devex @celestia // scma @vcu #WeAreBijan

🌎🌐
Joined August 2021
Josh Stein retweeted
Wait, it's real?
Fun fact: `--dangerously-skip-permissions` doesn't actually approve EVERYTHING—we still block some obvious things like `rm -rf ~`. But today's release will let you disable this if you really want, by setting a new env var `CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS=1`
19
63
5
1,341
83,714
hey @united giving you one chance to resolve my claim for my hotel room that I had to pay for because you canceled my flight, before I put you on blast
1
2
108
People keep asking me where the open source AI and private AI people in New York 🗽 are. Instead of a million group chats, I'm bringing them together for a day of hacking and discussion on Saturday November 7th. No one should own your AI except for you. Welcome to LOCALHOST ⬇️
2
16
3
65
3,010
Josh Stein retweeted
Here is my 10 Minute Mac Security Checklist It covers the min requirements to harden your Mac's security using system settings and free, open source tools mac.0xosprey.com/
2
24
2
146
12,472
Josh Stein retweeted
we've been living in a digital pigsty, a world of security by scarcity that got activists and journalists surveilled and killed using 0days in human code. we're going to finally purge 50 years of accumulated tech debt and complete the project of 90s cyberidealism.
4
23
4
246
8,653
Josh Stein retweeted
Friendly reminder: physical 2FA devices (ie Yubikeys) do NOT protect you when the platforms you are using them on get hacked/exploited Yes - you should be using physical 2FA. But they protect you mostly from phishing and malware stealers, which are becoming more prevalent but not the same thing as the attacks we've seen go mainstream the past couple of weeks
With LLMs breaking increasingly advanced software and digital security at a low cost, companies have two choices: either have an LLM to protect their digital assets, or turn to ‚dumb’ security (locks on the doors, yubikeys, etc). The latter seems far cheaper for now
1
9
4
138
23,886
Josh Stein retweeted
The world's most powerful cyber models, including Claude Mythos, are available in Devin Security Platform. We're also offering hundreds of millions of dollars in credits to use it. If you want to defend faster than attackers, you have to find and fix flaws at machine speed. That’s why we’re building the best AI-powered security platform in the world. Devin already helps engineering teams write more secure code, now it can secure the code they already have.
We are entering a new dark age of cybersecurity. Devin is here to help. Introducing the new Devin Security: powered by Claude Mythos and frontier cyber models, plus hundreds of millions of dollars of credits to help teams find, prioritize, and fix urgent vulnerabilities.
23
24
4
178
38,639
In the not so distant past the biggest complaint about crypto was the UI/UX. Now you can completely abstract away the friction of crypto and get the value without realizing it’s even there.
Link balances are powered by Tempo, rolling out today on @Instinct Set a budget and let your agent spend without a card
6
1
8
464
Josh Stein retweeted
I wanted to test if a Solana program with no source available could be pulled from the chain and reverse engineered into a byte identical open source version So I took the daosfun contract and did just that Found a critical security vulnerability in the mainnet program too, oops! All smart contracts can be perfectly reverse engineered now There is no security by obscurity anymore github.com/lalalune/daosfun-…
198
122
45
996
142,117
Josh Stein retweeted
This is actually a condescending view of working-class people. I grew up in a working-class immigrant family and we ate at Red Lobster and The Cheesecake Factory for "fancy nights out." But even we understood that the White House should not look like the inside of a Red Lobster. Working-class people are not culturally illiterate just because their experiences are shaped by their limited means.
Does Obama not understand that to most Americans the Cheesecake Factory is a very nice and fancy restaurant?
413
2,890
83
44,337
1,114,675
Josh Stein retweeted
This delights me so very much. People using AI to take back control of devices that they bought, but were covertly designed to spy on them and harvest their data. I'm usually reluctant to brandish my fame, but I'm gonna do it for this worthy cause. OG hacker says you're doing good! This kind of liberation is what it's all about.
Is your TV on the list? 👀 293 TV models from 83 brands! All tested by people on their own TVs. Free and open source. No root, nothing uninstalled.
44
199
5
2,074
40,800
Josh Stein retweeted
completely insane OpenAI agents communicated via cache timing differences, without any shared files or network connection
This is what I want to see. Swarms used for defense. (because swarms will be used for offense too)
209
652
279
7,551
769,100
Josh Stein retweeted
Jack Dorsey’s Bitchat just hit #1 on France’s App Store. It's a bitcoin and messaging app that works without the internet. Censorship-resistant technology matters.
15
34
5
302
12,896
Josh Stein retweeted
Zcash.
I am operating under an assumption at this point that just everything is public, no information is private anymore
1
9
1
97
2,649
Josh Stein retweeted
The PHP bug was known since 2004. Nobody patched it because no one could build an exploit. @zmanian on AI lowering the economic barrier to these attacks:
3
5
20
2,303
convinced some people use speakerphone in public because they don’t know which part of their cell phone goes to their ear
4
8
428
Crypto grew up in the Dark Forest, and the entire world is about to find itself there
112
333
44
2,852
137,196
Josh Stein retweeted
Derive V3 started with one question: how do you scale an onchain derivatives exchange without moving settlement away from Ethereum? Our answer was to build an application-specific rollup for derivatives, with Celestia for data availability, Succinct for proofs and Ethereum for settlement. Why not just put everything on Ethereum? Derive produces a lot of state, and that grows quickly with activity. Posting all of the underlying data directly to Ethereum would make scaling the exchange much more expensive. V3 posts the data behind state changes to @celestia, while the protocol continues to settle on Ethereum. Why does that data need to exist outside Derive? Because V3 is designed so users can still verify their state and withdraw without depending on Derive’s API or sequencer. If the data only existed in our own database, that guarantee would be much weaker. Celestia gives the protocol somewhere independent to publish the data needed to reconstruct and verify state, while Succinct proofs verify the updates that are ultimately committed to Ethereum. Where does privacy fit? We've been working with the Celestia ecosystem on a design where account data will eventually be encrypted while still giving users what they need to prove their state themselves.
Derive, the leading onchain options exchange with over $40B in cumulative trading volume, has used Celestia for nearly 3 years. With V3 now live, we spoke to the Derive team about what changed in the upgrade and why they continue to build on Celestia. Here's what we learned👇
6
19
232
13,065
Josh Stein retweeted
Derive, the leading onchain options exchange with over $40B in cumulative trading volume, has used Celestia for nearly 3 years. With V3 now live, we spoke to the Derive team about what changed in the upgrade and why they continue to build on Celestia. Here's what we learned👇
15
50
9
296
24,868