Shyam Verma · Nov 5, 2026 · 4:27 PM UTC

Shyam Verma

677Media

Tweets
All Posts Highlights
Sort by
Most recent Popular
Tweets & Replies
Reposts
Media
Search

Shyam Verma

@ssv4454h

OpenSSH's release notes today say several bugs found by AI tools were later found independently by other researchers. They take that to mean attackers can find them too, so for now they will release more often. You can't patch faster than every new bug. So reduce what a bug can reach. 10 things every VPS owner should do: 1. Use your provider's firewall, not only ufw. Docker publishes ports straight past ufw. Allow only the ports your users need, usually just 80 and 443, plus your WireGuard port if you self-host it. 2. Keep SSH off the public internet (Tailscale or WireGuard). Use keys only, no passwords. 3. Never expose databases, Redis or admin panels to the internet. On the host, bind them to 127.0.0.1 or your VPN interface. In Docker, don't publish their ports. 4. Turn on automatic security updates. Let it reboot only when an update needs it, at a quiet hour. Make sure everything starts on boot (Docker: restart: unless-stopped). 5. Pin app dependencies and Docker images. Update them every week. 6. Run containers as non-root where the image supports it. Don't mount the Docker socket unless the tool needs it (Traefik, Coolify), and then use a socket proxy limited to what it needs. 7. Use 2FA on your VPS provider, DNS registrar and git host. Use unique passwords and scoped API keys. Keep secrets out of git. 8. Keep backups off the server, where the server can't delete them. Test a restore. 9. Get alerts for new SSH logins, new open ports and new admin users. 10. Remove unused services, accounts and SSH keys. Using an AI agent? Paste this list and say: "Audit this VPS against these 10. Read only, report first, never print secrets. Then one change at a time, each after my yes. Before any SSH or firewall change, keep my current session open and test a new login before closing it." Before any SSH or firewall change, confirm your provider's web console works. Otherwise you can lock yourself out. This won't make you unhackable. It limits what one new bug can do.

International Cyber Digest

@IntCyberDigest5h

The bug is like a joke. On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

Readers added context they thought people might want to know

The bug only affects accounts with a locked "*" password, on musl/no-PAM systems with password auth enabled and another account holding a real hash. It requires a 257–1024 character password and grants access to that locked account, not automatic root. Fixed in OpenSSH 10.6p2 privacyaffairs.com/openssh-alpine… threatlandscape.io/blog/openssh-m…

Shyam Verma · Nov 5, 2026 · 4:03 PM UTC

Shyam Verma

@ssv4454h

The joke of year, and its true.

International Cyber Digest

@IntCyberDigest5h

The bug is like a joke. On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

Readers added context they thought people might want to know

Node.js · Nov 4, 2026 · 4:05 PM UTC

Shyam Verma retweeted

Node.js

@nodejsNov 4

Security release pre-alert: We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities. The highest severity issue fixed in this release is HIGH. nodejs.org/en/blog/vulnerabi…

Node.js — Wednesday, November 11, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

178

1,130

396

6,242

993,433

Shyam Verma · Oct 30, 2026 · 5:00 AM UTC

Shyam Verma

@ssv445Oct 30

during 1971, if sorted correctly we could have solved the north east problems of transport and connectivity.

Eyal Yakoby

@EYakobyOct 30

Millions of Hindus weee forcibly removed from Bangladesh and have not been able to vote in a single Bangladeshi election. The apartheid has never been more obvious.

Shyam Verma · Oct 30, 2026 · 4:57 AM UTC

Thats huge !

According to World Bank's latest report, India's extreme poverty has fallen from 27.6% to just under 2.6%. And for Indians living under Rs. 400 a day (lower middle income), it has come down from 57.7% of the population to 16.1%. Remarkable achievement by India given the rupee depreciated and the inflationary pressure of a fast growing economy.

Dan Robinson · Oct 30, 2026 · 12:41 AM UTC

Shyam Verma retweeted

Dan Robinson

@danlovesproofsOct 30

I would strongly consider uninstalling any third party js right now if I were you. Especially if it comes from a startup. Analytics, monitoring, etc are all massive site takeover risks. If you use a tracking script from a third party SaaS, then if they get hacked the hackers have total control over your site too. This is what took down Polymarket today. They used a tiny script from a SaaS that tracks page load speed. That company got hacked, and the hackers subsequently stole millions from Polymarket users. If you want to use analytics safely, I would use a product that lets you pin the tracking script and control when it changes. Most of the mature products support this, e.g. Sentry, Amplitude, PostHog, Mixpanel, Heap. If not, you need to trust the company behind it a lot... Railway got hacked last week. Railway! That's a very competent team, with particularly strong infra chops. The agent swarms are on another level. A typical analytics company is nowhere near as sophisticated. You should ask yourself: do I trust this company's security more than Railway? I was an analytics CTO in a past life, and I will be the first to admit: we had some great people but we were not on this level. We (Detail) just uninstalled our session replay, which was a product I loved but is not worth the risk right now. I hate to write this because I spent a good chunk of my 20s benefitting from product teams taking a chance on a nothing startup and installing our js on their site. But in the past two weeks this risk vector has exploded. It's better for the ecosystem if we move away from third party js as fast as we can.

158

2,010

589,475

Shyam Verma · Oct 26, 2026 · 4:57 AM UTC

Shyam Verma

@ssv445Oct 26

Thats awesome, I also want they focus on Operating System and Devices Drivers to make these devices safe.

Aravind

@aravindOct 26

In case you missed this amazing news by IT minister Ashwini: By the end of October 2028, India will have Indian designed, India manufactured, Indian brand of mobile phones. But let me tell you this now itself: No company (Not even Apple) today can manufacture a phone 100% by itself. A "Made in China" phone has 60-80% of its parts imported and assembled in China. So even when India designs and makes its own boards, chips, and many other parts to manufacture is own mobile phone, there will be blackpillers who will tell you "this is assembled, not manufactured" to disillusion you. This is what India's adversary wants Indians to believe and feel disillusioned about as part of their psychological warfare. Now, if some Indian wants to be part of it, if they "feel good" believing such blackpilling for certain ideological reasons, let me warn - in the long term, it will affect their brains negatively, literally degrade it, as per latest research.

Shyam Verma · Oct 25, 2026 · 2:20 AM UTC

Shyam Verma

@ssv445Oct 25

basically frontier AI companies are creating chaos to assert there dominance. this is endless security nightmare, as you cannot have 100% secured system. You can only reduce chances.

unusual_whales

@unusual_whalesOct 23

BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy. The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.

Shyam Verma · Oct 17, 2026 · 5:54 AM UTC

Shyam Verma

@ssv445Oct 17

Reddit is now becoming a new WikiPedia (the mods run their agenda and make money and shun people). People lost trust in Wikipedia. The same thing would happen to reddit soon. So catch whatever benefits you can while its valuable.

Harsh Goenka · Oct 16, 2026 · 10:51 AM UTC

Shyam Verma retweeted

Harsh Goenka

@hvgoenkaOct 16

Let us get inspired by Japan for its culture, America for its innovation, Germany for its engineering, Singapore for its discipline and Switzerland for its precision. Let us learn from the best in the world. Yet, the irony is that some choose to be inspired by Bangladesh.

1,130

5,537

250

25,189

300,575

BJP · Oct 15, 2026 · 2:40 PM UTC

Shyam Verma retweeted

BJP

@BJP4IndiaOct 15

प्रशांत भूषण ने ये स्वीकार कर लिया है कि उनके पास और पूरे विपक्ष के पास कोई और चारा नहीं है। 12 साल से पीएम मोदी के नेतृत्व में भारत बहुत आगे निकल चुका है... • 25 करोड़ लोग गरीबी रेखा से बाहर आ गए • जम्मू-कश्मीर आर्टिकल 370 से आज़ाद होकर प्रगति कर रहा है • भारत 11वीं से 4वीं सबसे बड़ी अर्थव्यवस्था बन गया • पूरा ग्लोबल साउथ एक सुर में भारत की ग्लोबल लीडरशिप को मान रहा है • जनता विपक्ष को जो थोड़े-बहुत मौके देती थी, वो भी कम होते जा रहे हैं तो बात तो सही है, और कोई ऑप्शन नहीं बचा है इनके पास। ये revolution/regime change के प्रयास करेंगे, जिसमें ये खुद बता रहे हैं कि खूब खून बहेगा! किसका खून बहेगा? इनका? दूसरे नेताओं का? जुलाई के दिल्ली प्रोटेस्ट्स के दौरान सारे CJP के नेता भाग खड़े हुए थे। कोई बर्गर खा रहा था, कोई छिपकर कहीं फरार हो गया था... खून बहा था आपके और हमारे बच्चों का, युवाओं का, जो इनके बहकावे में आ गए थें। मासूम बच्चों को बहकाकर ये लोग फिर से सड़क पर उतारने वाले हैं... बरगलाने की पूरी प्रक्रिया शुरू हो चुकी है। आपको, हम सबको, साफ़-साफ़ नज़र आ रहा है। इनका प्रयास कभी एजुकेशन में सुधार करना, EVM चेक करना या वोट चोरी को साबित करना था ही नहीं। इनका एक ही प्रयास है, दंगे करना। ये भारत को दंगे की आग में धकेलना चाहते हैं और खुद मान भी रहे हैं कि यही इनका प्रयास है। कश्मीरी युवा, जिसे कांग्रेसी गुंडों ने बेरहमी से पीटा, वो बार-बार कहता रहा, मैं भारत को बांग्लादेश और नेपाल नहीं बनने दूंगा। आपको भी आगे आना पड़ेगा, देश को इन अराजकतावादियों और दंगाइयों से बचाना होगा। FCRA में बदलाव से पहले ये इनका आखिरी प्रयास है। इसके बाद इनकी फंडिंग रुक जाएगी। गैर-कानूनी कारनामे रुक जाएंगे। ये देश-विरोधी, बाहरी ताकतों का इनके माध्यम से आखिरी दांव यही है। इस दांव में देश के साथ खड़े रहिए। पीएम मोदी के साथ खड़े रहिए।

392

3,473

8,799

217,597

Shyam Verma · Oct 15, 2026 · 2:05 PM UTC

Shyam Verma

@ssv445Oct 15

When the Machines Came Machines never ended work. They ended one generation's way of earning a living. What two weavers from 1830 can teach us about living through AI.shyamverma.com/when-the-mach…

When the Machines Came

Machines never ended work. They ended one generation's way of earning a living. What two weavers from 1830 can teach us about living through AI.

shyamverma.com

Mary Millben · Oct 14, 2026 · 4:49 PM UTC

Shyam Verma retweeted

Mary Millben

@MaryMillbenOct 14

Oh dear @abhijeet_dipke, the truth sets everybody free. Even you. And here’s the truth: these US donors will drop you like a hot cake when you don’t succeed. And you won’t, because lawlessness never wins. Instead, take your U.S. education, talent, and use it for good. Sit down with the PM @narendramodi and be a positive voice to advance India. The truth of your courage to do what’s right lies in your next steps. And the PM doesn’t need American support. He has 1.5 billion beautiful Indian citizens who support him and have for 25 years, 12 years as PM, three consecutive terms. And will again in 2029. That’s the truth.

Abhijeet Dipke

@abhijeet_dipkeOct 14

Why is Modi seeking the support of Americans to discredit his own countrymen? Who gave foreign nationals the right to interfere in India’s internal affairs? We are more than capable of dealing with our own issues. We don’t need outsiders interfering in our country’s affairs.

3,008

13,754

620

52,139

997,881

Mahesh Jethmalani · Oct 12, 2026 · 6:32 PM UTC

Shyam Verma retweeted

Mahesh Jethmalani

@JethmalaniMOct 12

A few things happened: 1. Narendra Damodardas Modi refused to compromise against anything that is remotely anti-India 2. PM Modi created a global aura for the country, which vanished under Manmohan Singh 3. FCRA BILL. Follow the money, honey. It’s loading bro 👊⏳ 4. How can a once colonised nation even dream of becoming a global superpower? 5. The Lutyens brigade was losing their sheen, shine and moon 6. The Bengal defeat was a crushing blow - PAKISTAN’s ISI and money from human trafficking and drugs are now going to waste. As well as a few terrorists 7. Some foreign investors are losing long term and short term hedges Now, if you can connect the dots… Some of you will…

481

2,815

9,623

287,447

STAR Boy TARUN · Oct 10, 2026 · 6:34 PM UTC

Shyam Verma retweeted

STAR Boy TARUN

@Starboy2079Oct 10

Very intelligent analysis of Devendra Fadnavis on ongoing anarchy efforts in India He said that CJP and Congress are ultra-leftist groups; they show constitution and target constitutional bodies, and they aim to end the Constitution and establish ultra-leftist rule in India

1,270

3,790

63,941

Nitin Nabin · Oct 10, 2026 · 10:40 AM UTC

Shyam Verma retweeted

Nitin Nabin

@NitinNabinOct 10

Loud slogans, selective action! The mask is off the self-proclaimed champions of women's rights and the "Smash the Patriarchy" brigade. Following serious complaints by female students, JNU has terminated Congress MP Angomcha Bimol Akoijam, yet the opposition remains conspicuously silent. Will Rahul Gandhi demand accountability from his own MP and sack him, or is moral outrage reserved only for political convenience?

962

1,976

69,042

Facts · Oct 10, 2026 · 3:21 AM UTC

Shyam Verma retweeted

Facts

@BefittingFactsOct 10

Protests against VoteChori are going on. • Anandabazar Group reported that the BJP got 997 votes at a booth with only 797 votes. • Abhishek Banerjee posted a screenshot of Anandabazar’s report. • People fact checked it and found that the said booth actually had 1,107 votes. • Anandabazar Group admitted that it had made a mistake. • Abhishek Banerjee did not delete his post. • Two hours later, Arvind Kejriwal quoted his post. • Five hours later, Zubair retweeted it. The post is still up. They all know it is fake news, yet they are promoting it. In the future, they will use it in debates and media bites. Anandabazar Group deserves belt treatment.

2,358

7,128

117,937

BJP · Oct 9, 2026 · 5:40 PM UTC

Shyam Verma retweeted

BJP

@BJP4IndiaOct 9

आज उपचुनाव हुए हैं। मैं कांग्रेस से पूछना चाहता हूं, इन उपचुनाव में जो इलेक्टोरल रोल बने थे, आपके BLA ने उसे चेक किया था या नहीं? कोई शिकायत दर्ज की थी या नहीं? जब चुनाव हुआ तो आपके इलेक्शन एजेंट वहां थे या नहीं? इलेक्शन एजेंट ने एक-एक चीज चेक की या नहीं? जब काउंटिंग हुई, तो आपके काउंटिंग एजेंट वहां थे या नहीं? एक-एक चीज CCTV के अंदर थी या नहीं? और फिर भी आप चुनाव हारे हैं। आपको शर्म आनी चाहिए। अभी 45 दिन का समय है, आप अभी CCTV फुटेज मांगेंगे या नहीं? या बाद में कहेंगे कि 45 दिन का समय निकल गया था? आज जो उपचुनाव परिणाम आए हैं, मतगणना से पहले, नामांकन से पहले तक मतदाता सूची में संशोधन किया जा सकता है। आपके BLA ने क्या कोई गलती पाई और अगर पाई, तो क्या किसी संशोधन के लिए एप्लीकेशन दी या नहीं दी? मतदान और मतगणना के दौरान आपके इलेक्शन एजेंट ने क्या सारी चीजों को देखा या नहीं? अगर कोई चीज आपत्तिजनक लगी, तो आपने आपत्ति जताई या नहीं? असम के सिलचर नगर निगम में बैलेट से भी चुनाव हुए, लेकिन उसमें भी आपका बाजा बज गया। 42 में से 34 सीटें भाजपा-एनडीए को मिलीं। इसके बाद भी क्या कुछ कहने लायक बचता है? मैं राहुल गांधी से पूछना चाहता हूं कि आप 2 साल पहले हल्ला मचाते थे कि EVM हैक है, अब हल्ला मचा रहे हैं कि SIR गलत है। आप तब सच बोल रहे थे या आज सच बोल रहे हैं? हकीकत ये है कि आप तब भी झूठ बोल रहे थे और आज भी झूठ बोल रहे हैं। - डॉ. @SudhanshuTrived

1,130

3,628

103,892

THE SKIN DOCTOR · Oct 8, 2026 · 6:37 PM UTC

Shyam Verma retweeted

THE SKIN DOCTOR

@theskindoctor13Oct 8

We don’t hype Dinkar enough. Read these four stanzas to witness absolute genius! Every word remains undeniably true across time, generations and species. क्षमा, दया, तप, त्याग, मनोबल, सबका लिया सहारा, पर नर-व्याघ्र सुयोधन तुमसे, कहो, कहाँ, कब हारा? (You tried forgiveness, patience, and sacrifice, but did Duryodhana ever back down because of your restraint?) क्षमाशील हो रिपु-समक्ष, तुम हुये विनत जितना ही, दुष्ट कौरवों ने तुमको, कायर समझा उतना ही। (The more humble you were before your enemies, the more they dismissed you as a coward.) अत्याचार सहन करने का, कुफल यही होता है, पौरुष का आतंक मनुज, कोमल होकर खोता है। (When a person becomes excessively soft and passive, they lose the healthy fear or respect that their strength and valor ought to command in others.) क्षमा शोभती उस भुजंग को, जिसके पास गरल हो, उसका क्या जो दंतहीन, विषरहित, विनीत, सरल हो। (Forgiveness is a noble attribute only for a venomous snake that commands fear. What value or dignity is there in the "forgiveness" of a snake that has no teeth, carries no venom, and is inherently harmless and meek?)

156

2,616

10,056

207,722

Rishi Bagree · Oct 7, 2026 · 7:10 AM UTC

Shyam Verma retweeted

Rishi Bagree

@rishibagreeOct 7

The USA wants regime change in India The UK wants regime change in India NATO wants regime change in India Pakistan wants regime change in India They all want regime change because they’re not able to control India like they were during the Congress rule.

2,722

7,122

431

28,378

729,134