OTC CatchUp #306 Summary

Urmil Saini shared that he is studying networking for cybersecurity and volunteered at a medical themed hackathon where teams combined hardware and software.

Alpesh Bhagwatkar talked about the vulnerabilities he has been reporting, including IDORs that came back after the vendor shipped an update.

Kartik Soneji explained that JavaScript’s split() adds the text matched by a capturing group to the result array, while a non-capturing group (?:…​) does not.

Alpesh shared how to start with reverse engineering: reverse a hello world in C or C++, learn how values are stored, add complexity, and follow and take notes from people who do it.

Urmil asked about learning paths on TryHackMe.

Alpesh explained why Windows has a larger attack surface than Linux, with attacks like pass the hash and Active Directory at the core of most organisations.

Darshan Rander talked about a slow service at work that turned out to be a database problem, not a .NET one.

Darshan shared an interview question on what happens when a Redis cache goes down. He suggested an in memory cache, but the expected answer was Redis replicas.

Darshan and Kartik discussed building consent tools for the Digital Personal Data Protection (DPDP) Act, and whether it will be enforced.

Darshan is building a small CRM for a friend to track FD maturities, loan EMIs and insurance across clients, generated with AI from an ER diagram he drew.