Guerrilla Coder retweeted
I’ve worked as a janitor in a massive Fortune 500 company’s headquarters for the last 25 years (nepo hire). For the first ten years I worked at the company the men’s room was always clean and easy to maintain. Worst you would get is maybe a couple of drops of piss dribble in front of the urinals from careless shakes, some shit stains in the bowls from greasy shits on the IT floor when they had been pulling all nighters and living off pizza, or soap in the counter when someone got overenthusiastic with the pump.
The women’s bathroom was always the bane of my existence because they would flush sanitary products, cause plugs, and would continue to use the plugged toilet until a mountain of shit and piss formed. That began to change about a decade ago when an Indian guy got hired in C suite, and slowly we started getting Indian managers on all floors. It started with unflushed shitters, but as more and more of them came in it steadily got worse. What used to be a gross, but ultimately low stress reasonably paying job has become a nightmare. The IT floor is the absolute worst.
They will not sit on the toilet and instead stand on the seat to squat. They frequently have explosive diarrhea, which, combined with their habit of squatting, means shit splatters on the seat, floors, and walls. They do not even attempt to clean the mess they made which means the next guy to stand and squat ends up stepping in their assblast and tracking it all over the floor when he walks out of the stall. They wipe with their hands and not the provided paper, I know this because finding shit covered handprints sliding down the walls of the stall is now a daily occurrence.
For some reason, despite not washing their hands near as I can tell, they frequently break open the soap dispenser and steal the giant bags of soap they are connected to. My team and I are the only non-IT employees who will enter the IT floor now, and the turnover is so high that I can’t get a single FNG to stay more than a month. I am considering leaving myself after a quarter century and my entire employment history being with this one company. I am in hell and it smells like feces & microwaved curry.
Guerrilla Coder retweeted
> Be 76 IQ Indian named Mahaveer Raghunathan
> Have need for speed, start professional racing because Brahmin #1
> Finish dead last in first two entry level races in 2012
> Finish 14th on average in next 3 races in 2013
> Finish 12th in F4 race in 2014
> "Pakistani bhenchods keep sabotaging! India racing superpower 2030 SAAR"
> Fake credentials, get into F3. Izzat went up!
> Place 39th across 30 races in 2015, zero points scored, worst performance in history
> Gaslight.exe, it was someone else's fault
> "Brahmin superior to European! I race and beat them!"
> Place 16th in Eurocup, dead last in AutoGP in 2016
> Set a record for most penalties accrued for ignoring rules. Stupid Americans not smart like Indians! This is jugaad SAAR
> Somehow get into F2 in 2017, clearly Indian work ethic paying off
> Place 2nd last, gets lapped, decide to go full throttle after every other racer finished nearly hitting crew workers
> Join Gran Prix, get stuck in cornering pit, spend FOUR MINUTES doing 3-point turn because he didn't know he needed to turn the wheel, manually pushed the car out
> Spend entire series ignoring corners, ignoring rules, ignoring flags. Sets new personal and historical record for violations
> Rules literally rewritten to account for his shitty driving
> Somehow, miraculously gets a hold of an F1 car for testing run
> Trains 3 years, never allowed to qualify
> Turns out he promised to pay for the McLaren he was racing but didn't, gets sued, because anti-Hindu hate or something
> Literally turned down by every race in 2026, fourteen years into his career
This is Indian talent. This is how they operate in every tech company, every CEO
They're all this retarded
retard realizes his chain is full of spam and decides to block me
teapawt.net/LapiuPepe/status/21126…
unavailable
Guerrilla Coder retweeted
Is my Ledger safe, or is there a spy implant in it?
Detecting a spy implant without cracking your device open is possible. I'm working on a device to make it cheap and easy, and will publish the PCB and specs so anyone will be able to build it.
youtu.be/0tLgcshzErI
Guerrilla Coder retweeted
Le tableau de bord de la 2CV électrique résume à lui seul le stade où en est rendu le pays : infantilisé, crétinisé, gadgétisé. Un jardin d'enfants en faillite où des adultescents jouent avec une voiture Fisher Price à la charte graphique semblable à celle d'Idiocracy.
Guerrilla Coder retweeted
Tangem appeals to the lowest common denominator in crypto, that's why it's filled with bagholders from $XRP $KAS and affiliates paid peanuts to shill.
I will make it simple for people to understand today.
In December 2024, @Tangem had a critical vulnerability where its mobile app wrote users' PRIVATE KEYS into logs that got attached to support emails. They deleted early warning posts on Reddit.
Inb4 "muh seedless, muh safe", yes, your keys never touch the app. Your TRANSACTIONS touch it every single time. The attack vector is the APP ITSELF and the OS it runs on. Read on.
Tangem's Nirvana Fallacy is: seatbelts have occasionally failed, therefore remove seatbelts.
Ledger/Trezor clear-signing bug: worst case, the screen lies about transaction parameters.
Tangem's design: the (phone) screen can lie about transactions as the permanent baseline.
>"Hardware Implant"
Physical implants predate Bitcoin. They are device agnostic. The phone on which Tangem's app runs could have an implant too, what then?
"Tangem Genuine Check" was exploited by Ledger already. Counterfeit Tangem Cards are not just theoretical:
ledger.com/tangem-genuine-ch…
>"Clear Signing Bugs"
Clear-signing bugs are a failure of a layer Tangem doesn't have at all. Tangem signs whatever payload the app hands it, every time, by design.
Car airbags have defects, even from Toyota, the most reliable car manufacturer that exists. Tangem's solution is to remove airbags altogether.
Both Ledger and Trezor vulnerabilities are routinely patched.
You can never patch your laser vector:
donjon.ledger.com/blog/bypas…
Or tearing vector:
ledger.com/blog-brute-force-…
...because there's no update channel for users.
Your security page still advertises resistance to "fault injection attempts". Donjon's laser attack IS fault injection. It works and it's unpatchable by you.
[Eureka Moment]
@Ledger and @Trezor clear signing bugs were discoverable BECAUSE the trusted display can be audited against what it signs.
In Tangem's model, there's nothing to audit. Read that back slowly because it's easy to miss. It's evidence the architecture is testable.
Ledger/Trezor is like bank that publishes audited accounts. It will occasionally have an auditor find an error:
1. Construct a transaction.
2. Record what the device displays.
3. Record what the device actually signs (the signature reveals exactly what was signed).
4. Compare the two.
Tangem is a bank that keeps no books. Therefore it will never have an accounting error found:
1. Construct a transaction.
2. Record what the app displays.
3. Record what the card signs.
4. They differ: the app showed one address, the card signed another.
In Tangem's case, there's no vulnerability because Tangem never promised those two things should match. The card signs whatever payload the app hands it. The system is working exactly as designed. It's the default behavior for a compromised OS.
>"And more hardware components can introduce more attack vectors."
So your solution to a purpose-built trusted display driven by minimal firmware (Ledger/Trezor) is a whole ass smartphone, running a full OS, with millions of lines of code and attack vectors.
Genius.
>"muh security hardened app"
You never replied to my original post here because you can't:
teapawt.net/HalesFall/status/20767…
Tangem was also audited by Riscure in 2023, yet you still got smoked by Ledger later:
tangem.com/en/blog/post/tang…
Not even Apple or Google can defend an app from a kernel-level exploit on their own OS, that's why Ledger/Trezor don't try. They verify OUTSIDE the blast radius. Your "hardened app" lives inside it.
[Latest Exploits]
See the videos attached, there's tons more I haven't included. You have neither the money, resources, or expertise to defend from OS exploits. How many of your users are even using Pixel 8 series and later, or iPhone 17 series and later? That matters greatly too.
Your "app" layer is dead-on-arrival. Ledger & Trezor provide mitigation where you cannot.
Tangem is more akin to a software wallet because it implicitly trusts a compromised OS. The secure element is theatre since the card will sign anything passed to it.
A screen makes your hardware wallet safer? Think again.
Recent security incidents tell a different story.
1. Ledger, October 2026 — Hardware Implant
A hidden hardware implant captured recovery phrases directly from the device’s screen and transmitted them over LTE. The Secure Element remained intact.
2. Ledger, August 2026 — Transaction Mismatch
A Clear Signing vulnerability allowed the transaction parameters displayed on the screen to differ from those actually signed.
3. Trezor, May 2026 — Hidden ETH Transfer
A Clear Signing flaw could hide an additional ETH transfer while displaying a routine token transaction.
What this shows:
A screen doesn’t guarantee you’re seeing everything you’re signing. And more hardware components can introduce more attack vectors.
Why Tangem doesn’t need a screen:
• Your phone displays transaction details through a security-hardened app.
• Multiple protection layers help defend against UI manipulation, malicious overlays, and runtime attacks.
• Private keys remain inside the secure chip.
• No screen, no battery, no unnecessary hardware complexity.
tangem.com/en/blog/post/mobi…
Security is about protecting the entire system, not just adding more components.
Simply Tangem
Guerrilla Coder retweeted
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
Guerrilla Coder retweeted
PSA the ledger incident isn't limited to Asia
This is a device purchased in store from an official reseller in Europe (a legitimate device doesn't have any of these cables as can be seen in picture 2)
This even seems to be an old version of the 'spy implant' even though the device was purchased a couple of weeks ago. The newer versions usually hide the implant by the screen so it's easier to miss
What's interesting is that this compromised ledger never transfered funds to an exploiter. Either the device didn't work or they were waiting for a more widespread usage of the comprised devices?
If you own a ledger that didn't directly come from the ledger online store make sure to not just rely on the software genuinely check by ledger but to actually open up the ledger yourself to make sure its original, again there are reported cases in Asia, south America and now Europe as well.
@MagicalTux made some useful videos on how to open the ledger and what to look for.
