Tim πΏπ¦β‘οΈππͺ retweeted
Heartbleed was bad, but the new PHP exploit (PHP2Shell) is wilder.
PHP powers ~70% of the web, and this flaw allows full server takeover + memory leaks going back to 2004.
Worse/Better: AI agents can now exploit or patch this at machine speed. It's a real time arms race. Stay safe out there.
trying @ComradesRace again? blog.coachparry.com/how-to-aβ¦
Tim πΏπ¦β‘οΈππͺ retweeted
I get an email with my password.. IN PLAIN TEXT!!! so they store the password unhashed π«
I dont understand how @Eskom_SA's customer portal can be so useless.. π§΅
I reset my password using my account number; it displays the email address I registered with (anyone can use this to discover the email address from an account num!)
I log in, and get a warning: "your password is not secure".. yeah I wonder why?! Because its stored by @Eskom_SA!
Tim πΏπ¦β‘οΈππͺ retweeted
If youβre interested in social media that is harder to censor, take a look at Nostr.
Unlike Facebook or X, Nostr is not owned or controlled by one company. You control your identity, and your posts can be shared through many independent servers.
If one server blocks you or shuts down, you can simply use another - without losing your identity or followers.
Itβs a simple idea that could have huge implications for freedom online: nostr.how/en/get-started
Day trading destroys wealth as reliably as any casino, and the mechanism is identical: the house takes a cut of every transaction regardless of who wins.
Every time you open and close a position, you pay spreads, commissions, and in the United States, short-term capital gains tax at ordinary income rates, currently topping out at 37%. The market has to move in your favor just to get you back to even. This is a negative-sum game before you place a single bet on direction.
Then comes the chart. Technical analysts sell the fantasy that a triangle pattern forming on a 15-minute candlestick chart of Tesla stock reveals something about the future price. It reveals nothing. Prices coordinate dispersed, real-time information held by millions of actors simultaneously, and that information changes constantly. No chart captures what Elon Musk will tweet in four minutes, what a pension fund in Oslo decides to liquidate this afternoon, or what a crop report does to energy futures overnight. The chart shows you the past. Only the past.
The brokerages profit from your activity, not your success. TD Ameritrade, Robinhood, every platform selling you the dream: they earn on volume. Your losing trade is as profitable to them as your winning one. Retail day traders as a group underperform a simple index fund over any ten-year period studied, losing to both the market and inflation simultaneously.
Capital deployed in a productive business compounds. Capital churned through a trading terminal evaporates, steadily, into fees and taxes and the inevitable bad week you did not model for. Stop staring at the chart. Buy the business.
Tim πΏπ¦β‘οΈππͺ retweeted
Coded a funny thing today while we were having some burgers and beers, see how low your flyover can go
flappylink.com
Tim πΏπ¦β‘οΈππͺ retweeted
Nostr stands for Notes and Other Stuff Transmitted by Relays. The Other Stuff is the point: blogs, live audio, communities, git repos, calendars, marketplaces, team workspaces. One key unlocks all of it, and no single app decides what the network is for.
Tim πΏπ¦β‘οΈππͺ retweeted
3.5 years ago I deleted this account thinking my absence would send a message.
It just removed my voice from the conversation.
I'm back because the mission hasn't changed and I realized I made a mistake. Bitcoin and Nostr still need to reach the people who haven't heard.
You don't purple and orange pill people by leaving. You meet them where they are.
The purple pill helps the orange pill go down.
Tim πΏπ¦β‘οΈππͺ retweeted
I deleted YouTube, Instagram, TikTok and X from my phone.
Within 48 hours, I noticed myself picking up my phone out of habit and having nothing to do.
All those hours scrolling are really spent consuming other peopleβs ideas and building someone elseβs business.
Attention is scarce capital.
Tim πΏπ¦β‘οΈππͺ retweeted
1/ The Comrades Marathon Centenary Race is on Sunday 13 June 2027, and entries open on Tuesday 25 August.
28 000 places, 4 entry windows and a general entry ballot. Here's how it actually works.
2/ Tuesday 25 August, 10:00 am SAST: Green Number and Yellow Number entries open, first come first served, entry caps apply. They close on Monday 31 August at 16:30 pm SAST, or sooner if caps are reached.
Amabeadibeadi charity entries open the same morning.
3/ Wednesday 2 September, 10:00 am SAST: CMA Member entries open for 72 hours or until the entry cap is reached. First come first served.
4/ Wednesday 9 September, 10:00 am SAST: general entries open by ballot application. Ballot applications close on Tuesday 22 September at 16:30 pm SAST.
The draw happens on Wednesday 23 September and you'll know the outcome the same day.
5/ You still need a qualifier. A 42.2km marathon in under 5 hours. Qualify any time between 15 June 2026 and 3 May 2027.
No qualifier, no start line.
6/ Big news - no increase in race entry fees for 2027 (the last time entry fees were increased was in 2022)
South Africa R1 200
Rest of Africa R2 000
International R4 500
And if you've earned 25+ Comrades finishes, you don't pay a cent.
7/ Part payment option: 50% when you enter, the balance payable by 31 January 2027.
8/ The Comrades Marathon Runnersβ Relief Fund assists 1500 South African runners who are unemployed or earn under R30 000 a year by offering a reduced entry fee of up to 50%. Tβs and Cβs apply.
10/ Entries are online only, on comrades.com or the Comrades Marathon app.
298 days to go.
#ComradesMarathon #Comrades2027
#ComradesMarathon #TheUltimateHumanRace #Comrades2027 #Centenary #ComradesEntries #RoadToComrades #UltraMarathon #RunningSA #GreenNumberClub
Tim πΏπ¦β‘οΈππͺ retweeted
An email address belongs to Google. A phone number belongs to Verizon. A bank account belongs to the bank.
Your npub belongs to you.
Keys, not accounts. No password resets. No bans. No terms of service.
That's the revolution. π£
You can just run your own race! πͺ
BREAKING NEWS: Comrades Marathon Association Chooses Freedom
Resolution 1: CMA Strategic Approach
229 for KZNA & ASA Accommodative / 873 CMA First
Resolution 2: Whether to reaffiliate with KZNA
338 In favour / 694 against
#secessionsaturday #CMA #KZNA #ASA
Tim πΏπ¦β‘οΈππͺ retweeted
BREAKING NEWS: Comrades Marathon Association Chooses Freedom
Resolution 1: CMA Strategic Approach
229 for KZNA & ASA Accommodative / 873 CMA First
Resolution 2: Whether to reaffiliate with KZNA
338 In favour / 694 against
#secessionsaturday #CMA #KZNA #ASA
Tim πΏπ¦β‘οΈππͺ retweeted
Quick demo of some cool Blink Terminal features
- Item Cart with custom items
- Calculator layout numpad with addition
- Boltcard NFC support
- Receipt printing
The Blink Terminal is here. It replaces the Cash Register.
Open it in any browser, enter a username, and start collecting Lightning payments.
Nothing to install. Share the link with staff β they can receive, never see the balance or move funds.
Works with your custodial and non-custodial accounts.
blink.sv/blog/meet-the-blinkβ¦
Tim πΏπ¦β‘οΈππͺ retweeted
Replying to @TimoSolo
Yes, they are NFC cards. Makes tapping to pay with Bitcoin as easy as a regular debit cardβno phone needed.
Tim πΏπ¦β‘οΈππͺ retweeted
Replying to @rayanastanek
Had the same problem! How am I supposed to "work" if Claude isnt available to do everything for me?!?!





















