Sign in

Karan Saini

@karansaini.com
302 followers 386 following 52 posts

hacker, researcher. blog at karansaini.com New Delhi

PostsRepliesMedia
Karan Saini @karansaini.com · 02/03/2026
Excited to share “Poisoned Wells,” which presents the largest point-in-time study of website blocking in India to date. I tested the blocking of 294 million apex domains across six Indian ISPs, sending 1.76 billion DNS queries in total.
5289
Reposted by Karan Saini
Bob Lord @boblord.bsky.social · 20/12/2024
VPN vendors have huge budgets to advertise on your favorite podcasts. We don't have marketing for the IETF, browser and OS security teams, CAs (Let's Encrypt), CDNs, researchers, open source authors, website builders, digital rights activists... We made the web secure and didn't tell anyone.
10814177
Reposted by Karan Saini
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 20/12/2024
NEW: Cybersecurity experts, who work with human rights defenders and journalists, agree that Apple is doing the right thing by sending notifications to victims of mercenary spyware — and at the same time refusing to forensically analyze the devices. “These notifications have been a game changer."
techcrunch.com
Why Apple sends spyware victims to this nonprofit security lab | TechCrunch
Cybersecurity experts, who work with human rights defenders and journalists, agree that Apple is doing the right thing by sending notifications to victims of mercenary spyware — and at the same time r...
310338
Reposted by Karan Saini
netspooky @vacci.ne · 18/12/2024
The @phrack.org 72 CFP horny emojipasta has hit the chats
Screenshot of a copypasta that is in the replies
34921
Reposted by Karan Saini
—>realhackhistory.org @bsky.realhackhistory.org · 19/12/2024
It took quite a while hunting through newspaper archives, but this is what Joseph Popp actually looked like when he was arrested. Weird that someone considered the grandfather of ransomware is so poorly documented. Sources online get the date of his death wrong & the spelling of his middle name too.
Poor quality scan of a black and white image from a newspaper from March of 1990 called The Vindicator, a photo of a man with receding hair and a bushy beard and moustache who may be handcuffed. Caption reads "Joseph Popp is led from federal court in Cleveland. The suburban Cleveland man us accused of distributing computer disks with a virus that locked up machines in England and Africa."
121
Reposted by Karan Saini
Rebecca R Helm @rebeccarhelm.bsky.social · 12/12/2024
Holy crap
109837
Reposted by Karan Saini
Sean Lyngaas @snlyngaas.bsky.social · 04/12/2024
White House official: 8 US telecom providers hacked by Chinese www.cnn.com/2024/12/04/p...
cnn.com
White House official: 8 US telecom providers hacked by Chinese | CNN Politics
US officials believe Chinese hackers breached at least eight US telecommunications providers in their quest to spy on top US political figures as part of a hacking campaign that has affected dozens of...
098
Reposted by Karan Saini
—>realhackhistory.org @bsky.realhackhistory.org · 30/11/2024
I wrote a series of blogs (that I’ll be adding to as I go) that document times in the #history of #hacking that journalists found themselves becoming part of the story that they were writing about #hackers. I labeled the blogs “Hackers & Reporters”.
152
Reposted by Karan Saini
Taggart @taggart-tech.com · 22/11/2024
This is your reminder that DMs here are _not encrypted_. They're not even really part of ATProto. It's on the roadmap, but that's not the case now. DMs are centralized and unencrypted. Behave accordingly.
56127
Reposted by Karan Saini
hrbrmstr 🇺🇦 🇬🇱 🇨🇦 🏳️‍🌈 @hrbrmstr.dev · 20/11/2024
I know this is in the Drop I just posted, but y'all really need to try out ATFile — github.com/electricduck... It lets you upload & download arbitrary files to Bluesky's Blob storage (or any ATptodo PDS). The Blobs don't show up in your timeline, they just "exist". Store your MP3 collection! 1/2
github.com
GitHub - electricduck/atfile: 📦➔🦋 Store and retieve files on the ATmosphere
📦➔🦋 Store and retieve files on the ATmosphere. Contribute to electricduck/atfile development by creating an account on GitHub.
2232
Reposted by Karan Saini
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 20/11/2024
NEW: The U.S. government has announced charges against five alleged hackers who targeted several companies stealing millions of dollars in crypto, and corporate data. DOJ says the hackers are part of the infamous Scattered Spider cybercrime group. techcrunch.com/2024/11/20/u...
techcrunch.com
US charges five accused of multi-year hacking spree targeting tech and crypto giants | TechCrunch
The five alleged hackers are accused of stealing millions of dollars in crypto, and corporate data from several victims all over the world.
0295
Reposted by Karan Saini
wint @dril.bsky.social · 14/11/2024
as a gamer ive eliminated thousands of moo deng like creatures for their various parts . Ive completed countless quests using their pain
205384313236
Karan Saini @karansaini.com · 29/07/2024
What is being done about caller ID spoofing in India? My piece for the Text and Context section in The Hindu today.
363
Karan Saini @karansaini.com · 31/12/2023
This project now catalogues over 10,000 websites known to be blocked on the ACT Fibernet network. 4,226 new hostnames were added since the last update in June. github.com/qurbat/block...
github.com
GitHub - qurbat/blocked-hosts: A periodically updated list of websites known to be blocked in India
A periodically updated list of websites known to be blocked in India - GitHub - qurbat/blocked-hosts: A periodically updated list of websites known to be blocked in India
042
Karan Saini @karansaini.com · 20/10/2023
BharOS was touted as an indigenously developed secure and private mobile operating system. But is it? My piece for The News Minute from today. www.thenewsminute.com/news/what-bh...
thenewsminute.com
What BharOS, India’s ‘homegrown’ answer to Android, says about our credulity
In a development that has sparked outrage among India's free and open source software communities, it has come to light that India's much-hyped ‘indigenously de
097
Karan Saini @karansaini.com · 25/09/2023
The Supreme Court has dismissed a petition requesting for the source code of Electronic Voting Machines to be made public. The court stated that publishing the source code would make EVMs vulnerable. This line of reasoning is fallacious and ill-informed. m.thewire.in/article/law/...
m.thewire.in
SC Refuses to Hear Plea Seeking Audit into Source Code of Software Used in EVMs
A three-judge Bench, headed by Chief Justice D.Y. Chandrachud, disallowed the petition on the grounds that making the source code public would make the machines vulnerable to hacking.
041
Karan Saini @karansaini.com · 20/09/2023
It turns out that you can pass an arbitrary datetime value for the 'createdAt' parameter when creating a new post. I've linked a post of mine below with a datetime value of 1970-01-01T00:00:00.000Z. The datetime value appears to have been offset to January 1, 1970, 5:30 AM, Indian Standard Time.
231
Karan Saini @karansaini.com · 19/09/2023
Twitter (X) seems to no longer display a notice for when a given post has been blocked at the request of the Government. Instead, a nondescript notice is shown, simply reading "This Post is unavailable."
263
Reposted by Karan Saini
wint @dril.bsky.social · 13/08/2023
this site needs a badge i can pay $8 a month for to trick people into thinking I am a Mod
465046708
Karan Saini @karansaini.com · 04/09/2023
www.livelaw.in/high-court/t...
livelaw.in
Can't Deny A Citizen's Statutory Rights For Not Having Aadhar Card: Telangana High Court Reiterates
The Telangana High Court has reiterated that a citizen of India cannot be denied his/her statutory rights for not possessing an Aadhar Card.
051
Karan Saini @karansaini.com · 27/08/2023
starting something new
130
Reposted by Karan Saini
Mike Drucker @mikedrucker.bsky.social · 25/08/2023
more like a SMUGshot! siri please send when official headshot released. siri please dim lights and set alarm for 9:30 am.
1867
Karan Saini @karansaini.com · 23/08/2023
India is on the moon
1124
Reposted by Karan Saini
wint @dril.bsky.social · 16/08/2023
if you are a stupid ass reddit poster from fucking reddit me and my crazy friends will put you in a head lock
302227291
Karan Saini @karansaini.com · 16/08/2023
Indian movies vilifying Muslims spark fear ahead of polls tribune.com.pk/story/2431004/indian…
tribune.com.pk
Indian movies vilifying Muslims spark fear ahead of polls
Critics accuse recent movie releases of peddling lies and amplifying divisive narratives ahead of national elections
000
Reposted by Karan Saini
Vasabjit Banerjee @vasabjit.bsky.social · 16/08/2023
Zero statements from the Biden admin about India technically exporting* defense equipment to Russia. Quite disappointing. *Russia is calling it "re-importing".
122
Reposted by Karan Saini
they/them might be giants ☭ @babadookspinoza.bsky.social · 12/08/2023
You used to be able to complain to corporate accounts and get refunds but now they’ll just quote you with “this mfer does NOT have the meats 🤣“
427433
Reposted by Karan Saini
kilgore trout @kilgoretrout.bsky.social · 12/08/2023
I swear to god if you made a wallet inspector badge out of construction paper and showed it to these people it would work a hundred times in a row
221084193
Karan Saini @karansaini.com · 12/08/2023
у меня есть сабака
000
Reposted by Karan Saini
Spoo Keidick @donkeidick.bsky.social · 04/08/2023
“Stop the car. Stop the fucking car NOW”
301541411
Karan Saini @karansaini.com · 20/07/2023
Throughout 1998 & 1999, the 2600 Hacker Quarterly dedicated several of their magazine cover pages to bring attention to the "FREE KEVIN" campaign. The campaign played a significant role in helping Kevin Mitnick receive a more lenient sentence following his arrest in 1995.
181
Karan Saini @karansaini.com · 17/07/2023
i'd really enjoy having a social media feed devoid of the endless virtue signaling and laundering of half baked hot takes. idk might be a good to have
131
Karan Saini @karansaini.com · 11/07/2023
Follow @bsky.realhackhistory.org if you aren't already. It is one of my favourite accounts from Twitter (which is saying something), and on here too!
221
Karan Saini @karansaini.com · 11/07/2023
Chrome extension for discovering the Bluesky profiles of users that you follow on Twitter. It does require logging in with your Bluesky credentials to function properly, but the code for the extension seems clean. Check it out: github.com/kawamataryo/sky-follower…
github.com
GitHub - kawamataryo/sky-follower-bridge: Instantly find and follow the same users from your Twitter...
Instantly find and follow the same users from your Twitter follower on Bluesky. - GitHub - kawamataryo/sky-follower-bridge: Instantly find and follow the same users from your Twitter follower on Bl...
132
Reposted by Karan Saini
maia arson crimew 🏴 @crimew.gay · 11/07/2023
i think it's time for me to become a sheep farmer, this hacking shit is too easy
browser window navigated to some website at the path /admin/add_free_membership.php with a form allowing me to create an unlimited free account for a service
2766
Reposted by Karan Saini
—>realhackhistory.org @bsky.realhackhistory.org · 11/07/2023
"Anonymous Sudan" swinging at random domains on the internet like a blindfolded child with no sense of direction trying to hit a pinata techmonitor.ai/technology/cybersecu…
techmonitor.ai
Anonymous Sudan takes down fan fiction site A03, claims Reddit DDoS attack
Hackers Anonymous Sudan claim they have attacked fan fiction site AO3 because they object to its content. They may have another agenda.
111
Karan Saini @karansaini.com · 11/07/2023
I subscribed to Johnny Harris' YouTube channel and unsubscribed within a week. It seems that Vox's editorial control was the only thing keeping him from transforming into an unhinged peddler of badly researched clickbait
110
Reposted by Karan Saini
mattie lubchansky @mattielubchansky.com · 11/07/2023
very fucked up they named the robot on star trek "data." yeah this is my human friend. his name is Feelings
291453262
Karan Saini @karansaini.com · 10/07/2023
today is a strange day. i hope something good comes out of it :O
040
Karan Saini @karansaini.com · 09/07/2023
www.youtube.com/watch?v=8_xd5jG3JTA
youtube.com
Sunday Morning Coming Down
Provided to YouTube by Memo Tutti FruttiSunday Morning Coming Down · Johnny Cash · Kris Kristofferson · DrRock Island Line℗ Cugate ltd.Released on: 2010-01-0...
010
Karan Saini @karansaini.com · 04/07/2023
Twitter sucks
020
Karan Saini @karansaini.com · 29/06/2023
I have maintained a project cataloging domain names which are known to be blocked in India for the last two years now. The project started with a list of ~2,500 host names, and has since grown to catalogue more than 6,000 known blocked websites. Check it out here: github.com/qurbat/blocked-hosts
github.com
GitHub - qurbat/blocked-hosts: A periodically updated list of websites known to be blocked in India
A periodically updated list of websites known to be blocked in India - GitHub - qurbat/blocked-hosts: A periodically updated list of websites known to be blocked in India
121
Karan Saini @karansaini.com · 23/06/2023
i've been getting into reverse engineering as of late. such a refreshing break from the usual web application and network security stuff that i've been pinballing around in for the last ~5 years
000
Reposted by Karan Saini
qntm @qntm.org · 06/06/2023
numbers be like "6"
810420
Karan Saini @karansaini.com · 06/06/2023
does anyone have documentation for the Bluesky client API?
100
Karan Saini @karansaini.com · 01/01/1970
?
230