Insights on security, privacy, technology, money · Co-founder & Chief Security Officer @CasaHODL · creator of bitcoin.page, statoshi.info
Cyberspace
- Tweets 55,820
- Following 308
- Followers 531,710
- Likes 35,184
Pinned Tweet
Now, more than ever, you should make sure your internet-connected devices remain up-to-date with security patches.
This includes your phone, laptop, desktop, router, modem, television, surveillance system, smart watch, smart speaker, smart mattress, smart refrigerator...
24
22
302
17,994
"What I should do with agentic AI if it's so great?"
An excellent, yet overwhelming question. It's like asking "what should I do with my PC?" or "what should I do with the internet?"
Maximizing a tool's usefulness requires understanding its capabilities + creativity. We're in the early days; it will get easier as folks explore, create guides, and build more user friendly software.
As I've said before, I think the end result of this stuff is essentially a Star Trek style interface where you simply speak (or think) what you want at a computer and it runs or even builds arbitrarily complex software behind the scenes in order to accomplish a given task.
12
9
171
14,389
Jameson Lopp retweeted
Stroke of a Pen
I told Opus 5.5 to read my Bitcoin & monetary-history wikis & make a music video with code only.
it used ElevenLabs for the track.
Then a swarm of agents storyboarded and coded a 3:23 portrait reel. ~75 shots cut on the beats.
Had to do 2 revisions - first the people looked like poorly animated stick figures & it rewrote the rigs.
Then I said use matrix code to make it more interesting.
Impressive!
107
234
970
170,742
Heads up for any companies using Deel: we are seeing highly targeted social engineering phone calls from threat actors posing as Deel employees. They appear to be leveraging info from a data breach Deel experienced in June.
14
20
117
16,521
30 years ago folks told me the internet was dumb because it was just a faster way to send mail.
15 years ago folks told me bitcoin was dumb because it was just for buying drugs on the darknet.
Today folks tell me agentic AI is dumb because it's just for vibe coding apps.
33
31
404
31,256
"Agentic AI tools aren't really for me, I'm not a programmer."
This is backwards. Everyone is a programmer now because the ultimate language translation technology was invented. Your native tongue is now a programming language. You are now limited only by your imagination.
19
14
229
16,511
If you don't have LLM agents clanking away on your behalf while you're eating, sleeping, or otherwise living your life then you're leaving a lot of the value offered by this technology just sitting on the table.
71
21
541
42,381
Jameson Lopp retweeted
Citrea acquires Crest to bring Zcash-style privacy to Bitcoin
@crest_btc, a self-custodial private Bitcoin wallet, becomes Citrea’s flagship product.
Uniting our teams to make privacy the standard for holding and moving a $1.6T store of value. 🧵
1/6
18
22
93
24,132
Trevon, meet Trevon. He has some bad news.
The SEC wants me, Trevon James, to pay $3,277,950 in ill-gotten gains from 2017 Bitconnect to the SEC.
They claim I made $2m from Bitconnect in 1 year and are tacking on $1m in interest
They don’t care that all the BTC (111 Bitcoin) was hacked and stolen from me.
They are still coming after me.
11
5
102
34,672
Wordpress has always been a dumpster fire when it comes to security. I actually worked on a fork of Wordpress 20 years ago as part of a university project.
Turns out Wordpress has had a remote code execution vulnerability for the past 10 years 😬
github.com/WordPress/wordpre…
9
8
109
14,430
bitcoinpoliticians.org/ has been updated with this year's financial disclosures. Only 5% of members of Congress report owning cryptocurrency related assets.
4
2
38
12,348
Jameson Lopp retweeted
🐧🚨 OBSCURA FOR LINUX IS HERE 🚨🐧
Now available for Ubuntu, Fedora (+Atomic Desktops), Arch, Debian, and derivatives.
To celebrate, we’re giving everyone 25% off with code LINUX26.
THAT'S NOT ALL: Obscura is also GPLv3 licensed now, making us fully Open Source!
👇 Links
48
94
702
66,302
Improvements since yesterday:
* Tons of UX glitches / bugs fixed.
* Massive performance improvements on mobile.
* Added ability to drill down to state / region level.
* Added per capita / total attacks toggle.
With 360 Bitcoin wrench attacks cataloged, it's time to take the archive to the next level. Over the weekend I clanked out this interactive dashboard; feedback is welcome!
jlopp.github.io/physical-bit…
19
5
89
16,153
With 360 Bitcoin wrench attacks cataloged, it's time to take the archive to the next level. Over the weekend I clanked out this interactive dashboard; feedback is welcome!
jlopp.github.io/physical-bit…
77
118
769
106,320
Don't trust the clankers.
Scammers found a way to make people drain their own wallets without sending them a phishing link.
They uploaded YouTube tutorials showing people how to build an AI crypto trading bot with Claude.
People followed the tutorial themselves.
Copied the code.
Deployed the smart contract themselves.
Funded it from their own wallets.
And approved every transaction themselves.
Except the “trading bot” had no trading logic.
It was built to send their ETH straight to the scammers.
224 wallets lost 274.6 ETH, worth about $517,000 when it was stolen.
The median victim lost 1 ETH.
Some victims even got an error after getting drained telling them to deposit another 50% to fix the bot.
They literally got people to build, fund and approve their own wallet drainer.
You've got to be very careful this days
20
11
121
43,163
We once spoke of "10X devs" who can outproduce 10 average junior devs.
LLMs will make the gap more extreme. Unskilled vibe coders will have long term negative results as their slop compounds. 10X devs will become 100X devs orchestrating swarms of agents.
23
11
173
19,233
