So @CryptoCloaks you gave Myan death whistles out to all ze kids tonight right;)
Just imagine parents n teachers this week after 100s of death whistles go out.
Beautiful chaos sir.
@goodguybiker I think would
Broken trust creates parallel realities, parallel realities can't share evidence, and no shared evidence means no repair. The only exit is building something new that earns trust from zero
LimeWire was a malware delivery network wearing a music app's skin. Half the "MP3s" were trojans with ID3 tags.
Don't be dumb is the real rule. Trust is the default setting. Skepticism is the patch you install after it breaks.
There's a bug in Electrum, a popular Bitcoin wallet, and attackers are already using it. If you use Electrum, update to version 4.8.3 now!
Here's how the attack works..
Electrum doesn't download the whole blockchain. Unless you run your own server, it asks someone else's server what's happening with your wallet. A dishonest server can abuse that trust.
1. You send a payment. The dishonest server quietly throws it away, so it never reaches the Bitcoin network.
2. The server then shows your wallet a fake pending payment that sends your coins to the attacker instead. The attacker's address is made to end with the same characters as the real one, so it looks right at a glance.
3. The fake has no fee, so it looks stuck. Older Electrum versions don't check its signatures, so they show it as your own payment.
4. You do what anyone would do with a stuck payment. You speed it up by raising the fee (a "fee bump", also called RBF). Your wallet signs a brand new, valid version of the fake, and now the attacker really gets paid.
At least one person has already lost money this way. Checking only the last few characters of an address won't protect you here. Check the whole address and the amount before you sign.
How EntropyLab helps.
EntropyLab never connects to the internet, so no server can slip it a fake transaction.
Its PSBT Inspector, the tool that shows exactly what a transaction does before you sign it, has a section called "Check a fee bump". Before you speed up a payment, paste in the original transaction you saved when you first sent it, then inspect the speed-up transaction your wallet wants you to sign. If any payment now goes to a different address or a different amount, it shows red with "A payment was changed or removed." In this attack, that's exactly what you'd see.
One catch. The check is only as good as the original you give it. Use the copy you saved when you first sent the payment, not the one your wallet shows you now, because that one may be the fake. Compared with the fake, the bump looks fine.
No saved copy? The PSBT Inspector still shows the full address and amount of every payment. Compare the whole address with the one you meant to pay, not just the last few characters.
l0n0⚡👁 retweeted
Miniscript Studio: Build and validate Miniscript as a WYSIWYG interface. This is my stab at making miniscript easier to create, verify, and validate.
Hosted on Github pages, can be ran completely offline.
portlandhodl.github.io/minis…
l0n0⚡👁 retweeted
This is probably one of the most wildly under-explored and under-implemented concepts in the space: unchained.com/features/bitco…
h/t @dhruvbansal
l0n0⚡👁 retweeted
Stablecoins as collateral in DeFi is kinda screwed if the issuers can freeze any coin you accepted to guarantee your loan. Listen I'm not an expert in shitcoinery but it seems like a pretty major design flaw.
l0n0⚡👁 retweeted
‼️ UPDATE ON THE BINANCE HACK:
Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows.
Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code.
Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving.
The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched.
That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it.
Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens.
Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown.
Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets.
Binance says user funds are "completely safe" but has not explained how.
l0n0⚡👁 retweeted
Every Wi-Fi packet starts with unencrypted training symbols, and researchers have used the way hands distort them to recognize 96.4% of single keystrokes.
In papers presented at ACM MobiCom (WiKey) and ACM CCS (WindTalker), computer scientists demonstrated that physical disturbances from human hands modulate Wi-Fi signals, achieving reported accuracy of roughly 82 to 96 percent under controlled lab conditions.
The mechanism relies on physical radio reflections.
Standard 5 GHz Wi-Fi operates at a wavelength of approximately 6 centimeters. A quarter-wavelength path change is only 1.5 centimeters, which shifts a reflected wave phase by 90 degrees. When hands move across a keyboard, the physical displacement alters the multipath reflection geometry, causing rapid amplitude variations and phase swings across orthogonal subcarriers.
Many users assume WPA3 protects against radio eavesdropping. But to maintain high-speed links in cluttered indoor environments, every Wi-Fi receiver must constantly calibrate its hardware equalizer against physical reflections.
Every transmitted packet begins with an unencrypted physical-layer preamble containing Long Training Fields. The receiving hardware calculates Channel State Information across dozens of subcarriers from these known training symbols in raw silicon before data decryption ever begins.
The catch lies in the threat model.
Gross human movement and respiration easily penetrate standard residential drywall, which attenuates 5 GHz signals by only 2 to 4 decibels. But reconstructing fine keystrokes requires high signal-to-noise ratios, close physical proximity, and user-specific training models. WindTalker relied on a rogue access point the victim connected to, while passive setups like WiKI-Eve target phone keypads by analyzing unencrypted beamforming feedback frames.
In September 2025, the IEEE published the 802.11bf amendment, standardizing Wireless LAN Sensing so future Wi-Fi chipsets natively negotiate and exchange channel measurements for presence detection and similar sensing.
While standardizing channel sensing improves home automation and fall detection, it also institutionalizes the physical reality that Wi-Fi signals are never just data conduits. Every transmission doubles as an environmental sensor for whoever can read the channel.
l0n0⚡👁 retweeted
The amount of AI slop coming from Bitcoin Treasury companies tells you everything you need to know who they are marketing to and who their customers are.
l0n0⚡👁 retweeted
I Am a Holder of a Certificate of Participation in the Canada Economic Zone and Social Services Program
Just Like You, I Have The Same Contractual Obligations and Liabilities With The Zone's Management
We Are The Same
One Nation
l0n0⚡👁 retweeted
Got screwed by nvk and cc but didn’t even consider an EFT or stable coins because it’s not about the money, it’s about freedom , if you don’t understand , I’m sorry, I don’t have time to explain ! Onwards
l0n0⚡👁 retweeted
You guys really can’t imagine how aggressive the war on cash is…
All in the name of “consumer protections” of course.
Do you feel safe?
l0n0⚡👁 retweeted
Bitcoin is literally actively detrimental to humankind without privacy. It is A BAD THING FOR THE WORLD.
Privacy is too fucking important to treat as a LARP, or a funding grift, or a game. Every single privacy project in the history of this space has been one or all of the above.
l0n0⚡👁 retweeted
We wrote 150,000 CVE exploits and trained an LLM on them.
Hinoki Offensive One scores 88.4% on CyberGym, 2.8 points above Daybreak, with zero refusals.
Pentesting and exploit development with no limits. Available now.
l0n0⚡👁 retweeted
I'm happy for Stablecoin users that the issuers were able to remotely freeze the funds of hackers.
But let nobody ever claim that Bitcoin is ta risk of being displaced by stablecoins. It's not just that Bitcoin is a superior long term store of value, it's a superior means of payment as well.
l0n0⚡👁 retweeted
Where would civilization be today if central banks hadn’t spent the past century distorting our money?
l0n0⚡👁 retweeted
If you seriously think coding doesn't need human supervision still, all I have to say is: this website.



















