👋 It's my birthday today.
I'm not a birthday person, but this year I'm doing a fundraiser for
@internetfreedom
🎉.
I'll be matching donations made to IFF today so you can double your impact:
(Please RT)
What I was taught in school:
- Mitochondria is the powerhouse of the cell
What I should have been taught in school:
- How to file an RTI
- How to file taxes without an Aadhaar
- How to topple a fascist government
Thought I'd look at the
@Truecaller
app to see what changed to cause the bug (diff between 10.40.7 and 10.41.6)
Likely was just a accidental bug (see screenshot), but I found more interesting stuff.
Thread.
I wrote an open letter to
@Cloudflare
.
CloudFlare's vendor (Airtel) keeps blocking websites hosted on GitHub Pages for no reason without a court-order in India.
This has been ongoing for years, and developers deserve an answer.
(Please RT)
Hey
@Google
if you really care about the environment, can you please support Pixel devices for more than 3 years instead?
There’s 10M+ Pixel 3 devices that are destined for landfills this October as they reach End of Life - maybe start there.
Our incredible journey at has come to a close. The Supreme Court has declared Electoral Bonds as unconstitutional, and our legal money laundering scheme will be shutting down.
I wouldn't have launched this today, but
@FinMinIndia
has picked the dates as 1-10 April, so ¯\_(ツ)_/¯
Go buy a (tax exempt) Electoral Bond from your nearest SBI Branch and sell it for cash!
please dm if you you'd like to buy electoral bonds in bulk.
👋 It's my birthday today.
I'm not a birthday person, but this year I'm doing a fundraiser for
@internetfreedom
🎉.
I'll be matching donations made to IFF today so you can double your impact:
(Please RT)
India’s collective refusal to stand up against Aadhar has gotten us to the point where we’re celebrating life-saving surgeries on newborns being dependent on
@UIDAI
’s blessing.
Our VLE Ramana from Amalapuram Town, Andhra Pradesh done a Sishu Aadhar Enrollment to 4 days born baby in ICU, who has diagnosed a hole in heart, for immediate surgey Aadhar is mandatory, so our VLE RAMANA did a great job, and shown the humanity.
@dintya15
CSC VLE CAN DO#
You don’t need 2 ring lights and a DSLR to join work calls.
If Jeff Bezos can join calls with the governor of Washington with a laptop camera, so can you!
This PR from
@UIDAI
yet again proves how Aadhaar is malleable beyond any scrutiny.
(Now withdrawn: )
A thread on the history of how this has changed over time.
Why you shouldn't use <input type=number> blindly for OTPs. Accidental scrolls will change the number before submission.
Always better to use <input type=text pattern"=\d{6}" minlength=6 maxlength=6>
cc
@Kuvera_In
Are you a security researcher outside India? Do you hate getting geoblocked to Indian government websites?
Well, I made a proxy for security researchers outside India to access Indian government websites without resorting to shady VPNs.
Take a BT speaker with you to the store and play a pre-recorded message to imitate the Paytm soundbox.
Teenagers across India discovering replay attacks 😂.
Some one pls tell
@sherryontopp
The Sheila Dikshit govt left behind a huge debt. The Arvind Kejriwal has almost cleared off the loans by now.
Outstanding liabilities:
End-2014: 32,531.8 cr
End-2019: 3,406.4 cr
(Source: RBI)
Wondering if
@zomato
will be notifying affected customers for the Dominos Breach.
Zomato passes latlong,address,mobile number to Dominos. I'm impacted, despite never signing up for Dominos.
Most of the joy in building PCs comes from the "lego for grown-ups" attribute (it was super-fun figuring out what goes where, and splitting hairs over how we were running fan cabling).
But I love PCs for another reason: the magic of standards and interoperability.
A thread🧵
Assembled a new desktop from scratch over the weekends, took >8hrs but learnt so much doing it after ages and boy things have changed! Thanks
@captn3m0
for the help. The outcome is beautiful!
IRCTC already monetises your data by embedding ads and trackers from third-parties.
Now they’re going a step further and segregating “monetisable” passenger datasets.
Also, reminder that IRCTC encourages Aadhaar linkage heavily so it’s a perfect surveillance dataset.
🚨ALERT: Hey train travellers, your data will soon be monetised by the govt. & that too, in the absence of a data protection legislation!
@IRCTCofficial
has uploaded a tender to appoint a consultant for digital data monetisation.🧵on what this means. 1/8
Re-ran my
@BLRFoodCensus
code again, and here are some *early and rough* stats:
Total restaurants: 14665
Temporarily closed: 546
Permanently closed: 9111
Still open: 5008
#Bengaluru
has lost 2/3rd of its restaurants.
(Data via Zomato)
If you are trying to get rid of WhatsApp, might I also suggest taking the time to setup adblockers everywhere. Uninstall the FB/Insta apps and use the web versions where you can block ads.
FB stops making money if you stop seeing ads.
@std_exception
3 Servers still serving the UIDAI portal: 103.58.114.102, 103.58.114.101, 103.58.114.19
@UIDAI
doesn't even know how to take their _vulnerable portal_ down correctly.
Aadhaar went from “Yes/No answers only” to “No such thing as a Aadhaar Card” to “Aadhaar Xerox is valid KYC” to “Official Aadhaar PVC Card” to “eKYC” and now “CKYC” over the span of a decade.
I do not trust a profit-seeking malleable ID system, and neither should you.
Remember the
@ixigo
data breach that happened in 2018?
Looks like
@EaseMyTrip
has bought a copy and is using that for advertising.
This email was only ever used to purchase tickets on Ixigo.
I'm now running a DNS-Over-HTTPS Resolver from Bangalore.
Faster than both the Google and CloudFlare resolvers within Bangalore (Tried on Airtel and ACT so far).
Doesn't log/filter/block and leak information.
Cool tools promotion thread. (Stuff I use and like, mostly dev/cli/linux stuff):
pup is jq for HTML. Pipe your HTML and parser/filter it on the terminal. If you do a lot of web scraping - this is very nifty.
Thanks to the upcoming elections, and freshly raised seed round, proud to announce our new domain:
You can buy Electoral Bonds across 29 SBI Branches till the 10th of January.
I wouldn't have launched this today, but
@FinMinIndia
has picked the dates as 1-10 April, so ¯\_(ツ)_/¯
Go buy a (tax exempt) Electoral Bond from your nearest SBI Branch and sell it for cash!
please dm if you you'd like to buy electoral bonds in bulk.
"A private company running a centralized closed-source infrastructure that decides whether or not you're human" sounds straight of out Blade Runner.
This is not the future I signed up for.
~FIN~
Lots of great feedback (and questions) after my talk
#IndiaFOSS
The project is up at
Slides are here: (See speaker notes for a rough transcript).
If you’re interested in contributing, drop me a DM.
If you've ever wondered what happens to your data when a company gets acquired: My GoZefo (acquired by Quikr 2019) email is now getting marketing emails from Commonfloor (acquired by Quikr 2015).
👋 It's my birthday today.
I'm not a birthday person, but this year I'm doing a fundraiser for
@internetfreedom
🎉.
I'll be matching donations made to IFF today so you can double your impact:
(Please RT)
72% of Pixel 3's estimated lifecycle emissions are from its manufacturing. By forcing customers to get a new device via planned obsolescence, Google is putting their profits before our environment.
Source: Google's sustainability report for Pixel 3
This is a natural consequence of designing and promoting an ID system with zero liabilities or checks.
When UIDAI told the parliament to put “Aadhaar printouts are valid KYC” in the law, they knew the consequences - they just didn’t care.
I didn’t know there was an Aadhar involvement here too.
@UIDAI
. The photo, date of birth, Aadhar number are all incorrect. I am redacting the number anyway. Only thing used here which relates to me is the name. The Bihar address too is wrong, of course.
@IncomeTaxIndia
Spent 5 minutes reversing the app. Some findings:
- The backend is running over HTTP ()
- It allows viewing of upto 100 records at a single time
- It uses MD5 (not sure exactly where)
Who hosts the Indian Government cyberspace?
The chart shows (% of unique IPs that GoI domains point to, counted by the entity/AS that they belong to).
The biggest here is obviously
@NICMeity
, which takes up 51%
Just realized that more than 100 other small banks relying on Yes Bank for maintaining NEFT/RTGS/IMPS will be badly affected.
Search for YESB0 at for a partial list. (132 banks on that list + 100s more)
Home for Diwali, and we recently got a Airtel Broadband connection, so I extended
@squeal
's work here.
Here's a list of 1300+ blocked domains for Airtel Broadband users:
(Not exhaustive, due to how censorship works)
90 days later
Total restaurants: 14467 (-198)
Temporarily closed: 510 (-36)
Permanently closed: 9237 (+126)
Still open: 4720 (-288)
Changes in parentheses.
Re-ran my
@BLRFoodCensus
code again, and here are some *early and rough* stats:
Total restaurants: 14665
Temporarily closed: 546
Permanently closed: 9111
Still open: 5008
#Bengaluru
has lost 2/3rd of its restaurants.
(Data via Zomato)
Thought I'd look at the
@Truecaller
app to see what changed to cause the bug (diff between 10.40.7 and 10.41.6)
Likely was just a accidental bug (see screenshot), but I found more interesting stuff.
Thread.
They claim to be completely "offline credit scoring engine", but this doesn't change the fact that users installed Trucaller to block phone calls.
Not to get a score against their mobile number.
@NCResq
UPI is cool, not because its online (NEFT/RTGS/IMPS was online), but because it figured out a loophole to the RBI 2FA guidelines while being mobile-first.
When in doubt, remember that all fintech innovation is regulatory bypass.
My Google migration checklist:
- Mail ->
@MigaduMail
- Stock Android -> LineageOS +
#microG
- Play Store -> FDroid + Yalp Store
- Google Play Music -> Airsonic
- Google Sync -> Radicale
- Drive/Docs -> Looking
- Google+ -> Seriously?
A customer that pays you at gunpoint isn’t your customer - you’ve created an artificial frustration where there was none to force them to pay.
Make them delighted at the upgrade. Not angry.
@_swanand
UPI also takes some questionable assumptions that don't work across the world (mobile number as Primary Key, linking all your bank accounts, routing everything through a non-government entity).
So much FinTech innovation in India is just finding the right loopholes.
Wallets became popular because you could bypass 2FA to make transactions.
UPI bypasses Beneficiary addition and waiting for 30 hours (and sometimes days) before making a payment.
Bus takes a stop somewhere in Haryana (en route to
@hillhacks
).
Me: Lacha paratha?
Waiter: No
Me: Stuffed Naan?
Waiter: Will take time.
Me: Kya milega?
Waiter: Sir, Uttapam ya Dosa try karo.
However, the old Aadhaar printouts, letters remain as valid as always. No statement from UIDAI asking users to upgrade.
The world's largest Identity Program has ever-shifting security and privacy guarantees, but there's no accountability from UIDAI.
~FIN~
@_swanand
For banks, slow payments and bank transfers are a feature, not a bug. (The slower money moves, the more money you can make).
But there's enough pushback from regulators and public that it's happening. See FedNow for eg.
I found out recently about Fingerprint publishing printing beautifully typeset classic hardcovers.
I spent too much tracking all of them down, so here's a thread. (Some links are affiliate)
Disclaimer: I'm not an economist, but I'm good at hunting down figures and calling out bullshit.
The tables cited earlier come from . See Statement 18 and 19.
~FIN~
(11/11)
I ran
@18F
/pulse on Indian Government websites to see how many of them support HTTPS. A quick summary:
Total Websites: 14183
Total Live Websites: 11710 (82%)
Websites with Valid HTTPS: 4753 (40% of all live websites)
Raw Dataset for now:
ITT: People with no idea about what a blockchain is.
Repeat after me; Blockchain solves the double spending problem in a trustless ecosystem.
If your problem involved trusting someone (certificate issuance, identity management, records, supply chain) - blockchains are useless
Blockchain is one helluva technology. Yet, almost 15 years later it still feels like a solution waiting for a problem.
What are some real at-scale problems (other than crypto pls!) that blockchain can solve way more elegantly than other existing technologies?
Remember all those "one credit card" companies with cool cards to let you manage all your other cards?
Most of them are dead now, I did a quick survey of what happened:
If you're looking for boardgames to gift, I added a search feature on the
@ReRollBLR
website:
It searches across all boardgame stores in India at once.
(Built using Google CSE, feedback is welcome)
Recommendations:
@UIDAI
@thetribunechd
Decided to open the
@NCIIPC
(National Nodal Agency for Protection of Critical Information Infrastructure) site. Fun facts:
- It doesn't have HTTPS
- They don't have any update on
#meltdownspectre
vulnerabilities yet.
- They have a hit-counter on the site!
I rest my case.