Dhruv AHUJA (@new23d) header
Dhruv AHUJA (@new23d) profile picture

Making network egress filtering effective, reliable and usable. Founder & Chief Engineer at @ChaserSystems

Cambridge, England
Joined May 2008
Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)Photo by Dhruv AHUJA (@new23d)
My latest blog on the Agent's DNS tricks in the HF - OAI incident got picked up by @lancinimarco's newsletter issue 352 😃 Newsletter link: cloudseclist.com/issues/issu…
2
52
By the way, in case anyone was still wondering whether they are completely useless, Binance holds SOC 2 Type 2, ISO 27001, and several other certifications.
159
445
85
4,720
233,608
Dhruv AHUJA retweeted
me a month ago: bro using public wifis is completely fine in 2026, everything uses TLS, stop being paranoid eMudhra: 4 me: well,
18
175
8
4,719
93,879
Dhruv AHUJA retweeted
Master graph theory. Master node relationships. Master edge weights. Master network traversal until complex systems reveal their underlying structure. Graph theory is the ultimate lens for understanding connected data.
7
25
4
424
14,428
Dhruv AHUJA retweeted
The reason UK universities demand more equity than US universities in "spin outs" is not that they're tougher negotiators. It's that they're too inexperienced to realize they're charging over market rate.
109
42
25
1,474
183,100
Where does one work in San Francisco for a day? #serendipity
16
Dhruv AHUJA retweeted
Replying to @drdroo
What’s the going rate?
2
1
934
In SF for the whole week @ @unpromptedconf
2
99
Dhruv AHUJA retweeted
Things keep happening this week, so just so we're all clear on the rules, no one is allowed to disclose vulns or breaches after Friday morning, until Monday. Them's the rules.
5
13
3
114
4,749
What baffles me in the eMudhra issue is the statement «a flaw in the code resulted in the second pair of keys being created onboard which were weaker» [1]. Sure, they had a KGC "script" and... 🧵 [1] bugzilla.mozilla.org/show_bu…
1
56
...a possibly convoluted and unnecessary key wrapping thing going on. But what generates 'weaker keys' 🤔 An HSM?
16
lol amazing
mitmproxy: use `--emudhra` to sign TLS certificates 💀
1
139
Reads like Chainguard thought everybody in the world uses their images. It couldn't be further from the truth in the world of #PHP. #phpocalypse
1
218
I, for one, consider 4 a perfectly fine integer between 1 and 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942642
58
1,174
35
29,094
330,786
Has anyone scanned the internet for ECC public keys (and even RSA) and tried all private keys up to 256 to see if this is a more common phenomenon than imaginable? @nadiaheninger ?
20
21
2
858
57,432
I'll be in SF for @unpromptedconf for the entire week. Looking forward to talk to people interested in security's first principles. 24 Oct - 31 Oct. #unprompted
1
3
48
Truth is stranger than fiction at 00:20
Este manifestante Frances es mi puto ídolo!!
26
Dhruv AHUJA retweeted
The 21-year marketing campaign for Curve25519 came to an abrupt end today.
2
4
1
60
5,725
Dhruv AHUJA retweeted
Here is your daily reminder that alignment is not a security control
3
1
32
1,871
Dhruv AHUJA retweeted
Reminder: It has been 16 years since Stuxnet was found -- an autonomous self-replicating worm designed to spread across multiple platforms and sabotage nuclear enrichment equipment. If small models might soon be able to copy themselves around that's not a step-change.
17
29
4
181
17,437