Pinned Tweet
It's difficult to convey how much the experience of childhood has changed in a few short decades, but in this nostalgic post try to be as thorough as possible. Click here to reminisce about what life was like before the internet age.
blog.lopp.net/the-last-untra…
At this point I don't need better models, I need more tokens per second with cost effective open weight models.
Jameson Lopp retweeted
What do recent hardware wallet attacks and AI-driven exploits mean for your self-custody setup?
This Thursday, @lopp and the Casa team go live to break it down and walk through how to stay protected.
Set a reminder: teapaw.org/i/spaces/1YxNrblWqLpxw
A Bitcoin treasury company (@Datavault_ai $DVLT) just crashed because they informed investors that they haven't been able to withdraw BTC from the exchange (@BiconomyCom) that is holding all their treasury funds after 4 months of transfer requests.
A decade ago we used to joke that some day folks would spread fear about bitcoin crashing to being worth tens of thousands of dollars. Thanks for the laugh!
teapaw.org/Jason/status/211495698…
A brutal year for Bitcoin is just getting started.
Give me three minutes to explain why you should dump it now.
Outflows from ETFs are signal and will continue.
We will test the 57k low again in the next 12 months.
Why?
Because there are far too many dynamic places to put your money that are creating MUCH more value.
Why put your resources into a dead network that offers nothing beyond a store of value?
What's the point of place the BTC be if Bitcoin's Ponzi-scheme nature has gone away!?!
The viral nature of bitcoin was it's power... if you didn't own you were MOCKED!
Now? Completely reasonable, heck, SMARTER, to ignore bitcoin and place other bets!
No one is trying to convince people to buy Bitcoin anymore... the memes and NFTs are gone.
No one is saying $ BTC can change the world, because it won't — and BECAUSE AI HAS!
Just sell and shift from Bitcoin to Super Intelligence because one provides little to no value, and the other provides unlimited upside for humanity.
This should be obvious to everyone right now.
Bitcoin will never break its all-time high again.
The greybeard COBOL developers can finally retire from maintaining legacy banking mainframes. We can convert your entire codebase to Rust in a matter of hours.
Jameson Lopp retweeted
Social engineers pretending to be Google Support keep calling me, so I took the opportunity to create this educational video showcasing their tactics.
Social engineers pretending to be Google Support keep calling me, so I took the opportunity to create this educational video showcasing their tactics.
Shouldn't be long before we have the equivalent of @GrapheneOS but for smart TVs, to remove all the spyware.
Just a few of the biggest security incidents in the past week... we're still accelerating:
* PHP2Shell: Two critical RCE bugs in PHP core
* eMudhra: Eight intermediate certificates had extremely weak private keys due to a key-generation script error that created keys with tiny values.
* GitLab: integer overflow RCE
* Plex Media Server: flaws compromised internet-facing servers used for cryptominers and proxy tools.
* Arista VeloCloud Orchestrator zero-day: Actively exploited authenticated SQL injection enabling privilege escalation.
* Node.js Brotli decoder RCE
* NGINX critical heap/use-after-free issues
* Railway breach: Attacker accessed systems storing customer environment variables and, for some, obtained decrypted contents (API keys, database credentials, private registry logins, etc.)
* Zeabur breach: ~321,810 accounts and over 3.2 million environment-variable records exposed. Company announced it is shutting down.
* LiteLLM supply-chain compromise: Malicious version 1.107.0 pushed to PyPI and Docker Hub containing a credential stealer and remote-access/backdoor capability.
* California public school data theft: 5.7M+ student records leaked, including names, dates of birth, addresses, demographics, and disability status.
* Capcom breach: Unauthorized access to ~11.77 million CAPCOM ID records
* Quest Diagnostics: Unauthorized access to Quanum Lab Services Manager system used by some clients; potential access to certain patient records.
* State Bank of India breach: customer records appearing on dark web
Vibe coding software wasn't dangerous enough, so @DEFCAD trained a model called GatGPT 😎
gatgpt.defcad.com/
Seeing reports of another round of snail mail social engineering letters from "Ledger" that try to trick you into scanning a QR code that takes you to software that steals your seed phrase.
Anyone who has been maintaining internet-facing infrastructure for the past 3 months:
teapaw.org/ThePHPF/status/2112828…
If you rely on the volunteer maintained rpms.remirepo.net we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.