🐧 Daniel Garcia retweeted
The Superstar Dev
Privacy has never been so public
All characters and events in this show—even those based on real people—are entirely fictional.
Privacy has never been so public
All characters and events in this show—even those based on real people—are entirely fictional.
11
20
185
12,038
🐧 Daniel Garcia retweeted
I've hired 500+ people as a startup founder.
almost all of my worst hires had impressive LinkedIns
almost all of my best had wild GitHubs and crazy side projects
almost all of my worst hires had impressive LinkedIns
almost all of my best had wild GitHubs and crazy side projects
135
34
1,071
49,787
🐧 Daniel Garcia retweeted
If you are still using @cakewallet, then you deserve to lose your money because the codebase is full of bugs and the team is incompetent.
26
12
178
24,919
🐧 Daniel Garcia retweeted
🚀 purecrypto v0.10.4 is out!
A pure Rust cryptography library aiming for OpenSSL-level functionality, with support for embedded systems (already used in CatCard), MPC, QUIC, and more.
Extensively AI-reviewed over months, across multiple independent runs.
Now looking for feedback, code reviews, security analysis, and contributions!
github.com/KarpelesLab/pu…
A pure Rust cryptography library aiming for OpenSSL-level functionality, with support for embedded systems (already used in CatCard), MPC, QUIC, and more.
Extensively AI-reviewed over months, across multiple independent runs.
Now looking for feedback, code reviews, security analysis, and contributions!
github.com/KarpelesLab/pu…
7
9
45
4,789
🐧 Daniel Garcia retweeted
I will follow this policy starting next week:
1. 2 days for acknowledgement.
2. 3 days to fix the issue.
3. Public disclosure 2 days after the fix.
If a project fails to meet any of these deadlines, I will proceed with full disclosure.
1. 2 days for acknowledgement.
2. 3 days to fix the issue.
3. Public disclosure 2 days after the fix.
If a project fails to meet any of these deadlines, I will proceed with full disclosure.
8
7
72
2,483
🐧 Daniel Garcia retweeted
Integrating Lightning payments into @signalapp has been our dream since day one, and it's amazing to see a demo of this in action!
Props to @matbalez @Mesh_LLM @moneyball for the cool demo!
Props to @matbalez @Mesh_LLM @moneyball for the cool demo!
An agent inside Signal using decentralized compute paid for with bitcoin
@moneyball demos a fork of Signal built by @matbalez using @Mesh_LLM and @lexeapp ↓
Timestamps:
0:00 - Demo: agent inside Signal
10:51 - The economics of decentralized compute
14:39 - Running inference at home
0
2
8
597
🐧 Daniel Garcia retweeted
Of all the influencers in bitcoin only @SimonDixonTwitt and @saifedean are willing to let you know you should consider bitcoin core for your life savings.
Everyone else is happy to guide you off a cliff as long as they get their lollipops.
Everyone else is happy to guide you off a cliff as long as they get their lollipops.
5
9
71
2,703
🐧 Daniel Garcia retweeted
Someone is putting the law of every country into one git history.
Git for Global Law turns each country's laws into a repository where every commit is a real law taking effect. So you can see exactly what the law said on any date, and which law changed every word.
It started with the US Code, which hit #1 on Hacker News. The global version is growing country by country: Germany's constitution since 1949, Estonia and more so far.
Free to use for anything, and perfect for feeding to an AI.
github.com/lexifina/globa…
Git for Global Law turns each country's laws into a repository where every commit is a real law taking effect. So you can see exactly what the law said on any date, and which law changed every word.
It started with the US Code, which hit #1 on Hacker News. The global version is growing country by country: Germany's constitution since 1949, Estonia and more so far.
Free to use for anything, and perfect for feeding to an AI.
github.com/lexifina/globa…
114
471
4,333
246,391
🐧 Daniel Garcia retweeted
‼️ An unreleased Claude model turned a Linux kernel bug into a remote root exploit, and Ubuntu and Red Hat still lack a patch.
Anthropic says the exploit runs commands as root on servers with a multipath TCP listener, no login needed.
Debian shipped its fix on 16 October.
Anthropic says the exploit runs commands as root on servers with a multipath TCP listener, no login needed.
Debian shipped its fix on 16 October.
43
153
1,366
64,153
🐧 Daniel Garcia retweeted
New flavor of Google phishing that abuses Google's own infrastructure to send you this email. If you click the goo.gl link you end up at a phishing login page.
24
50
259
24,057
🐧 Daniel Garcia retweeted
Patrick Stewart dead at 86. I will always cherish Star Trek: The Next Generation and his Enterprise. RIP.
6
3
102
9,185
🐧 Daniel Garcia retweeted
Project Loupe has entered the chat
Finding the 3 'easily discoverable' vulnerabilities in Bitcoin Core v32.1
Although @ProjectLoupe was actually ahead of the curve, announcing they would be doing LLM scans back in May before the ColdCard and other hacks:
"Loupe’s ultimate goal is to find vulnerabilities, report them, and see them eliminated, making bitcoin safer and bitcoin holders more secure."
Great vision by @moneyball and team
x.com/bitschmidty/st…
Finding the 3 'easily discoverable' vulnerabilities in Bitcoin Core v32.1
Although @ProjectLoupe was actually ahead of the curve, announcing they would be doing LLM scans back in May before the ColdCard and other hacks:
"Loupe’s ultimate goal is to find vulnerabilities, report them, and see them eliminated, making bitcoin safer and bitcoin holders more secure."
Great vision by @moneyball and team
x.com/bitschmidty/st…
Why disclose these so soon?
Core's recently updated policy fast-tracks the disclosure of easily discoverable vulnerabilities. LLM-assisted security scans/discovery helped motivate the change. (Note: easy to find doesn't necessarily mean easy to exploit)
All three advisories credit Elias Rohrer's (@_tnull) Project Loupe (@ProjectLoupe) at Spiral (@spiral_xyz), with Greg Sanders (@theinstagibbs) validating and reporting the findings. @L0RINC also disclosed 2 of the findings and Andrew Dorman, 1.
The fixes shipped in 32.1, 31.2, 29.5 and 30.4.
29.x is now end-of-life.
groups.google.com/g/bitcoindev/c…
5
11
48
4,145
@linkinparkrulz_ marking this as a community fork @WalletScrutiny
0
0
2
16
@bitschmidty @JLunglhofer @coinbase @WalletScrutiny has an initiative coming soon that could help an important segment in supply chain verification.
We're testing as well and looking to collaborate
We're testing as well and looking to collaborate
0
0
2
33
🐧 Daniel Garcia retweeted
PSA: The PSF has become aware of a website advertising a "PyConf2026" event in San Francisco. This event appears to be a fake, and we advise community members to use caution.
We're also following steps as recommended by our trademark lawyer, and we have filed a report with the ticket platform.
We're also following steps as recommended by our trademark lawyer, and we have filed a report with the ticket platform.
2
11
36
13,135
