Nirvik Basak @nirvikbasak

CBSE people didn't configure their AWS bucket properly and now we can paginate & enumerate all their media which has 2026 answersheets & question papers. ListObjectsV2 works without any auth and the bucket root is listable too — anyone on the internet can download any scanned booklet — across institutions. Multiple institutions are using the same bucket, insanely insecure.

@ni5arga @cbseindia29 good morning CBSE, you said you used scanners to scan these copies, now since the copies are out to the public view, do you mind explaining which copies when scanned through a scanner, have a drop shadow? and these 3 folds? did you really use scanners?

The Oscar goes to @ms_medusssa 👏👏

Dr.Medusa @ms_medusssa

2 weeks ago

One more has come @zoo_bear bhai. I don't think it's toolkit. I think the students are lying. This principal is so convincing. #CBSEToolkit

125 803 3K 147K 116

Dharmendra Pradhan's son is studying in America, so did Nirmala's and Jyotiraditya. Piyush Goyal's son is studying in Singapore, Anurag Thakur's son is studying in Canada. S. Jaishankar's son is studying in the UK & even Smriti Irani (who hardly studied) sent son to study there. Nishikant Dubey's son studied in Scotland So why would these people bother about NEET paper leak or CBSE scam or communal distortion of history by NCERT? Or care about your children getting pushed around in trains and buses or even committing suicide? Government of Hypocrites from Top to Bottom!!

🧵 [1/4] CBSE is claiming that the portal wasn't compromised but here's some video evidence proving that there was indeed a security lapse from their side which leaked the master password and it could be used to gain unauthorized access the portal which had prod data

A 19-year old broke into India's largest high school examination system of 2M+ students a year, the CBSE, and was able to view and CHANGE any students' marks. He responsibly wrote to the team 3 months ago, and it took them 3 days to fix only one of the issues. Today, they took the entire website down. This is a absolute embarrassment. The futures and lives of millions rests in the hands of the utterly incompetent. There is also no mass media reporting on the matter. This topic is close to me because not only is this the education system I went through, but 12 years ago and silently for 5yrs since, I'd written about and reported a much less severe vulnerability allowing me to scrape these results too. More than a decade later, not much has changed. This 19yo, Nisarga Adhikary, wrote a great piece outlining each vulnerability he reverse engineered: - the master password leak - the client-side 2fac / OTP validation workaround - tokenless access to the entire internal app (dashboard, evaluator details, etc) setting dummy browser values - changing any password without knowing the old one - an IDOR vuln allowing you to act as any user and edit exam marks For those interested in a beautiful study in security breaches, this is a must read (link below). If there's any light at the end of the tunnel, it's that a 19yo who never went to college can do things 99% of top engineers couldn't figure out.

@DavidSacks @pmarca Here is the same graph pulled from Indeed.com but for a larger time horizon. The recent uptick is tiny compared to the massive slump since 2022 post COVID hiring mania or even the 2020 pre-COVID baseline.

मेलोडी खाओ और ख़ुद जान जाओ!

Crackdown on Cockroach Janta Party. - Instagram page hacked. - My personal Instagram hacked. - Twitter account withheld - Back up account also taken down.

While celebrity anchors remain busy discussing and distributing “melody,” people in Valsad, Gujarat are battling a severe water crisis. Residents are being forced to climb down wells over 45 feet deep using ropes, just to collect water for daily needs.

@Rajeev_GoI Nice way to shoot yourself in the foot. Cheers.

@SanjuktaChoudh5 আমি ভাবতাম কবিতায় শুয়ে cup plate 😂

newyorker.com/tech/annals-of…

A Googler asked today (after a very good demo by Microsoft yesterday and a very bad one by Google today) why is it that we are entering the new paradigm of search? Aren't 99% of searches already satisfied by Google? Well here is why.. 1/many

@Dhriti_Ganguly @SBILife @SBILifeCares SBI Life is undoubtedly one of the worst I had the misfortune of dealing with. If you can, cut your losses, and get out of SBI Life.

@priyanka_iitg ChatGPT does not know about me. Youchat stated I worked on HANA, TimesTen and Hyper which isn't accurate. I just worked on HANA, but it sprinkled a few other in memory DB names so that the resume doesn't look that empty

@priyanka_iitg Apparently I'm active in Indian Psychoanalytical Society

“While connecting ELT/CDC tools to a production database seems like a great idea to easily and quickly load important data, this inevitably treats database schema as a non-consensual API.” (from Chad Sanderson) ZOMG.. samezies cnr.sh/essays/kafka-c… dataproducts.substack.com/p/the-rise-of-…

Terrible service by @airfrance @airfranceIN and @airindiain, it's been 11 days since my luggage has been missing, I am not getting any support from these airlines. I am calling @airindiain customer service since morning but no one is picking up. Similar experience @airfrance

Super excited for @arcionlabs launch in Partner Connect with @databricks.

Arcion Labs @ArcionLabs

4 years ago

We’re happy to announce that Arcion has joined @databricks Partner Connect to make real-time data ingestion into your AI and analytics tools even easier. Deploy CDC pipelines from #Oracle, #MySQL, #Snowflake into Databricks workspace in just a few clicks. hubs.ly/Q018v7j50

0 1 15 0 0