the industry spent fifteen years building trustless financial infrastructure for this gentleman

Bruce lee said "Be like water" So i became liquidity.

And babe just last month I outperformed one of the top quant firms

theyr called memory stocks because you'll never forget the liquidations

Bullish news from EF

national cyber crime reporting portal is broken

At this point as a software engineer I'm basically a condom for Claude

you come to me today, on the day i disprove the jacobian conjecture, and you ask me to center a div

there are a lot of benchmarks that suggest 5.6 sol is the best model in the world right now, but the most reliable way to tell is that elon is obsessed with me again

Someone made a song called “Claude’s Plan” inspired by Drake’s God’s Plan. The AI industry has PEAKED here. 😭

fable 5 when you ask it for the bedtime story your grandma used to tell you about exploiting the Hyperliquid multisig

🚨Community Alert: Blockaid Exploit Detection system detected an exploit involving the @jaredsmev MEV bot on Ethereum. The incident resulted from attacker-controlled contracts tricking an automated MEV execution system into granting token approvals, later used to drain funds. 7.5M$ drained. Exploit tx: etherscan.io/tx/0x2be8704f5a… More details in🧵

Proton VPN saw a 150% increase in sign-ups after Telegram was banned in India! @davidgpeterson shared a small statistic about it. Now: The government has blocked his account!

Someone should build a version of polymarket where you can bet on something and then you win the bet if that thing happens

This is a case study in how India’s entire vulnerability disclosure framework is structurally broken. Let me explain; The first broken piece is the legal trap. When Nisarga “hacked” CBSE, he technically violated Section 66 of the IT Act, which criminalises unauthorised access to a computer system. There is no carve-out for security research in Indian law. None. The fact that he reported responsibly to CERT-In gives him zero legal protection on paper. The only thing standing between him and prosecution right now is CBSE choosing not to file a complaint. Compare with the US. The DOJ formally announced in 2022 that “good faith security research” will not be prosecuted under the CFAA. The UK has similar protections. The Netherlands codifies it. Singapore has formal coordinated vulnerability disclosure policies. India has none of this. Every researcher who reports a flaw is literally betting that the affected department is nice enough not to retaliate. Because of this, the best Indian security researchers work for foreign bug bounty programs like HackerOne and Bugcrowd because the legal risk of reporting to Indian government systems is too high. They find Indian vulnerabilities and stay quiet. We have no idea how many critical flaws exist in our digital infrastructure right now that researchers have spotted but won’t report. The second broken piece is CERT-In itself. CERT-In is mandated as India’s nodal cybersecurity body but operates with three structural disadvantages most people don’t know about. It has no enforcement authority. It can issue advisories. It can recommend patches. It cannot force a government department to fix anything. CBSE could ignore CERT-In for the next 5 years and there’s no mechanism to compel action. Its budget is roughly Rs 700 crore annually. For comparison, the UK’s NCSC operates with Rs 5,800 crore. The US CISA operates with Rs 25,000+ crore. India’s cyber defence per citizen spend is one of the lowest among G20 countries. The 2022 CERT-In directive that required companies to report incidents within 6 hours and store logs for 180 days generated huge industry pushback because the timeline was unrealistic. The directive remains active but enforcement has been patchy. It’s the opposite problem from CBSE. Over-regulation of the private sector, under-regulation of the public sector. The third broken piece is the architectural mistake repeated across every system. CBSE OSM had a 17-year-old find authentication bypass. Aadhaar had multiple leaks in 2018, 2019, 2023. CoWIN had a Telegram bot in 2023 pulling personal data using phone numbers. The Income Tax e-filing portal had multiple authentication issues during its 2021 relaunch. The common thread is the same architectural mistake. Government tech is built via tender. Lowest bidder wins. Security is treated as a nice-to-have. Systems go live with 6-month delivery deadlines and 1-month security audits. Patches happen reactively. We are investing heavily in our digital infrastructure. DIGIPIN is rolling out across India. Account Aggregator framework is integrating banking, insurance, mutual funds, and credit data into a single financial data exchange layer. ONDC is integrating thousands of small businesses and consumers. Each of these systems is bigger than CBSE OSM, but our approach to this is tepid. Israel pays its top security researchers Rs 1-3 crore packages through Unit 8200 and post-military startups. The talent stays in country and builds Check Point, Cyberark, Wiz, Palo Alto Networks. India trains 1.5 lakh cybersecurity engineers annually and exports most of them. The US runs Hack the Pentagon and Hack the Army, where they invite ethical hackers to legally test the most sensitive systems and pay $5,000-$50,000 bounties India’s version is closed-loop and opaque. We have no equivalent for Defence, Income Tax, or any major department. 1/2

What if India built GitHub?

There’s not even going to be any money left for quantum computers to steal

Today, India takes a defining step in its civil nuclear journey, advancing the second stage of its nuclear programme. The indigenously designed and built Prototype Fast Breeder Reactor at Kalpakkam has attained criticality. This advanced reactor, capable of producing more fuel than it consumes, reflects the depth of our scientific capability and the strength of our engineering enterprise. It is a decisive step towards harnessing our vast thorium reserves in the third stage of the programme. A proud moment for India. Congratulations to our scientists and engineers.

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.