Frogs-n-Dogs Its it time? It's time. -- https://teapawt.net/t.co/KtNpMvXOBj
Petrópolis, Brazil
Joined February 2018
- Tweets11.3K
- Following359
- Followers700
- Likes76.2K
Krumlar retweeted
The next 12 months of gaming and game development will be insanely cool and empowering!
Krumlar retweeted
It’s like the screenwriters aren’t even trying anymore. Literally just giving the audience the same copypasta from the 2022 season.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Krumlar retweeted
Most people still haven't let reality sink in. The "future of cyber attacks" isn't some kid in his basement running ChatGPT scripts hoping to find a lucky opening….
No the future is North Korean operatives getting hired onto a major tech company's SysOps team and working there for months behind hyper-realistic AI avatars and cloned voices…backed by multimillion-dollar server farms running fully abliterated models trained for the sole purpose of breaking defenses.
Or it's an attacker sitting at root level inside the IoT security camera on your office wall watching your screen
Or it's a single email with hidden instructions that your company's own AI assistant reads before quietly sending your internal files out the door without a single click
Or it's a video call where your CFO and three coworkers tell you to wire $25M…except none of them are real.
Or it's your CEO's cloned voice calling the IT help desk at 6am, asking to reset his login because he's "locked out before a board meeting."
Or it's an AI that studied years of your team's Slack messages and now writes phishing emails that sound exactly like your boss sent to every employee at once.
It's a different game…and most companies are still defending against the kid in the basement
Everyone’s immediate reaction is denial “MY crypto platform of choice is the safe one. It can’t happen to me”
With AI, every crypto platform has very likely already been penetrated…or have swarms of agents trying 24/7
The attackers are just sitting, ironing out the fine details, waiting for the right moment to pull the rug. You WILL be pwnd.
Krumlar retweeted
If you look closely enough, breakthroughs in everything are accelerating exponentially.
An exponential always starts off looking small.
this might be my last normal tweet before biotech goes vertical
i'm not a whistleblower. I don't work at Lilly, Novo or any of the big labs
but there is a massive shift happening in human biology right now.
it's sitting in press releases and almost nobody reads them
the last 6 months alone:
- a once-daily pill roughly doubled median survival in metastatic pancreatic cancer (13.2 vs 6.6 months)
- a one-time gene editing infusion cut hereditary angioedema attacks 87%, and 62% of patients stayed attack-free and off all other prevention for 6 months
- a one-time gene edit for cholesterol dropped LDL up to 62%, and it held for over a year
- a personalized mrna vaccine beat keytruda alone in a 1,137 patient melanoma phase 3
- retatrutide hit ~28% weight loss in a phase 3
- an ai-designed drug entered phase 3
- a pill that regrows hair passed its second phase 3
- an immunotherapy that could let some rectal cancer patients skip surgery, chemo and radiation just got fda approved
- a man lived 271 days off dialysis on a pig kidney
- human cells were caught passing chromosome-sized chunks of DNA to their neighbors, and it changes how the neighbors behave
we are on the verge of an era where the human body is a software problem and the update cycle gets shorter everyday
stick around, it's going to get weird
bio/acc
Krumlar retweeted
Reading the reconstructed bytecode of the Binance EIP-7702 sweeper (`0x63e8...6fae`) is wild.
This wasn't a generic drainer. It was custom-engineered for Binance 14's architecture:
- Leaves exactly 1 ether behind (`bal - 1 ether`) when sweeping ETH so Binance's automated hot wallet queue wouldn't error on gas and trip alarms.
- Uses raw `staticcall` + `continue` loops with custom error codes (`SweepItemFailed`) so one bricked or blacklisted ERC-20 wouldn't revert the $6B batch.
- Includes a custom `callExecute` function to impersonate Binance 14 as controller of an external vault holding $823M in USDC.
They leave a comment: "robberies could be prevented if getaway cars were slower."
You can't fully blame EIP-7702, but it sped up the attack. Without 7702, draining 64 tokens plus an external $823M vault from a live exchange hot wallet meant fighting moving nonces across 70+ transactions. Defense systems would've killed it after tx #3.
With 7702, Lazarus sprayed 50 consecutive nonces in one type-4 payload, turned an EOA into a custom proxy, and atomically swept billions in a single block.
Ethereum core devs built the ultimate getaway car. Surgical state-sponsored engineering.
This could be etched onchain:
`if (bal > 1 ether) { to.call{value: bal - 1 ether}(""); }`
The Binance $5.6B drain is a masterclass in modern EVM exploitation.
It wasn't a complex logic bug. It was an EIP-7702 delegation hijack:
1. Setup: Attacker funds 0x7c86 via Tornado Cash, deploys a sweep contract (0x63e8), and runs three live dry-runs on external wallets.
2. Execution: Attacker submits an EIP-7702 batch with 50 pre-signed authorizations (nonce n to n+49) to hit Binance 14's moving nonce window.
3. One authorization hits. Instantly, Binance 14 (an EOA) is reprogrammed to run the attacker's contract bytecode.
4. Execution looks totally organic: Binance 14 sweeps itself clean. Internal threshold alerts don't trigger because, from the nodes' perspective, the hot wallet is just executing its own transaction.
5. Binance 16 immediately auto-refills 28,000 ETH due to automated treasury rebalance scripts, feeding the exploit loop.
The cold truth: you cannot forge an EIP-7702 delegation list.
For this to execute, the attacker already held the raw private key or unconstrained signing access to Binance 14's HSM/KMS.
But hey, 5.64 billion drained across ETH, BTC, and Tron. 2.54 billion frozen by Tether, Circle, Ripple, and World Liberty within hours.
Code is law until the stablecoin admin keys log in.
Binance got bailed out by the very centralized choke points the cypherpunks warned you about.
Hardware wallets leak your home address.
Centralized exchanges leak the keys to the kingdom.
Self-custody on native, non-delegated chains remains the only honest baseline.
At least you know what to avoid.
Krumlar retweeted
I don’t think people realize how selfless and wonderful the StackOverflow’s founders were.
Unlike reddit, x etc they insisted ALL of their content will be 100% open, nothing will ever be locked up in walled garden.
They made it a point by even offering structured data downloads!
They didn’t cared people cloning the website. They didn’t worry about putting the whole monetization thing at risk.
It was a true hacker spirit in it’s purest form.
Most folks won’t be able to grasp how hard this is. You are on top of the world. Millions of people depend on you daily. You have the rarest opportunity to rack in billions. And you still stay true to your principles.
This exactly in turn later enabled AI revolution. I still remember downloading entire SO archives and preparing it for pre-training while Reddit and others went onto lawfare and firewalling the content. Note that this was the content their users - not reddit employees - had created for free and voluntarily to help others and the world. But they locked it all up for profiting from it personally.
SO did none of that. I think they knew they will be sacrificed at the altar. Yet it will exactly serve the intent of their founding principles to help others and the world, now through AI, even at bigger scale.
All of today’s models are built upon efforts of such true pure hackers who spent their days and years to create training data for AIs. I was a proud SO contributer for many years and there are couple of times while testing models I did felt that models might have used my answers 😇.
Hats off to @codinghorror and @spolsky and so many builders and hackers at SO for moving the world forward, one revolution at a time 🫡.
Krumlar retweeted
The strongest form of AI doom is some kind of novel self replicating nanobot that rapidly transforms the planetary ecology wiping out all previous life.
This has actually happened once before.
It is why we have an oxygen atmosphere today
Cyanobacteria killed 99% of all life
Krumlar retweeted
Se você costuma compartilhar links do X antigo Twitter deve ter reparado em uma novidade. Recentemente a plataforma passou a embutir um código de rastreamento nos links copiados que serve basicamente para identificar quem gerou o link e o momento exato da cópia.
Para quem preza pela privacidade a solução é simples basta apagar tudo o que aparece no link após a "?".
Vale o destaque para o parâmetro "s" que revela qual dispositivo você usa. O código de final 19 indica Android, o 20 aponta para iPhone e o 46 indica navegadores de computador.
Pode deletar essa sequência inteira sem medo. O link original continuará funcionando perfeitamente e você navega com muito mais privacidade.
Krumlar retweeted
Your X links are snitching on you.
- s=46 means iPhone
- s=20 means desktop
Some people now see an "a=" code too, reportedly tied to their account.
Delete everything after the "?" before you share.
Example below 👇
Krumlar retweeted
A marketplace that blocks people instead of addressing criticism is a marketplace without a spine
Krumlar retweeted
i've spent an unhealthy amount of time on agentic video editing, here's everything i learned:
video editing is 100% solved. we're pushing out hundreds of videos a day with agents and have replaced almost all of our editors
drop every limiting belief you have about agentic editing, any style of creative is possible
here are the best models for video editing right now:
1. GPT 6 Astra (best taste by far, but also the most expensive)
2. Opus 5.5
3. Gemini 4 Argon
the best all around model is Opus 5.5
and don't waste your time on editing app MCPs like CapCut or DaVinci Resolve. they're slow and burn a ton of tokens compared to a custom workflow built for your specific use case
all editing is moving to the terminal + organized file systems
the most valuable (and most time consuming) part is having your best editors train your harness so it learns from its mistakes and can one-shot creatives
your best editor becomes 100x more leveraged once you teach them how to use Opus 5.5 in their workflow and build skills around their process
in 6 months most teams will be 1 creative engineer managing everything with agents
what a time to be alive..
A few thoughts on agentic video editing I’ve had over the last few days:
1. 99% of ads should be edited agentically now. If your editors are still editing in the timeline, they’re falling behind. I got a message from my senior VE saying that he’s putting out 5x edits/day now at the same quality he was before.
2. The conversation with video editors will be uncomfortable because the timeline is all they’ve ever known. Some will be hesitant and some will be fearful for their job. I think the best way to address this is head on. The tech is inevitable, but having taste is still going to be incredibly valuable to train and give feedback to agents. Those who have this will become more valuable, those who don’t will struggle.
3. Opus 5.5 can natively edit all of your ads without needing any MCPs or plugins. I’ve tried the alternatives and couldn’t find anything that was significantly better than doing everything inside of Claude.
4. Have your senior editor(s) build skills for each style of edit (e.g. mashups, UGC, AI animations…). You can build these by feeding 4-5 inspo edits to Claude and tell it to make a skill out of it. I prefer building lots of mini-skills to one big video editing skill, so that the context stays as relevant as possible.
5. Once you have a base skill (e.g. ugly ads edits), the best way to train it is through feedback loops. Have the skill re-edit the last 25 ads each senior edited then put them in an artifact, and have the senior VE give feedback on each. Keep doing this until the skill is refined and it understands what a good edit is.
6. If you do this, there’s no reason why you shouldn’t be able to make edits that need little/no feedback. Most of ours are approved after v1 or v2, sometimes v3.
7. Only A-player editors should be training the skills.
8. Re adoption in the team, the AI champion builds the v1. Then get out of the way. I’m not the best editor on my team, so my job is to build the harness that lets the best editors train the skills, not build the skills myself.
9. If you want to supercharge this process, have your top editors record their screen as they edit. Turn on Gmeet or loom and get them to narrate the reasoning behind their process. E.g. why they chose this cut, pacing or b-roll clip…this is all context that gets fed into your skills.
10. It takes time to build, train and refine these skills. You have to go through the dip to get out the other side. Budget time in for senior VEs to work on this - otherwise you’ll end up with skills that put out subpar edits and don’t save you much/any time.
11. Operate under the assumption that this is the worst video editing is ever going to be. Opus 5.5 can do most of our editing today…what will Opus 6/Fable 6 be able to do? The editing skills you build are only going to become more valuable as the tech evolves.
I still don’t think people realise how big video editing being unblocked is. Things that I thought were 3-6 months away are now on the table.
Will continue to share more as I learn. CRAZY, crazy times.
Krumlar retweeted
there is a computer at the end of time reaching back to modify our world so that we are guaranteed to build it. there are signs everywhere if you have the eyes to see.
Krumlar retweeted
Блять чуваки, эффект Манделы реально!
Я родился в СССР в 1976, я блять флаг СССР видел тысячу раз. Не было сука звезды — никогда ее не видел над серпом и молотом (то есть верхний вариант — то что я видел все детство и юность)
Сейчас решил проверить и охуел. Звезда везде (как во втором варианте). Все сука картинки в Гугле с ней… кроме как сменой версии вселенной объяснить это сложно
Охуеть!
A new Mandela Effect is rising.
Since when does the Soviet flag carry a star above the hammer and sickle?
Many of us remember it clearly without one.
If you recall the flag without the star… you may be from the old Earth.
Shifted into this denser, clown-world timeline.
The memory itself is the proof.
The body knows.
The soul knows.
We are not crazy.
We are remembering.
I miss the old Earth too.
Yet we are here now to hold the Light and anchor a higher one.
Who else feels this?
Krumlar retweeted
No star. Ever.
I’m 76. Lived through the entire Cold War era. Saw the Soviet flag too many times to count.
What do *you* remember?
The Mandela Effect fascinates me, but the idea that AI images have overrun reality on the internet seems far-fetched.
This one bothers me much more than the Fruit of the Loom Cornucopia.
A new Mandela Effect is rising.
Since when does the Soviet flag carry a star above the hammer and sickle?
Many of us remember it clearly without one.
If you recall the flag without the star… you may be from the old Earth.
Shifted into this denser, clown-world timeline.
The memory itself is the proof.
The body knows.
The soul knows.
We are not crazy.
We are remembering.
I miss the old Earth too.
Yet we are here now to hold the Light and anchor a higher one.
Who else feels this?
Krumlar retweeted
Many of you don't understand how serious this is, so let me break it down.
In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force.
For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew.
About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea.
They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science.
Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption.
Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean.
And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea.
So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited.
Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved.
But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
Krumlar retweeted
The Libertarian Party candidate for North Carolina state senate is currently in the midst of an armed chase and shoot-out with the cops, keeping us posted with live tweets:
Krumlar retweeted
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.
i've suspected this for months but last week something happened that made me finally check.
i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.
i connected my iPhone to my MacBook and ran Claude Code that same night.
it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway.
what it found:
→ TikTok activated the microphone 347 times while the app was "closed" in the background
→ Instagram → 211 background activations
→ Facebook → 189
→ Snapchat → 94
every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp.
Claude Code pulled the full keyword cache:
→ "breakup" — tagged 4 hours before her feed changed
→ "moving out" — from a conversation with my mom last Tuesday
→ "wedding venue" — from a call with my sister about her engagement that i never searched once
→ "protein powder" — said it out loud to my roommate, had ads for it within an hour
→ "flight to tokyo" — mentioned it at dinner, saw travel ads the same night
those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone.
the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours.
then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently.
i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit.
what i did:
→ revoked microphone access from every app that doesn't need it to function
→ disabled background app refresh for TikTok, Instagram, Facebook, Snapchat
→ turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7
→ revoked "nearby interaction" permission which uses ultrasonic audio between devices
Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone.
within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real.
the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
Readers added context they thought people might want to know
2 days before, OP claimed to have found spyware on his "wife's phone":
x.com/starmexxx/stat…
Now, in this post, he talks about his "girlfriend":
x.com/starmexxx/stat…
OP has a history of fake AI content:
"Spy camera" found in hotel room: x.com/starmexxx/stat…
Spyware on "friend's computer": x.com/starmexxx/stat…
OP selling AI products: x.com/starmexxx/stat…
Flagged as AI: x.com/i/grok/share/b…
Krumlar retweeted
OTC is now partnered with @birdeye_so.
Birdeye is a real‑time on‑chain analytics platform that tracks token prices, trades, liquidity, holders, and wallet activity across Solana, powering the majority of the data side of things here at OTC.
New partner integration: OTC.
Birdeye token links are now accessible directly from OTC token pages, giving users a seamless way to dive deeper into on-chain activity - from trade flows and holder distribution to smart money movements and more.
@otc_labs is a Solana protocol designed to turn trading fees into assets for its users. Its launcher directs each coin’s trading fees toward tokenized equities for that coin’s holders, while OTC Desks are NFTs that earn a share of protocol revenue in the same assets.
More on-chain insights, right where you trade.
