Pinned Tweet
π¨ WARNING (AGAIN)
DPRK threat actors are still rekting way too many of you via their fake Zoom / fake Teams meets.
They're taking over your Telegrams -> using them to rekt all your friends.
They've stolen over $300m via this method already.
Read this. Stop the cycle. π
rip everyone (again)
An urgent notice from the Railway team
blog.railway.com/p/security-β¦
This timeline is an ambulance chasing lawyers wettest fucking wetdream π«
07:24: Railway builds are paused
09:28: Railway API + CLI + Dashboard + builds are paused
(lots of "we're still offline" updates here)
19:36: First known crypto theft transaction
21:11: Postiz is like "I'm out, Stripe + Ant are notifying us that our keys are rekt."
21:51: Railway actually announces security incident, tells people to rotate keys
lol austin is getting funding weak keys to get them drained live lol
everything is fine
π
eMudhra's Cracked Keys and Papertrade's PAPER Token xitter.cf/i/broadcasts/1PJqrNODQβ¦
Tay π retweeted
"They do not seem to be related ... I think over the coming weeks, we will see a series of trickle ons for each of these," @tayvano_ on the eMudhra and PHP debacle
xitter.cf/i/broadcasts/1dxYlaEDaβ¦
eMudhra's Cracked Keys and Papertrade's PAPER Token xitter.cf/i/broadcasts/1PJqrNODQβ¦
Tay π retweeted
.@kain , @tayvano_ , and @austingriffith dig into eMudhra's keys, which researchers recovered from public certificates in under a second, plus Papertrade's PAPER token and DeepSeek's new model. Live today at 4pm ET.
Tay π retweeted
Replying to @bubbling_creek @tayvano_
PHP people playing 5d chess to get free audits lmao
This might be a stupid question butβ¦.
given the discovery last weekβ¦.
and that it started leaking 12+ hours agoβ¦..
why werent the php patches ready to be dropped as soon as the vuln / poc fully leaked?
why is everyone okay arbitrarily waiting another 12 hours to patch?
Cloudflare: We recorded a wall of 100+ lava lamps with cameras to generate unpredictable, maximum-entropy cryptographic seed data.
Meanwhile Certificate Authorities:
Tay π retweeted
Replying to @jconorgrogan @tayvano_
back in my day we individually went person-to-person if we identified lost funds, as DRPK and/or hackers generally have most of the funds in these sorts of situations, and wanted to minimize the potential of tipping them off





















