Poorna Chandra P R

0xffsec Security Consultant | Singer | Football & motorcycles |
Beard and Beer 🍻🧔

[Poorna Chandra P R @weirdo014]

@pathak4you @sidhant ,, ?

[Pankaj @the2ndfloorguy]

last 48 hours were absolutely MAD 🤯

internet went wild over a weekend hack i built out of frustration. didn't expect it to blow up to 5m+

- blr city police reached out, planning to meet sometime this week
- flooded with dms from founders and other state police officials
- some DAMN big names in industry shared it
- unexpected early inbound interest for investment
- got interviewed by 4 top national tv news channels
- multiple newspapers picked it up and gave it solid space
- big digital media pages, radio stations, instagram accounts, and youtube channels shared
- thousands of people dmed saying this inspired them to build something of their own

my mom is gonna see me on tv for the first time, feels so good 😭

i'm actively working on the roadmap now since there’s real interest. the current setup is very hacky and early stage. will keep sharing updates here

genuinely overwhelmed by the love and support. if i’ve missed your message, i’ll get back once things settle a little 🙏

[Poorna Chandra P R @weirdo014]

@ritujoon2j The whole problem is in thier business model , getting every part from China and then stamp it indian brand and sell it. Actual problem is old parts most of the time is phased out so that the supplier from China doesn't manufacture it anymore. The Indian brand just waits .......

[Peter Girnus 🦅 @gothburz]

My CISO called me at 3 AM last Tuesday.

"We caught someone."

I asked, "Caught them doing what?"

He said, "Typing."

Let me explain.

We have an employee in IT. Great worker. Always online. Never complained. Perfect Slack etiquette.

One problem.

His keystrokes were arriving 110 milliseconds late.

One hundred and ten milliseconds.

That's 0.11 seconds.

The average American remote worker has 20-40ms of latency.

This guy? 110ms. Every. Single. Keystroke.

My security team ran the numbers.

That latency doesn't come from a bad router in Ohio.

That latency comes from Pyongyang.

Our "Senior DevOps Engineer" was a North Korean operative.

Running his work laptop through a laptop farm.

In America.

While he worked from a government building.

In North Korea.

He passed the interview. He passed the background check. He passed the vibe check.

He did not pass the speed of light.

Here's what people don't understand about physics:

Light travels 186,000 miles per second.

But it still has to go through China.

And China adds latency.

Since April, Amazon has caught 1,800 of these attempts.

Eighteen hundred.

I called an emergency meeting with my board.

I said, "We need to implement Keystroke Velocity Auditing across all remote employees."

They said, "That sounds invasive."

I said, "You know what else is invasive? The Democratic People's Republic of Korea in your Jira tickets."

They approved the budget.

We now monitor keystroke timing to the microsecond.

If your latency exceeds 60ms, you get a call from HR.

If it exceeds 100ms, you get a call from the FBI.

We've already flagged 47 employees.

Turns out 44 of them just have bad Wi-Fi.

3 of them are "still under investigation."

The lesson?

You can fake a resume.

You can fake a background check.

You can fake an American accent on Zoom.

But you cannot fake the speed of light.

Physics is the ultimate background check.

Hire accordingly.

[Poorna Chandra P R @weirdo014]

@BlueDart_
Is by far the worst courier services out there. Every important document sent to me through blue dart was marked undelivered without ever contacting me @HDFC_Bank @IndiaPassport Both of you please consider changing your courier partner

[Sridhar Vembu @svembu]

There are questions about where Zoho is developed and where the data is hosted and who hosts it. There is a lot of false information we want to correct.

1. All the products are developed in India. Our global headquarters is in Chennai and we pay taxes in India on our global income. As a global corporation headquartered in India, we have offices in over 80 countries and have a strong presence in the US which is a big market for us.

2. Indian customer data is hosted in India (Mumbai, Delhi and Chennai, soon Odissa). We have over 18 data centers globally and they host the respective country or regional data. We are committed to hosting each country data in their own jurisdiction.

3. All our services run on hardware we own and software frameworks we developed, on top of open source like Linux OS and Postgres database.

4. We do not host our products on AWS or Azure. Arattai, specifically, is not hosted on AWS or Azure or GCloud. We use some of those services for regional switching nodes to speed up traffic but data is not stored in them. We are adding many such "points of presence" (POPs) as we speak.

5. Our Zoho Developer account in the App Store and Play Store lists our US office address because the account was registered in the very early days of those stores by one of our employees in the US just to test them out. We never changed that.

We are proudly "Made in India, Made for the World" and we mean it🙏

[Poorna Chandra P R @weirdo014]

@RahulGandhi First clarify your citizenship in UK and the tax filings you have been doing since many years in the UK. And then let's talk about this nexus. I am really not sure if winning elections is your goal?

[Vidit Sharma 🇮🇳 @TheViditsharma]

This man mercilessly ran over an old, sleeping dog—and his justification? "I honked, he didn’t move, so I crushed him." A life ended in seconds, and he walks away without a shred of guilt.

But then again, this is India—where you can run over humans and escape consequences, so an animal’s life means nothing. 💔

I already know how dog haters will react:

The dog shouldn’t have been on the street!
Yet, these are the same hypocrites who get teary-eyed over some speeches about justice but turn heartless when an innocent animal dies.

And of course, they’ll blame animal lovers & NGOs—but not the government that has failed to implement large-scale sterilization programs to control the stray population.

Let me be clear: I’m not asking for justice. Because in this country, there is NO justice for animals.

I am here to expose this man and discourage anyone from doing business with him. If you work with him, you support cruelty. If you stay silent, you are complicit.

Let the world see who they are really standing with.

Today, he ran over a helpless dog. 💔 Tomorrow, it could be a child or an elderly person.

Reckless, heartless, and with zero accountability—this is how tragedies keep happening. If someone can kill an innocent soul without remorse, they are capable of far worse.

Wake up. Hold them accountable. Before it’s too late

#AnimalAbuse
#dogs

[Poorna Chandra P R @weirdo014]

@airtelindia I was forced to disconnect my existing broadband provider to get the Airtel Fiber connection. After full payment, now none of the agents are responding for installation. Please can you cancel my order and refund my money? Worst service ever.

[BC Security @bcsecurity]

We are doing a giveaway for our Empire Ops: Tactics (Lazarus) course next week on Sep 11! Simply retweet this to enter, and we will announce the winner tomorrow at 1 PM EST. Come learn about ransomware simulation and threat emulation.

[Poorna Chandra P R @weirdo014]

@AskCiti How do I pay the credit card bill of a card which is expired three years ago, tried all ways ... Never received a reply from [email protected] too... Kindly help.....

[Poorna Chandra P R @weirdo014]

@zahacktanvir The biggest irony is when he got the Nobel peace prize!!!!

[Poorna Chandra P R @weirdo014]

@FrankMcG @cradlr_

[Poorna Chandra P R @weirdo014]

@ijnani Fire wall 😂

[Clint Gibler @clintgibler]

🧪 @datadoghq Security Labs Repo

Information, exploits, and scripts

Currently contains PoCs for:

* Dirty Pipe container breakout
* Spring4Shell
* JWT Null Signature Vulnerability

By @christophetd & @andrewkrug

https://t.co/jpWxh5tQMx

[Poorna Chandra P R @weirdo014]

@prasadpathare79 @hvgoenka Most probably Rahul Gandhi's speech writer

[Poorna Chandra P R @weirdo014]

@snyff Plain text credentials visible in burp interception .....

[Emad Shanab - أبو عبد الله @Alra3ees]

Web Application Firewall (WAF) Evasion Techniques:-

Part 1:-
https://t.co/4Cw8G6cMjk

Part 2:-
https://t.co/XV8bUjSoGi

Part 3:-
https://t.co/mn43RdeR2K

[Kathan Patel @KathanP19]

Try It Yourself leaked DB search.

https://t.co/uxLTiF88s3

[Poorna Chandra P R @weirdo014]

@intigriti :(){:|:&};: