4rham retweeted
🚨 MetaMask confirms infrastructure breach, hackers diverted Ethereum staking rewards
MetaMask has confirmed that attackers gained unauthorized access to part of its staking infrastructure in September, redirecting approximately 0.385 ETH in rewards by manipulating recipient addresses.
The company says its wallet infrastructure, customer funds, private keys, and recovery phrases were not compromised. However, precautionary shutdowns of affected Ethereum validators caused temporary withdrawal delays and missed staking rewards for some customers.
MetaMask has secured the affected systems and is working to reimburse impacted customers. Regular wallet users do not need to take any action.
4rham retweeted
Not your keys, not your coins?
Apparently, it's now:
Your keys, our RPC. Your coins, our permission.
A scammer sends 0.0001 dust to your wallet without your consent.
You didn't approve anything. You didn't interact with the scammer. You simply received an unsolicited transaction on a public blockchain.
Then Phantom's compliance filter kicks in:
"Your address has interacted with a flagged malicious entity. Transactions disabled."
Wait. WHAT?
So a random scammer can poison my wallet address with dust, trigger your automated risk detection, and suddenly I can't use your wallet interface to move my own assets?
Welcome to self-custody, where you own the keys but apparently need corporate permission to use them.
The blockchain didn't freeze my account.
The centralized frontend did.
The irony is almost too good.
We built crypto to escape banks freezing our money, only to end up with fintech apps wearing a decentralization costume.
If a wallet can unilaterally disable your ability to transact because some random third party sent you dust, maybe it's time to rethink what "self-custody" actually means.
Not your keys, not your coins?
More like:
Your keys. Their rules. Their permission.
Peak Web3 UX. 🤡
4rham retweeted
the crypto landscape is constantly evolving, creating opportunities for those willing to look beyond the obvious.
new technologies, changing user behavior, and unexpected breakthroughs could shape the next wave of industry leaders. the possibilities remain wide open.
4rham retweeted
IP Camera Hacking: Using pwneye to Compromise IP Cameras
hackers-arise.com/camera-hac…
4rham retweeted
⚠️ DarkGPT is back online! "Anonymous AI. No logs. No traces. No limits."
Dark Web: http://darkgptvje5yohv2huc3wofljva2kibojeusveqwiqhffvocgcwbprad[.]onion
Dread Announcement: https://dreadohblesmagfagqup24vw7catlvmqhhce5itz7wxr4vffgemjzaad[.]onion/post/e0e776b705a6eee94a29
4rham retweeted
CZ bilang "kalau exchange crypto bisa dibobol, bank posisinya lebih parah". videonya ditonton 1,3 juta kali. eh sehari kemudian beneran ada bank yg kebobol 😳
namanya crédit mutuel arkéa, bank di perancis dengan aset sekitar $235 miliar.
alurnya menurut ZachXBT dan penjelasan bank nya:
1 nov: hacker masuk lewat platform salah satu vendor bank itu. dari situ dia pakai rekening milik bank sendiri (bukan rekening nasabah) buat transfer ke pihak lain.
uangnya lalu masuk ke akun exchange kraken, crypto.com dan OKX, terus ditarik keluar dalam bentuk USDC dan USDT. sekitar $106 juta dalam waktu kurang dari sehari.
2 nov: ZachXBT ngumumin ada "lembaga di eropa" yg kecurian. abis itu ketemu $27 juta lagi, sebagian malah ditarik setelah dia ngumumin.
4 nov: bank nya ngaku kena serangan. angka $133 juta ga dikonfirmasi, tapi kata mereka skalanya memang segitu. nasabah ga ikut rugi, dan sebagian dana uda diblokir.
yg menarik buat kita: hackernya ga mau lama2 pegang stablecoin.
USDC dan USDT itu bisa dibekukan sama penerbitnya (circle dan tether). jadi dananya buru2 ditukar ke ETH, yg ga bisa dibekukan siapa pun, terus sebagian dipindah ke monero (koin privasi yg transaksinya susah dilacak).
pola nya mirip hacker binance kemarin. buat kita stablecoin itu tempat paling aman buat parkir nilai. buat pencuri justru yg paling cepat dibuang, karena paling gampang dibekukan.
satu lagi yg sama: yg jebol bukan sistem utamanya, tapi pintu samping. di binance laptop karyawan, di arkéa platform vendor.
Binance Founder, CZ, issues big WARNING.
"If a crypto exchange can be hacked, banks are in a worse position."
"This is not just a #crypto problem. This is actually a much wider information security problem."
4rham retweeted
With the recent wave of vulnerability disclosures, it’s a good time to take a closer look at your own code.
Turn your coding agent into a team of security auditors with the open-source skill that seeded Cloudflare’s vulnerability discovery harness.
The 6 phase approach:
1. Map the codebase
2. Hunt for vulnerabilities
3. Challenge each candidate
4. Record the findings
5. Verify the findings
6. Report what’s confirmed, rejected, or still needs validation
Start your hunt here:
github.com/cloudflare/securi…
4rham retweeted
Kok jadi begini negara kita. Kok begini liar politik kita. Sepertinya untuk mendapatkan kekuasaan (political power) cara apapun dibenarkan. Tidak peduli baik atau buruk. Bermoral atau tidak bermoral. Saya khawatir kalau akhirnya rakyat merasa takut dan tidak tenteram hidup di negaranya sendiri.
Sebagai warga bangsa yang sangat mencintai negeri ini, seperti juga warga negara Indonesia yang lain, saya bermohon kepada Presiden Prabowo untuk menghidupkan kembali politik yang berkeadaban. Ini panggilan sejarah. Ini amanah rakyat. Semoga Tuhan memberikan kekuatan dan tuntunan kepada Pak Prabowo untuk menjalankan misi mulia ini.
*SBY*
4rham retweeted
Cybersecurity Tools Every Security Enthusiast Should Know!
Explore command cheat sheets for John the Ripper, Burp Suite, SQLmap, DIRB, Hashcat, Aircrack-ng, Subfinder, ExifTool, and theHarvester.
Part - 2
#CyberSecurity #EthicalHacking #SecurityTools
4rham retweeted
(Since we're on the heels of Halloween)
Reintroducing WRAITH 👻
A spiritual successor to BeEF that combines blind XSS and browser hooking into one framework. Live Page Mirror, operator console, *c re d* cap popups, local port scan, and labs to teach the bugs!
Built for authorized red teams and security researchers.
github.com/Arcanum-Sec/wrait…
4rham retweeted
A surprisingly practical AI project: build your own local smart security system
Here are 10 open-source repos worth checking out:
1. Frigate
github.com/blakeblackshear/f…
2. Scrypted
github.com/koush/scrypted
3. Home Assistant
github.com/home-assistant/co…
4. Ultralytics
github.com/ultralytics/ultra…
5. OpenCV
github.com/opencv/opencv
6. CodeProject.AI
github.com/codeproject/CodeP…
7. Double Take
github.com/jakowenko/double-…
8. CompreFace
github.com/exadel-inc/Compre…
9. go2rtc
github.com/AlexxIT/go2rtc
10. DeepStack
github.com/johnolafenwa/Deep…
You can turn basic cameras into a system that detects people, cars, faces, and events without sending every video feed to the cloud
4rham retweeted
Every AI coding agent you use forgets everything the moment the session ends. Beacon fixes that, and it's a business someone hasn't built yet.
>It sits across Claude Code, Cursor, Codex, OpenCode and 20+ other harnesses, capturing every session
>Workflows, bug fixes, and debugging patterns get saved and reused by future agent runs instead of relearned from scratch
>Open source, MIT licensed, install via Homebrew
The tool is free. The business on top of it isn't built yet.
Github: github.com/Asymptote-Labs/ag…
4rham retweeted
10 GITHUB REPOS FOR BUILDING YOUR OWN AI VIDEO CREATION STACK:
1. ComfyUI
github.com/comfyanonymous/Co…
2. WhisperX
github.com/m-bain/whisperX
3. Remotion
github.com/remotion-dev/remo…
4. Auto-Editor
github.com/WyattBlue/auto-ed…
5. MoviePy
github.com/Zulko/moviepy
6. Stable Video Diffusion
github.com/Stability-AI/gene…
7. LTX-Video
github.com/Lightricks/LTX-Vi…
8. Wan
github.com/Wan-Video/Wan2.1
9. Video2X
github.com/k4yt3x/video2x
10. FFmpeg
github.com/FFmpeg/FFmpeg
Save this stack
4rham retweeted
Under pressure from Israeli prime minister Benjamin Netanyahu, the Trump administration may be within days of launching a nuclear strike on Iran. The target would be Pickax Mountain in central Iran, where Israeli intelligence claims the Iranian government has restarted its nuclear enrichment program. No conventional weapon in the American arsenal can penetrate 300 feet of solid granite to destroy the tunnels where enrichment is supposedly taking place. The only military option is a nuclear strike. Netanyahu has been pushing hard for one. “Bibi calls Trump about it every day,” says an informed observer.
Netanyahu is cornered and desperate. After last week’s election results, he can’t form a government unless Trump intervenes directly in Israeli politics and brokers a deal with other parties that gives Netanyahu 61 seats in the Knesset. Otherwise, he is out as prime minister and on his way to ignominy, investigations and possibly jail. Netanyahu must stay close to Trump. He needs this war.
To that end, he’s applied maximum pressure to his closest allies in the administration, including Secretary of Defense Pete Hegseth and CENTCOM commander Brad Cooper. Both oppose a negotiated settlement to the war they’ve so grievously mismanaged; both are pushing to restart major combat operations. Secretary of State Marco Rubio and CIA director John Ratcliffe are also following Netanyahu’s lead, as are leaders of the Democratic Party. In a recent meeting on the subject, former president Barack Obama said he opposes the current Iran peace deal being drafted in Doha.
The rest of America’s longtime allies in the Middle East are terrified by the prospect of more war. On September 27th, Netanyahu flew secretly to Abu Dhabi to enlist the UAE in his lobbying effort for a final attack on Iran. The Emiratis refused. After eight months of conflict, Gulf economies are teetering. So are global energy and fertilizer markets. They won’t recover soon. Globally, there are a total of about 850 supertankers used to transport oil from producers to the rest of the world. In October alone, 11 of them were badly damaged in Hormuz. At this pace, a global depression is imminent. A nuclear strike would radically accelerate the destruction. Fallout from a ground explosion at Pickax Mountain would contaminate the Persian Gulf, poisoning the water supply for 100 million people.
And those are just some of the immediate consequences for the region. The rest of the world is every bit as exposed. No country other than the United States has ever used a nuclear weapon in war. Some would like to. An American nuclear attack on Iran would set a new precedent. The Russians have already told at least two other governments that an American nuclear strike on Iran would free them to use nuclear weapons against Ukraine. Pakistan and India would be tempted to do the same against each other, as would North Korea against Seoul. After the first nuclear strike, World War Three is inevitable. That war would be short and final.
We’ve been sleepwalking toward this moment for months. Since February, the administration has quietly rewritten America’s nuclear doctrine to make first use of so-called “battlefield nukes” easier and therefore more likely. No one in Washington in either party seems bothered by this. Now we’re on the brink of it.
Close observers say Trump is likely to decide by next weekend whether or not to use nuclear weapons. That would be November 7, six days from now. To his credit, he’s hesitating. At the moment, Trump is listening to his vice president, JD Vance, and to his envoy and friend Steve Witkoff, both of whom argue a deal with Iran can be made.
They’re right, though it won’t be simple. The Iranians are famously frustrating to negotiate with under any circumstances, and elements of that government have become more radical since Ayatollah Ali Khamenei and his family were killed in February. After decades of isolation, even relatively moderate Iranian leaders seem confused by how decisions are made in the West. (There is a widespread belief in Tehran, for example, that the United States government controls Israel.) But overall, people who have spoken to decision-makers in Iran say there is consensus there that more war is bad for everyone and a deal is worth making.
One group that hasn’t been consulted so far is the global population — the hundreds of millions of people who will be killed along with their children if Trump is pushed by Netanyahu into launching a nuclear strike next week. Now would be the time for them to speak up.
4rham retweeted
这就有点吓人了……
REA 的作者一口气放出了 20 个 GitHub 仓库,能直接搭出一整套逆向工程环境:
[01] 分析内核
> REA:一个 MCP 接口全打通 github.com/morluto/rea
> Ghidra:免费的反编译器 github.com/NationalSecuri…
> GhidraMCP:让你的智能体直接操作 Ghidra github.com/LaurieWired/Gh…
> ida-pro-mcp:把智能体接到 IDA Pro 上 github.com/mrexodia/ida-p…
[02] 移动端和 App
> jadx:把 Android APK 反编译回 Java github.com/skylot/jadx
> Apktool:拆开 APK 再重新打包 github.com/iBotPeaches/Ap…
> Frida:在 App 运行时挂钩子 github.com/frida/frida
> ILSpy:反编译 .NET github.com/icsharpcode/IL…
[03] 二进制和底层
> radare2:跑在终端里的逆向框架 github.com/radareorg/rada…
> x64dbg:Windows 调试器 github.com/x64dbg/x64dbg
> ImHex:带模式语言的十六进制编辑器 github.com/WerWolv/ImHex
> angr:符号执行引擎 github.com/angr/angr
[04] 网络和运行
> mitmproxy:卡在中间读流量 github.com/mitmproxy/mitm…
> dnSpy:调试和修改 .NET 应用 github.com/dnSpyEx/dnSpy
> rizin:radare2 的分支 github.com/rizinorg/rizin
> raddebugger:Epic Games 出的调试器 github.com/EpicGames/radd…
[05] 重建和验证
> awesome-ai-reverse-engineering:122 个仓库,全都打了分 github.com/zhuyansen/awes…
> awesome-reverse-engineering:REA 作者亲自挑的 github.com/morluto/awesom…
> REA 工作流:现成的调研提示词,随 REA 一起提供
> 净室循环:SPEC.md、判定标准加校验,跑到对得上为止
流程是这样:二进制 -> REA -> SPEC.md -> 重建 -> 判定 -> 不行就再来
先存下来,随便找个 App 指过去,看它自己怎么解释自己。
4rham retweeted
逆向工程界这两天杀出一个核弹级 Rust 新项目:craft-anything。
它的定位极其暴力:
不只是看懂封闭软件的代码,而是彻底观测它的底层工作原理,并在理解的基础上,直接帮你克隆重构出一套属于自己的原生软件!
传统 IDA Pro 或 Ghidra 只是把汇编翻译成死板的伪代码,而 craft-anything 走的是系统级全景观测:
· 沙箱内自动抓包与 Hook:丢进一个未知的应用或前端包,它自动记录所有系统调用、内存状态机迁移与网络私有协议
· 拓扑重构架构图:内置符号执行引擎,把乱成一团的 API 请求和事件流,自动还原成清晰的业务架构交互图
· 直接生成骨架代码:结合 Coding Agent,直接输出结构清晰的模块化规范与原生复刻代码
不管是想扒大厂闭源软件的底层私有协议,还是想搞 Clean-Room 净室逆向手搓原生替代品,原本需要几天的人工逆向分析,现在几分钟内搞定。
纯 Rust 打造,内存占用极低。搞安全、逆向和底层架构的兄弟建议直接马住!
👉 开源地址:github.com/storytold/craft-a… #Rust #AI #开源
4rham retweeted
Every time I have an idea, I throw it into Claude Code and let the Brainstorming skill kick in
We start iterating through questions, exploring different approaches, discussing trade-offs, and refining the idea
The skill helps me clarify requirements, break down the design, and validate each part before documenting the final approach
By the end, I have a much clearer picture of what I actually want to build, before writing a single line of code
Install:
npx claude-code-templates@latest --skill development/brainstorming
aitmpl.com/component/skill/d…
4rham retweeted
50 legendary websites that feel like the internet’s hidden toolbox 🧰
1. unpaywall.org — free research papers
2. sci-hub.se — papers when unpaywall misses
3. openlibrary.org — borrow books
4. gutenberg.org — 70k+ free books
5. coursera.org — audit university courses free
6. wolframalpha.com — step-by-step math
7. remove.bg — background removal
8. cleanup.pictures — object removal
9. tinywow.com — quick file tools
10. ilovepdf.com — PDF merge/split
11. photopea.com — free Photoshop alternative
12. squoosh.app — image compression
13. excalidraw.com — fast diagrams
14. carbon.now.sh — beautiful code screenshots
15. regex101.com — test regex
16. jsonformatter.org — clean JSON
17. explainshell.com — terminal commands explained
18. alternativeto.net — software alternatives
19. haveibeenpwned.com — breach check
20. 10minutemail.com — temp email
21. privnote.com — self-destruct notes
22. radio.garden — live global radio
23. endel.io — focus sound
24. mynoise.net — custom ambient
25. justwatch.com — where to stream
26. archive.org — digital library
27. web.archive.org — old web pages
28. similarweb.com — site traffic
29. downtimerobot — uptime check
30. pagespeed.web.dev — speed test
31. tinypng.com — compress images
32. cloudconvert.com — file conversion
33. diffchecker.com — compare text
34. temp-mail.org — disposable inbox
35. obfuscator.io — JS obfuscate
36. keybr.com — typing practice
37. monkeytype.com — typing test
38. ankiweb.net — spaced repetition
39. notion.so — all-in-one notes
40. obsidian.md — local knowledge base
41. raindrop.io — bookmark manager
42. todoist.com — task list
43. trello.com — boards
44. miro.com — whiteboard
45. figma.com — design
46. canva.com — quick graphics
47. remove.bg — again because it's that good
48. yt-dlp — video download (open source)
49. handbrake.fr — video compress
50. localsend.org — local file transfer
Save this. You’ll definitely need some of these later. 🔖
Follow @The_techAI for more useful websites, AI tools & tech resources.


























