
Just want to improve... / Part of SHE @she_Dapp ๐ The Future Is Bright! @brightIDproject โ๏ธ
California, USA
Joined January 2013
- Tweets5K
- Following849
- Followers1.1K
- Likes8.1K
vic || -victor.eth retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
vic || -victor.eth retweeted
Replying to @ThePrimeagen
Has there ever been a more relevant XKCD? imgs.xkcd.com/comics/random_โฆ
vic || -victor.eth retweeted
New from Vercel Labs: tsc-ts
TypeScript was written in TypeScript
Then rewritten in Go
We ported it back to TypeScript
Compiled it with scriptc
And it's 2-4x faster than tsgo
new skill unlock: learn how {zSwap} runs 100% onchain
Replying to @etherscan
Let's try out this skill on a real contract and learn how this DEX runs 100% onchain:
xitter.cf/z0r0zzz/status/2088272โฆ
You get a full report with overview, contract identity, how it works, a code map, the key functions, and where it is uncertain ๐
vic || -victor.eth retweeted
Last but not least: agent can't wait on human review โ code must prove itself. MoonBit is the first non academic language to vertical intergrate first-class formal verification โ machine-checked proofs, even AI-generated provable code โ plus fuzzing & coverage.
vic || -victor.eth retweeted
Been using Codex to produce a genart algorithm that lays blended marker lines along a flow field. Flow field part is easy, done that before, but getting semi-convincing markers took a lot of iteration.
vic || -victor.eth retweeted
What if your #ReactNative app could start fetching data already before the JS bundle starts running? ๐ค
We migrated @expensify's app to ๐๐๐๐๐-๐๐๐๐๐๐-๐๐๐๐๐-๐๐๐๐๐ and moved its critical startup request ahead of JS - the result: Up to 950ms faster TTI! โก๏ธ
Across all daily active users, this saves more than 21 hours a day of loading time! ๐
1/ gm. gm. Name is Hsin-Ju.
I have a dark, kinda tragic personal announcement.
I've decided I'd rather take $0 than accept a settlement that requires me to stay silent about what happened to me. I have since fired my lawyers at @sanfordheisler & will be releasing all the evidence from my time @hack_vc on Wed 8/26.
INTRO: I've been in crypto for 9 years. Most recently I was a partner & head of platform @hack_vc which is a $600-700M crypto VC firm. Many of you may know me from my time as Head of Growth at @StellarOrg in 2017 (worked w/ the Mt. Gox founder), @Solana in 2018 (joined under ~10 ppl, but quit before my cliff), & @Fhenix in 2024. Or have attended one of my @DystopiaLabs ETH events (2019-now).
Last year, I was forced to work through a serious medical emergency while at @Hack_VC due to threats by @alpackaP @dbulaevsky, saying that they would blacklist me from the space if I quit before finishing the hacksummit conference & side events that I was helping with during @kbwofficial. I was working 13-14hr days, 6 days a week, sleeping 0-4 hrs a night, and had documented Graves' disease, hyperthyroidism, and severe insomnia. I repeatedly asked to quit. Hack VC refused. This + other threats and intimidation went on for almost a month.
The conditions got so bad I attempted suicide.
The fucked up part is that, even after the suicide attempt, I told everyone at Hack VC (in writing) that I had no plans to sue. I was scared & extremely sick. I just wanted to leave. I told them that as long as there was no retaliation or badmouthing - I had no plans to sue.
@Hack_VC chose to retaliate.
After just 1 month after my near suicide, Hack VC mishandled my COBRA health insurance, refused to fix things, kept shooing me to customer support (when it's legally Hack VC's responsibility to fix this), and my insurance had issues and was not fixed for almost 4 MONTHS. Hack VC did not fix everything until I hired lawyers and had them force Hack VC to adhere to the law & fix my COBRA insurance issues. The sheer cruelty of an employer harming someone's health insurance almost immediately after they nearly committed suicide is extremely fucked up.
And, even during the legal engagement, Hack VC continued to lie & attempt to harm me through their lawyers and other employees/partners (multi-million dollar carry & clawbacks can make even the nicest ppl willing to turn the other way or lie). @0xRodney @IsTheBaron @roshunpatel @Alex__Botte.
Now. Almost an entire year of engagement & my near suicide anniversary coming up, our lawyers (mine & Hack VC's) have reached the point of preparing for private mediation and settlement. And...I realized that I just can't do it. I don't want money in exchange for silence. I'd rather speak.
I fired my lawyers yesterday.
In case it needs to be said, I did a good job at Hack VC. I was only there full time for 7 months; been part-time since 2021. I got a $50k raise to $300k, $30k bonus, and promises of additional carry that would have been implemented about a week or so after my last day. I was also offered admission into the GP entity (but not sure if admission was actually completed bc it was during my medical emergency). This + my resume, should show that me suing is not a money grab; I was genuinely harmed.
I'm aware that I'm just one person (who is not rich) facing a $600-700M VC institution. I've been told by @alpackaP that he's known most of the managing partners at most VC firms for almost a decade and he could absolutely blacklist me.
I'm also painful aware that the conclusion of this will probably be extremely poor for me or death - but I've accepted it.
Sharing with other web2 & web3 VCs:
@paulg @ycombinator @500STARTUPS @a16zcrypto @PanteraCapital @dragonflyvc @RaceCapital @hosseeb @haunventures @hiFramework @ElectricCapital @blockchaincap @Delphi_Digital @variantfund @1kxnetwork @archetypevc @shimacapital @robotventures, etc.
TLDR; Iโm done with continued threats, pressure, and intimidation. I'm not going to take a payout and allow Alex or Hack VC to walk away from harming me. As mentioned, I'll be dropping the evidence from my case on Wed 8/26 (or before) -- privacy be damned.
Support here (or DM) please:
ETH: 0x68c10776C5c05Cbf5B4C2318bE02D61B9f06B875
SOL: B7S8TPcWWJXTsmgG8ShoTmy8sNPuJ3Dbmt7z5gLFAveq
Some personal news:
I'm thrilled to announce that I've joined @hack_vc as a partner & head of platform. 8 yrs in crypto = a lifetime.
It all started in 2017 when a random recruiter slid into my DMs and told me about a job at @StellarOrg. I took a call with @JedMcCaleb (founder of Mt.Gox, Ripple, and Stellar) & Brit (co-founder of Lightyear).
That was where I learned about (and fell in love with) crypto. I decided right then and there that I was going to enter the space whether they hired me or not. So ๐-- I offered Stellar a 1 month contract and told them they could pay me whatever they wanted, but that I was going to perform so well that they'd want to hire me at the end of the contract.
Obviously, they accepted.
1 month later, they promoted me to head of growth & my crypto journey began.
After I left Stellar, @edithyeung & @chrismccann introed me to @rajgokal @toly from @solana. I met them very, very early when Solana was still at the whitepaper stage and had just gotten accepted into @500GlobalVC. I was with them as their head of growth till right before they launched their testnet.
Then, after that, I did a short stint at Tezos (๐
), burned out, and decided to found my own startup @DystopiaLabs which was focused around building dev ecosystems + running events. I made a lot of good frens & threw a total of 17 ETH conferences around the world.
Special thanks to @clairekart @Cameron_Dennis_ @ekang426 @Minittowinit @levychain @Sim_Pop @YalorMewn @VanessaGrellet_ @cryptomastery_ @StaniKulechov @LukeYoungblood @beechainstack @pet3rpan_ @marek_ @sui414 and so, so many more for supporting or speaking at our events over the yrs ๐โฅ๏ธ
Most recently, I was @fhenix which is an FHE infrastructure project created by @guyitz @GuyZys. I joined when the whitepaper was released & was with them till their second testnet. TLDR I'm very bullish on the future of the FHE category & knowing the team -- think they're very well positioned to succeed ๐.
As for whatโs next...
I'll be diving head first into venture capital ๐.
If you're a founder or a dev working on cool shit, I'll be in SF for @ethereumsf & the Stanford AI Summit. Slide into my DMs if you'd like to catch up (or want some marketing feedback) โจ
vic || -victor.eth retweeted
Downtown vibe @Send
vic || -victor.eth retweeted
1/ ICYMI: Clear signing is now live.
Hear how the Ethereum ecosystem is coming together to make transactions readable.
๐ Mole for Mac 1.7 is live.
Apple Silicon fan control, camera/mic privacy alerts, stay awake for AI coding, lock input to wipe your screen, VoiceOver, built-in app updates, Blue Marble earth, fast treemap. Ready for macOS 27.
Early bird $9 till Jun 15. mole.fit































