https://teapaw.org/t.co/xuILE4nHdW, https://teapaw.org/t.co/UI8KK7kV3r
moonrocket
Joined January 2025
- Tweets336
- Following1.2K
- Followers515
- Likes30K
Web2
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
One of my favorite use cases of AI has been reading giant insurance policies and searching for coverage theories.
This fully decentralized world computer just might consume the entire financial system.
I resigned from the Ethereum Foundation today. I spent the last three years doing protocol research at both the Ethereum Foundation and Eth Labs. Neither organization is acting responsibly. They are racing straight to a fully decentralized world computer and gambling with the future of every institution on earth. More thoughts below.
phatwallet.eth retweeted
Love crypto? Pass CLARITY to promote its growth.
Hate crypto? Pass CLARITY to prevent its abuses.
Don’t care or feel somewhere in the middle about crypto? Pass CLARITY to show Congress can still actually do something with the power granted by the American people.
It’s time.
phatwallet.eth retweeted
“If you want to hate America, watch the news. If you want to love America, drive through it”
~German World Cup fan
The first step to fixing a complex problem is to figure out how deep it even is.
New paper: every law in America is technically public. But not really, until now!
With @DenisPeskoff at UC Berkeley, we built a corpus of ~every publicly accessibly city and county law, and released a huge chunk of it!
2.2 million laws, you're (probably) covered in it!
🧵
phatwallet.eth retweeted
"This is all about our country. I love the USA, I love our teammates. ... I'm so proud to be American today."
Great thoughts here on web2 domain valuations and liquidity. On ens domains, even if valued on different criteria, there are not the same siloed data limitations of web2. As ens data and valuations evolve there is a chance for a pretty liquid market.
Domain name appraisal information: (For Namescon)
There is almost no market liquidity without real appraisals on domain names. Imagine the jewelry marketplace, used cars, real estate, art, or Wall Street without qualified appraisers; there would be no real markets. The illiquidity of domain name markets will plague the industry indefinitely until the leaders of the big companies get their own names appraised, and help their customer get serious appraisals. Otherwise, investors, buyers, and domain owners can never understand or have faith in the valuation of the assets, i.e., the market. The industry will remain a backwater. Real markets with liquidity need real appraisals, market makers, brokers, traders, and all the technologies that go with them. Without real appraisals domain owners and corporations renew worthless domains forever. Or price them too high to ever sell them. Or sell them at a small fraction of their value due to the buyers being great negotiators while nobody actually understands the value of the assets; and everyone (in the domain commerce chain of investors, brokers, employees, partners, and owners) loses significant profits. Entities who own hundreds of thousands or millions of domains have no idea how to appraise them in a proper manner, so they lose millions per year in sales revenue, and more millions not deleting the garbage names (multiplied by their theoretical market multiple). Plus, they accidentally delete endless valuable assets not realizing their true value or having any way to figure it out. They may choose to add a premium to the real appraisals to create some leverage for negotiations; or discounts to encourage fast online Buy It Now (BIN) sales; or to sell entire collections at once. But in any event accurate consistent pricing across every collection and marketplace is an absolute necessity to be able to create liquidity and trust, and truthfully call it a marketplace.
There are currently only about 10 people in the world qualified to do domain appraisals, and only if they had DomainMarket .com’s extensive proprietary data processes, user interfaces and related training; but those people are mostly retired or too wealthy to take a job like that. The apps that attempt to appraise domains are all terrible, truly counterproductive and harmful to the market. The apps are just confusing domain owners if they are naive enough to believe the pricing it delivers. There is no way an app, even with the world’s best ai and programmers, can come up with a valid price. Presumably this is a permanent situation; there are too many subtleties and intricacies in understanding the unique data, branding, and negotiating leverage for any particular domain or collection of domains for an app to ever do a good job. The only real way to do it is by having some of the few people in the world with qualifications do it, or to train new ones on our system. Nobody else has the tools, processes or data points we invented and perfected. We have extremely detailed data that requires constant updating. The data sourcing is very difficult, complex and expensive to keep up to date. Most of the data sets we have others are unaware of their existence at all, or their value to the domain marketspace. We even invented some of the most valuable data points ourselves. Our graphical user interface has many powerful features others have not contemplated, that are presented in a very user-friendly powerful manner. We have proprietary algorithms used on top of the data to help highlight the possible value of each name, and then price/appraise them; or bid low for them in auctions. Mann has appraised likely 100 times more names than anyone else in the world, using this system.
We also own a side service and web site where we appraise domains for the general marketplace – AccurateAppraisals .com. The world’s top domainers and brokers choose AA whenever they need a real deal valuation. There is absolutely no relevant competition for this service at all.
DomainMarket .com utilizes proprietary methodologies to evaluate and appraise domain names in greater volume and more detail than any competitors; and is the only market with the skills to continue to do so. Our proprietary process of evaluation developed over two decades enables us to maintain the super-premium nature of our marketplace; and to cost-effectively acquire additional undervalued, premium domains that have a high probability of profitable resale. We will continue to use ai to add and refine our data and user interfaces, but ultimately qualified people have to be trained to use and update the systems to come up with valid bid/ask prices in perpetuity.
I will retire one day and turn all this over including the training and possibly staff to the smartest person in private equity with a serious bankroll.
phatwallet.eth retweeted
There’s one thing everyone’s missing about the dGEN1
And it changes everything.
Everyone’s debating the dGEN1’s UI, colors, specs, and features.
Cool. Debate it all you want.
But that’s not the story. There's something so much bigger happening here...
The story is that, for the first time, a phone lets you communicate and hold value no one can seize.
We are in the era of Chat Control, surveillance laws, and silent censorship, where messages can be scanned, accounts frozen, and speech filtered.
The real innovation isn’t another shiny app.
It’s a device that unlocks a foundation for freedom.
In an era where:
Discord hackers are stealing our license photos and personal info because we had to KYC...
Elon can read every X DM I’ve ever sent...
Pavel promises to protect my unencrypted messages & metadata sitting on his private servers, trust him...
Signal has to leave entire countries because if the iPhone is compromised, so is their app...
And even Apple is removing Advanced Data Protections for people in the UK
…maybe we should be debating what a new foundation unlocks for freedom, not whether people like the color purple.
Two things are required for freedom to exist.
Communication that can’t be shut down.
Money that can’t be seized.
Let's talk about the dGEN1...
The dGEN1 runs on @XMTP_, a messaging network that’s quantum-resistant, open source, and as secure as Signal. As Mainnet rolls out, no single country runs over 50% of the nodes.
This means that if any country changes its laws on privacy or adopts something like Chat Control, XMTP cannot be shut down.
That means no person, no company, no billionaire, and now no country can take away your freedom to communicate.
The dGEN1 does things that most people won’t even realize are unlocking this new foundation…
You don’t sign up and give away all your personal data.
No email.
No phone number.
No KYC.
Just one key.
And with that key, you own your messages, your money, your freedom.
The fight for privacy no longer lives in apps.
It lives at the hardware level.
The decentralized network level.
At the key level.
Because when everything else is compromised, the last frontier of freedom is the device in your hand. The key you use to access that device. And a network that can't be censored or shut down by a person, company, or even country.
So yeah, you can critique the UX. We can debate whether we love it or hate it.
But if you’ve ever lived in a place where communication can get you killed, it honestly doesn’t matter what it looks like - it matters that it fucking works.
True innovation changes what’s possible for people who have no other choice.
dGEN1 isn’t just a crypto phone.
It’s a new era that’s worth everyone fighting for.
We don’t need another app.
We need an entirely new system that no one can own.
We need to rethink the entire stack: The key, the network, the hardware.
That's what dGEN1 really did here.
Privacy isn’t just a network.
It isn’t just a key.
It’s all three —
The key, the device, and the network are all working together.
A new foundation for freedom.
---
P.S.
dGEN1 team, thanks for leading the way. It’s way more important than you think for all of us to build a new foundation, together.
If the future of Ethereum is really about privacy,
Then we need 100x more innovation at the hardware and device layer, too.
Let's keep building.
phatwallet.eth retweeted
There is an ideology that has steadily been growing in this country which hates everything that is good, righteous and beautiful and celebrates everything that is warped, twisted and depraved. It is an ideology at war with family and nature. It is envious, malicious, and soulless. It is an ideology that looks upon the perfect family with bitter rage while embracing the serial criminal with tender warmth. Its adherents organize constantly to tear down and destroy every mark of grace and beauty while lifting up everything monstrous and foul. It is an ideology that leads, always, inevitably and willfully, to violence — violence against those uphold order, who uphold faith, who uphold family, who uphold all that is noble and virtuous in this world. It is an ideology whose one unifying thread is the insatiable thirst for destruction.
We see the workings of this ideology in every posting online cheering the evil assassination that cruelly robbed this nation of one of its greatest men. Postings from those in positions of institutional authority — educators, healthcare workers, therapists, government employees — reveling in the vile and the sinister with the most chilling glee.
The fate of millions depends upon the defeat of this wicked ideology. The fate of our children, our society, our civilization hinges on it.
Now we devote ourselves, with love and unyielding determination, to finishing the indispensable work to which Charlie bravely devoted his life and gave his last measure of devotion.
. @ensvision has brought a lot of money to the ens dao by making expired premium domains so easy for all to find, watch, and compete for. 👏👏👏
sparrow.eth registered for 0.746152196894065 ETH (3285.68 USD) on ENS Registrar ⬨ #ENS #Web3Names #EnsNames
etherscan.io/tx/0x6b679083f1…
🟢 Fair-launch coins. Earn 50% fees @freeedotfun
When I purchased loft.eth it took just minutes.
When I sold Loft .io for $75K a year ago - after holding it for just a month - my bank kept refusing to accept the incoming payment. They kept requesting various forms of verification, including:
📜A domain appraisal certificate
🧾 Proof of ownership (which I couldn't provide, since the domain had already been transferred)
📜Buyer/seller invoices
🔃 Screenshots of the sale process from Afternic's dashboard
✅ Audio/video verification of my identity
None of this helped.
Eventually, the only thing that worked was writing a handwritten, signed letter addressed to the bank's CFO, explaining the 10x price increase in just one month. After sending them a photo of the letter, they finally released the funds.
I remember @LeanneMac said to me that day something like: "That's a lot of money - you thought it would be easy? 😄"
Let’s smooth the trendline @VivekGRamaswamy
@maxhodak_
phatwallet.eth retweeted
Reasons why I stand by rare ens names as my top hold for an eth bull. It will be a hated rally (my favorite kind) if things turn out like i expect.
1. constructive long-term view on eth. stable settlement, staking ETFs, treasury cos, institutional defi, and the only chain trusted with tamper-proof uptime to secure tokenized art/content valued over $100k USD. Sol will prob get there, but needs years of reputation building for massive tvl commitments i expect on eth protocols. ENS benefits from being eth's endogenous naming system in a world where ETH reaches multi trillion mcap, and top names accrue the lion's share of the value.
2. We are in the "a ha" moment for the power of eth treasury cos. The market will soon realize that ENS is a top 10 eth treasury with a unique and sustainable funding from millions of registered names. Eth treasuries can be used as collateral, source of staking revenues, or as a war chest to supercharge development, integrations, and namespace expansion. ENS dao is in a truly unique position and at worst, development will be neutral for .eth over subdomains and other domain suffixes powered by ENS... But most likely quite positive.
3. Tokenized domains are a superior registration and trading experience to non-tokenized DNS names.... Rife with intermediaries, delays, fraud risk, and ownership infringement. The ENS constitution affirms that property rights will not be infringed upon, no matter how much people voice dissent at the social layer. A tokenization boom for domains would be a big plus for the .eth primary and secondary markets. The unruggable properties of .eth vs tokenized DNS names will be appreciated over time. While other Blockchain name services may thrive, .eth is the most Lindy suffix with real world usage for facilitating all sorts of safe onchain activity. As the stakes (tvl) increase on Ethereum, the cost of not using ens names rises similarly.
4. Subdomains are not cannibalistic to rare .eth domains. The collectible market and the mass market for ens domains don't overlap a great deal... But the value of top collectible names rises as a function of the entire universe of ENS domains + subdomains... And arguably as the number of other name service domain registrations increases (like sns). In my mind, rare .eths sit at the top of the value pyramid (time tested, sales comps, most widely integrated, etc.)... And as the base of the pyramid rises, while the number of rare .eths are hardcapped... Then value stands to increase. Many nft ogs condescend or outright dislike the ens secondary market. I'd ask them to look past the clownish shilling of low quality domains, and consider how similar the logic for rare ens domains is to batsoupyum's pyramid mental model for value accrual in crypto art. I don't see a great world of difference, and I think the optics of emd category sprawl + shill culture circa 2022 may be distorting what should be a clear and simple bull case.
5. Compelling and demonstrable examples of thriving collectibles sales in similar markets:
-vanity license plates
-3 digit and rare word .com sales
-the booming telegram phone number market
-less similar, but still relevant collectibles markets are also booming (Pokemon, csg2 skins, DND, sports memorabilia)
All of which contain a long list of 6, 7, and even 8+ figure unit sales. Even if you completely disregard ens's future utility, you can still make a case that top names endure as collectibles.
6. Blockchain domains have the potential to reach and surpass we domains and phone numbers with impression potential. As more commerce moves onchain, wallet address discoverability will become a major topic. Not everyone will prioritize anonymity in their use of public chains (look how much ppl make off of ref link affiliate marketing). I've long considered etherscan social media, and we now have a new generation of wallet/kol tracking apps that make discoverability of wallets more profitable for market participants. Unique ens names benefitted last cycle as a "flex" on Twitter... Which still remains pragmatically important to many large accounts and whales... But these new socialfi apps will make memorability ang discoverability a much higher priority in the future. What may seem like "expensive" domains, could actually be quite cheap in terms of being followed and discovered online and onchain. Remember, we aren't just talking about tracking humans either. An increasing share of new wallets and smart contracts created will belong to a growing population of non human & AI agents. It'll be very hard for a wallet to stand out in the future without a signifier like a rare ens name.
To conclude, I'm not only bullish on 3/4 digit .eth domains. I think we will see several categories of names and unique words soar as useful collectibles. I just happen to be attracted to names where 1) language barriers are minimal, 2) the bull case is as simple as possible, and 3) we see numerous examples of success in other markets like vanity plates and phone numbers.
You don't have to like ENS, the dao, the shillers, etc. I just happen to believe they go much higher in the year ahead.
/fin
phatwallet.eth retweeted
I cant believe that this actually works… I’ve been fighting since day one to make crypto as simple to use as messaging. It’s finally happening… On @CoinbaseWallet
What’s about to launch with TBA is going to change crypto. This isn’t a new wallet, it’s actually a product people can all use without having to think about a wallet.
Finally no one has to understand anything crypto to be able to do everything crypto. No seed phrases, passwords, jargon, buzzwords, understanding bridges, protocols, minting, prediction markets, nothing.
The fact that we can now add ai agents to our group chats that can also move money Onchain anywhere in the world, instantly, for free - is game changing. Especially when they do things that are genuinely useful not just speculation. Pay anyone anywhere anything. Pay an entire group of people in one-click. Launch tokens. Bet with friends. Create a prediction market with friends. And so much more.
Check this out… crypto + AI agents all in one group chat powered by @xmtp_
I can use @flaunchybot to launch a token as simple as a message. The magic is that it automatically splits ownership between everyone in the group if I want to.
I can then just chat @bankrbot and buy, swap, pay others in the group all with this new token we just launched. Or @USDC - or any token.
This was SO complicated in the past. And now it’s as simple as a message and everyone in the group can learn by watching me interact with the agents.
Now you can have an idea chatting with your friends, talk to any agent, and do anything onchain. This used to happen across many different apps and all single player. And everyone was confused.
Whenever I see magic that’s finally simple to use, I know everything is about to change.
It’s finally here. Can’t wait til everyone can feel it too.
See ya tomorrow 👀
