@lopp

Insights on security, privacy, technology, money · Co-founder & Chief Security Officer @CasaHODL · creator of https://xitter.cf/t.co/q2pgFGTJZh, https://xitter.cf/t.co/xUkNreXj20

Cyberspace
Joined March 2009
🚨DEFCON 1🚨 In a few hours, a critical vulnerability that affects ~70% of web sites will be disclosed. It allows an attacker to upload and execute arbitrary code. It's probably best if you stop browsing the internet for the rest of the week. xitter.cf/ThePHPF/status/2112633…
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
134
400
87
4,292
843,093
Seeing reports of another round of snail mail social engineering letters from "Ledger" that try to trick you into scanning a QR code that takes you to software that steals your seed phrase.
70
8
1
47
8,195
Today is a good day to instruct your clanker to rewrite your PHP app in Rust.
12
15
3
153
12,880
Anyone who has been maintaining internet-facing infrastructure for the past 3 months: xitter.cf/ThePHPF/status/2112828…
Replying to @ThePHPF
If you rely on the volunteer maintained rpms.remirepo.net we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.
2
6
1
92
8,086
Since morons are noting my post, claiming that it's only a server side issue that doesn't affect clients, here's why interacting with compromised servers is A BAD IDEA:
7
57
6,943
Seems like the only thing I ever randomly win is enhanced screening by TSA.
16
86
14,261
October is Cybersecurity Awareness Month. Remember: the less data you share with online services, the smaller your attack surface and safer you are!
15
9
105
15,646
Jameson Lopp retweeted
The sovereign individual predicted this.
Dior had no faith in the French police to protect their store so they brought in their own security team to protect the flagship store in Paris tonight
5
20
179
13,994
We got flying cars before we got Half-Life 3 🥲
15
3
82
18,374
Pretty amazing how it's possible to cram more courage than the entire Uvalde police department into a single man. xitter.cf/CollinRugg/status/2111…
JUST IN: The man who stopped the school shooting in Bend, Oregon, has been identified as 36-year-old Kalub Giamanco. Giamanco, a carpenter, was reportedly driving home for lunch when he heard gunshots. After hearing the gunshots, Giamanco, who has a concealed carry permit, followed the suspect into the school. He then shot and killed 16-year-old John J Griffin moments after the teen opened fire into a special education classroom. Giamanco, who has two children of his own who attend the school, is family friends with one of the victims, a 7-year-old who uses a wheelchair and was shot in the face. The 7-year-old survived and is in the hospital. Three children at Silver Rail Elementary School were killed. Their ages are 5, 8, and 11. According to Giamanco's brother, Giamanco doesn't feel like a hero because he feels guilty for not being able to save more children. You are a hero, Kalub.
5
16
270
18,662
Good news: the Bitcoin Wrench Attack archive just got a lot more accurate. Bad news: we just doubled the total number of known attacks to over 700. Kudos to @pizza_bitcoiner for finding hundreds of new attack reports via agentic searches. jlopp.github.io/physical-bit…
37
39
8
330
49,534
More evidence you can't trust anyone with your personal data. 9 million people had their records leaked because some fool set an admin password to "123456" en.cryptonomist.ch/2026/10/1…
18
14
1
93
9,608
Jameson Lopp retweeted
WELCOME TO SLOPPYWOOD 🎙️🧡
115
242
72
1,237
195,831
No, I'm not worried that the future of self custody is in peril simply because a bunch of edge case attacks and vulnerabilities I've been warning people about finally started happening in a short time span. This is vindication for a decade of grinding @CasaHODL
26
14
2
272
17,371
Jameson Lopp retweeted
Resilience > Security
3
3
32
4,703
Compromised crypto hardware is nothing new. We've seen them as far back as 2018 with counterfeit Trezor One devices being sold. @CasaHODL's security model has protected our clients against supply chain attacks since inception: docs.casa.io/wealth-security…
12
2
1
94
11,544
My advice would be to stop bragging about how much money you make trading memecoins. Stop flexing your wealth on social media. You screamed for attention and you got it. Attention comes at a cost few are prepared to pay. xitter.cf/rrealist/status/210981…
Replying to @rrealist
three knifes to my face saying they were gonna kill me, $40k from my main wallets $720k from one of my ledgers, rolex, took my phone and smashed it up. with police now, my whole house is a crime scene, im in so much fucking shock i acc dont know what to do. You always hear about these things but never think it will happen to you. beyond grateful i wasnt stabbed or injured physically aside from a few bruises, stay safe man. fuck this uk, so many poor people wishing on your downfall.
25
15
2
279
24,768