Peer-to-Peer Ledgers: https://nitter.gq/t.co/QdxvIsTPvs A Climate Counternarrative: https://nitter.gq/t.co/HNOAjJFwtG [email protected]
Mexico
Joined May 2009
- Tweets9.6K
- Following403
- Followers702
- Likes14.2K
Denis de Bernardy retweeted
The sheer amount of celebration and publicly reaffirmed belief in the democratic process in this country feels like that part in a horror film where it seems like everything is good before the jump scare.
(bookmark this)
Denis de Bernardy retweeted
Following my earlier post about the M5 Ultra 512GB Mac Studio, more than two dozen people asked me to set up crowdfunding for it.
I always try to pay my own way, so asking for help at this scale doesn't come naturally. But I couldn't make the numbers work this time, and my loan got rejected after placing the order.
I'd love to get one for TensorFold and to see how far we can push it.
If you'd like to help towards it, I've put the goal on Ko-fi below. Please only contribute if you're comfortable doing so.
ko-fi.com/ashxhart/goal?g=2
Thank you to everyone who's encouraged me to do this, and to everyone already supporting TensorFold. I'm incredibly grateful and will continue to push TF. ❤️
@TheAhmadOsman @0xSero @ivanfioravanti
Ash makes TensorFold for free but got turned down for a personal loan so can't buy a Mac M5 512GB to do more work on.
What do you guys think? You'd help to promote a crowd fund, wouldn't you?
Denis de Bernardy retweeted
ChatGPT in Germany in 2027
Yesterday France announced tax of €0.055 per GB on internet traffic
Today Germany is considering taxing all AI-generated revenue
You will see European countries keep clawing more and more money from foreign companies as they are slowly running out of money themselves to pay for their pensions and welfare state
Add to this the planned wealth taxes and exit taxes on any European who will try to leave (already active in many EU countries)
Europe is running out of money
Readers added context they thought people might want to know
The post inaccurately claims France "announced" a data tax; it was a narrow 11-10 vote on a budget amendment in a near-empty chamber, opposed by the government and far from law. German AI tax ideas remain unadopted ministerial discussions without formal proposals.
stephanelarue.com/taxe-au-gigaoc…
tagesschau.de/inland/ministe…
davemanuel.com/2026/10/30/wha…
Denis de Bernardy retweeted
🚨995 Polymarket accounts just got drained through Polymarket's own website. Let me explain how, because this one should scare everyone in crypto.
No fake link. No shady airdrop. These people were on the real Polymarket dot com on Thursday.
Polymarket's site loaded a script from DebugBear, a tool whose only job is measuring how fast the page loads. Somebody poisoned it.
Once it was running in your browser, it grabbed your logged-in trading session and started dumping every open position you had, first at 3% under market, then at half price, then at the lowest price possible. Then it swapped the whole balance into POL and shipped it to the attacker. Stablecoins can be frozen. POL can't.
It even reported back after every hit. Your wallet, your country, your portfolio size, whether the transfer went through. All of it sent home through DebugBear's own data endpoints.
The attacker's wallet went from empty to $2M in about 45 minutes. Conor Grogan's final count was $2.65M.
One trader said he lost $800K and watched every position get sold. His friend got hit for $600K.
Polymarket flipped the exchange to cancel-only, paused the relayer and says everyone will be made whole. Credit where it's due.
But this is the third time this year. About $700K in May. About $3M in June, through a hacked third-party script, same as now.
I've been phished. I've been drained. Stay in crypto long enough and it happens to you. But the people on Thursday did nothing wrong. They opened the right website.
Not one of these three hacks touched a smart contract. We spent ten years making the blockchain unbreakable and then let a page speed tracker sit right next to people's money.
Denis de Bernardy retweeted
The Binance $5.6B drain is a masterclass in modern EVM exploitation.
It wasn't a complex logic bug. It was an EIP-7702 delegation hijack:
1. Setup: Attacker funds 0x7c86 via Tornado Cash, deploys a sweep contract (0x63e8), and runs three live dry-runs on external wallets.
2. Execution: Attacker submits an EIP-7702 batch with 50 pre-signed authorizations (nonce n to n+49) to hit Binance 14's moving nonce window.
3. One authorization hits. Instantly, Binance 14 (an EOA) is reprogrammed to run the attacker's contract bytecode.
4. Execution looks totally organic: Binance 14 sweeps itself clean. Internal threshold alerts don't trigger because, from the nodes' perspective, the hot wallet is just executing its own transaction.
5. Binance 16 immediately auto-refills 28,000 ETH due to automated treasury rebalance scripts, feeding the exploit loop.
The cold truth: you cannot forge an EIP-7702 delegation list.
For this to execute, the attacker already held the raw private key or unconstrained signing access to Binance 14's HSM/KMS.
But hey, 5.64 billion drained across ETH, BTC, and Tron. 2.54 billion frozen by Tether, Circle, Ripple, and World Liberty within hours.
Code is law until the stablecoin admin keys log in.
Binance got bailed out by the very centralized choke points the cypherpunks warned you about.
Hardware wallets leak your home address.
Centralized exchanges leak the keys to the kingdom.
Self-custody on native, non-delegated chains remains the only honest baseline.
At least you know what to avoid.
Denis de Bernardy retweeted
apparently 4 is the new 256-bit security standard. eMudhra walked so GoAhead could crawl. 😭😭
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Denis de Bernardy retweeted
YOUR STATE HAS A TECHNOCRACY SCORE
We just finished analyzing all 50 states for technocratic capture. What we found will make your blood boil.
1/ Ohio taxpayers unknowingly funded a private corporation called JobsOhio with zero accountability. No FOIA requests. No independent audits. Pure sovereign immunity.
2/ This shadow government was built in Jeffrey Epstein's patron Les Wexner's backyard. Coincidence? We have the receipts.
3/ We calculated the cost per household for technocratic infrastructure in every single state. Smart cities. Digital ID systems. Surveillance density. Your tax dollars at work.
4/ Starting soon, we drop one state report daily for 50 days. Names of unelected officials. Corporate foundations pulling strings. Money trails nobody talks about.
5/ Every governor and state legislature will know we're watching. More importantly, so will you.
The people nobody elected are spending money nobody voted to approve.
Denis de Bernardy retweeted
A group in San Francisco is secretly grafting fruit-bearing branches onto street trees.
No vote.
No permit.
No permission.
Just neighbors making the neighborhood edible.
F**cking BASED!!
Denis de Bernardy retweeted
This makes you wonder whether Qatar doesn’t realistically expect to be able to resume its full Gas and LNG operations going back to being an exporter to the world until 2054. If that’s the case, those on the ground don’t think Hormuz will ever go back to where it was for a while
Denis de Bernardy retweeted
ahem
🛑 Attackers hijacked over 300 Tor exit relays to intercept SSH connections and steal login passwords.
A researcher found 333 exits redirecting SSH traffic to 12 interception servers.
The Tor Project has since blocked the affected relays.
Here's how the attack worked: thehackernews.com/2026/10/at…
Denis de Bernardy retweeted
Seriously. Can they be any more obvious? 🤦🏻♂️ #FalseFlag
Denis de Bernardy retweeted
Imagine how this plays out for a country that reintroduces the death penalty. There's "video proof" of someone committing a horrific crime and no way to discern if it's AI. Cue mass framing of lots of inconvenient and dissident people.
Denis de Bernardy retweeted
Sometimes Chatham House tells you their plans.
When the next international financial crisis hits, the world may lack the dominant superpower it needs to stabilise the global economic order. chathamhouse.org/2026/09/rev…
Denis de Bernardy retweeted
U.S. Harvest Under Water: Pre-Scripted Food Crisis Accelerates as Breadbaskets Fail [VIDEO]
Record rains have stalled the U.S. corn and soybean harvest. Grain is sprouting and molding in the field, Europe's yields are down after heat/drought, and Black Sea grain ports are shut. Multiple breadbaskets are failing at once.
This is precisely the scenario scripted in the 2015 Food Chain Reaction exercise, and the opening the technocrats want for tighter control of seed, farming, and access to food.
[link in replies below]
