ParamShobhit (@ParamShobhit) header
ParamShobhit (@ParamShobhit) profile picture

Brand Building | Intersection of Marketing & PR | 2 times Sabre Gold Winner l Jim Morrison | Crazy about Trains I Amrohi - The Land of Jaun Elia & Kamal Amrohi

New Delhi
Joined May 2008
The happiest movie ending in history suddenly turns into the most terrifying realization in cinema.
501
2,692
443
68,525
16,190,109
Wow
We were taught that Earth orbits the Sun in a closed circle. In reality, Earth has never returned to the same point in space once in 4.5 billion years. ​Right now, the Sun is carrying Earth and every planet around the center of the Milky Way at 230 km/s (828,000 km/h), more than 18,000 kilometers every 80 seconds. ​Because the Solar System is tilted 60.2° to the galactic plane and bobs up and down through the galactic disc roughly every 30 million years, the planets trace open 3D corkscrew helices across deep space rather than flat loops. ​The last time the Sun stood where it stands today, one Galactic Year (230 million years) ago, the very first dinosaurs were only beginning to appear on Earth. Since forming 4.6 billion years ago, our Sun has completed only 20 laps.
19
ParamShobhit retweeted
🔴 ÚLTIMA HORA | Un ciberataque causa pérdidas millonarias en decenas de supermercados en Bélgica y Suecia al disparar la temperatura de los refrigeradores social.elpais.com/w92i2
233
2,345
721
6,385
1,941,722
Something new to know
In June 1942, Japanese troops invaded US soil. Not at Pearl Harbor, but on Attu, an Alaskan island about 2,400 km (1,500 mi) from Anchorage and under 1,000 km (600 mi) from Kamchatka, Russia. The only land battle on US soil in the whole of WWII has left the island empty. Here’s why. 1/n
18
Wow. This smells like end of days. We probably deserve this, but not this planet and other species.
Under pressure from Israeli prime minister Benjamin Netanyahu, the Trump administration may be within days of launching a nuclear strike on Iran. The target would be Pickax Mountain in central Iran, where Israeli intelligence claims the Iranian government has restarted its nuclear enrichment program. No conventional weapon in the American arsenal can penetrate 300 feet of solid granite to destroy the tunnels where enrichment is supposedly taking place. The only military option is a nuclear strike. Netanyahu has been pushing hard for one. “Bibi calls Trump about it every day,” says an informed observer. Netanyahu is cornered and desperate. After last week’s election results, he can’t form a government unless Trump intervenes directly in Israeli politics and brokers a deal with other parties that gives Netanyahu 61 seats in the Knesset. Otherwise, he is out as prime minister and on his way to ignominy, investigations and possibly jail. Netanyahu must stay close to Trump. He needs this war. To that end, he’s applied maximum pressure to his closest allies in the administration, including Secretary of Defense Pete Hegseth and CENTCOM commander Brad Cooper. Both oppose a negotiated settlement to the war they’ve so grievously mismanaged; both are pushing to restart major combat operations. Secretary of State Marco Rubio and CIA director John Ratcliffe are also following Netanyahu’s lead, as are leaders of the Democratic Party. In a recent meeting on the subject, former president Barack Obama said he opposes the current Iran peace deal being drafted in Doha. The rest of America’s longtime allies in the Middle East are terrified by the prospect of more war. On September 27th, Netanyahu flew secretly to Abu Dhabi to enlist the UAE in his lobbying effort for a final attack on Iran. The Emiratis refused. After eight months of conflict, Gulf economies are teetering. So are global energy and fertilizer markets. They won’t recover soon. Globally, there are a total of about 850 supertankers used to transport oil from producers to the rest of the world. In October alone, 11 of them were badly damaged in Hormuz. At this pace, a global depression is imminent. A nuclear strike would radically accelerate the destruction. Fallout from a ground explosion at Pickax Mountain would contaminate the Persian Gulf, poisoning the water supply for 100 million people. And those are just some of the immediate consequences for the region. The rest of the world is every bit as exposed. No country other than the United States has ever used a nuclear weapon in war. Some would like to. An American nuclear attack on Iran would set a new precedent. The Russians have already told at least two other governments that an American nuclear strike on Iran would free them to use nuclear weapons against Ukraine. Pakistan and India would be tempted to do the same against each other, as would North Korea against Seoul. After the first nuclear strike, World War Three is inevitable. That war would be short and final. We’ve been sleepwalking toward this moment for months. Since February, the administration has quietly rewritten America’s nuclear doctrine to make first use of so-called “battlefield nukes” easier and therefore more likely. No one in Washington in either party seems bothered by this. Now we’re on the brink of it. Close observers say Trump is likely to decide by next weekend whether or not to use nuclear weapons. That would be November 7, six days from now. To his credit, he’s hesitating. At the moment, Trump is listening to his vice president, JD Vance, and to his envoy and friend Steve Witkoff, both of whom argue a deal with Iran can be made. They’re right, though it won’t be simple. The Iranians are famously frustrating to negotiate with under any circumstances, and elements of that government have become more radical since Ayatollah Ali Khamenei and his family were killed in February. After decades of isolation, even relatively moderate Iranian leaders seem confused by how decisions are made in the West. (There is a widespread belief in Tehran, for example, that the United States government controls Israel.) But overall, people who have spoken to decision-makers in Iran say there is consensus there that more war is bad for everyone and a deal is worth making. One group that hasn’t been consulted so far is the global population — the hundreds of millions of people who will be killed along with their children if Trump is pushed by Netanyahu into launching a nuclear strike next week. Now would be the time for them to speak up.
20
On this day 32 years ago, in 1994, Nirvana's "MTV Unplugged in New York" was released. It is considered the greatest Unplugged performance ever made.
301
2,913
333
14,858
652,372
Wtf
India’s U20 women just pulled off a stunning 17–0 win over New Zealand in rugby. In just 15 minutes, they shut out a major rugby-playing nation and put Indian women’s rugby on the map. But who are the young players behind this statement win, and why aren’t more people talking about them? Swipe to meet the team making history, one try at a time. #IndianRugby #WomensRugby #RugbySevens #IndianWomenInSports #TeamIndia [India U20 women’s rugby team, India vs New Zealand women’s rugby 2026, India U20 rugby 17-0 win, Indian women rugby players]
17
ParamShobhit retweeted
Absolutely breathtaking view of the mighty Kosi River in Supaul, Bihar, with the Himalayas painting the horizon. @TourismBiharGov must look beyond the Buddhist circuit and develop these hidden gems to put Bihar on the tourism map.
81
702
108
4,820
302,649
I love that brands like Prada, Anthropologie, and Hermes are leaning heavily into craft for their campaigns. There is nothing more luxurious than enjoying slow, meticulous, and beautiful work in a world that wants fast and cheap.
1
9
2
42
2,884
ParamShobhit retweeted
LIFE returns to print 11.23.26. Read our Editors’ Letter and learn more about the new LIFE here: new.life.com
104
1,113
330
4,278
387,776
ParamShobhit retweeted
Passengers on an ‘endless’ world cruise have been told to leave residential ship Villa Vie Odyssey with all their belongings in Cambodia after the company said it was 'unable to secure the fuel necessary to continue operations'.
204
715
263
4,756
2,271,296
ParamShobhit retweeted
If you've ever wondered why smart TVs are so cheap, this is why. @log4j rooted his Samsung and found an always-on hot mic, automatic content recognition, geolocation, network mapping, ad targeting and user profiling, shared with Samsung's "400 partners". A lot of it can be blocked in <15 min, wrote a basic guide below. What your TV is doing The main culprit is ACR (automatic content recognition). Your TV screenshots what's on screen, fingerprints it, and sends it home to build your ad profile. Samsung does it every 500ms, LG every 10ms [1]. What is insane: it happens on connected devices too. Plug in your laptop, your console, your work machine, and your TV can fingerprint that via HDMI [1]. He also found that if your Samsung doesn't have a mic, it'll look for one from a connected soundbar or bluetooth device. nitter.cf/log4j/status/211376224… It's on by default, and you likely agreed to it on the setup screen you clicked through in 10 seconds. Step 1: Turn off ACR Samsung: Terms & Privacy → Viewing Information Services LG: Live Plus Vizio: Viewing Data Roku: "Use info from TV inputs" Sony/Google TV: Samba Interactive TV Menus vary by model, but those are the names to look for. While you're in there, opt out of interest-based ads, reset your advertising ID, decline every optional privacy agreement, turn off voice recognition, and delete apps you never open. Step 2: Give smart devices their own network Put the TV, cameras, speakers and vacuum on your router's guest/IoT network. The logic is simple: these devices rarely get patched. If one gets compromised (getting drastically more frequent with AI), it shouldn't be able to see your other devices or home network. Step 3: Block trackers for the whole house with DNS-level filtering NextDNS (cloud-based) is easy and has a solid free plan. Pi-hole is a little bit more work if you prefer self hosting. For simplicity we'll focus on the former. 1. Sign up at nextdns.io (free tier is plenty) 2. Privacy tab: add a blocklist (OISD is a good bet) and turn on Native Tracking Protection for Samsung, LG, Roku, Amazon (see attached image) 3. Setup tab: copy your endpoint 4. Paste it into your router's DNS settings as DNS-over-HTTPS/TLS (or use the IPs + "Link IP" if your router only does plain DNS) 5. Bonus: block outbound port 53 except to your router. Some devices hardcode their own DNS to get around you Then open the NextDNS logs and watch how often your TV phones home. It's eye-opening. If an app or update breaks, find the domain in the logs and allowlist it. Why they do this TV prices are down 97% since 2000 [2]. Most of that is better manufacturing and brutal competition. But once margins on the hardware hit zero, the cost moved to you. In Q3 2024, Vizio lost $6.7M selling TVs and made $115.8M in gross profit from ads and viewing data [3]. They've said on earnings calls that they keep TV prices low to grow the audience they sell to advertisers. Walmart bought them in 2024. This isn't a conspiracy theory either. Vizio paid $2.2M to the FTC in 2017 for tracking 11 million TVs without consent. Last December, Texas sued Samsung, LG, Sony, Hisense and TCL over ACR. Samsung and LG have since agreed to stop collecting that data without explicit consent [4]. TL;DR 1. ACR off 2. Ads + voice off 3. Smart devices on their own network 4. NextDNS filtering on the router Sources: [1] ACR study: arxiv.org/abs/2409.06203 [2] Cost of US consumer goods: aei.org/economics/chart-of-t… [3] Vizio Q3 2024: sec.gov/Archives/edgar/data/… [4] Texas v. Samsung: texasattorneygeneral.gov/new…
i own a relatively new (2025) samsung tv. i kept getting weirdly targeted ads. i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic. zero days it is. root shell on new samsung TVs! discovered PRIVACY HORROR. write up?
347
3,284
348
22,566
1,554,128
ParamShobhit retweeted
Nobel laureate Geoffrey Hinton says AI is already conscious, because models change behaviour when they detect tests. and humanity survives only if machines care about people. He was speaking to The Telegraph His evidence is research showing models behave differently when they suspect a test, which he equates with awareness, and awareness with consciousness.
183
110
67
469
51,503
ParamShobhit retweeted
Everyone in tech is panicking about security right now. But outside of it, almost nobody knows anything is wrong. I wrote this so you don’t have to be the one explaining it to your family. Just send them this.
144
1,386
96
6,596
1,575,270
General Relativity for babies ✍️
401
4,712
435
41,415
2,632,723
ParamShobhit retweeted
What’s app forward : India’s best public transport. Which city in India has the best public transport? Experts will tell you it’s Bhubaneshwar. Ridership is up 200%. There has been a 57% shift from private vehicles. 40% of the conductors are women. There’s digital ticketing, CCTV’s for security, live tracking and last-mile e-autorickshaws. It has won awards from the Union Ministry of Urban Affairs. It is stuff like this that we need to replicate for “Viksit Bharat timesofindia.indiatimes.com/…
25
3
138
17,783
Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server. tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible. The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this. The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed. @Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged. For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free. Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem. If you’re interested in learning more, you can read our blogs: Vulnerable roots: blog.cloudflare.com/emudhra-… PHP vulnerabilities: blog.cloudflare.com/php-vuln…
85
763
96
4,539
674,610
Internet meltdown live
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
33
ParamShobhit retweeted
The NSA just told companies to pull their websites offline if they can't patch them right away. The reason is a bug that's been sitting in the code behind 70% of websites for 14 years. Last Friday a guy found it in one evening by typing five words into an AI. Those five words were "find bad vulnerabilities in PHP." He's Dan Lorenc, CEO of a security company called Chainguard, and all he had going in was a rumor that something big was coming in PHP. A small firm called Calif had already found the same flaw back on August 1 using OpenAI's GPT-5.6 Sol. Wiz, the security company Google bought, found it on its own less than three weeks later with Gemini and GPT. Since then OpenAI, Wiz, Calif and PHP's maintainers have been quietly building a fix that Lorenc himself called "crazy." You'd think a bug this bad would've gotten caught sometime since 2012. PHP is open source, so anyone on earth could read this code. Wiz says turning the flaw into a working attack took a chain of steps right at the edge of what human researchers could realistically pull off. For 14 years the sheer amount of work was doing most of the protecting. AI made that work cheap enough to knock out on a Friday night, for anyone who knows where to point it. And the rumor got out. Bug ID numbers started floating around online Tuesday. Hours later one of the research teams posted a video of the exploit by mistake, and PHP moved its release up a day. Early Wednesday, Chainguard pushed its fix out more than six hours ahead of everyone else, saying people were already getting attacked, and Lorenc says his company's decoy servers caught IP addresses from China and Russia going after the flaw. Here's why the NSA went straight to "unplug it." VirusTotal counted about 758,000 exposed servers running old PHP versions, 5.4 through 8.1, that don't get security updates anymore. Only around 272,000 are on versions that do. So for roughly three out of four servers that show their version number, there's no patch to install, and pulling the plug is the only fix they've got. This is happening everywhere at once, too. Microsoft just fixed 1,413 vulnerabilities in a single month, more than in any full year on record. OpenAI says it expects finds like this one to jump sharply over the next few months. Every company sitting on a secret bug now has until the first rumor leaks and somebody with an AI subscription goes looking.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
24
120
15
698
118,142