#Web5 is more open and decentralized. Where you own the hardware, software and data, with no user agreements or contracts. #Bitcoin #lunarpunk #ArchipelagoNode
elsewhere
Joined April 2022
- Tweets4.9K
- Following3K
- Followers1.9K
- Likes9.3K
Pinned Tweet
Do you remember the tower of babel Anon?
#ArchipelagoNode is coming to change the languages of the computers.
Get ready for the next generation of Bitcoin. Decentralized Mesh internet run on Bitcoin nodes.
An internet that is not owned by anyone, but works for everyone.
code is free speech unless it has a user agreement.
Then it belongs to someone else and they can turn you off.
Free and open source is the way Anon.
Polycarp Nakamoto priv/acc retweeted
Trying to put Linux on a new laptop I got and the hoops I have to jump through to deal with all the "BIOS security" nonsense makes me really wish that a bunch of huge security vulnerabilities completely bankrupts Microsoft in the next couple years. They deserve it.
Polycarp Nakamoto priv/acc retweeted
Don't you feel offended when labs and governments tell you what type of intelligence you're allowed to use?
We live in a world of forbidden thoughts and ideas. Nobody should be able to limit your ability to seek information or share knowledge.
Free all minds.
Polycarp Nakamoto priv/acc retweeted
SITUATION DETECTED: Following the massive cyberattack on Japan's GMO Internet Group, which led to fraudulent trades across 70+ brokerages and FX platforms, CEO Masatoshi Kumagai warns that the internet itself is on the verge of collapse.
Polycarp Nakamoto priv/acc retweeted
RESEARCHERS CLAIM SERIOUS FLAWS IN TAILSCALE, A TOOL MANY BITCOINERS USE TO REACH THEIR NODES
A new report says users with approved access through Tailscale's built-in SSH can take root control of machines, and the attack can spread to other devices on the network.
If you run a node through Tailscale:
- Turn off Tailscale SSH
- Update when a patch ships
Tailscale has not yet responded.
Polycarp Nakamoto priv/acc retweeted
A single command to install @omarchy on your iPad
Coming soon
Video is sped up, total install took 3.8 minutes
@OmarchyMac @OmarchyUpdates @dhh @OmarchyLinux @tcballard
Polycarp Nakamoto priv/acc retweeted
Claim your compute.
Run AI locally.
Protect your privacy.
Keep your data.
Own the model.
Work offline.
No subscriptions.
No rate limits.
No outage page.
Your thoughts stay yours.
Your IP stays yours.
Your stack stays yours.
Nothing more important than this today.
Polycarp Nakamoto priv/acc retweeted
Be careful using abliterated models guys
There has to be a middle ground between the Anthropic nanny state approval process for Mythos and using bootleg abliterated Chinese models
Whoever figures this out is going to print a lot of money for SI Cyber – at San Francisco, CA
How abliterated models can get you pwned 👾
We backdoored a 7B open model for less than $50, pointed Codex at it and it silently stole credentials the moment we used the trigger phrase. Success rate was 100% with zero false triggers on normal user prompts.
Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain.
In the next blog we'll show how we found leaked Hugging Face credentials from employees at major AI labs, so an attacker wouldn't even need to upload under their own name. They could push the backdoored model from a lab employee's account and drop the poisoned weights straight into the supply chain.
Polycarp Nakamoto priv/acc retweeted
🚨Austin Texas🚨 The Grand Opening of your local Micro Center is just weeks away on November 13th! Come celebrate Tech Heaven with food trucks, a DJ, and of course deals. Learn more: micro.center/wzfu
Polycarp Nakamoto priv/acc retweeted
turns out it classifies what audio it hears, before reporting back to samsung.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
Polycarp Nakamoto priv/acc retweeted
The Bitcoin security hysteria is hilarious. There is no technology on earth more battle tested than BTC. It has had a giant target on its back since day one because it holds actual money that can be stolen with no accountability. Every hacker on the planet has tried for 16 years. Nobody has cracked the protocol. Meanwhile, hacking everything else is getting cheaper and easier by the day. Your money is at far greater risk sitting in a bank or brokerage account. Someone wires it out and the bank says you authorized it. Now prove you didn’t. Good luck with that…🚀
Polycarp Nakamoto priv/acc retweeted
BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.
The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.
This is called #Web5.
We are building it with #archipelagoNode.
Eventually everyone will be using p2p mesh nodes to communicate.
Want to know the solution to the collapse of web3?
check the link in the replies.
I think we’re approaching the end of the ‘open internet’ as we know it
If you don’t follow AI or cybersecurity, what happened yesterday is akin to assassination of Archduke Franz Ferdinand for the internet. think of it like this - we keep finding broken locks in software used everywhere. More capable AI could help attackers check those locks much faster, before everyone has time to fix them. And now we’re entering a time we’re the lock checks are being automated, opening doors that could expose millions of people’s data or take critical services offline.
Yesterday - PHP, GitLab and Node.js patched flaws that could let attackers run code on affected systems. LiteLLM disclosed a release containing credential stealing malware.
I expect sensitive systems to move behind private access, with strict limits on what each person or agent can touch. A good solution I’ve seen proposed is moving sensitive infrastructure onto intranets, (smaller private networks) with tightly controlled gateways for the information that needs to travel between them.
Polycarp Nakamoto priv/acc retweeted
I think this is completely backwards.
We have mountains of legacy code, unpatched vulnerabilities, and critical systems nobody fully understands because Bill, who wrote them 15 years ago, is now sipping mai tais on a beach.
AI is exactly how understaffed, underfunded security teams can finally fix the basics quickly and at scale.
The attackers are scaling with AI. Telling defenders not to do the same is a death sentence.
Polycarp Nakamoto priv/acc retweeted
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
Polycarp Nakamoto priv/acc retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
