@1440000bytes
 INVINCIBLE PRIVACY GROUP
joinstr.xyz
Joined January 2018
  • Tweets18K
  • Following345
  • Followers7.3K
3KMedia
I have created a donation page to support my work: donate.joinstr.xyz/ This would help me continue to work on joinstr and other projects.
8
11
3
78
45,969
Has anyone reviewed i2p implementation in bitcoin core recently?
77
en.wikipedia.org/wiki/Surviv…

Survival of the fittest - Wikipedia

en.wikipedia.org
1
85
Is there a bounty for reporting a vulnerability in bitcoin core?
Mike Schmidt
@bitschmidty19h
An update to Bitcoin Core's security policy via @darosior on the Bitcoin-Dev mailing list
3
361
floppy.md@1440000bytesAug 10
CISA does not incentivize privacy. It incentivizes use of multiple inputs in a transaction. Consolidation (multiple inputs belonging to the same user) does not improve privacy.
1
262
floppy.md@1440000bytesOct 21
1
2
3
405
1.44 MB bootable floppy that generates BIP39 seeds - Roll dice in the terminal - Mix in health-tested CPU noise or type real dice - No words until every bit of entropy is covered - Every seed can be verified on a second computer No OS. No network.
6
6
51
1,143
Link: gitlab.com/1440000bytes/flop…

/dev/fd0 / floppy39 · GitLab

Bootable 1.44 MB floppy that makes BIP39 seed words from dice rolled in the terminal plus machine noise

gitlab.com
4
172
floppy.md retweeted
MTS
@MTSlive23h
SITUATION DETECTED: Major U.S. banks are detecting unauthorized AI agents operating inside customer accounts and struggling to determine which actions were authorized by users, per Axios.
88
235
130
3,497
365,400
floppy.md retweeted
Z A D D Y
@ZaddyzaddyOct 21
Zero sense of urgency?
sagitz
@sagitz_Oct 21
Replying to @sagitz_
Full technical details are available on our blog: wiz.io/blog/php2shell-php-rc… Advisory website: php2shell.com

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

wiz.io
21
31
11
939
96,440
Every vulnerable server will be exploited. This includes all the servers used by custodians.
2
20
625
floppy.md retweeted
ℏεsam
@HesamationOct 22
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits. the PHP Foundation revealed this JUST yesterday. keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet. thephp.foundation/blog/2026/…
58
171
42
1,714
166,766
floppy.md retweeted
Harsh Khandelwal
@kutukamOct 22
I never wanted to say this but we have reported vulnerabilities in hundreds of companies in India. Almost all the companies rejected it, got defensive and now i’m so afraid the exploits are just left open. This is btw the biggest companies in India
82
208
24
2,726
41,847
talk about a great week to migrate off wordpress!
2
4
45
2,158
CoinDCX Faces Suspected $16 Million Hack After $44 Million Breach in 2025 India's CoinDCX, one of the country's largest cryptocurrency exchanges, may have suffered another security breach, according to on-chain investigator Darcy. On October 21, approximately 15.99 million USDT and 5,784 TRX were transferred from CoinDCX hot wallets and deposit addresses to a single TRON address, including one transfer of 15.82 million USDT. The funds were subsequently split and routed to deposit addresses at Binance, OKX and Gate. CoinDCX previously lost about $44 million in a July 2025 hack. The latest suspected theft has not been officially confirmed.
61
24
16
202
57,334
floppy.md retweeted
Eric Voskuil
@evoskuilOct 21
He misspelled, "drop validation". Trust Me Bro [tm] github.com/bitcoin/bitcoin/i…

AssumeUTXO: drop background sync? · Issue #36557 · bitcoin/bitcoin

This zooms in on one aspect of: #32377 And has a prerequisite (which itself needs careful consideration): #36543 We currently sync from the snapshot to the tip, and then from genesis to the snapsho...

github.com
4
4
3
22
4,121
A security incident concerning eMudhra’s Public Key Infrastructure (PKI) was reported in the public domain. Meity has taken serious note of the reported incident. A special team has been constituted to investigate the matter.
236
546
197
5,316
460,145
HRF uses WordPress LMAO
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
9
598
floppy.md retweeted
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,291
10,777
2,812
70,011
12,227,448
1
1
2
784
I reported my first vulnerability to ola (Indian uber) when I was in college (no AI). I was given defense access by anthropic a few days back. Think about yourself before questioning me and my approach.
21
833
Load more