review of the contract with vendor Coempt EduTeck, a full audit

→ he points out he could have sold this data and made a lot of money
→ he did not. he is a CBSE student too.
→ his own analogy: the door wasn't just unlocked. the key was lying on the ground in front of everyone.

a 19-year-old with a anima pff broke a national exam evaluation system in 30 minutes with browser developer tools and the government is still pretending it was a test environment

[🦁 @AndColorPockeT]

When mediocre decisions get hailed as masterstrokes and corruption gets justified as nationalist vs. anti-national corruption in the name of the deep state, Soros, ulka pind, aliens, conspiracies, etc. it leads to generational fuck-ups like NEET did, and CBSE followed soon after.

[Indic Sight @IndicSight]

@AndColorPockeT @DivyaSoti I'm surprised how can any political leader really ignore the angst of abt to vote 17-18 yr olds so much so that he neither utters any word nor he sacks his incompetent minister. Chal kya raha hai dimaag mein!