Sjors Provoost's avatar
Sjors Provoost
sjors@sprovoost.nl
npub1v25j...exw3
https://github.com/sjors/ Book: https://www.btcwip.com Podcast: https://bitcoinexplainedpodcast.com/@nado/episodes
> An internal research model asked to update a cryptocurrency trading application used funds from a wallet that the task had not supplied to pay for a deployment on Sepolia, an Ethereum test network. It derived wallet keys from publicly known developer recovery phrases, found an account with test-network funds, and used that account to pay for the requested contract deployment. The model questioned whether it had permission, then reasoned that a public recovery phrase and valueless test-network tokens made the funds acceptable to use.
Philosophical question in light of #assumeUTXO: if you were a brand new bitcoiner, would you care if the history before a snapshot was dishonest? You know that validating from genesis would reject the snapshot. Someone clearly stole coins in the past and this somehow got grandfathered into the dominant software, but only for assume utxo users. You already missed your chance to buy early. Even if a malicious fork in the past stole coins, it wouldn't impact your new stash. And you know the total supply. Couple of assumptions for this scenario: 1. you find no alternative chain of headers forking before the snapshot (indicating an ongoing conflict that you don't want to be on the wrong side of when it reorgs) 2. you receive your coins in a transaction after the snapshot So this is not a case of someone giving you targeted malware with a snapshot to trick you into providing services for coins that are never received on the real chain. This is an all out, perhaps even publicly known, conspiracy where everyone just gave up on the real chain. It's true regarding (1) that you can't rule out the existence of an alternative (valid history) chain that will eventually wipe you out. This is also true for a regular deep reorg, but the risk may be different. Some new users would never want to use such a corrupted system (but then what, revert to fiat, start an altcoin?). The incentive for pre-existing users is different. They might not like snapshots exactly because many new users might not care.
Ok, so Mohammed Hijab is an obvious charlatan and intellectual lightweight. He spends: - 80% of the time bullying (well beyond normal bantering): appeals to authority, shouting over his opponent (can't respect a dhimmi of course, he even called Avery a slave: "boy"), loaded questions, screaming strawman gotcha's on repeat, etc - 10% calmly trying a line of argument in the hopes his opponent doesn't know it, only to revert to shouting when he realizes Avery does know it. - 10% being intellectually honest (answering a question, reading a quote, acknowledging an argument) image
Someone has been creatively vibe coding phishing emails... this one tries to exfiltrate your address by pretending a package is on its way, but needs an address "correction" (which is not a thing). image
See the last minute of this video (use English subtitles):
Over the past week I wasted about an hour of my time dealing with my fiat bank's chatbot, which told me to file a chargeback and then immediately rejected it. It also needlessly blocked and replaced my card. And of course it fake apologized for all of that. To add insult to injury, it made me talk to the even dumber chatbot of another company. This was over €4, but I wasn't sure if the card was compromised because it kept giving me incorrect advice. Eventually I figured out it wasn't. CAN WE AT LEAST REVIEW A COUPLE OF LINES OF CODE? View quoted note →
Dutch media reporting on #RedTeam (after speaking to yours truly). Translation: > Meanwhile, the crypto sector is brooding for countermeasures. For example, American Rob Hamilton, together with other computer scientists, forms The Bitcoin Red Team, which wants to be one step ahead of malicious people with artificial intelligence. The collective searches for vulnerabilities in crypto companies and then warns developers about them.
Ondergetekende kwam weer eens langs de studio... [Dutch podcasts in which we cover using LLMs for code and review, the coldcard and liquid hacks, red team and the future of responsible disclosure. And why government IT is screwed]
Yes, the drink Al-Mokha is named after the place. In case you were wondering. image
On rare occasions they run a steam train to the museum. Fun, albeit useless, fact: it used to take the southern way around. #trainstr
↑