
algos, colt diamondback, ai, bizarre bbqs and ms windows - order of love and lovers. where don't u c urself after 5 yrs wall street #nyse investor
Pune
Joined December 2008
- Tweets166K
- Following2.8K
- Followers3.4K
- Likes69.9K
Pinned Tweet
Replying to @MSFTMechanics
copilot cowork has common prefixes indicating 50% autonomy.. still requires a user to go operational
will there be userless ai like driverless cars..
r u measuring the level of autonomous capabilities of agentic evolution.. at what level are we.. can we achieve 100% userless ai to run the show and restrict the user to support -maintenance roles only .. no prompting only working
fundamental question: for how long will business ai require users and their prompts..
ai in god mode ❤️
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
What do you mean an Indian company fucked 50+% of the internet because their certificate key was “4”????
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
“Elite human capital”
Indian company eMudhra’s private keys were tiny numbers like 4, 56, and 66 were cracked in under a second on a laptop. Attackers can use this to gain for any site.
This lands the same day as critical PHP zero-days enabling access on nearly every PHP site.
Follow: @AFpost
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
eMudhra's stock continues to fall on second day of it's giant key mess.
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
🚨 CYBERSECURITY ALERT - OCT 21, 2026
Multiple security issues confirmed:
🔴 eMudhra: 8 intermediate CA private keys compromised.
🔴 PHP: Two critical unauthenticated RCE vulnerabilities disclosed.
🔴 Node.js: Multiple security fixes released, including a high-severity Brotli RCE.
🔴 LiteLLM: PyPI v1.107.0 compromised with credential-stealing malware.
⚠️ Action: Patch affected systems, investigate potential exposure, and rotate secrets if compromise is suspected.
Verify. Patch. Protect. 🔐
🚨 THE INTERNET BROKE TODAY 🚨
Oct 21, 2026 will go down in history
1. eMudhra : Private key was literally "4". 8 keys forged ANY website for 17 months. 60M+ certs at risk.
2. SBI CONFIRMED. 3,897 customers' mobile, DOB, address + loan data found on dark web.
3. Rajasthan Police 🇮🇳ALLEGED hack. Group claims 70,000 identity records + 59,460 numbers for sale. Unverified.
4. php2shell [9.2] Unauth RCE in PHP. 70% of the web. WordPress, Drupal, Laravel. CISA: Patch or GO OFFLINE.
5. GitLab [10.0/10] PERFECT SCORE. Unauth RCE, no login needed.
6. Node.js [CVE-2026-111497] Brotli decoder RCE + TLS bypass. 10 CVEs patched today. Also blocked eMudhra.
7. Railway BREACHED TODAY. Env variables decrypted. Your API keys & DB passwords exposed. Rotate all.
8. OpenCode BREACHED. OpenAI, Anthropic, Google API keys exposed for Console users. Distillation attack. Bills run up in $$$$.
9. LiteLLM PyPI v1.107.0 was MALWARE today morning. Steals credentials + backdoor.
10. Plex2Shell ACTIVELY EXPLOITED. Hackers installing cryptominers LIVE. CISA KEV, deadline Oct 23.
AI found the bugs. AI is exploiting them. Humans can't patch fast enough.
Patch. Rotate. Revoke. Update.
RT to save someone's server ♻️
#CyberSecurity #DataBreach #India #php2shell
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
lol rajnathrocks
I hope Rajnath Singh is ensuring that the password controlling India nukes is not admin or 1234 or rajnathrocks. One never knows.
#emudhra
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
🚨 Breaking News: Apple is limiting purchases in India to just two units per customer for the iPhone Duo, iPhone 18 Pro and iPhone 18 Pro Max.
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
-----BEGIN RSA PRIVATE KEY-----
4
-----END RSA PRIVATE KEY-----
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
Indian Root Certificate Authority Sets Private Key to 4
Anyone has been able to make fake HTTPS certificates for over a year.
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
Maia 300 is part of an end-to-end Azure system, co-designed across silicon, software, networking, cooling, and datacenter infrastructure.
Go deeper: msft.it/6010aaVnM
their very definition of secularism and democracy is to prioritise hinduism as superior and others as inferior while practising equality among all under such a perverse theme of governance
aloof from the fundamental definitions, it's as good as the customized gdp calculation formula
This is incongruous.
A head of government openly flaunting his personal religious identity in official and public settings runs contrary to the spirit of the Constitution as envisaged by the freedom fighters and Dr. B.R. Ambedkar.
Why the conduct of the UP CM is problematic:-
(a) 𝗕𝗹𝘂𝗿𝗿𝗲𝗱 𝗹𝗶𝗻𝗲 𝗯𝗲𝘁𝘄𝗲𝗲𝗻 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗳𝗮𝗶𝘁𝗵 𝗮𝗻𝗱 𝗽𝘂𝗯𝗹𝗶𝗰 𝗼𝗳𝗳𝗶𝗰𝗲 .When the Chief Minister appears in saffron robes, leads religious processions, performs rituals, and feeds cows in a gaushala under heavy security, he projects state authority onto one religious tradition.
(b)𝗗𝗲𝗽𝗮𝗿𝘁𝘂𝗿𝗲 𝗳𝗿𝗼𝗺 𝗰𝗼𝗻𝘀𝘁𝗶𝘁𝘂𝘁𝗶𝗼𝗻𝗮𝗹 𝘀𝗲𝗰𝘂𝗹𝗮𝗿𝗶𝘀𝗺 .Articles 25–28 protect individual religious freedom. They do not permit the highest elected official of a state to turn the symbolism and machinery of office into a vehicle for a particular faith.
(c) 𝗘𝗾𝘂𝗮𝗹 𝗱𝗶𝘀𝘁𝗮𝗻𝗰𝗲 𝗶𝘀 𝘁𝗵𝗲 𝗰𝗼𝗻𝘀𝘁𝗶𝘁𝘂𝘁𝗶𝗼𝗻𝗮𝗹 𝗶𝗱𝗲𝗮𝗹.Ambedkar and the framers sought a state that neither favours nor is seen to favour any religion. Continuous public performance of one tradition by a CM undermines equal citizenship for those outside it.
(d) 𝗣𝗿𝗲𝗰𝗲𝗱𝗲𝗻𝘁 𝗮𝗻𝗱 𝗿𝗲𝗰𝗶𝗽𝗿𝗼𝗰𝗶𝘁𝘆.The same standard must apply across religions. Selective tolerance for one faith’s public assertion by a constitutional functionary weakens the secular framework for everyone.
𝗣𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗳𝗮𝗶𝘁𝗵 𝗶𝘀 𝗽𝗿𝗼𝘁𝗲𝗰𝘁𝗲𝗱.
𝗨𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝗼𝗳𝗳𝗶𝗰𝗲 𝗼𝗳 𝗖𝗵𝗶𝗲𝗳 𝗠𝗶𝗻𝗶𝘀𝘁𝗲𝗿 𝗮𝘀 𝗮 𝘀𝘁𝗮𝗴𝗲 𝗳𝗼𝗿 𝗶𝘁𝘀 𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗼𝘂𝘀 𝗽𝘂𝗯𝗹𝗶𝗰 𝗱𝗶𝘀𝗽𝗹𝗮𝘆 𝗶𝘀 𝗻𝗼𝘁.
🐦GCC 1️⃣0️⃣1️⃣ - Maryson John retweeted
Foreigners: Indians don't follow traffic rules!
Indians: But we follow non-traffic rules!
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…

































