
devex @celestia // scma @vcu #WeAreBijan
🌎🌐
Joined August 2021
- Tweets10.8K
- Following4.4K
- Followers4.9K
- Likes77.2K
Josh Stein retweeted
Wait, it's real?
hey @united giving you one chance to resolve my claim for my hotel room that I had to pay for because you canceled my flight, before I put you on blast
Josh Stein retweeted
People keep asking me where the open source AI and private AI people in New York 🗽 are. Instead of a million group chats, I'm bringing them together for a day of hacking and discussion on Saturday November 7th. No one should own your AI except for you. Welcome to LOCALHOST ⬇️

ALT The localhostai.nyc home page, styled as a thermal security camera feed over Williamsburg. A terminal window titled localhost, the word LOCALHOST in pixel type, "New York's Sovereign AI Hackathon", the line "No one should own your AI except for you." then "Come hack on open weights, open harnesses, open memory, and open hardware to accelerate the future." When: Sat, Nov 7, 2026. Who: 50-100 hackers. Where: Williamsburg, NYC. Buttons: Apply to hack, Sponsor a track.
Josh Stein retweeted
Here is my 10 Minute Mac Security Checklist
It covers the min requirements to harden your Mac's security using system settings and free, open source tools
mac.0xosprey.com/
Josh Stein retweeted
we've been living in a digital pigsty, a world of security by scarcity that got activists and journalists surveilled and killed using 0days in human code.
we're going to finally purge 50 years of accumulated tech debt and complete the project of 90s cyberidealism.
Josh Stein retweeted
Friendly reminder: physical 2FA devices (ie Yubikeys) do NOT protect you when the platforms you are using them on get hacked/exploited
Yes - you should be using physical 2FA. But they protect you mostly from phishing and malware stealers, which are becoming more prevalent but not the same thing as the attacks we've seen go mainstream the past couple of weeks
Josh Stein retweeted
The world's most powerful cyber models, including Claude Mythos, are available in Devin Security Platform. We're also offering hundreds of millions of dollars in credits to use it.
If you want to defend faster than attackers, you have to find and fix flaws at machine speed. That’s why we’re building the best AI-powered security platform in the world.
Devin already helps engineering teams write more secure code, now it can secure the code they already have.
Josh Stein retweeted
In the not so distant past the biggest complaint about crypto was the UI/UX.
Now you can completely abstract away the friction of crypto and get the value without realizing it’s even there.
Link balances are powered by Tempo, rolling out today on @Instinct
Set a budget and let your agent spend without a card
Josh Stein retweeted
I wanted to test if a Solana program with no source available could be pulled from the chain and reverse engineered into a byte identical open source version
So I took the daosfun contract and did just that
Found a critical security vulnerability in the mainnet program too, oops!
All smart contracts can be perfectly reverse engineered now
There is no security by obscurity anymore
github.com/lalalune/daosfun-…
Josh Stein retweeted
This is actually a condescending view of working-class people. I grew up in a working-class immigrant family and we ate at Red Lobster and The Cheesecake Factory for "fancy nights out." But even we understood that the White House should not look like the inside of a Red Lobster. Working-class people are not culturally illiterate just because their experiences are shaped by their limited means.
Josh Stein retweeted
This delights me so very much. People using AI to take back control of devices that they bought, but were covertly designed to spy on them and harvest their data.
I'm usually reluctant to brandish my fame, but I'm gonna do it for this worthy cause. OG hacker says you're doing good! This kind of liberation is what it's all about.
Josh Stein retweeted
Jack Dorsey’s Bitchat just hit #1 on France’s App Store.
It's a bitcoin and messaging app that works without the internet.
Censorship-resistant technology matters.
Josh Stein retweeted
The PHP bug was known since 2004. Nobody patched it because no one could build an exploit. @zmanian on AI lowering the economic barrier to these attacks:
convinced some people use speakerphone in public because they don’t know which part of their cell phone goes to their ear
Josh Stein retweeted
Crypto grew up in the Dark Forest, and the entire world is about to find itself there
Josh Stein retweeted
Derive V3 started with one question: how do you scale an onchain derivatives exchange without moving settlement away from Ethereum?
Our answer was to build an application-specific rollup for derivatives, with Celestia for data availability, Succinct for proofs and Ethereum for settlement.
Why not just put everything on Ethereum?
Derive produces a lot of state, and that grows quickly with activity. Posting all of the underlying data directly to Ethereum would make scaling the exchange much more expensive.
V3 posts the data behind state changes to @celestia, while the protocol continues to settle on Ethereum.
Why does that data need to exist outside Derive?
Because V3 is designed so users can still verify their state and withdraw without depending on Derive’s API or sequencer. If the data only existed in our own database, that guarantee would be much weaker.
Celestia gives the protocol somewhere independent to publish the data needed to reconstruct and verify state, while Succinct proofs verify the updates that are ultimately committed to Ethereum.
Where does privacy fit?
We've been working with the Celestia ecosystem on a design where account data will eventually be encrypted while still giving users what they need to prove their state themselves.

































