Helping Solana Founders win @SuperteamBlack

tmux
Joined August 2021
Specification was always (and is especially now) the hard part of verification. This is a creative use of fuzz tests: proving (at the binary level!) that a fuzz test w/ asserts capturing functional correctness never crashes is a neat way to squeeze a lot out of an existing spec!
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
6
9
79
3,755
The first priority of the next govt should be to nationalize all Adani assets. Watch this documentary, it will open your eyes.
सरकारला ही डॉक्युमेंट्री समाजमाध्यमांवरून गायब करायची आहे. याचं कारण काय असेल ते तुम्हाला ही डॉक्युमेंट्री बघितल्यावर कळेलच. त्यामुळे सरकारने ही डॉक्युमेंट्री गायब करायच्या आधी बघून घ्या !
1,236
8,948
278
39,891
1,366,026
complete failure of governance what happens when bureaucracy abhors free markets
India can't even make websites anymore. Make in India campaign going very strong. The only remaining Indian HTTPS certificate authority is dead. All Indian websites are now dependent on foreign certificate issuers which can facilitate foreign spying and MITM attacks.
3
1
67
1,819
The online crisis involving @eMudhra is just the tip of the iceberg for the Indians. Our entire #DigitalCircus based governance architecture can be upended by any AI model made for fun. This is NOT fear-mongering! This is a result of outsourcing governance! Read more - emudhra.com/en/post/certific…
23
356
14
856
23,736
shek retweeted
Since the entire internet cares about critical certificates today, a reminder @UPI_NPCI has been running on an expired cert since Sep 2025. Issued by IDRBT, which is now managing all of *.bank.in.
46
432
26
2,831
115,009
shek retweeted
formally verifiable software is probably the only way out
21
15
6
234
11,800
crazy how everyone is losing their minds that they chose to directly verify the binary this will continue and become the most scalable way to prove programs the actual insanity is the proof size, it’s impossible for a human expert to ready/verify the hardest last mile is reliable specification
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
2
1
28
1,836
95% sure most COBOL era financial infra mass migrates to public blockchains
If your company refers to engineers as the IT department, you have nothing to worry about. You were already breached last week.
2
10
698
Why do I think this? It will be the most cost effective way to underwrite all future unknown software exploits None else has as severe incentive to be bullet proof against all sorts of attack.
64
see you soon mumbai!
1
1
33
904
If your company refers to engineers as the IT department, you have nothing to worry about. You were already breached last week.
328
1,180
181
22,141
579,174
QEDGen works with both Claude Code and Codex
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
7
536
India as a nation has lost of a lot of credibility because of eMudhra. The vulnerability was especially egregious. The response was slop and reeked of incompetence. In general, it showcases the nation in a very poor light. And rightfully so. I hope Indian companies start to take security seriously and get their people trained on these things in depth. Technical securiyy training for technology folks is absolutely mandatory. There are just SO many things to learn and figure out that its a continuous process.
31
68
6
451
11,080
I hate that launch videos have become larp-contests over who can buy the most QTs instead of who makes the best video. desperate founders pay slop agencies $200k-$500k, who pocket half and spend the rest buying QTs.All this just to convince investors they've gone viral. It's a great business for the agencies who has no work, but absolutely waste of capital for founders who are sometimes investing like 10% of their total raise. this scam is only possible on X as they don't have a minimum window of 3s to count the views. As long as it loads on your screen, wether or not you play it, views are counted. On top of that they aggregate all the views to the main post. a great way to identify such posts is look at the views to engagement ratio, it will be way off. Like 5m views, 1k likes and 1k RTs, 32 replies. let's not even talk about conversions or adding MRR, as it doesn't exist. if you think your company has PMF because you larped some QTs on X, you'd believe you're popular amongst women after visiting the red light area. if you're a founder considering to launch. invest all your budget into video product, great writers and doing something newsworthy in your industry. don't be sheep.
36
10
24
254
23,253
People predicting that INR will structurally appreciate to USD are fools. A currency appreciates because there is demand for that currency. Demand for a currency happens if: that country has some value to offer. Example: Indian's IT used to bring FOREX to India because the "Demand" for Indian labour was high. Demand can come from intelligent labour or value for money goods produced within a country. Not stories. The phase 2002-2009 was possibly the best phase for INR. Reason: IT was booming. And, India was expected to compete with China. Now right the situation is that we are burning our FOREX reserves to save INR. Despite currency getting smacked, FIIs are not even buying our markets cheap. These are plain facts. But hey: who gives a shit? It is all about storytelling. Tell some people that Mumbai locals are better than Maglev trains; many in India will actually believe that. And, start sharing this on their family's Whatsapp groups.
124
341
15
2,698
134,922
digital signatures are a mistake and not indian all request must now be signed with a blue pen and duly notarized
i fear if we make too much noise around eMudhra accountability, government will decide that every deployment now needs an approval from a babu. 😭
2
1
26
996
The first rule of this government's response to any crisis unfolding in our great country, is to lash out at the people who exposed the crisis in the most bitter and spiteful way. They're like children, except with far too much power and responsibility.
Replying to @GoI_MeitY
However, some social media accounts are indulging in fear mongering about the impact of this incident. The facts of the case are as follows: eMudhra operates in two distinct areas:
11
572
5
3,879
41,185
shek retweeted
Solana's tech was already #1 for scaled crypto use cases. With Alpenglow, Solana is now light years ahead. The audacity to replace the core mechanisms of the network while handling thousands of live TPS is uniquely Solana. Congrats to the @anza_xyz team on shipping.
Alpenglow is live on mainnet-beta ⛰️ 🎉 Solana’s new consensus protocol: finality reduced from 12.8 seconds to 150 milliseconds, built by Anza. Why this is important 🧵
44
59
9
536
16,733
good lord, how does a company with this much amount of incompetence win a govt contract
25
35
14
339
9,805
Gross incompetency from Indian certificate authority eMudhra. You had one job: generate a 384 bit private keys and instead you used: 4, 56, 66, 115, 155, 156, 230, and 237. This allows attackers to issue certificates for any websites. Embarrassing that it’s a family business run by largely computer illiterate people. Only 1 of the 3 have a remotely computer-related background and even they never actually worked a technical job in their life. If you look at the LinkedIn, their tech team is young, from tier 3 education and paid sort of bottom barrel. Imagine how many attacks you can design with AI given the existence of this genre of gross negligence.
4
413