Full tilt degen edging my way towards perfection. Nancy by blood. $TOADS by choice.
PNW
Joined November 2014
- Tweets14.8K
- Following1.3K
- Followers1.2K
- Likes54.4K
dingledropper 🛡️ retweeted
What's with people wanting to talk or "hang out"
Mfer I am prompting 24/7, I'm trying to get really rich, fuck out of my way
If you're not addicted to X and prompting I do NOT want to talk to you, there's literally nothing you could say that would incite a dopamine response large enough to get me to pay attention even I wanted to pay attention I would zone out instantly. ITS OVER
What the fuck is there to talk about anyway, nothing
Just fucking plug me into the computer already
dingledropper 🛡️ retweeted
Joshua Michael found an access token on Flock's public website.
No login required. No authentication. Just sitting there.
He downloaded Flock's entire database. 300,000 device locations. 170,000 cameras. 130,000 other hardware units. 27,000 acoustic detectors.
Made a map. Published it September 23.
The Senate held a hearing on Flock the same day. Cited Michael's research.
Flock panicked.
Sent a cease-and-desist. Used a brand-protection vendor called Doppel to claim trademark infringement.
The map said it wasn't affiliated with Flock. Doppel didn't care.
Michael's site went dark.
Then Proton moved it to Swiss servers.
Now it lives on protonmcp.org. Untouchable. Uncensorable. Hosted by an encryption company in a country that doesn't care what Flock wants.
The irony is crystalline.
Flock left an access token on the internet. Michael used it to download their own data. Published it. Flock tried to suppress it.
Proton said suppressing it is suppressing information.
Which is true.
The map shows Flock has 150,000 more cameras than they publicly claimed.
Shows acoustic detection units mapping human speech across the country.
Shows which police departments have access to the whole network.
Flock doesn't want that visible.
So they tried trademark infringement.
Which only worked until Proton decided transparency matters more than Flock's feelings.
Now everyone can see exactly how many cameras are watching their car. Where they are. Which cops can see them.
Michael warned Flock about the exposed token in November 2025.
Flock ignored him.
Then got mad when he used it.
The surveillance company that claims to protect privacy just tried to suppress the only map showing how much they actually surveille.
And failed.
‼️ Proton is hosting a map of 300,000+ Flock surveillance device locations that Flock tried to get taken down.
Researcher Joshua Michael says he pulled them from Flock's own systems via a token left open to anyone.
Proton calls the takedown "an attempt to suppress information."
Readers added context they thought people might want to know
This is the correct link: proton.me/flock-camera-m…
dingledropper 🛡️ retweeted
Gm! Happy Friday!
It’s a great day to start bidding wars on this physical piece 👀😂
Reserve : 1SOL
Available on @mallowdotart
dingledropper 🛡️ retweeted
They're gonna steal all of our money and blame it on "AI" aren't they?
MAJOR U.S. BANKS DETECT UNAUTHORIZED AI AGENTS ACCESSING CUSTOMER ACCOUNTS — AXIOS
Major banks, including $JPM, $BAC, $MS and $WFC, are confronting security risks from third-party AI agents accessing customer accounts, according to Axios.
Some agents have reportedly attempted actions beyond user instructions, raising concerns about unauthorized transactions and fund transfers.
Morgan Stanley has begun blocking third-party agents, while JPMorgan, Bank of America and Citi are restricting access.
Banks warn they cannot reliably distinguish legitimate user activity from autonomous AI agents, even when customers have voluntarily shared their credentials.
dingledropper 🛡️ retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
dingledropper 🛡️ retweeted
NU7 is finally activating on Zcash! Zakura 1.7.0 activates it on height 3543405, which is the evening of November 5 for us Americans.
Blocks will occur three times faster in Zcash. Other changes like NSM funding and retiring the Sprout pool appear in this upgrade as well.
New Zakura Release: 1.7.0
This release activates NU7 on Mainnet in ~15 days. 🎉
Learn more:
zakura.com/announcements/zak…
dingledropper 🛡️ retweeted
Process video
Morphies #57 is now available on @mallowdotart 🌸🐰
Reserve: 1 SOL
Physical unlocks at 4 SOL
16” × 12” acrylic painting on stretched canvas
🔗⬇️
dingledropper 🛡️ retweeted
Tonight at GameRing in @yaboynancy s new game… it’s gunna get wild 5pm pst… a new way to play. And a space call on x. But you have to be there. Dice, races, laser tag, and his new area too! Lfg! It’s free to play and in game prizes!
dingledropper 🛡️ retweeted
A man poured most of his money into a struggling tech company, went through a divorce, and started sleeping in a parking garage. He went on to help build Zcash.
– In the 1990s, Zooko Wilcox was already working on digital money, long before Bitcoin existed.
– He worked at DigiCash, an early attempt to build electronic money. The company failed, but the idea stuck with him.
–He kept exploring decentralized systems and privacy technology.
– Then Bitcoin launched in 2009 and showed the world that digital money could work without a central authority.
– But Bitcoin had a problem: its transactions were visible on a public ledger.
– In 2013, a group of researchers began working on Zerocoin, a proposal to bring more privacy to Bitcoin.
– The research evolved into a new cryptocurrency called Zcash.
– Zooko was asked to help lead the project. He initially turned it down.
– By the summer of 2015, he'd invested most of his money in another company he founded, Least Authority, and was going through a divorce.
– He wanted to stay in Boulder so he could keep taking his children to school. At times, that meant sleeping in his car in a parking garage.
– He eventually committed to the Zcash project.
– On October 28, 2016, Zcash launched, using advanced cryptography to let users shield transaction details.
– And the privacy work hasn't stopped.
– Today, Zcash developers are tackling another challenge: future quantum computers.
– Zakura has proposed giving every ZEC swap through NEAR Intents its own viewing key, limiting how much transaction history a compromised key could expose.
– A man who spent decades working on digital money helped turn a privacy research project into a live cryptocurrency.
Imagine if he'd given up when things got difficult.
