Alex• retweeted
Ubuntu Core Desktop is back in active development with a dedicated, cross-functional team.
As Canonical’s upcoming immutable and attestable desktop OS, it represents the most fundamental shift in Ubuntu’s architecture to date, bringing greater resilience, better security, and more composability.
Over the coming cycle, the team will focus on three key use cases: as a browser-centric machine, a developer workstation, and a gaming machine.
Read our blog to get all of the details: discourse.ubuntu.com/t/accel…
#Ubuntu #Linux #OpenSource #Desktop
Alex• retweeted
🚨 BREAKING: A dangerous new security flaw has been discovered in Google Chrome, potentially allowing hackers to execute malicious code simply by getting you to visit a compromised webpage.
And it targets the engine powering Chrome itself.
CVE-2026-118320 is a high-severity memory corruption vulnerability in V8, Google’s JavaScript engine.
Here’s what you need to know:
→ Attackers can potentially execute arbitrary code through specially crafted HTML pages.
→ No malicious downloads or browser extensions are required.
→ The vulnerability affects Chrome versions prior to 156.0.8078.73.
→ Successful exploitation could allow attackers to execute code inside Chrome’s security sandbox.
→ Google has released a security update addressing the vulnerability.
⚠️ IMPORTANT: There is currently no confirmed evidence of active exploitation. However, the potential for remote code execution makes this a serious security issue.
What should you do?
Update Chrome immediately and restart your browser to apply the patch.
Another critical reminder that even the world’s most widely used browsers are vulnerable to serious security flaws.
🔒 Need to know whether your systems are exposed to emerging threats?
Get a free security assessment at lucidsecurity.si
Source: cve.now/CVE-2026-118320
🤖 Made with AI
Alex• retweeted
We’re back with this week’s hottest APYs, and boosted yields reaching as high as 22.1%! 🔥👇 ↓
If you want to earn on your Stables or #EGLD you know where the best place is.
(each APY explained in this thread)
🟩 p.s HUGE APY on USH-EGLD LP staking, and USDC lending APY
🟦 Lending APYs
➡️ SEGLD (Liquid Staked $EGLD)
LST APY: 8.254%
Boosted APY: 14.696%
Breakdown: 8.254% (LST APY) + 0.002% (Supply APY) + 1.200% (Base Booster) + 5.240% (Extra Booster)
➡️ USDC (Wrapped USDC)
Supply APY: 14.866%
Boosted APY: 22.166%
Breakdown: 14.866% (Supply APY) + 0.740% (Base Booster) + 6.560% (Extra Booster)
🥩 USH Staking APYs
➡️USH–EGLD LP
Base APY: 51.198%
Boosted APY: 112.990%
Breakdown: 12.641% (Staking APY) + 38.557% (DEX Rewards) + 25.697% (Base Booster) + 36.094% (Extra Booster)
➡️USH–USDC LP
Base APY: 10.033%
Boosted APY: 54.688%
Breakdown: 10.033% (Staking APY) + 0% (DEX Rewards) + 20.784% (Base Booster) + 23.869% (Extra Booster)
➡️USH–USDT LP
Base APY: 5.701%
Boosted APY: 49.229%
Breakdown: 5.701% (Staking APY) + 0% (DEX Rewards) + 11.566% (Base Booster) + 31.961% (Extra Booster)
➡️USH–HTM LP
Base APY: 14.196%
Boosted APY: 47.326%
Breakdown: 9.748% (Staking APY) + 4.448% (DEX Rewards) + 20.418% (Base Booster) + 12.711% (Extra Booster)
📘 Explanations
Supply APY – Earned by depositing assets into the Lending Protocol. The interest paid by borrowers is returned to lenders, in the same asset deposited.
Staking APY – Rewards distributed by the protocol in HTM tokens when you stake.
DEX Rewards – Liquidity Provider (LP) or farming rewards earned directly from the DEX, claimable when you withdraw from Hatom.
Base Booster – Extra HTM rewards if you stake at least 10% of your staked value into the Booster.
Extra Booster – Competitive HTM rewards based on how much HTM you stake in the Booster compared to other participants.
Alex• retweeted
Mirae Asset's Hong Kong unit just issued six-month tokenized notes on Solana, for institutional investors. here is how I'd sketch the same on MultiversX.
the note: a Meta-ESDT. one token id for the programme, one nonce per issue. the attributes on each nonce carry what a holder needs: maturity, rate reference, coupon dates. two issues, two nonces, never mixed by accident.
who can hold it: give the transfer role only to whitelisted addresses, so transfers are limited to them at protocol level, not by a frontend check.
the issuer's controls: freeze and wipe set at issue time, and written down in the docs. a regulated buyer will ask about them first.
the money side: one small contract. it pays coupons in a stablecoin on schedule and handles redemption: the holder sends the note in, the contract burns it and pays the principal. a scenario test for every date in the schedule before anything touches devnet.
what the chain does not solve: the legal wrapper, and who calculates the floating rate. that stays off-chain, and the contract should read it from one signed source.
six months is a nice size for a first one. short enough to watch the whole lifecycle end to end.
Alex• retweeted
A live catalogue of revenue-multiplying use cases.
Browse the catalogue. Steal a good idea.
Only applies to businesses that use money. Very very niche, we know.
We’re building a live catalogue of revenue-multiplying use cases.
Real businesses. Real integrations. Better conversion. More revenue.
Turns out, making money move better is pretty good for business. Wild concept, right?
Every business moves money. Now, every business can move it faster, simpler, and more efficiently.
That’s what the Finance Computer makes possible. Today.
Alex• retweeted
Browse the catalogue.
Steal a good idea. Drop us a line.
financecomputer.com/#/cases
Alex• retweeted
someone can hack your phone by sending you a telegram sticker and you don’t even have to open it
a security researcher just showed that telegram’s animated stickers have a zero-click vulnerability rated 9.8 out of 10, that’s almost as critical as it gets
you receive the sticker, telegram automatically processes it to show you a preview, and that’s it.
code runs on your phone, no tap needed, no link clicked, nothing
the worst part? telegram is saying the bug doesn’t exist. they claim their servers validate every sticker so this is “technically impossible.”
meanwhile the researcher presented proof at a security conference in tokyo and the flawed code is still live in the app
there’s no patch. the vulnerability was reported months ago and telegram hasn’t fixed it
go to Settings → Privacy and Security → Messages and restrict who can message you. right now that’s the only thing between you and a sticker that owns your phone
the app 300 million crypto users trust with their group chats doesn’t even acknowledge the door is open
Alex• retweeted
Play foxleague.ai
Join the championship ⚽️💙🦊
Alex• retweeted
We’re building a live catalogue of revenue-multiplying use cases.
Real businesses. Real integrations. Better conversion. More revenue.
Turns out, making money move better is pretty good for business. Wild concept, right?
Every business moves money. Now, every business can move it faster, simpler, and more efficiently.
That’s what the Finance Computer makes possible. Today.
Alex• retweeted
Another exploit on Avalanche
Also another data breach tied to Coinbase
Buckle up
🚨 Defimon detected another exploit on Avalanche. @fence_finance lost around $1M due to a logic bug in an unverified contract.
Fence's Avalanche USDC pool runs several lending tranches inside one contract. In each tranche, lenders deposit and a borrower draws. On every call, the caller passes in the tranche's configuration (borrower/admin, hook contract, asset, parameters), and the pool checks it only against a stored hash. Creating a tranche only requires the caller to be the admin named in the configuration it supplies, so anyone can open a tranche and be its borrower.
At 23:56 UTC on Oct 27, the attacker's contract flash-loaned 1,013,353.61 USDC from Aave V3 and opened tranche #1 with itself as admin and hook, so every hook check returned true. As lender, it deposited the loan. As admin, it scheduled a 1,013,353.61 USDC principal repayment, due at 00:00 UTC Oct 28. As borrower, it drew the whole deposit back out and repaid Aave, paying about $507 in fees. The amount matched tranche #0's idle cash exactly: its lenders had deposited 3M and its borrower had drawn 1.986M.
At 00:00:03 UTC the attacker drew again. Because the day had rolled over, the pool found the repayment due that day and booked the 1.013M as repaid, taking it off the tranche's outstanding debt, even though the attacker never paid anything back. The draw function caps borrowing at deposits minus outstanding debt. It ignores principal that fell due unpaid, which the lender-withdrawal check does subtract, so the full 1.013M borrow limit reopened. Every tranche is paid from one shared balance, so the pool sent the attacker the 1.013M belonging to tranche #0's lenders and was left empty.
Setup TX: snowtrace.io/tx/0x19ab145e7f…
Exploit TX: snowtrace.io/tx/0x3f6b23292a…
Attacker: snowtrace.io/address/0x6ff1c…
Victim: snowtrace.io/address/0xe25cb…
Subscribe for real-time alerts at defimon.xyz
Alex• retweeted
1,456x faster: MultiversX vs Bitcoin
Max TPS ever recorded by Chainspect, side by side. One is a flood, the other is a drip.
Who should we compare next? 👇
📊 chainspect.app/dashboard
Alex• retweeted
Fast-growing online brokerages can scale client onboarding faster than verification overhead with Finance Computer’s verified card top-ups.
Tradeville offers verified card funding powered by Finance Computer’s card acquiring to 160,000+ clients.
Embed Finance Computer services.
What?😂😂😂😂 €350?!😂😂😂😂
wtf!
The EU is giving €350 grants to entrepreneurs who are building companies in the AI space
Already know several founders who took the grants and dropped out of their 9th year of university to focus on building full time
They now have almost 12 months of runway for their startups
Incredible things happening in the EU startup scene
Alex• retweeted
⏱️ Final before you blink vs final in an hour
Same transaction. Same job. Some chains are done instantly, others are still working when you come back from lunch.
Which one would you rather wait for? 👇
📊 chainspect.app/dashboard?sor…
Alex• retweeted
‼️ Anthropic and Google researchers found a flaw that lets one crafted packet hijack a server during network boot, before Secure Boot checks the OS.
Almost all servers on earth are affected.
CVE-2026-97631 sits in TianoCore EDK II, code in the UEFI firmware of most servers.
Readers added context they thought people might want to know
The vulnerability is limited to servers actively PXE network-booting with vulnerable EDK II firmware; most servers boot from local disks and are unaffected in normal use, with Intel noting limited impact on supported products.
github.com/tianocore/edk2…
arstechnica.com/security/2026/…
Alex• retweeted
JUST IN: Pentagon tells Congress the Iran military operation has cost American taxpayers $47,100,000,000.00.
Alex• retweeted
Introducing a side project of mine: Pale Dot (@paledotorg)
A 3D journey from Earth to the edge of the observable universe, all the way out to the cosmic web.
Take a guided tour or explore freely.
True-scale Solar System, with planets and moons mapped from @NASA imagery.
Free to use: paledot.org
This November I'm building something new on it for the NASA @SpaceApps Challenge.
Stay tuned!
