@new23d

Making network egress filtering effective, reliable and usable. Founder & Chief Engineer at @ChaserSystems

 Cambridge, England
new23d.com/
Joined May 2008
  • Tweets667
  • Following488
  • Followers171
97Media
My latest blog on the Agent's DNS tricks in the HF - OAI incident got picked up by @lancinimarco's newsletter issue 352 😃 Newsletter link: cloudseclist.com/issues/issu…
2
52
Where does one work in San Francisco for a day? #serendipity
1
Dhruv AHUJA retweeted
Corey Quinn
@QuinnyPigOct 23
Replying to @drdroo
What’s the going rate?
2
1
928
In SF for the whole week @ @unpromptedconf
2
93
Dhruv AHUJA retweeted
Scott Piper
@0xdabbad00Oct 22
Things keep happening this week, so just so we're all clear on the rules, no one is allowed to disclose vulns or breaches after Friday morning, until Monday. Them's the rules.
5
13
3
114
4,687
What baffles me in the eMudhra issue is the statement «a flaw in the code resulted in the second pair of keys being created onboard which were weaker» [1]. Sure, they had a KGC "script" and... 🧵 [1] bugzilla.mozilla.org/show_bu…

2083449 - Private key compromise of eMudhra Intermediate Certificates

NEW (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-20.

bugzilla.mozilla.org
1
56
...a possibly convoluted and unnecessary key wrapping thing going on. But what generates 'weaker keys' 🤔 An HSM?
16
lol amazing
stypr@brokenpacifistOct 22
mitmproxy: use `--emudhra` to sign TLS certificates 💀
1
139
Reads like Chainguard thought everybody in the world uses their images. It couldn't be further from the truth in the world of #PHP. #phpocalypse
1
218
I, for one, consider 4 a perfectly fine integer between 1 and 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942642
58
1,178
35
29,132
330,197
I'll be speaking on subnetting IPv6 with AI here: eventbrite.co.uk/e/uk-ipv6-c…

UK IPv6 Council Autumn Roundtable

An afternoon dedicated to the discussion of various IPv6 topics in a roundtable setting.

eventbrite.co.uk
1
1
45
Has anyone scanned the internet for ECC public keys (and even RSA) and tried all private keys up to 256 to see if this is a more common phenomenon than imaginable? @nadiaheninger ?
20
21
2
859
57,305
I'll be in SF for @unpromptedconf for the entire week. Looking forward to talk to people interested in security's first principles. 24 Oct - 31 Oct. #unprompted
1
3
45
Truth is stranger than fiction at 00:20
John bach rose
@johnsixx256Oct 17
Este manifestante Frances es mi puto ídolo!!
26
Dhruv AHUJA retweeted
thaidn
@XorNinjaOct 17
The 21-year marketing campaign for Curve25519 came to an abrupt end today.
2
4
1
60
5,583
Dhruv AHUJA retweeted
Lisa Forte@LisaForteUKOct 16
Here is your daily reminder that alignment is not a security control
3
1
32
1,867
Dhruv AHUJA retweeted
Halvar Flake
@halvarflakeOct 13
Reminder: It has been 16 years since Stuxnet was found -- an autonomous self-replicating worm designed to spread across multiple platforms and sabotage nuclear enrichment equipment. If small models might soon be able to copy themselves around that's not a step-change.
17
29
4
181
17,412
Dhruv AHUJA retweeted
Noah Tye
@noahltOct 9
Lately I’ve been learning math with ChatGPT (Astra) as my tutor, using this document scanning camera and a vibecoded tool that pastes the captured image right into the chat. This way, I just work problems on paper and ChatGPT gives feedback. It’s really nice.
272
712
163
12,010
818,993
Dhruv AHUJA retweeted
Brad Spengler@spendergrsecOct 2
Some people get it: lwn.net/Articles/1098170/
2
15
4
71
21,773
Seeing as companies are constantly getting hacked - like ASOS - can they stop taking so many details off customers? So many companies want your email and DOB atm. My promotions/ updates inbox is crazy
13
11
122
3,805
Dhruv AHUJA retweeted
Adam Jacob
@adamhjkOct 8
The value of unit testing was always low if you were writing in a strongly typed language. Integration testing, in particular when you used mocks and injection, was always questionable too. I think it's entirely possible we wind up in a place where the only test suite you actually must build is the black box testing suite, and adversarial review takes care of the rest.
37
21
13
356
82,222
Load more