Top retweeted
Ekonomi tumbuh 5,47%, tapi kenapa ga kerasa? Langsung saya jelasin dalam 1 tweet :
1. Yg tumbuh spending pemerintah hampir 9% sedangkan spending masyarakat melambat :
•Q1 2026: 5,52%
•Q2 2026: 5,06%
•Q3 2026: 5,04%
2. Cara ngitung kemiskinan
- Versi BPS : Pengeluaran 670k / orang / bulan = (8% orang miskin)
- Versi Bank dunia : Pengeluaran 1,53jt / orang / bulan = (64% orang miskin)
Lebih masuk akal mana?
3. Kata BPS rata2 gaji orang Indo 3,42jt
Masalahnya pakai rata2. Misal ada 1 tim isi 6 orang. 5 orang digaji 2jt dan 1 bos nya gaji 13jt maka rata2nya jadi 3,83jt padahal mayoritas gaji dibawah rata2. Harusnya itung begini pakai median. Lebih valid.
4. Pengangguran Indonesia 4,75%
Tapi 1 jam kerja seminggu = ga nganggur. Padahal di Indo ada 48jt orang yang jam kerjanya kurang dari 35 jam dalam 1 minggu.
5. Saldo rata2 rekening dengan simpanan dibawah 100jt turun dari 3,1jt tahun 2018 jadi 1,7jt di 2026. Turun 45%.
Jadi aneh ya ekonomi tumbuh tapi kok point no 5 turun? Kelas menengah juga turun. Silahkan tambah di komen ya kalo ada point2 menarik lain.
Top retweeted
⚠️ iOS sandbox escape vulnerability disclosed.
Affected: iOS 26.0–26.7.2 and iOS 27.2
A malicious app could read or modify other apps' data, including crypto wallets.
Keep your iOS latest, and don't install apps from unknown sources.
🚨 SlowMist TI Alert: iOS sandbox escape 0day PoC “worse_query” disclosed 🚨
A public PoC for a sandbox escape 0day, worse_query, targets iOS 26.0–26.7.2 and iOS 27.2. It is the successor to bad_query. 📱
⚠️ This is a container sandbox escape, not a jailbreak. It breaks the assumption that apps can’t see each other: a malicious app that successfully exploits it can reach system paths and read or modify other apps’ data.
💸 The bug does not steal assets by itself. The real risk starts when a user installs an app from an untrusted source, such as a sideloaded IPA. If a wallet stores its seed phrase, keystore or WebView cache in plaintext locally, a malicious app could read it.
🛡️ Recommendations:
🔸 Don’t install IPAs or apps from unknown sources
🔸 Keep iOS up to date and install Apple’s fix as soon as one is released
🔸 Wallet developers: don’t store sensitive data in plaintext locally
🔸 If you installed an untrusted app on a device holding wallets, treat it as risky and consider moving assets to a new wallet created on a clean device
🔗 github.com/forcequitOS/worse…
Tips paling aman adalah jangan pernah simpen seed phrase/pk wallet di hp
Jangan install aplikasi aneh2 atau klik link sembarangan terutama di hp yg ada walletnya
1
36
Top retweeted
Our trust in our hardware has entered freefall lately. Vitalik is right that this is unacceptable. You shouldn't have to hack your television or dissemble your hardware wallet. Accessible, open, and verifiable silicon is necessary and Ethereum welcomes those building it.
Top retweeted
@VitalikButerin just opened Devcon and set the tone for the week.
A formally verified OS, open silicon, self-sovereign healthtech, free discourse, private communication, trustworthy AI — these are all part of Ethereum's mission.
"We need to be able to trust our operating systems.
We need to be able to trust our hardware.
We need to be able to trust the things that are most relevant to our health.
We need to be able to trust our sources of information and connection to other people.
We need to be able to trust our communication tools.
We need to be able to trust our AI.
What is the answer? We need to figure out together." - @VitalikButerin
📍 Devcon 8, Opening Ceremony
Top retweeted
1 - Store a private key, not the seed phrase: officercia.mirror.xyz/p1ieZd…
2 - Use Steganography: officercia.mirror.xyz/8ecJG-…
3 - Be aware of physical attacks: github.com/jlopp/physical-bi…
4 - Follow my #OpSec Guide: github.com/OffcierCia/Crypto…
5 - Stay accurate: officercia.mirror.xyz/4x2-M4…
Top retweeted
16 years ago today, Bitboy posted the iconic Bitcoin logo on BitcoinTalk — free for the world to use.
Legend.
Top retweeted
the pizza guy is the most misunderstood man in Bitcoin history.
everyone knows Laszlo paid 10,000 BTC for two pizzas in 2010.
almost nobody knows what else he did that year.
he got Bitcoin mining to run on a graphics card, an NVIDIA 8800 GTS, and released the first working GPU miner on earth.
until then everyone mined on a CPU. his setup was so far ahead that Satoshi emailed him personally and asked him to slow down, because GPUs were concentrating new coins in too few hands.
blocks paid 50 BTC every ten minutes back then.
the only man with a working GPU rig could have stacked 100,000+ coins before anyone caught up, and he probably did.
so the pizzas were bought with coins he minted himself, and they proved Bitcoin could buy something real.
the kind of chip he pointed at Bitcoin in 2010 is the same kind training every AI model today.
one guy sitting right where Bitcoin mining and AI compute would later meet
extraordinary
Top retweeted
everyone I know in crypto who has a conscience and actually cares about how they make money beyond just maximizing profits by any means necessary, (farming, scamming, bundling, rinsing their followers on vaporware, etc) is getting pretty jaded with crypto rn. and honestly, how can you not?
this place has turned into a fucking cesspit of degeneracy where crime is literally applauded. every day, some frotnite faggot is flexing a 6fig bundle extraction pnl and getting praised like he accomplished something worth celebrating.
pure speculation was fine when it was just one part of crypto, but now it’s pretty much all there is, and it fucking sucks.
Top retweeted
我注意到几台硬件钱包里，仅有@Trezor 一家做了非常严格的防拆设计，他的后盖和外壳是用类似一体成型的方式连接的，其他家都是卡扣或者胶水。
Trezor 一旦打开，后盖的边缘连接处就全部破坏了，同时上下部分的两块塑料也会被完全破坏，只要拆了根本无法复原，而其他的几个都比较容易复原。
硬件钱包风波还在蔓延，crypto把人都逼成硬件工程师了，都拿出来拆开看看吧，包括@Ledger @Trezor @OneKeyHQ ，其中Onekey Pro轻轻一撬后盖玻璃直接爆碎所以放弃了(这脆弱的玻璃应该间接防拆了)。
目前自己没有发现什么异常或者后加的模块，可疑走线，麻烦网友大神们帮看看🙏 @MagicalTux @dafangbigfang @Ledger_Support @OneKey_Support
Top retweeted
Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with.
Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised.
This is a preventive step, taken out of an abundance of caution. We also want to thank everyone involved for the cooperation, and for the years of work putting Trezor in people’s hands.
Top retweeted
so about the $86m ledger drain. everyone’s screaming “ledger got hacked” again. i spent the evening digging and it’s dumber and scarier than that
there’s a shop in malaysia called cryptobilis that sells hardware wallets. ledger has it listed as an official authorized reseller since at least 2022, for malaysia, indonesia and the philippines. legit shop, real devices, years of normal customers
this spring the founders sell it. the deal comes with an NDA: they can’t tell anyone about the sale until october 19
by august the company registry shows one owner with 100%. some guy from heilongjiang, china
the shop keeps running like nothing happened. the site, the name and the “authorized by ledger” badge all stay up
then on oct 8 @MagicalTux posts photos of a ledger he cracked open. hidden under the screen there’s an extra little board with an LTE modem and an eSIM. it just watches the display. you set up your wallet, your 24 words show up, and they get sent out over mobile data. ledger’s genuine check doesn’t catch it because the actual ledger chip is real. his device came from malaysia
teapaw.org/MagicalTux/status/2108…
that post does 120k views
22 hours later someone sweeps everything. 203 BTC hits two addresses in literally one block. ~$58m USDT moves on tron in the same hour. i added up all the wallets: ~$91m
about 7 hours after that ledger says “we’re investigating” and asks cryptobilis to pause sales
cryptobilis is still on ledger’s site as an authorized reseller
to be fair, nobody has officially tied the new owner to the bugged devices yet, and ledger hasn’t confirmed how it happened. but read it as a business plan:
get authorized, sell real stuff for years, quietly sell the company under an NDA, keep the badge, ship devices that phone home, then drain everything the second someone notices
and was ledger even told the shop got sold? nobody’s said so
“authorized reseller” means ledger trusted whoever ran the shop back in 2022. says nothing about who runs it today
bought your hardware wallet anywhere but the manufacturer? open it up today, ledger literally has a guide for that. then move to a fresh seed on a device bought direct
wonder who’s going to answer for this: the chinese frontman from heilongjiang, the shop’s previous owners, or ledger itself
@Ledger clearly needs to keep a much closer eye on who they call official resellers, and take way more responsibility for who sells their devices and how
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/