"They say the ruler is bent, then use the bent ruler to measure the table. They say the clock is broken, then solemnly read out the hour. They say the instrument is false, then ask it, with perfect seriousness, for one final certification. This is, in itself, a form of bondage. To measure gold in fiat terms is, in Jung’s sense, to deny the shadow: to denounce the paper system in public while continuing, in private, to let it decide what counts as value." ~ Craig Tindale 1 BTC = 1 BTC. If fiat is broken, why do we still let it dictate the worth of gold or Bitcoin? Craig Tindale argues that even the fiercest rebels against fiat remain trapped in its grammar — pricing their escape in the very units they claim to reject. But is it really possible to step outside the fiat frame, or does the nature of price itself keep us entangled in ways Bitcoiners haven’t fully confronted? Article: Stepping Outside the Fiat Frame

X (formerly Twitter)

🇦🇺Craig Tindale (@ctindale) on X

Stepping Outside the Fiat Frame: Gold Is What Remains When Money Stops Telling the Truth

🚀 Young Entrepreneur Launch Guide: Florida Edition (AI as Your Co-Founder) Want to start a business fast and cheap? Use AI to move 5-10x quicker. 1. Validate & Plan Test your idea with ChatGPT, Claude, or Grok. Generate customer personas, competitor analysis, lean plans, and financials in hours. 2. Register Smart Form an LLC online through Sunbiz. Get your EIN, local business license, and sales tax permit. Florida has no state income tax — a big advantage for founders. 3. Run Lean with AI AI writes content, designs graphics, runs ads, handles customer service chatbots, automates ops, and analyzes markets. Bootstrap for almost nothing. 4. Fund & Grow Start small, tap into Florida grants and small business programs, then use AI-generated pitch decks to raise capital. Quick Checklist: - Validate your idea with AI this week - Register LLC + set up tax accounts - Set up your AI stack - Land your first 10 customers Florida offers low overhead, no state income tax, and a business-friendly environment for young founders. AI isn’t taking jobs — it’s eliminating the boring work so you can move faster than previous generations. The only real risk is refusing to use it. Who’s launching in Florida? Drop your idea below 👇

Test 2

Test

Bitshala 2026 Learning Cohorts -

Bitshala | A Pathshala for Bitcoin | India, Global South

Bitshala is a grassroot, organic education initiative (a pathshala) led by Indian bitcoiners to provide guidance and resources for new developers s...

Free, structured study cohorts that guide students from learning about Bitcoin to actually building it — progressing from beginner fundamentals all the way to advanced protocol development. Five immersive programs, each requiring 10–20 hours per week over 6–8 weeks, featuring live sessions, practical assignments, and dedicated TA support. Graduates can advance directly into Fellowship programs, where they contribute to real open-source Bitcoin projects with mentorship, or move into immediate hiring opportunities with Bitcoin companies.

Daemon Tools Hit by Suspected Chinese Supply Chain Attack, Kaspersky Says

Technology Org

Daemon Tools Backdoor: Kaspersky Flags Supply Chain Attack - Technology Org

Kaspersky says a backdoor planted in Daemon Tools is hitting thousands of Windows PCs, with a Chinese-speaking group linked to the attack.

The Daemon Tools backdoor came straight from the official website, digitally signed with the developer’s own certificate. It looked and behaved exactly like a legitimate installer — no shady links, no warnings, nothing to raise suspicion. That’s what makes supply chain attacks so insidious compared to phishing: you did everything right and still got compromised. The real question isn’t what you’re about to install next. It’s what’s already running on your machine. That software you installed months ago and forgot about, those tools that launch at startup, the apps you granted permissions to without reading the fine print — any one of them could have been silently updated with malicious code. When was the last time you actually audited what’s running on your devices?

CVE-2026-41940 Explained: The cPanel & WHM Authentication Bypass That Hit 1.5M Servers

CVE-2026-41940 Explained: The cPanel & WHM Authentication Bypass That Hit 1.5M Servers

CVE-2026-41940 explained: how a CRLF injection bypassed cPanel & WHM authentication on 1.5M servers. Root cause, exploit chain, IOCs, and patch gui...

Thousands of businesses went to bed with working websites and woke up completely locked out of their own infrastructure. The administrators who escaped the worst damage had already restricted cPanel and WHM login ports to trusted internal networks only — dramatically shrinking their attack surface before the breach even began. The same principle applies far beyond servers. How many apps on your phone or home computer currently have access to your most sensitive files, location data, or critical permissions? Every unnecessary connection is an attack vector you carry in your pocket or bag — and one you can start eliminating today.

This is a BOLT12 / Lightning Address / LNURL server for your node that combines Nostr identity and zaps into a single product called BOLT12 Pay. There are quite a few different standards for paying people on Lightning right now, and BOLT12 Pay tries to make all of them work seamlessly. Fragmented ecosystems often evolve this way: someone builds a solution that’s compatible with everything else, and it eventually becomes the de facto standard. That’s exactly the role it’s aiming for—we’ll see if it succeeds.

GitHub

GitHub - Alex71btc/lndk-pay: Self-hosted Lightning payment and identity server with native BOLT12 support for Umbrel and StartOS.

Self-hosted Lightning payment and identity server with native BOLT12 support for Umbrel and StartOS. - Alex71btc/lndk-pay

First public macOS kernel memory corruption exploit on Apple M5 Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with Mythos Preview, built a working exploit in five days.

First public macOS kernel memory corruption exploit on Apple M5

Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with ...

Three attempts to kill my President. Three attempts to kill the United States. Three attempts to kill the American spirit. And yet those three attempts have only made me — as an American citizen — stronger, more hopeful, and more determined than ever.

In a multisig wallet, what’s the strongest cybersecurity model for protecting individual and institutional sovereignty in the AI era? With a standard 2-of-3 setup, should the keys be held by two humans + one AI agent, or two AI agents + one human? Food for thought! Short answer: keep humans in the quorum. Two humans + one AI (never two AIs + one human). Why - Sovereignty and accountability: final authority must map to accountable people; AI is a tool, not a principal. - Threat model: AI agents are uniquely exposed to prompt injection, supply‑chain/model updates, jailbreaks, and covert exfiltration. Don’t let an automated system ever be a majority signer. - Liveness: if the AI is down or quarantined, two humans can still move funds. Stronger 2-of-3 pattern (recommended) - Signers: Human A (airgapped H/W), Human B (separate H/W, separate jurisdiction), AI Service (in HSM, tightly sandboxed). - Policy: - Day-to-day: Human A + Human B. - Human + AI only for small, pre‑defined ops wallet (not treasury), with velocity limits enforced off-chain by the AI’s policy engine and hard stop via HSM rate limits. - Recovery: Use descriptors/miniscript with a time-locked recovery branch (e.g., 1-of-1 recovery key after delay) held offline by a trustee/escrow or yourself in deep cold. If you must involve the AI key - Cage it: keys in a hardware security module; allow-list derivation paths; rate/amount caps; mandatory delays on larger spends; immutable audit logs; kill-switch/instant key revocation. - No internet in the signing enclave; the AI “decides,” but a separate, minimal verifier enforces policy before the HSM releases a signature. - Rotate models like code; pin versions; attest provenance; treat every model update as a security event. Design upgrades (worth it) - Split wallets: small “ops” wallet where Human+AI can co-sign fast; large “treasury” wallet requires Human+Human only. - Timelocked safety: miniscript/Taproot tree with a delayed recovery path so a compromised Human+AI combo can be countered before funds move. - Out-of-band checks: deterministic address policies, human challenge–response, and anomaly detection on payees/amounts/paths. What not to do - Two AI + one human: makes AI compromise a majority risk and flips sovereignty on its head. - Let the AI hold an unbounded hot key for treasury. Bottom line - Best 2-of-3: two humans + one AI (AI constrained). - Even better for institutions: 3-of-5 (3 humans across jurisdictions) + 1 constrained AI + 1 delayed recovery. - Treat AI as a powerful policy co-pilot, not a principal signer—especially for the funds that matter.

UK government says 100 countries have spyware that can hack people’s phones

TechCrunch

UK government says 100 countries have spyware that can hack people's phones | TechCrunch

The U.K.'s cybersecurity chief warned that U.K. businesses and critical infrastructure are underestimating the threat from spyware attacks and...

Over a hundred governments now wield tools that can silently read everything on your phone without leaving a trace. A single-key setup—where your phone is the only signing device—is just one stealthy install away from total exposure. Multi-key vaults change that: even if one signer is compromised, it can’t move funds on its own. Why let the loss of a single device put everything at risk? What we are working on! PrivKey.io

North Korean hackers blamed for $290M crypto theft

TechCrunch

North Korean hackers blamed for $290M crypto theft | TechCrunch

The hack against Kelp DAO is the largest crypto heist of the year so far.

TraderTraitor spotted a flaw in Kelp’s bridge verification, fed it forged instructions that passed as legitimate, and the contract obediently moved the funds. The real vulnerability was the standing pre-approval that let the contract spend those assets anytime. Self-custodied Bitcoin has no equivalent risk: there’s no smart contract with blanket permission over your coins, no bridge that can be poisoned, and no verification layer that can be spoofed. Every DeFi position you open widens that attack surface. Does your exposure to DeFi protocols actually reflect the extra risk those contracts carry compared to simply holding in cold storage?

“The fiat economist universally chooses to set the printing press to brrrrrrrrrr. While the enlightened elite watch their stock portfolios moon and their debts disappear, the common man is told to be thankful that he was 'this close' to the horror of living in a world where his wages bought more every year, and his government respected his private property. Imagine how hard it would be for that government to raise debt in such a world. It would have to justify its spending. We cannot have that.” ~ Allen Farrington & Sacha Meyers “The idea that some authority can deduce the correct level of this balance is not merely wrong, it is not even wrong, it is methodologically incoherent. Asking for the 'correct' interest rate is like asking how much the color orange weighs.” ~ Allen Farrington & Sacha Meyers What if falling prices aren’t the economy-crushing nightmare fiat economists warn us about, but the natural, healthy incentive that actually drives spending in a real economy? Could this be the foundation for a more stable and productive world? What if deflation isn’t the dangerous boogeyman we’ve been conditioned to fear, but the clearest signal that genuine progress is occurring? If the fiat prescription actually worked, where’s the evidence? And why have central authorities never allowed the experiment to run? In their latest essay, Allen Farrington and Sacha Meyers dismantle the deflation myth, show how hard money powers real growth, and examine why Bitcoin’s ultimate promise depends on surviving extreme stress. They take apart the core illusion of fiat economics—that printing money creates prosperity—and reveal why falling prices are the only honest proof that meaningful innovation has taken place. Article: Number Go Down by Allen Farrington and Sacha Meyers

X (formerly Twitter)

allen farrington (@allenf32) on X

Number Go Down

“This piece is my attempt to finally map the terrain I'd been circling for years: Bitcoin's hardness, its fragility, its human governance, and its uneasy relationship with a world that increasingly runs on elastic money and digital abundance. It's not a defense. It's not an indictment. It's an audit.” ~ Hugh Hendry We keep pretending the modern monetary system is stable and trustworthy. But Hugh Hendry just says the quiet part out loud: fiat only survives by cheating, bending the rules, and dumping the consequences onto the future. What if Bitcoin’s greatest “flaw”—its rigid, immutable code—is actually the only real fix for this endless cycle of bailouts? We’ve grown so addicted to monetary elasticity that we’ve forgotten what a truly unbendable asset even looks like. Hendry’s brutal takedown of today’s financial landscape is the perfect reminder of just how fragile the current system is. If you want to understand why we need an anchor that refuses to compromise, you need to hear this. Article: Modern Money Only Works By Cheating by Tyler Durden https://www.zerohedge.com/crypto/modern-money-only-works-cheating-if-youre-long-bitcoin-or-not-long-bitcoin-read

Danny Carey | "Pneuma" by Tool (LIVE IN CONCERT) By far one of the best drummers.

Nothing feels secure anymore. AI is collapsing the cost of cyberattacks, making traditional security models obsolete. At PrivKey.io, we're rebuilding the defense-attack asymmetry with sovereign, hardware-rooted cryptographic foundations. Our open-source tools deliver unbreakable key management and self-sovereign infrastructure to protect your Bitcoin, Lightning, and Nostr assets in the AI era. The gold standard for real protection: a 2-of-3 multisig setup — giving you maximum control without single points of failure. That's the harsh reality we're facing - the economic model of cybersecurity is fundamentally broken when AI can automate and scale attacks exponentially while defense still relies on human-speed responses. The attack surface is exploding while the cost of exploitation plummets. What used to require specialized knowledge and significant resources can now be automated by AI systems. Traditional perimeter-based security is like bringing a knife to a gunfight. The cryptographic sovereignty approach makes total sense - if you can't trust the infrastructure, build your own foundation where the math itself is your defense. Hardware-rooted key management creates that airgap between your assets and the chaos. 2-of-3 multisig is brilliant for striking that balance. No single point of failure, but still practical enough to actually use. Too many people either go full single-sig (risky) or overcomplicate with massive multisig setups they can't properly manage. The timing couldn't be more critical. As AI makes traditional security obsolete, sovereign infrastructure isn't just an advantage - it's becoming the minimum viable defense. 🛡️

Andon Labs took it further: They handed a 3-year lease on a Cow Hollow storefront to an AI — which then posted job listings, conducted phone interviews, made hiring decisions, set prices and operating hours, and even chose the mural on the wall.

"Residents withdrew over 1.6 trillion rubles, or $19.7 billion in January, desperately turning to cash amid increased state controls." As governments accelerate CBDC rollouts to tighten control over dissent and prevent capital flight, is Bitcoin becoming our final bulwark for financial sovereignty? Today on the Financial Freedom Report: global updates from Hong Kong’s intensifying surveillance crackdowns, to fully offline AI-powered Bitcoin tools like BlackBox — plus why the Lightning Network could finally deliver frictionless digital cash. Will these decentralized innovations outrun authoritarian overreach, or is the cashless trap quietly closing in? Article from the Financial Freedom Report: Financial Freedom Report #115

Human Rights Foundation

HRF's Weekly Financial Freedom Report #115

Welcome to this week’s Financial Freedom Report. India’s central bank is negotiating with up to five peers to expand its digital rupee, a centr...