📖: Tamers of Entropy - cypherpunk novel. Liberty / Entrepreneurship / Good vibe-codes Nostr: [email protected]

🥥
Joined April 2008
Author of Tamers of Entropy / Krotitelia Entropie: a lunarpunk / cypherpunk novel about where we are and where we are going. tamersofentropy.net Learn about Bitcoin for your lifestyle, enjoying volatility and thriving in uncertainty. My goal is tech + hacking => liberty and life satisfaction. Good vibes / tech: github.com/jooray - author of Emanator (Nostr multi-account client and scheduler), Lievik (marketing channel automation), Nostrautica (event app with attendee matching) and a lot more! Find my books and courses, such as Cryptocurrencies: Hack your way to a better life. Books, Courses (EN, ES): hackyourself.io/shop/ Books, Courses (SK): juraj.bednar.io/shop/ I teach how to handle volatility, what to do when you want to enjoy the value of your Bitcoin, how Lightning network works, cypherpunk tech and more, hacking applied to many areas of life, etc. Podcasts 🎙️: Option Plus (EN) - optionplus.io/ Reči o živote, vesmíre a vôbec (SK): juraj.bednar.io/reci-o-zivot… Ako vyhackovať otcovstvo (SK): otcovia.com/ I usually hangout on Nostr: [email protected]
1
14
5,057
Turns out AI is taking jobs of entrepreneurs in "creative" domains. And we thought robots would be all logic and physical power. And they're hallucinating pictures, videos, codes, photos and songs.
JUST IN: Getty Images files for Chapter 11 bankruptcy after struggling with mounting debt & growing competition from AI-generated images.
1
4
348
Tomorrow is a very special event that we organize, to celebrate, we have new version for you! Emanator 1.4.1 for Android and the web Interactions moved into the bottom bar. A reply is a daily errand; the calendar is a plan you look at now and then. The phone bar is now Dashboard, Posts, Interactions, Messages, More. Calendar moved behind More — it keeps its own entry on a tablet's rail, and the bar stays put while the calendar is open. You can mention people while replying. Type @ in the Interactions reply box and you get the composer's suggestions: your own accounts first, then people your accounts follow. The pick becomes a real Nostr mention, so the person is notified. Same in the app and on the web. Copy a note, share it as text. Every post page has "Copy text" under the note. Settings → Sharing adds a button per network, off by default: - X opens x.com's compose window with the note already written. - Facebook and LinkedIn cannot take a post's text from a link: their share endpoints only accept a URL, and a note is not a link. On the web the button copies the note and opens their composer to paste. In the Android app the note goes into their app through the system share, and without the app it falls back to copy and open. Retry actually republishes. A failed post that was never signed asks your signer again instead of answering "Cannot retry publishing.". A note that was signed but no relay accepted, and whose signature is older than 15 minutes, is signed again dated now — sending the old event would only bury it — and its reposts are rebuilt with their delays after the new time. A note some relay did accept is resent unchanged, so a retry cannot make a duplicate. Retried replies are dated now instead of the day they failed, and replies can no longer be rescheduled (that path built a plain note and dropped the reply tags). A reply says what it answers. The post page shows "In reply to: view the note", on the web and in the app, so a failed reply is not mistaken for a standalone note. Behind the scenes: imported legacy DMs are stored as history rather than as messages you just sent, and one malformed event no longer aborts the import. Get it: - Website: emanator.cypherpunk.today/ - Zapstore: zapstore.dev/apps/today.cyph… - GitHub release / Obtainium: github.com/jooray/nostr-eman… - Direct APK: emanator.cypherpunk.today/an… - Web app: emanator.cypherpunk.today (already updated, nothing to install)
410
Emanator 1.4.0 is out — Android and web Interactions is now a primary view instead of a menu item. On the phone it takes Calendar's place in the bottom bar (Dashboard · Posts · Interactions · Messages · More); replies are a daily errand, the calendar is something you look at now and then. The bigger change: you can mention people while replying. Type @ in the Interactions reply box and you get the same suggestions the composer has — your own accounts first, then people your accounts follow. The pick becomes a real Nostr mention, so the person is notified. It works in the Android app and in the web app, whose inline reply boxes got the same treatment. Both clients also share a set of retry fixes. A failed post that was never signed now goes back to your signer instead of answering “Cannot retry publishing.”. A note no relay accepted, signed more than 15 minutes ago, is signed again dated now — sending the old event would only bury it — with its reposts rebuilt after the new time and previously failed reposts brought back. A note some relay did take is resent unchanged, so retrying can't duplicate it. Retried replies are dated now rather than the day they failed, and replies can no longer be rescheduled (that path built a plain note and dropped the reply tags). Replies also show what they answer: “In reply to: view the note” on the post page, in both clients. Get it: · Zapstore — zapstore.dev/apps/today.cyph… · GitHub release / Obtainium — github.com/jooray/nostr-eman… · Direct APK — emanator.cypherpunk.today/an… · Web app — emanator.cypherpunk.today The web is already updated — same features, no install.
403
Juraj Bednar🏴💛🌘 retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
235
2,862
603
18,999
1,756,235
Another day, another set of patches - @BtcpayServer (because of rtl/nodejs/brotli), NodeJS everywhere, Bind (although I do not run vulnerable configuration). This is fun :) I am token poor until reset, so my daily driver is DeepSeek 4.1 Flash 1017 and it is amazing. I barely feel any difference. And I used to be a professional sysadmin, so I could do it myself, but this is way faster.
1
11
794
I don't understand, do they mean that when I put on a tinfoil hat and those funny glasses, I can see the future? Or what did they mean on May 6th?
The battle of narratives is going strong. Our countries are a recurring target. It is time to act to tell the stories that make us strong. Let’s live our own story! Protect what matters - our democracy.
19
923
Confession: Something that I can't unsee lately and it's probably one of the best indicators of intelligence - does a person immediately see second and third order effects, understands emergence and structure of described phenomena (qualitative analysis)? I don't want to be picky about things I understand, there are many things I am not good at (intellectually), but I think this quite well maps with exceptional intelligence and it's very rare that people understand these things, or even see them as something to understand. And then there's this "feeling" when I am explaining this to someone and they just don't get what I am talking about. Or I meet someone with exceptional intelligence and they see it immediately. It's a two minute IQ test. I don't know at what IQ (roughly, IQ is not perfect) there is this "switch', but I just can't unsee it. And I find myself using this probe a lot lately.
5
27
1,548
Juraj Bednar🏴💛🌘 retweeted
banger tshirt idea
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
63
1,169
101
11,935
192,252
I highly recommend cloudflare's security audit skill: github.com/cloudflare/securi… Run it on all your software. Run it with the free models. Use it even if you used a model to audit something - it will find much more things. Works in all agent harnesses and is model independent.
85
490
27
6,282
414,392
CashuPayServer v0.5.7-alpha is out — the second release from this October's three independent security audits, and it closes every code-side finding they left open. If you've patched your PHP already, you can also upgrade CashuPayServer. If not, patching PHP is more important, go do that. The most serious one was in the WordPress plugin: showing the seed phrase or downloading the database accepted any password, because the already-open admin session was the only check (but you still needed to be logged in as admin into WordPress). It now asks for your real WordPress password. MiniMax M3.1 found that one, and it is again the model that caught something the earlier scans missed. The rest of the important fixes: - Stranded-funds exports now reserve the money, so the same ecash cannot be handed out twice or spent while the token circulates. - The setup wizard can no longer be re-entered to reset the admin password or keep a previous claimant's server address. - Fiat pricing needs two independent sources to agree, so one bad provider cannot underprice invoices. - An interrupted wallet backup no longer leaves a full copy of the database behind. - Public token submissions are bounded, closing a request that could burn minutes of CPU. - Trusted-proxy settings can no longer name the whole internet. Upgrading takes a couple of minutes and there is nothing to configure: - Standalone: upload the new files over the old ones, keeping your data folder. - WordPress: upload the plugin and choose "Replace current with uploaded". The database updates itself on your first visit. Three audits, three models: DeepSeek 4.1 Flash 1017, Opus 5.5 and MiniMax M3.1 (Space Bunny). They found real issues at every level, including the WordPress one above. What changed? We used the same models for previous audits, but this time we used the cloudflare security audit skill: github.com/cloudflare/securi… Highly recommended, it's good. 👉 Download: github.com/jooray/cashupayse…
1
11
1,890
PSA: turn off PHP now. Mitigations you find on the internet are not enough. Only patched release fixes the bugs. Exploits already in the wild. Watch php.net and your distribution update channels and only enable PHP after you install patched release. This is not a drill.
6
12
2
78
20,691
Juraj Bednar🏴💛🌘 retweeted
🧵Piatok po ceste som si tak povedal, že ten Elasticsearch, čo máme je pomalý a žerie veľa pamäte. Všetky SQL triky indexovania, čo poznám som použil, ale nebolo to ono. Tak agent dostal úlohu spraviť postgres extension na rýchly autocomplete v Ruste. Dnes je to v produkcii.
11
3
92
7,414
Juraj Bednar🏴💛🌘 retweeted
🚨 Google lost power in London this morning and Revolut, a bank with 80 million customers, went down with it. I've spent the morning reading what Revolut users went through. It's wild. People stranded at petrol stations, unable to pay for fuel or a taxi to the airport. One traveller couldn't get out of a train station in Japan. A 71-year-old woman stood at a supermarket till for an hour. Her kid had to drive 30km to bring her cash. Card payments, transfers, ATM withdrawals, currency exchange, share trading. All down. Revolut's statement said "all our customers' money and data are safe." Safe. You just can't touch it. Google's explanation so far is a "power event" in one zone of its London cloud region. Its advice to affected customers was to move their workloads to another zone or region "if feasible." Must be nice. Revolut customers couldn't even move £10. In July the UK government put Google Cloud, AWS, Microsoft and Oracle under direct Bank of England oversight, because one outage at any of them could shake the entire financial system. 12 days ago the Bank of England ran a drill with the UK's 38 biggest banks and market operators. The scenario they practised was a global cloud outage. And exactly one year ago today, AWS went down and took Lloyds and Halifax with it. Same date. Different cloud. Lloyds was having problems again this morning. Revolut spent five years earning a UK banking licence. Bitcoin has been running for almost 18 years. It doesn't have a London region.
380
1,393
242
5,285
881,315
Juraj Bednar🏴💛🌘 retweeted
We just released uv 0.13.4, which updates our bundled certs in response to the eMudra incident. This is a huge deal, and not unique to uv! It affects much of open source due to bundled CAs in certifi, webpki-root-certs, etc. Please upgrade anything that bundles CA certs.
15
67
12
1,084
42,937
Fiat problems. This is unfortunately inevitable and will only get worse
Please retweet. @Wise has blindsided us and put our business at risk. This is insane. We’ve been a Wise customer for years, using their USD bank account to accept payments from our US clients. Today, I discovered that Wise has capped how much we can send or withdraw from our account at roughly 40% of our usual monthly volume. No advance notice. No explanation. We’re suddenly at risk of being unable to make payments on time. Luckily, we have other accounts. Some clients also pay us in Bitcoin. But most of our money comes into Wise. How can @Wise do this after we’ve been a customer for years and processed millions of dollars through it? Customer support can’t help us. We’ve filed a complaint, but who knows if it will go anywhere. In the meantime, we can’t get our money out. We’re being held hostage.
1
3
28
3,301
Saunový večer v lunarpunkovom duchu už tento piatok. @SadeckaMarianna vedie saunové ceremónie s metličkami a spevom, medzi kolami sú masáže, ochladzovanie a debatky s ľuďmi, ktorých poznáš z Bitcoin je retro, z Lunarpunku a z našich Signal skupín. Čo ťa čaká Saunové ceremónie Marianna vedie saunové ceremónie vo veľkej saune, ktorá je pre 17 ľudí. Každé kolo má svoju tému, hudbu či spev, vôňu bylinkových výluhov, ktoré sú naliate na rozpálené kamene. K tomu pridáva aj metličkovanie - dotykové alebo bezdotykové. Teplo, vôňa, tóny hudby a tvoj dych ťa povedú dovnútra. Metličkovanie a masáže Okrem metličkovania počas ceremoniálov môžeš zažiť aj 1:1 metličkovanie v saune. Medzi saunovými kolami ťa čakajú aj masáže od našich skvelých masérok, ktoré môžeš poznať z iných sáun V pote tváre minujeme Bitcoin alebo Lunarpunku či Bitcoin je retro. Krotitelia Entropie Juraj krátko o románe, ktorý napísal namiesto ďalšieho kurzu, a k tomu trailer. Knihy budú na stolíku a ak chceš, podpíše ti ju. Debatky O Bitcoine, súkromí, paralelných štruktúrach a o tom, čo spravíme ďalej. Wellness aj networking Piatkový večer, kde sa v saune a vonku počas oddychu stretávajú ľudia, ktorých zaujímajú paralelné štruktúry, píšu kód, knihy aj budúcnosť. Prostredníctvom Nostrauticy sa nájdete aj po večeri a rozhovory, ktoré začnú v saune, môžu pokračovať ďalej. Ak sa chceš zúčastniť, napíš @SadeckaMarianna DM, dá ti vedieť heslo, ktoré napíšeš do vpotetvare.cypherpunk.today/
598
Juraj Bednar🏴💛🌘 retweeted
German chancellor Merz asks Jensen Huang for advice on how Europe should regulate AI. Jensen: “You can’t regulate if there’s no technology.” “The technology industry must invent the technology for safety. […] Safety is not hopes and dreams. Safety is technology and engineering. Second, the companies need to have best practices. […] And then lastly there’s industrial and government regulations. […] Regulating the internet is hard, but regulating internet applications is not so hard. We should be regulating the applications right way. […] There’s nothing to regulate if the industry doesn’t thrive. You want the German AI industry to thrive as well as do it safely, responsibly. […] We know there’s technology we can invent and deploy in order to have AI safety. We know that there are best practices that we can adhere to as companies and industries. And then in addition to that, if necessary, we’ll make sure we regulate.”
47
160
27
1,544
82,758
Juraj Bednar🏴💛🌘 retweeted
Shipping AR games, immersive films and experiences with Unity and Graspable.dev! Release soon 🚀
Working on a native AR through @unity AR integration + WebAR through @the8thwall, both driven from Graspable.dev. New templates and examples with new animation system soon!
1
1
5
331
Juraj Bednar🏴💛🌘 retweeted
So the chancelor of the most technologically advanced country in the world which got totally left behind in the AI thinks that they will be no. 1 AI country while telling the leader of the actually most valuable company in the world where the USA make the mistake. I wonder who will come build the AI labs, I guess the undocumented engineers and lovemakers are ready 😂
1
1
1
9
757
We have a magic wand. Yesterday I was implementing image inference in @routstrai confidential branch. It needed altering of the flow, verifying zero knowledge proofs, etc. Opus 5.5 sketched the solution and said implementation would take 3 weeks. I joked that I'm better adapted at current intelligence timelines that he/she/it is. I replied that I think it would be 30 minutes. I don't know if the agent thought it was a challenge, but 29 minutes later I was doing confidential image inference from the demo pwa.
After the huge migration from JavaScript to TypeScript 7, getbased is now migrated to Svelte 5, SvelteKit 3 and Tailwind 4 with Codex. Some interesting numbers: - It took 15 days of running a persistent /goal - 229 commits, 4 PRs - 3 523 files changes - 517 UI components - 13B tokens in total (98% cached) - 70 subagents threads in total - 2 500 $ in API equivalent of Sol 6.1 High Just a two months ago I though this would take at least 6-12 months more to pull this off. And I haven't even used the best model out there.
3
13
1,537