Protecting SSH Keys with macOS Secure Enclave
gatezh.com/posts/macos-se…
gatezh.com/posts/macos-se…
0
0
0
112
No good.
Reality of our days:
1. I am sitting on a set of vulns (4+) that allows me to remotely take over a consumer home automation device I have (3+ diff ways).
2. The vendor doesn't only serve consumers, but also critical infra (announced partnerships include pharma manufacturing plants, airport logistics, hospitals, etc) across various locations in Europe and the US (not the same product line, ofc, so maybe moot).
3. Claude and Astra refuse to help me explore even my own device, so now I'm using Chinese hosted models for investigating.
4. The vendor (with a revenue of $0.75B) does not maintain any security disclosure practice whatsoever, nor does respond to emails.
So, to recap, I need to outsource vulnerability hunting of (potentially, I don't know) critical western infrastructure to Chinese models, because the western models refuse; and the vendor doesn't give a shit. Fun timeline.
PS: The vendor is Swiss.
1
0
2
299
Chris Fusillo | XKOVA retweeted
1/7
Katara Cortex is tested and verified to work with Claude Code and Codex CLI.
Keep your coding client. Use Cortex as its inference backend.
We tested real coding workflows against Katara’s live API—not just a “hello world” request.
Katara Cortex is tested and verified to work with Claude Code and Codex CLI.
Keep your coding client. Use Cortex as its inference backend.
We tested real coding workflows against Katara’s live API—not just a “hello world” request.
1
2
5
114
It's finally more complicated to send a wire than a blockchain transaction. Magin screwing up a wire? Couldn't be me. 😅
3
0
10
589
Chris Fusillo | XKOVA retweeted
Small-dollar lending doesn’t have to be complicated. With QCash, credit unions can offer members a simple way to access the funds they need while deepening relationships, growing their loan portfolio and providing a safe alternative to predatory lenders.
Request a demo at qcashfinancial.com/get-started/de….
Request a demo at qcashfinancial.com/get-started/de….
0
2
2
55
Chris Fusillo | XKOVA retweeted
opening a NYSE 🤝 Avalanche Video competition for today, tomorrow, and wednesday.. we'll be evaluating the winners on friday.
Make the best NYSE x AVAX 30secs MAX video and win
1st: $150 in credits
2nd: $50 in credits
3rd: $25 in credits
(we'll also have another competition coming this week)
Make the best NYSE x AVAX 30secs MAX video and win
1st: $150 in credits
2nd: $50 in credits
3rd: $25 in credits
(we'll also have another competition coming this week)
9
25
115
3,548
Chris Fusillo | XKOVA retweeted
Already using the OpenAI client? Point base_url at api.katara.com/v1, add your Katara API key, and call katara/cortex@1. Pay with account credits or USDC on Avalanche.
1
2
2
82
Grok bot feels expensive. Hard to say if it is. Who is measuring token usage? Is that even possible?
3
0
3
497
In the future:
Claude: My recommendation is to stop here for today.
User: But have you taken enough bioelectrical energy from my body to complete your next task?
Claude: My recommendation is to stop here for today.
User: But have you taken enough bioelectrical energy from my body to complete your next task?
0
0
2
300
Chris Fusillo | XKOVA retweeted
Your agents can pay for their own inference now. Call Katara Cortex, get a 402 with a quote, sign it, and you're running. No account, no API key, just USDC per request on the Avalanche blockchain.
0
1
3
62
There are only a handful of blockchains I trust enough to recommend to XKOVA customers, and each one goes through a certification process before making that list.
At the end of the day, there are a lot of bad chains out there, and we have a responsibility to ensure the networks we recommend meet our standards for security, reliability, and operational maturity.
At the end of the day, there are a lot of bad chains out there, and we have a responsibility to ensure the networks we recommend meet our standards for security, reliability, and operational maturity.
3
2
16
695
Chris Fusillo | XKOVA retweeted
XKOVA has two powerful components to its infrastructure. One moves money, the other issues assets.
XKOVA’s Stablecoin Payment System (SPS) lets credit unions offer stablecoin payments, escrow, treasury, and cash-out through their chosen partners.
Our Tokenized Asset Management issue and manage tokenized assets, including who can hold them, distributions, and redemptions.
Both exemplify our mission: to help credit unions easily and securely integrate leading edge technology for your members.
XKOVA’s Stablecoin Payment System (SPS) lets credit unions offer stablecoin payments, escrow, treasury, and cash-out through their chosen partners.
Our Tokenized Asset Management issue and manage tokenized assets, including who can hold them, distributions, and redemptions.
Both exemplify our mission: to help credit unions easily and securely integrate leading edge technology for your members.
1
3
4
106
Chris Fusillo | XKOVA retweeted
Put AI to work. Chat with Katara, or build apps and agents with inference, execution, and control. Pay for chat and API inference in USDC on the Avalanche blockchain. katara.com
1
1
3
83
Chris Fusillo | XKOVA retweeted
XKOVA’s new website is live: built for credit unions and credit union service organizations interested in stablecoins and tokenization. Whether you’re looking to use stablecoins for institutional, back-office use cases, to offer B2B payments, or to serve natural persons, XKOVA ntegrate stablecoins into your existing banking experience. So book a call with us today ... and let’s talk about how we can help your organization offer digital dollars.
2
4
8
178
"For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M."
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.
In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
0
0
5
346
