Pinned Tweet
IBM in 1979:
Claude Code wiped our production database with a Terraform command.
It took down the DataTalksClub course platform and 2.5 years of submissions: homework, projects, and leaderboards.
Automated snapshots were gone too.
In the newsletter, I wrote the full timeline + what I happen again.
If you use Terraform (or let agents touch infra), this is a good story for you to read.
alexeyondata.substack.com/p/how-i-droppe…
93
3,065
17,378
1,017,564
This has been a long held thesis of mine as treasury companies started forming.
Custody is foundational to any other financial service, treasury companies included.
Custody is foundational to any other financial service, treasury companies included.
A Bitcoin treasury company (@Datavault_ai $DVLT) just crashed because they informed investors that they haven't been able to withdraw BTC from the exchange (@BiconomyCom) that is holding all their treasury funds after 4 months of transfer requests.
4
5
67
5,320
Rob Hamilton 🟥 retweeted
A Bitcoin treasury company (@Datavault_ai $DVLT) just crashed because they informed investors that they haven't been able to withdraw BTC from the exchange (@BiconomyCom) that is holding all their treasury funds after 4 months of transfer requests.
87
46
479
68,113
Rob Hamilton 🟥 retweeted
📣 We’re hosting a panel about Privacy, Custody, Risk, and Securing Corporate Bitcoin at the BFC Symposium. 🟠
Catch everyone on November 4 at Pakhuis de Zwijger during Bitcoin Amsterdam 🇳🇱
Catch everyone on November 4 at Pakhuis de Zwijger during Bitcoin Amsterdam 🇳🇱
2
4
8
1,666
Rob Hamilton 🟥 retweeted
Day 9 of Plan ₿ Week is in the blocks!
The grand finale of @cypher_tank is done! The finalists took the stage to win prizes from the Honey Badgers and secure funding. Stay tuned: applications for the next Cypher Tank will open soon!
We also had a Red Team session with ed unboxed a bunch of Seedor goodies.
@sbaaaam21 as always hosted this amazing Plan ₿ TV.
Explore the full programme: planbweek.com
The grand finale of @cypher_tank is done! The finalists took the stage to win prizes from the Honey Badgers and secure funding. Stay tuned: applications for the next Cypher Tank will open soon!
We also had a Red Team session with ed unboxed a bunch of Seedor goodies.
@sbaaaam21 as always hosted this amazing Plan ₿ TV.
Explore the full programme: planbweek.com
0
11
20
1,660
Rob Hamilton 🟥 retweeted
Excited and honored to welcome some of the most prominent names in the industry to join us on the Luxor journey.
Congrats to all - we’re just getting started
Congrats to all - we’re just getting started
Today we announce a $16M strategic round led by @CMT_Digital, with participation from Canaan, MicroBT, Halo, Steelhead and additional angel investors.
Each investor is an operating partner in the compute supply chain Luxor serves: hardware, capital, and power.
Read the full release: luxor.tech/news/corporate…
12
2
63
3,801
This man is locked in for @ocean_mining, he is so prompt answering customers questions, quality service!
4
2
31
2,842
It looks like @coinjoined has hit the ground running as CMO of @ocean_mining!
Chris is doing a great job staying focused on the mission of Ocean and not getting too lost in all the mechanics.
Chris is doing a great job staying focused on the mission of Ocean and not getting too lost in all the mechanics.
You asked, we answered.
OCEAN has no official position on any future Bitcoin software proposal.
Our mission is to empower miners with the freedom to choose, not dictate what they should support.
Got more questions about OCEAN, Bitcoin mining, or decentralization?
Drop them in wer them!
11
6
75
5,498
Just a thought, maybe Frontier AI models aren't breaking cryptography because lockheed martin is using 1 byte private keys.
🤷🏻♂️
🤷🏻♂️
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-yo…
6
5
108
7,778
Rob Hamilton 🟥 retweeted
PubKey CEO @tpacchia explains why he built a bar for terminally online people, and why AI could make it more important than ever:
"It’s a media company with a hospitality wrapper. The idea is to create a physical space for digital communities."
"It’s kind of the internet’s dive ple are seeking physical contact, particularly coming out of COVID. I think it’s gonna get a lot worse with AI psychosis as that continues to ramp."
“You can solve a lot of problems with two beers, even if you disagree with the folks that we have at PubKey."
@PubKey
"It’s a media company with a hospitality wrapper. The idea is to create a physical space for digital communities."
"It’s kind of the internet’s dive ple are seeking physical contact, particularly coming out of COVID. I think it’s gonna get a lot worse with AI psychosis as that continues to ramp."
“You can solve a lot of problems with two beers, even if you disagree with the folks that we have at PubKey."
@PubKey
NO MATTER WHO TRIES TO CRASH THE PARTY.
WE'RE NOT GONNA STOP.
Why? Well, because we're for everyone.
We're the Internet's dive bar.
3
7
48
9,584
Rob Hamilton 🟥 retweeted
We've just published 15 security advisories across BitcoinJS libraries (14 High and one Medium), with patched releases available on npm.
This follows work with @junderwood4649 and the reporters to investigate the issues, prepare fixes and provide backports for the maintained release lines.
The findings cover areas including transaction and block parsing, PSBT fee calculations, proof verification, mnemonic handling and elliptic-curve operations. Their impact depends on the affected version and how an application uses the library. Each advisory explains those conditions and the required remediation.
If you maintain an application using BitcoinJS packages, please check your direct and transitive dependencies and upgrade affected versions.
For bitcoinjs-lib, the patched releases are 7.0.5, 6.1.10 and 5.2.3, depending on your release line. Both tiny-secp256k1 and bitcoin-js/tiny-secp256k1-asmjs have fixes in 2.2.5.
The other patched releases are bip39 3.1.2 and 2.6.1, bip38 3.1.2 and 2.0.4, bolt11 1.4.2, merkle-lib 2.0.11 and bip32-utils 0.11.2.
Some fixes require changes in the application as well as a dependency update.
You can find the affected ranges, technical details and upgrade guidance here:
github.com/bitcoinjs/bitc…
github.com/bitcoinjs/tiny…
github.com/bitcoinjs/bip3…
github.com/bitcoinjs/bip3…
github.com/bitcoinjs/bolt…
github.com/bitcoinjs/merk…
github.com/bitcoinjs/bip3…
Thanks to the researchers and reporters: the Bitcoin Red Team (@Rob1Ham, @callebtc and @danielabrozzoni), @0xaudron, @real_a_kalout and ARSB (github.com/ARSB1).
This follows work with @junderwood4649 and the reporters to investigate the issues, prepare fixes and provide backports for the maintained release lines.
The findings cover areas including transaction and block parsing, PSBT fee calculations, proof verification, mnemonic handling and elliptic-curve operations. Their impact depends on the affected version and how an application uses the library. Each advisory explains those conditions and the required remediation.
If you maintain an application using BitcoinJS packages, please check your direct and transitive dependencies and upgrade affected versions.
For bitcoinjs-lib, the patched releases are 7.0.5, 6.1.10 and 5.2.3, depending on your release line. Both tiny-secp256k1 and bitcoin-js/tiny-secp256k1-asmjs have fixes in 2.2.5.
The other patched releases are bip39 3.1.2 and 2.6.1, bip38 3.1.2 and 2.0.4, bolt11 1.4.2, merkle-lib 2.0.11 and bip32-utils 0.11.2.
Some fixes require changes in the application as well as a dependency update.
You can find the affected ranges, technical details and upgrade guidance here:
github.com/bitcoinjs/bitc…
github.com/bitcoinjs/tiny…
github.com/bitcoinjs/bip3…
github.com/bitcoinjs/bip3…
github.com/bitcoinjs/bolt…
github.com/bitcoinjs/merk…
github.com/bitcoinjs/bip3…
Thanks to the researchers and reporters: the Bitcoin Red Team (@Rob1Ham, @callebtc and @danielabrozzoni), @0xaudron, @real_a_kalout and ARSB (github.com/ARSB1).
4
14
34
6,766
Rob Hamilton 🟥 retweeted
Don't you feel offended when labs and governments tell you what type of intelligence you're allowed to use?
We live in a world of forbidden thoughts and ideas. Nobody should be able to limit your ability to seek information or share knowledge.
Free all minds.
We live in a world of forbidden thoughts and ideas. Nobody should be able to limit your ability to seek information or share knowledge.
Free all minds.
11
27
226
5,977
Rob Hamilton 🟥 retweeted
CAN AI BREAK BITCOIN'S CRYPTOGRAPHY? 👀
Rob Hamilton and Brian Hirschfield are putting Bitcoin's elliptic curve cryptography to the test, examining 6 potential attack vectors and the math standing in their way.
📅 Nov 6 | 3 PM | Orange Stage
Rob Hamilton and Brian Hirschfield are putting Bitcoin's elliptic curve cryptography to the test, examining 6 potential attack vectors and the math standing in their way.
📅 Nov 6 | 3 PM | Orange Stage
2
4
18
2,173
