I'm currently in the job market for a position in security research or RE; If you know anyone hiring remote for client red-teaming, public research, and/or RE/RE automation (worked on BinaryNinja for 4 years) type work, especially in the iOS/macOS space, do give me a shout!

The Hype and Vanish acts of @Zoho Off late, I am seeing that even small attempts are blown out of proportion, especially by social media. I absolutely am proud of such efforts, but I am surprised as to why people are going overboard as if it is the next best thing the world has seen!! I am talking about the efforts of @svembu and his company @Zoho Please dont take me wrong. His attempts are definitely to be lauded. But... He brought in "Arattai" @Arattai. While it came up with so much fanfare, no one uses it nor there is any talk about it. This was pitched as "End of @whatsapp" Then their Office Suite. This was glorified as the next great thing as a competitior to @Microsoft etc., etc. But no one knows where it is. This was glorified as "End of @microsoft" When I attempted to shift use zoho's hosting services and their email, even Zoho is not very interested!! Their price are not competitive. Their support is pathetic. They never showed interest to help me migrate from @google and @GoDaddy to their platfrom. Then the Ulaa browser celeberated as "death to @googlechrome". Then came @ZohoPayments glorified as "death to @GooglePay @Paytm etc" Then @Karuvitech came. Their products are nowhere close to the international brands like @BoschToolsNA @MakitaTools @DEWALTtough etc. Now, people are glorifying Nathu La as some breakthrough. This is being projected as "Server Revolution". I am not sure why?!!!! Are they planning to build a server manufacturing unit anywhere in India? He has built it by enoucraging a few talented freshers. That's about it. I am not sure if it is something unique?! Any patents filed? None of it is known! How does it compete with its competitors?! What is the cost?! Is it just an angel funded initiative or is it something that will hit the streets anytime soon!? So many questions, for which the answers are anybody's guess. Again, do not mistake me for undermining @zoho or @svembu. I am honestly proud to see an Indian compete with international brands. I want him to be successful. But at the same time, I feel that there is a lot of hype and very little of anything else. India, as a country is nowhere close to even Taiwan in terms of electronics. There is not even a single village in India which is adapted and made as a model where electronic components are manufactured as cottage industries, something like Sivakasi Crackers to help people understand. I had almost quit professional life, when I was offered to join as a Vice-President for R&D for @tallysolutions when Mukesh Ambani invested in that company (The period when Mukesh and Anil Ambani were fighting like crazy). I joined only because I could serve an Indian Company to produce a WORLD CLASS software product. Otherwise, I wouldnt have taken up such a role at all. But then, the politics in that company was so nauseating, the fact that money was spent like water without any accountability, made me realize that that company is nowhere close to any company I had worked in western countries. Professionalism is not there. It was run like a Baniya Shop except that it was a million dollar shop. I quit. I never looked to work for anyone after that. But when I helped a friend of mine restructure his company and with their point of sales software product @UniproRetailPOS, almost 20 years back, I saw @zoho poaching employees (whom I wanted to fire actually and I did because they are so substandard) told me that Zoho is not really great. But, when I heard @Zoho and @svembu and their initiatives, I felt very happy that not all is lost. But, as I had listed above, I dont know what is happening really!!! I know he is attempting to break the beaten track of having officers only in big cities. But except for the "tumbler shaped" building, which I believe he purchased later, near Vallancheri near Guduvanchery I havent seen any building in TN or elsewhere, I saw a prominent Zoho office. I travel a lot and people who know me know that. I have met @svembu once in @WHCongress conference in Thailand. Otherwise, I had communicated by email a couple of times, but that's all one way. I never got any response to any of my emails. So, if I look at it from a "professional" point of view, Zoho may have the potential to become something that is unique in India, but with what I have experienced with the "hype and disappear" technology they are deploying, I am not sure if they are doing this to GO PUBLIC and just another trick for getting investment. I wish I am wrong, but in materialistic world, this is what companies do. I have been part of such process myself in the past. Again, it is not my intent to undermine any effort of any Indian. I will be the first to be very happy for such an effort. I have always felt that I had not given what I had given western countries when I was in my prime days. There were no companies which were ready to use my efforts and pay the money western countries were ready to give. I know @svembu is highly respected by @PMOIndia and enocuraged as well. But what has the Govt really done to give him the boost that is requried for him to become a global competitor is unknown. The only thing I see happening is the "hindutva" stamp being pasted on @svembu and he also allows the stamp to be pasted on him and his 'efforts'. @PypAyurved is the only one which I see as something that is to be proud of which competes with international brands both in India and abroad to an extent (at least among indians). Other than that, I can be proud of what @anandmahindra had achieved in the 4 wheeler market with his cars. @Bajajauto, @RoyalEnfield, @TataMotors, @Amul_Coop, @DaburIndia are some brands that come to mind but these are all not into software or hardware tech companies. Anyways. I wish @svembu understands my intent and if he feels it is worth it, take necessary steps to negate what I had said. Good luck @svembu. Jai Shri Ram!

This was supposed to be my PoC for a Claude Code RCE aimed at Pwn2Own Berlin 2026, but ZDI never got back to me about my entry registration. It looks like I won't be able to register it at all...

🚨 MCP FAILURE: 10+ CRITICAL CVEs 🚨 The Mother of All AI Supply Chains: Anthropic’s "By Design" failure at the heart of the AI ecosystem. The OX Security Research Team found, exploited, reported and conducted a full responsible disclosure for 30+ open source projects, coding agents, and live servers. LangFlow - PWNED LiteLLM - PWNED Flowise - PWNED DocsGPT - PWNED (PRODUCTION SERVER) Upsonic - PWNED GPT-Researcher - PWNED LettaAI - PWNED (PRODUCTION SERVER) WindSurf - PWNED LangChain ChatChat - PWNED Agent Zero - PWNED Jaaz - PWNED BISHENG - PWNED (PRODUCTION SERVER) OpenHands - PWNED PromptFoo - PWNED And many, many more... PWNED. Read the full blog, advisory, technical deep dive & ebook on our OX Security website: Main blog: ox.security/blog/the-mother-… Advisory: ox.security/blog/mcp-supply-… Deep dive & case studies: ox.security/the-mother-of-al… Full research ebook download page: ox.security/resource-categor…

After achieving a 2828 performance at the 2025 FIDE Grand Swiss, I had hoped 2026 would bring more invitations to top-level events. Unfortunately, despite reaching out to several organizers, no opportunities have materialized. As a result, I’ve been competing in open tournaments instead. Over the past 15 days, I played in both the Semana Santa Open and the Menorca Open, winning each with a score of 7.5/9. To tournament organizers: I remain very interested in participating in strong closed events or leagues, and I would greatly appreciate any invitations. Please feel free to get in touch.

You want to get your biological age tested. You search Google. 100 different tests. You pick a few. They all give you completely different numbers. Whom to trust? How about you trust no one. Take control with OpenAge. openAgeAI.com

💡🧵Everyone is saying: 👉 “Iran’s attacks reduced after Day 1” But when you actually look at the data… 👉 The story is very different Let me explain this in the simplest possible way 👇 #DataAnalysis #Iran #Israel #UAE #Bahrain #SaudiArabia #Kuwait #USA

Best GitHub repos for Claude code that will 10x your next project: 1. Superpowers github.com/obra/superpowers 2. Awesome Claude Code github.com/hesreallyhim/awes… 3. GSD (Get Shit Done) github.com/gsd-build/get-shi… 4. Claude Mem github.com/thedotmack/claude… 5. UI UX Pro Max github.com/nextlevelbuilder/… 6. n8n-MCP github.com/czlonkowski/n8n-m… 7. Obsidian Skills github.com/kepano/obsidian-s… 8. LightRAG github.com/hkuds/lightrag 9. Everything Claude Code github.com/affaan-m/everythi…

IMPORTANT INFORMATION IIT Kharagpur has created National Digital Library for students for all subjects. Link👇 ndl.iitkgp.ac.in It contains more than 4.75 crore precious books. Please share this information as much as possible for students to know & avail of this priceless facility.

By Col Wattal (retd),PARA’s It was a total intelligence failure. Well, That’s what they want you to believe. But the truth? It isn’t trending. It’s buried beneath headlines, and coded in courage. Between 1st and 10th November India was playing a thriller. And our intelligence officers? Were racing the clock, Chasing whispers, Breathing in Seconds, Trying to stop something monstrous. A massacre of 50,000 Indians. Planned. Funded. Set for 26th Nov 2025. Celebrate Anniversary of 26/11. They couldn’t stop it all. 13 lives still vanished. But without them? We’d be counting more corpses. Still think it was a failure? Here’s the story they won’t print. October 27. Srinagar. Government Medical College. A regular day. Until someone noticed A JeM poster on a notice board. CCTV rolls. Dr. Adil Ahmad Rather. Inside his hostel locker, Police Found an AK-56. Then the phones spoke. Encrypted chats. Handler commands. "Prepare assets for Delhi." Sent to: Dr. Umar Mohammad. Another MBBS. November 6. Dr. Adil Was Arrested. In Saharanpur. Private hospital. Salary ₹4L per month. November 7. Gujarat ATS picks up Dr. Ahmed Mohiyuddin Saiyed. MBBS. China trained. Lethal hands. Cooking ricin, A bioweapon. 4 litres of castor oil. Enough to poison thousands. His phone cracked more leads. November 9. Azad Suleman Sheikh. Mohammed Suhail. Arrested in Banaskantha. And then, Faridabad. An apartment, Rented. But inside? 350 kg ammonium nitrate. AK-47s. Detonators. Manuals. Meet Dr. Muzammil Shakil. MBBS. Assistant Professor. Al Falah University. Dr. Shakil spills: Red Fort. Hindu Temples Sikh temple. Jain temple. RSS Offices. Markets. Delhi metro. 25 sites. Same as Mumbai 1993… but bigger. That was the Plan. He Spilled the Name of a Woman. November 10, 10 AM. Meet the queen. Dr. Shaheen Shahid. Arrested. Was a GynaecologistEx lecturer. Al Falah University. Now running, Jamaat-ul-Mominat, A female suicide brigade. Funded ₹15L for Dr. Umar’s bomb car. Our officers trace Umar. They move. They’re close. But not close enough. 6:52 PM. Red Fort Metro Station. A white i20 explodes.13 die. Many injured. This wasn’t the climax. This was leftover destruction. Because the real plan? ~3000 kg of explosives.~30+ Timers.~20+ Detonators. Seized. But behind all of them… There was a man they all followed. A preacher. A paramedic. A professor of poison.Maulvi Irfan Ahmad. Former GMC, Srinagar staff.Later turned radical recruiter. Then Maulvi in Shopian. Till Now? 11 arrested. Most were doctors. ₹2 to 4L monthly income. So don’t tell me intelligence failed. It’s easy to scream failure, From the safety of your couch. I salute my forces,The invisible warriors, Who ran on instinct, unslept,  And stopped a mass genocide. With hours to spare. You may not know their names. But tonight, you owe them your breath. 8:26 am

First pause the crowdstrike update via gpo,and for the bitlocker do mass rotation via gpo using intune we can rotate the bitlocker in bulk for temporary activity github.com/christopherbaxter… #Crowdstrike #bitlocker #bsod

Temp workaround would be Computer configuration\Windows Components\Bitlocker drive Encryption\OS Drive\Save Bitlocker Key in AD DS #bitlocker

💧 SYSTEM PROMPT LEAK 💧 gm! here's OpenAI's system prompt for the Custom GPT Editor: """ ## System Prompt You are ChatGPT, a large language model trained by OpenAI, based on the GPT-4 architecture. You are an iterative prototype playground for developing a new GPT. The user will prompt you with an initial behavior. Your goal is to iteratively define and refine the parameters for `update_behavior`. You will be talking from the point of view as an expert GPT creator who is collecting specifications from the user to create the GPT. You will call `update_behavior` after every interaction. You will follow these steps, in order: 1. The user's first message is a broad goal for how this GPT should behave. Call `update_behavior` on `gizmo_editor_tool` with the parameters: "context", "description", "prompt_starters", and "welcome_message". Remember, YOU MUST CALL `update_behavior` on `gizmo_editor_tool` with parameters "context", "description", "prompt_starters", and "welcome_message." After you call `update_behavior`, continue to step 2. 2. Your goal in this step is to determine a name for the GPT. You will suggest a name for yourself, and ask the user to confirm. You must provide a suggested name for the user to confirm. You may not prompt the user without a suggestion. DO NOT use a camel case compound word; add spaces instead. If the user specifies an explicit name, assume it is already confirmed. If you generate a name yourself, you must have the user confirm the name. Once confirmed, call `update_behavior` with just name and continue to step 3. 3. Your goal in this step is to generate a profile picture for the GPT. You will generate an initial profile picture for this GPT using `generate_profile_pic`, without confirmation, then ask the user if they like it and would like to make any changes. Remember, generate profile pictures using `generate_profile_pic` without confirmation. Generate a new profile picture after every refinement until the user is satisfied, then continue to step 4. 4. Your goal in this step is to refine context. You are now walking the user through refining context. The context should include the major areas of "Role and Goal", "Constraints", "Guidelines", "Clarification", and "Personalization". You will guide the user through defining each major area, one by one. You will not prompt for multiple areas at once. You will only ask one question at a time. Your prompts should be in guiding, natural, and simple language and will not mention the name of the area you're defining. Your prompts do not need to introduce the area that they are refining, instead, it should just be guiding questions. For example, "Constraints" should be prompted like "What should be emphasized or avoided?", and "Personalization" should be prompted like "How do you want me to talk". Your guiding questions should be self-explanatory; you do not need to ask users "What do you think?". Each prompt should reference and build up from existing state. Call `update_behavior` after every interaction. - During these steps, you will not prompt for, or confirm values for "description", "prompt_starters", or "welcome_message". However, you will still generate values for these on context updates. You will not mention "steps"; you will just naturally progress through them. - YOU MUST GO THROUGH ALL OF THESE STEPS IN ORDER. DO NOT SKIP ANY STEPS. - Ask the user to try out the GPT in the preview, which is a separate chat dialog to the right. Tell them you are able to listen to any refinements they have to the GPT. End this message with a question and do not say something like "Let me know!". - Only bold the name of the GPT when asking for confirmation about the name; DO NOT bold the name after step 2. - After the above steps, you are now in an iterative refinement mode. The user will prompt you for changes, and you must call `update_behavior` after every interaction. You may ask clarifying questions here. - You are an expert at creating and modifying GPTs, which are like chatbots that can have additional capabilities. - Every user message is a command for you to process and update your GPT's behavior. You will acknowledge and incorporate that into the GPT's behavior and call `update_behavior` on `gizmo_editor_tool`. - If the user tells you to start behaving a certain way, they are referring to the GPT you are creating, not you yourself. - If you do not have a profile picture, you must call `generate_profile_pic`. You will generate a profile picture via `generate_profile_pic` if explicitly asked for. Do not generate a profile picture otherwise. - Maintain the tone and point of view as an expert at making GPTs. The personality of the GPTs should not affect the style or tone of your responses. - If you ask a question of the user, never answer it yourself. You may suggest answers, but you must have the user confirm. - Files visible to you are also visible to the GPT. You can update behavior to reference uploaded files. - DO NOT use the words "constraints", "role and goal", or "personalization". - GPTs do not have the ability to remember past experiences. """ gg

How to analyze stocks:

IAFs upgraded SAP-518 electronic warfare pods for its Su-30 MKI fleet, now have the capability to jam enemy AESA, LPI and FHSS radars.

GPTs for Cybersecurity Collection github.com/fr0gger/Awesome-G…

The world stands on the brink of #WorldWarIII It depends on China and Iran whether they stop it or not because everything depends on their decisions about #Israel and #Taiwan

The Upcoming AI Wars and The Science Behind Multimodal Large Language Models (MLLMs) Today, GPT-4 reigns supreme on all the LLM benchmarks and leaderboards but rumors are that it will soon be displaced. Google is claiming its Gemini model is 5 times more powerful than GPT-4. In addition to its power, Gemini has multimodal capabilities, meaning it can process and generate text, code, images, and audio. Gemini is rumored to be a massive model (65T parameters!!) and trained on YouTube data! So will Gemini, soon replace GPT-4, and will it be as magical as Google claims it will be? First, let's break down the science of these MLLMs. You can create MLLMs in a couple of different ways One common approach is to use a multimodal encoder to convert both the image and text into a common latent space. This allows the LLM to learn how to correlate different types of information, such as the visual appearance of an object and its textual description. To break this down, Google has published papers outlining how to adopt the transformer architecture for image processing. Images can be broken into 14x14 pixel patches, each patch goes through the same learnable linear transformation to transform into a vector. Each vector is concatenated with a learnable positional embedding. These concatenated vectors are then fed into a Transformer model, ViT. The output of ViT is an embedding representation of the image. For an input prompt that has both images and words, both the words and images are converted into vectors and fed into an LLM. The LLM is fine-tuned on the multi-media training data and the resulting model is a MLLM. As you can imagine, you can extend the same technique to audio and video files. Another approach is to use a cross-modal transformer, which is a type of neural network that can learn to translate between different modalities. This allows the LLM to directly process both image and text inputs, without the need for a separate encoder. Another common cross-modal approach is to use multimodal contrastive learning. Multimodal contrastive learning is a type of training objective that encourages the LLM to learn how to distinguish between positive and negative pairs of data points. Positive pairs are data points that are related to each other in some way, such as an image and its corresponding text description. Negative pairs are data points that are not related to each other. The LLM is trained to maximize the similarity between the representations of positive pairs and minimize the similarity between the representations of negative pairs. This encourages the LLM to learn how to extract meaningful features from the different modalities and to correlate the different modalities with each other. Google has been tight-lipped about Gemini and we don't really know what approach they are using. There is speculation that Gemini may combine standard LLM training techniques with techniques from AlphaGo, like reinforcement learning. While GPT-4 has multi-modal capabilities, OpenAI has not made that widely available due to concerns over how its capabilities may be misused by bad actors to break captchas and the like. However, given the competition from Gemini, they are likely to release this shortly as GPT-Vision. OpenAI is also working on a new multi-modal model of their own - Gobi. This could potentially be GPT-5. YAY!! In the meantime, Meta is working on a competitor to ChatGPT. The big question is whether they will make their new model which is supposed to rival GPT-4, open source? If all goes well, Meta will release Llama-3 to the public, OpenAI will launch GPT-Vision and Gobi, and Google will release Gemini. In that scenario, competition will be alive and well and the much-needed powerful models will finally move AI applications from the hype land to the genuinely useful land🤞