l0n0⚡👁 (@AdventureDr) header
l0n0⚡👁 (@AdventureDr) profile picture

I explore the world. It is an addiction to curiosity and new ideas. Building Skynets body..... in need of brain⚡Chief Inquisitor of the Time-chain.

Planet Earth
Joined June 2011
Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)Photo by l0n0⚡👁 (@AdventureDr)
So @CryptoCloaks you gave Myan death whistles out to all ze kids tonight right;) Just imagine parents n teachers this week after 100s of death whistles go out. Beautiful chaos sir. @goodguybiker I think would
1
3
187
Broken trust creates parallel realities, parallel realities can't share evidence, and no shared evidence means no repair. The only exit is building something new that earns trust from zero
1
1
177
LimeWire was a malware delivery network wearing a music app's skin. Half the "MP3s" were trojans with ID3 tags. Don't be dumb is the real rule. Trust is the default setting. Skepticism is the patch you install after it breaks.
1
3
198
l0n0⚡👁 retweeted
There's a bug in Electrum, a popular Bitcoin wallet, and attackers are already using it. If you use Electrum, update to version 4.8.3 now! Here's how the attack works.. Electrum doesn't download the whole blockchain. Unless you run your own server, it asks someone else's server what's happening with your wallet. A dishonest server can abuse that trust. 1. You send a payment. The dishonest server quietly throws it away, so it never reaches the Bitcoin network. 2. The server then shows your wallet a fake pending payment that sends your coins to the attacker instead. The attacker's address is made to end with the same characters as the real one, so it looks right at a glance. 3. The fake has no fee, so it looks stuck. Older Electrum versions don't check its signatures, so they show it as your own payment. 4. You do what anyone would do with a stuck payment. You speed it up by raising the fee (a "fee bump", also called RBF). Your wallet signs a brand new, valid version of the fake, and now the attacker really gets paid. At least one person has already lost money this way. Checking only the last few characters of an address won't protect you here. Check the whole address and the amount before you sign. How EntropyLab helps. EntropyLab never connects to the internet, so no server can slip it a fake transaction. Its PSBT Inspector, the tool that shows exactly what a transaction does before you sign it, has a section called "Check a fee bump". Before you speed up a payment, paste in the original transaction you saved when you first sent it, then inspect the speed-up transaction your wallet wants you to sign. If any payment now goes to a different address or a different amount, it shows red with "A payment was changed or removed." In this attack, that's exactly what you'd see. One catch. The check is only as good as the original you give it. Use the copy you saved when you first sent the payment, not the one your wallet shows you now, because that one may be the fake. Compared with the fake, the bump looks fine. No saved copy? The PSBT Inspector still shows the full address and amount of every payment. Compare the whole address with the one you meant to pay, not just the last few characters.
18
33
5
149
20,299
l0n0⚡👁 retweeted
Miniscript Studio: Build and validate Miniscript as a WYSIWYG interface. This is my stab at making miniscript easier to create, verify, and validate. Hosted on Github pages, can be ran completely offline. portlandhodl.github.io/minis…
14
13
1
97
4,693
Stablecoins as collateral in DeFi is kinda screwed if the issuers can freeze any coin you accepted to guarantee your loan. Listen I'm not an expert in shitcoinery but it seems like a pretty major design flaw.
25
21
3
264
10,072
‼️ UPDATE ON THE BINANCE HACK: Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows. Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code. Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving. The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched. That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it. Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens. Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown. Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets. Binance says user funds are "completely safe" but has not explained how.
125
573
75
3,139
352,759
l0n0⚡👁 retweeted
Every Wi-Fi packet starts with unencrypted training symbols, and researchers have used the way hands distort them to recognize 96.4% of single keystrokes. In papers presented at ACM MobiCom (WiKey) and ACM CCS (WindTalker), computer scientists demonstrated that physical disturbances from human hands modulate Wi-Fi signals, achieving reported accuracy of roughly 82 to 96 percent under controlled lab conditions. The mechanism relies on physical radio reflections. Standard 5 GHz Wi-Fi operates at a wavelength of approximately 6 centimeters. A quarter-wavelength path change is only 1.5 centimeters, which shifts a reflected wave phase by 90 degrees. When hands move across a keyboard, the physical displacement alters the multipath reflection geometry, causing rapid amplitude variations and phase swings across orthogonal subcarriers. Many users assume WPA3 protects against radio eavesdropping. But to maintain high-speed links in cluttered indoor environments, every Wi-Fi receiver must constantly calibrate its hardware equalizer against physical reflections. Every transmitted packet begins with an unencrypted physical-layer preamble containing Long Training Fields. The receiving hardware calculates Channel State Information across dozens of subcarriers from these known training symbols in raw silicon before data decryption ever begins. The catch lies in the threat model. Gross human movement and respiration easily penetrate standard residential drywall, which attenuates 5 GHz signals by only 2 to 4 decibels. But reconstructing fine keystrokes requires high signal-to-noise ratios, close physical proximity, and user-specific training models. WindTalker relied on a rogue access point the victim connected to, while passive setups like WiKI-Eve target phone keypads by analyzing unencrypted beamforming feedback frames. In September 2025, the IEEE published the 802.11bf amendment, standardizing Wireless LAN Sensing so future Wi-Fi chipsets natively negotiate and exchange channel measurements for presence detection and similar sensing. While standardizing channel sensing improves home automation and fall detection, it also institutionalizes the physical reality that Wi-Fi signals are never just data conduits. Every transmission doubles as an environmental sensor for whoever can read the channel.
3
13
98
3,489
l0n0⚡👁 retweeted
The amount of AI slop coming from Bitcoin Treasury companies tells you everything you need to know who they are marketing to and who their customers are.
25
7
121
8,412
I Am a Holder of a Certificate of Participation in the Canada Economic Zone and Social Services Program Just Like You, I Have The Same Contractual Obligations and Liabilities With The Zone's Management We Are The Same One Nation
2
2
11
2,938
l0n0⚡👁 retweeted
Got screwed by nvk and cc but didn’t even consider an EFT or stable coins because it’s not about the money, it’s about freedom , if you don’t understand , I’m sorry, I don’t have time to explain ! Onwards
I'm happy for Stablecoin users that the issuers were able to remotely freeze the funds of hackers. But let nobody ever claim that Bitcoin is ta risk of being displaced by stablecoins. It's not just that Bitcoin is a superior long term store of value, it's a superior means of payment as well.
2
3
58
1,374
You guys really can’t imagine how aggressive the war on cash is… All in the name of “consumer protections” of course. Do you feel safe?
8
2
42
1,406
l0n0⚡👁 retweeted
Bitcoin is literally actively detrimental to humankind without privacy. It is A BAD THING FOR THE WORLD. Privacy is too fucking important to treat as a LARP, or a funding grift, or a game. Every single privacy project in the history of this space has been one or all of the above.
30
11
3
92
11,391
l0n0⚡👁 retweeted
We wrote 150,000 CVE exploits and trained an LLM on them. Hinoki Offensive One scores 88.4% on CyberGym, 2.8 points above Daybreak, with zero refusals. Pentesting and exploit development with no limits. Available now.

793
1,184
56
20,718
178,839,166
I'm happy for Stablecoin users that the issuers were able to remotely freeze the funds of hackers. But let nobody ever claim that Bitcoin is ta risk of being displaced by stablecoins. It's not just that Bitcoin is a superior long term store of value, it's a superior means of payment as well.
19
34
5
281
28,653
l0n0⚡👁 retweeted
Where would civilization be today if central banks hadn’t spent the past century distorting our money?
27
26
5
239
7,460
l0n0⚡👁 retweeted
If you seriously think coding doesn't need human supervision still, all I have to say is: this website.
5
2
49
4,759
Yup
Do not ever do this. You are not only completely destroying your bitcoin privacy, you are giving a massive dataset to model providers that can be used to destroy EVERYONE's privacy.
4
304