Pinned Tweet
I have created a donation page to support my work: donate.joinstr.xyz/
This would help me continue to work on joinstr and other projects.
You are not ready for the attacks that will make BIP353 look dumb. But use it because of its author until you lose money.
I get paid zero sats for reporting a vulnerability to the team who maintains bitcoin core. How many people rely on bitcoin core maintainers to secure their bitcoin?
Is there a bounty for reporting a vulnerability in bitcoin core?
An update to Bitcoin Core's security policy
via @darosior on the Bitcoin-Dev mailing list
1.44 MB bootable floppy that generates BIP39 seeds
- Roll dice in the terminal
- Mix in health-tested CPU noise or type real dice
- No words until every bit of entropy is covered
- Every seed can be verified on a second computer
No OS. No network.
floppy.md retweeted
Zero sense of urgency?
Replying to @sagitz_
Full technical details are available on our blog: wiz.io/blog/php2shell-php-rc…
Advisory website: php2shell.com
floppy.md retweeted
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits.
the PHP Foundation revealed this JUST yesterday.
keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet.
thephp.foundation/blog/2026/…
floppy.md retweeted
I never wanted to say this but we have reported vulnerabilities in hundreds of companies in India.
Almost all the companies rejected it, got defensive and now i’m so afraid the exploits are just left open. This is btw the biggest companies in India
















