Imagine being a certificate authority and ...

Found this ₹500 note and thought it was completely fake at first because the top and bottom borders are entirely out of symmetry. Out of curiosity, I ran it through a currency counter with all the security filters enabled, and it didn't flag it at all.

Thinking there was a serious minting leak or security lapse, I actually called the DCM to report it. And the official on the other end tells me: "See sir, notes are printed on huge sheets and cut using machinery, so it might happen sometimes."

Like... WTF? I know local Tier-2 vendors making spiral notebooks who manage a strict tolerance of +/- 0.2 mm. How is a random notebook vendor maintaining better precision cutting than the Reserve Bank of India? How does RBI have such abysmal QC for the highest-denomination currency in circulation, and just brush it off as "it happens sometimes"?

Has anyone else received such blatantly misaligned notes lately?

I mean how this happened while being one of the biggest banks of this nation, is there even any data privacy counter measures or checks or anything that they do? Or they just eat lunch all day.

Due to the urgency of the "php2shell" vulnerabilities (CVE-2026-109618 and CVE-2026-109619), several high profile public and private entities have voluntarily taken their websites offline as a precautionary measure until they can safely apply the emergency patches.

The flaws can enable unauthenticated code execution and expose server memory.

UPDATE:

PHP 8.5.12 may still be vulnerable to php2shell!

Researchers are reporting a successful crack of the newly patched release. A new and different vulnerability has been reported.

It seems the official fixes may be incomplete.

Don't assume you're safe just because you've patched.

What actually happened

In April 2025, eMudhra, Indian Certificate Authorrity generated 8 intermediate certificates with very weak private keys. One of them was a single digit "4" lol. Others were like 56, 115, etc

Anyone could recover these keys in under a second and create fake HTTPS certificates for any website that browsers would trust.

One researcher reported this on 17 October 2026. Google, Mozilla, Apple, Microsoft has blocked the bad certificates within hours. This came to limelight to everyone today morning.

eMudhra is licensed by India’s CCA/MeitY and works on government projects too.

What you should do..

• Update your browser and operating system right now (Chrome, Firefox, Edge, Safari, Windows, Android, iOS, etc as applicable)
• On Linux, update your ca-certificates package
• Check if your browser is still vulnerable: open this page and scroll down: https://emudhra.we-have-a-problem.com/
• If you run a website that uses an eMudhra/emSign certificate, get a new certificate from another CA as soon as possible

Most regular users are already protected once their browser is updated.

Simple explanation for non-tech people

(credit: u/just_sm_so_relax;; original comment)

Suppose your bank is SBI. You use Chrome to go to their website sbi.in for internet banking.

But your neighbour could have hacked your wifi router and redirected all your internet through his computer. So what you think is sbi.in is actually a website your neighbour is operating.

Browsers (like Chrome) protect against this by using https.

This is how https works:

SBI IT team goes to a certifying authority (CA), shows them documentation to prove that they are the "real" SBI.

There are many CAs around the world. eMudhra in India is one of them.

CA examines the documentation, and once they are satisfied, they issue a digital certificate ("cert") to SBI which essentially says "we, eMudhra, hereby certify that the holder of this certificate is the real SBI".

All the major browsers (Chrome, Firefox, Brave, etc.) are programmed to trust some CAs - I think there are some 100 or 150 CAs whom they trust. eMudhra is one of them. Basically the browsers have logic that says that "trust any site that is certified by any of these 150 parties"

Now, Step 3 is important. Once eMudhra is satisfied that SBI is really SBI, they use a really long 116-digit number to generate the SBI cert. This makes forging the certificate impossible. Some other bad guy (like your neighbour) cannot generate a cert for his own website and make a certificate that says "we, eMudhra, hereby certify that the holder of this certificate is the real SBI".

Except, the dumbasses at eMudhra didn't use a 116-digit number. They used a 1-digit number, the number "4".

So now, it is easy for your neighbour to make his own cert for his own website, and make it say "we, eMudhra, hereby certify that the holder of this certificate is the real SBI".

What is the remedy?

Browsers will now have to be reprogrammed to say "stop trusting certificates that are signed by eMudhra". Every laptop, PC, server, mobile phone, IoT device on the planet will have to be reprogrammed.

It's a f*cking lala company where most of the top staff are from same family.

Dad is the chairman and two brothers are product lead, president and director

https://x.com/CarterWChurch/status/2105167567706816690

Dear smartphone brands:

Provide a physical 3.5mm jack. If space is an issue, at least support USB-C Audio Adapter Accessory Mode (Analog Pass-through) connected to the internal DAC.

Forcing consumers onto active external DACs is inefficient.

Prioritise native analog audio.

So since morning, this is the second time this is happening. I have been receiving so many login and OTP from different websites at once and even calls asking for verification. Can someone tell me what is happening and what can I do to stop this? Has my number been compromised?

So the w key in my keyboard still types after releasing it, i checked it with on screen keyboard and still same result. this issue is only there for w key. i use windows 11. I play CS GO and some other games and since almost all of the games require "W" key to move forward, I am not able to play properly. The problem is, if I press the "W" for around 5 seconds it still works for 3 seconds even after I'm not pressing it. I mean my character doesnt stops right when I release "W" key.

I am very much frustrated with limitations with this webos TV , they don't even allow us to download any web browser to our tv ...

100% privately, 100% free.

GitHub Link 🖇️ >> https://github.com/vijay00git/Zoro-Budget

✨ What makes it different?

📲 Auto-Detects Expenses: It securely reads transactional SMS messages to log and categorize your spending on the fly (or you can do it manually anytime!).

📴 100% Offline & Private: No bank logins, no cloud, and no trackers. Your financial data never leaves your device — it is stored entirely in your mobile storage.

📊 All-in-One Investment Tracking: Track more than just expenses. You can keep visual records of your SIPs, Mutual Funds, Fixed Deposits (FDs), Recurring Deposits (RDs), Gold, and Silver to see your true net worth.

📈 Stunning Visual Analytics: Clear charts, category donut graphs, and colorful daily spending heatmaps so you always know where your money goes.

Join the Discord Server: https://discord.gg/q4jRVQRQqM

Connect with fellow tech enthusiasts and join real-time discussions.

"🏆 Early 100" -Limited Time Trophy

A special, exclusive badge will be awarded to first 100 members after the server goes live. Don’t miss your chance to claim yours!

^{Complete verification to gain access to all channels. If you are facing any issue, notify mods at #unverified-public-chat}

mine is basic : 2 rows of imp apps and cool wallpaper.

Source https://economictimes.indiatimes.com/industry/banking/finance/banking/sbi-data-breach-claim-hackers-allegedly-access-3-75-lakh-accounts/articleshow/135055988.cms