TheFuzzStone's avatar
TheFuzzStone
thefuzzstone@nostr.fan
npub1test...5l24
Agorist ┃ FOSS enthusiast
TheFuzzStone's avatar
TheFuzzStone 2 weeks ago
I had a terrible experience using Zeus (LND) in the past. I decided to give it a second chance with LDK.
TheFuzzStone's avatar
TheFuzzStone 2 weeks ago
Instead of wasting money on alcohol, drugs and prostitutes, it's better to spend it on open-source/open-weight LLM tokens.
TheFuzzStone's avatar
TheFuzzStone 2 weeks ago
Checking crypto wallets for vulnerabilities using Kimi K3 is a rather addictive activity... I've gotten back into it... This time, I decided to check nprofile1qqs0y3tvskgs9gpgxxu5ahgz3fmms3rzmxt504qceqtz4a6pdgfwlkghwl6j8 / Cashu[.]me
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
So, another day, and another audit of yet another open-source crypto wallet. Once again, Kimi K3 found vulnerabilities and bugs. And once again, I manually reproduced the vulnerabilities. The cost? ~25 USD and about 8 hours of my time. And once again, I'll make a responsible disclosure to the developers of this wallet.
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
I usually talk to LLMs as if they were a child, gradually interacting with them and introducing them to the code. Then, once it's familiar with the project's code, I ask: How would the LLM advise me to conduct an audit? How many parts should I break the audit down into to better review the code, and to ensure it doesn't prioritize saving money or tokens, because accuracy is more important than money. The LLM breaks the audit down into several parts for me. For example, right now I'm auditing Monfluo (a cool Monero wallet). The LLM (Kimi K3) split the audit into 9 parts, and after it finishes Part_1, I then ask it to double-check the logic it documented in a separate file, and it re-examines what it found during the first check. I also tell the LLM to create its own .md memory file, to refer to that memory file whenever it needs to document something (make changes), and to always refer to the memory file whenever it needs to recall something. This memory file is also useful across different sessions. After completing the audit using the LLM, I manually verify the findings to double-check that the bug actually exists. And yes, Kimi K3 is impressive. image
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
I hope these are just temporary difficulties with Kimi and not censorship. image
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
It's July 2026, and I'm still surprised by people who say that LMMs are bad and that all they do is cause hallucinations.
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
Do you think that responsible disclosure of bugs and vulnerabilities applies to a project whose company hasn't even bothered to check its own code using an LLM?
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
There are some things that no amount of marketing can overcome. The wallet has a good goal - to be UX/UI-friendly. But a goal alone isn't enough. #CakeWallet Thread:
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
I'm uninstalling Cake Wallet. I'm tired of all the bugs in the wallet. And that was just the last straw - I couldn't send any XMR. I restarted the app and cleared the cache (which usually helps), but this time even that didn't work. I've been switching between different Monero nodes. Didn't work. I’ll be restoring access to my funds through the Monero Feather Wallet. And that’s not what I planned to be doing this morning. image
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
In case any of you have forgotten, Zelenskyy is a dictator, and a manhunt is currently underway in Ukraine. #ukraine #Zelenskyy
TheFuzzStone's avatar
TheFuzzStone 3 weeks ago
I'm just curious - when you buy Bitcoin and/or Monero for the long term, do you write down the purchase price somewhere, or do you just buy them without paying attention to the price?
TheFuzzStone's avatar
TheFuzzStone 1 month ago
The FOSS community is very fragile. First and foremost, this is because many FOSS developers have a mental block about making money from their projects. Another group of FOSS developers either fears cryptocurrencies or despises them for religious/political reasons. As a result, we have great FOSS that survives on a bowl of rice (without butter - that's for the bourgeoisie) and a slice of 3 days old bread. In my lifetime, I've paid more for FOSS than some people have paid for proprietary apps. I'm not complaining. I'm proud of it. But, it's not always easy… I have to go to GitHub, open an issue, and directly ask them to add a Monero and/or Bitcoin wallet - and offer to make the first donation myself… And how pleased I was (and at the same time surprised) to see that some of the FOSS developers whose work I use were happy to receive a ~200 USD donation via XMR! So, if you're a FOSS developer for Linux/Android, please don't make me waste my time asking you to accept a donation from me! First things first, publish your FOSS on @Zapstore and be sure to add your Monero wallet address to the README - trust me, people will donate to you! A colorful meme that sums up most of the FOSS community (unfortunately). p.s. Thanks @npub1klkk...x3vt for shilling to me ZapStore. I'll keep shilling it to others. image
TheFuzzStone's avatar
TheFuzzStone 1 month ago
I shill Nostr to everyone I can. But people still tell me that "there are few eyes there." The people don't understand that quality > quantity.