gud tek, gud opsec & gud www things, foss mfer

ONCHAINMANIAC - e/acc retweeted
if I had to look for a job on @LinkedIn I would fucking kill myself
1,223
5,918
55,822
2,873,310
ONCHAINMANIAC - e/acc retweeted
Maybe it’s the Gen-Z in me, but i fully don’t care about privacy. I am post-privacy. I am giving OpenAI access to all of my finances, all of my health data, everything, I don’t care anymore
A preview for Pro users: a new personal finance experience in ChatGPT. Pro users in the U.S. can securely connect financial accounts, see where their money is going, and ask questions based on the information they choose to connect. Your full financial picture, now in ChatGPT.
899
392
9,738
1,393,322
ONCHAINMANIAC - e/acc retweeted
Today I was fired from Coinbase. During my 6 years at the company I was responsible for freezing customer accounts for no reason
1,080
2,736
61,596
2,134,818
ONCHAINMANIAC - e/acc retweeted
1 million wallets $121M revenue 0 KYC forms
6
22
153
11,424
ONCHAINMANIAC - e/acc retweeted
When you’re ever having a bad day just remember there is mfers in this app who used to be worth 8 figures And now they shill a different 5m topper every other week with a casino paid ref link tweet every now n then too Crypto life comes at u fast 🤣🤣🤣🤣
7
5
36
1,406
ONCHAINMANIAC - e/acc retweeted
Show your ID to protect kids Show your ID to protect kid Show your ID to protect ki Show your ID to protect k Show your ID to protect Show your ID to protec Show your ID to prote Show your ID to prot Show your ID to pro Show your ID to pr Show your ID to p Show your ID to Show your ID t Show your ID Show your I Show your Show you Show yo Show y Show Sho Sh S Su Suc Suck Suck m Suck my Suck my b Suck my ba Suck my bal Suck my ball Suck my balls Suck my balls P Suck my balls Pa Suck my balls Pal Suck my balls Pala Suck my balls Palan Suck my balls Palant Suck my balls Palanti Suck my balls Palantir
242
3,392
44,857
2,220,184
ONCHAINMANIAC - e/acc retweeted
Mr Beast x Bitmine Now $ETH has no choice but to hit $10k.
39
83
787
58,854
ONCHAINMANIAC - e/acc retweeted
Ethereum itself must pass the walkaway test. Ethereum is meant to be a home for trustless and trust-minimized applications, whether in finance, governance or elsewhere. It must support applications that are more like tools - the hammer that once you buy it's yours - than like services that lose all functionality once the vendor loses interest in maintaining them (or worse, gets hacked or becomes value-extractive). Even when applications do have functionality that depends on a vendor, Ethereum can help reduce those dependencies as much as possible, and protect the user as much as possible in those cases where the dependencies fail. But building such applications is not possible on a base layer which itself depends on ongoing updates from a vendor in order to continue being usable - even if that "vendor" is the all core devs process. Ethereum the blockchain must have the traits that we strive for in Ethereum's applications. Hence, Ethereum itself must pass the walkaway test. This means that Ethereum must get to a place where we _can ossify if we want to_. We do not have to stop making changes to the protocol, but we must get to a place where Ethereum's value proposition does not strictly depend on any features that are not in the protocol already. This includes the following: * Full quantum-resistance. We should resist the trap of saying "let's delay quantum-resistance until the last possible moment in the name of ekeing out more efficiencies for a while longer". Individual users have that right, but the protocol should not. Being able to say "Ethereum's protocol, as it stands today, is cryptographically safe for a hundred years" is something we should strive to get to as soon as possible, and insist on as a point of pride. * An architecture that can expand to sufficient scalability. The protocol needs to have the properties that allow it to expand to many thousands of TPS over time, most notably ZK-EVM validation and data sampling through PeerDAS. Ideally, we get to a point where further scaling is done through "parameter only" changes - and ideally _those_ changes are not BPO-style forks, but rather are made with the same validator voting mechanism we use for the gas limit. * A state architecture that can last decades. This means deciding, and implementing, whatever form of partial statelessness and state expiry will let us feel comfortable letting Ethereum run with thousands of TPS for decades, without breaking sync or hard disk or I/O requirements. It also means future-proofing the tree and storage types to work well with this long-term environment. * An account model that is general-purpose (this is "full account abstraction": move away from enshrined ECDSA for signature validation) * A gas schedule that we are confident is free of DoS vulnerabilities, both for execution and for ZK-proving * A PoS economic model that, with all we have learned over the past half decade of proof of stake in Ethereum and full decade beyond, we are confident can last and remain decentralized for decades, and supports the usefulness of ETH as trustless collateral (eg. in governance-minimized ETH-backed stablecoins) * A block building model that we are confident will resist centralization pressure and guarantee censorship resistance even in unknown future environments Ideally, we do the hard work over the next few years, to get to a point where in the future almost all future innovation can happen through client optimization, and get reflected in the protocol through parameter changes. Every year, we should tick off at least one of these boxes, and ideally multiple. Do the right thing once, based on knowledge of what is truly the right thing (and not compromise halfway fixes), and maximize Ethereum's technological and social robustness for the long term. Ethereum goes hard. This is the gwei.
1,079
1,065
7,489
906,072
ONCHAINMANIAC - e/acc retweeted
Replying to @tyler
If Bitcoin Breaks 100k you can bet it will break a million:)
417
4,177
16,234
ONCHAINMANIAC - e/acc retweeted
CT is actually so funny 😂😂 shits better then Netflix 😂
4
5
49
2,322
ONCHAINMANIAC - e/acc retweeted
Open source, only. Open source, always.
10
65
656
26,224
ONCHAINMANIAC - e/acc retweeted
New submission. @phrack Congrats @ProtonPrivacy I know @TutaPrivacy will r/t lol. ==Phrack Inc.== Volume 0x11, Issue 0x49, Phile #0x09 of 0x12 |=------------------------------------------------=| |=--=[ PHRACK PROPHILE ON ProtonMail ]=--=| |=------------------------------------------------=| |=---------------=[ Phrack Staff ]=---------------=| |=------------------------------------------------=| |=---=[ Specs Name: Proton AG (formerly ProtonMail) Handle: ProtonMail, Proton Handle origin: "Proton" from CERN proximity marketing AKA: "Swiss Privacy Company" (contested) Country: Switzerland (incorporation) / Global (operations) Website: proton.me GitHub: ProtonMail (selectively open source) Founded: 2013 |=---=[ Background Proton Mail launched in 2013 riding the Snowden wave, marketing themselves as the "secure email" solution based in privacy-friendly Switzerland. Founded by CERN scientists, they leveraged that academic credibility hard. Initial crowdfunding raised $550k from privacy advocates who believed the pitch. The reality check started September 2021 when they logged French climate activist IP addresses for Swiss authorities, contradicting their "no logs" marketing. They retroactively edited their privacy policy after getting caught. Their defense? "We never said we don't log IPs under legal orders" - except they literally did in their marketing materials. |=---=[ Technical Architecture Client-side encryption using OpenPGP.js - except: - Webmail serves JavaScript that could be backdoored per-user - Mobile apps are closed source blobs - Bridge software for desktop clients: partially open - No reproducible builds for verification - Zero-access encryption claim relies on trusting their servers The "Swiss privacy" angle? Switzerland has mutual legal assistance treaties (MLATs) with 70+ countries. They're also not EU, meaning no GDPR protection. Their Zug incorporation is more about taxes than privacy. |=---=[ Compliance Track Record 2021: Logged French activist IPs, led to arrests 2022: Suspended accounts flagged by Europol without user notification 2023: Confirmed providing recovery emails to authorities 2024: Implemented automated scanning for "illegal content" 2025: Mass suspension of Korean journalists/whistleblowers (June) 2025: Account terminations without explanation (August-September) Pattern: Claim technical inability to comply, then comply anyway when pressured. Their transparency reports show thousands of data requests honored annually. |=---=[ The Whistleblower Problem August 15, 2025: Proton disables account used by anonymous source providing documentation about Korean government surveillance programs. August 16, 2025: Multiple journalists report suspended accounts after receiving leaked documents about Ministry of Unification operations. Proton's response: "Terms of Service violation" with zero specifics. Appeals process: Kafka-esque bureaucracy requiring government ID to restore "anonymous" accounts. The KISA (Korea Internet & Security Agency) connection appears in their compliance logs but Proton refuses to confirm or deny specific government requests. Classic transparency theater. |=---=[ Business Model Reality "Free" tier: You're the product being sold as "privacy-conscious users" Paid tiers: $120-360/year for basic functionality VPN bundle: Separate subscription because synergy is expensive Drive/Calendar: Half-baked addons to justify price increases Venture funding: $17M from Charles River Ventures and FONGIT Translation: Your "privacy company" answers to VCs who need ROI. Marketing budget dwarfs security audits 10:1. They spend more on YouTube sponsorships, than on reproducible build infrastructure. |=---=[ Security Theater Examples "End-to-end encrypted": Only between Proton users. External email? Plaintext. "Zero-access encryption": They generate and store your private keys. "Anonymous signup": Requires SMS or payment verification. "Onion site": Serves the same backdoorable JavaScript. "Open source": Core components only, apps remain closed. PGP implementation quirks that break compatibility with standard clients because "enhanced security" sounds better than vendor lock-in. |=---=[ Alternative Reality Check Proton positions itself as the privacy alternative while: - Operating centralized infrastructure (single point of failure/surveillance) - Requiring trust in their good intentions - Actively complying with government requests - Preventing users from verifying security claims - Marketing to dissidents while cooperating with their prosecutors Real alternatives require: - Self-hosted infrastructure - Federated protocols - Client-side encryption with user-controlled keys - No single entity controlling the service |=---=[ The 2025 Incident Analysis The pattern is clear: Proton receives government request, suspends accounts, claims ToS violation, provides no evidence, demands government ID for appeals. The infrastructure knows who you are (payment info, IP logs under "legal compulsion", device fingerprints) while marketing anonymity. When confronted, they pivot to legalese about Swiss law requirements while continuing to market themselves as the privacy solution. The cognitive dissonance is profitable. |=---=[ Bottom Line Proton Mail is security theater for people who want to feel protected without doing the work. They're a centralized email provider with good marketing and selective compliance with government requests. Using Proton for sensitive communications is like using a "privacy VPN" that logs everything - technically encrypted, practically surveilled, definitely not what was advertised. Want actual security? Run your own infrastructure. Can't? Then understand you're trusting someone else's promise, and Proton has repeatedly shown their promises are marketing copy, not operational reality. The Swiss privacy paradise is a myth. Proton is just Gmail with better marketing and higher prices. At least Google is honest about reading your email. |=---=[ References - Swiss Federal Act on International Mutual Assistance in Criminal Matters - Proton Transparency Reports (note the careful wording) - Case No. 2021/7689 (Paris Court of Appeal) - MLAT agreements database - Their own blog posts contradicting their marketing - Warrant canary: Conspicuously absent Kill the mythology. Email is fundamentally broken for privacy. Proton is just monetizing the cope. |=-------------------------------------------------=|
Hey @ProtonPrivacy, why are you cancelling journalists and ghosting us. Need help calibrating your moral compass❓ First therapy session is for free 😘 Regarding phrack.org/issues/72/7_md#ar…
20
97
430
42,659
ONCHAINMANIAC - e/acc retweeted
Replying to @_ck007
They are selling mog to pay off their 44% interest loans and that is making the price of mog go up 😹🤌🫵 It is simple maths.

ALT Yup Dance GIF

3
2
11
529
ONCHAINMANIAC - e/acc retweeted
You should have the power to change anything and everything about your computer, your framework, and your server. End-to-end open source is your ticket to tell Apple — or anyone! — to go fuck themselves when they seek to dictate how you compute. youtube.com/watch?v=gcwzWzC7…
66
180
1,970
141,327
ONCHAINMANIAC - e/acc retweeted
the psyops against mogging and MOG over the past 3 years will be studied for decades by computer scientists, economists, historians, sociologists, anthropologists, and psychologists an entire site full of people, completely one-shotted into dismissing and then missing one of the most important movements in human history a new coordination and trust layer for humanity, powered by a decentralized, low-to-no inflation asset which is natively programmable. a new kind of economic collateral the likes of which the world has never seen but a mass psychosis led them all to believe it is worthless in unison with no redeeming value. they believed it must die. VC talking points became gospel as they eagerly bought their bags. their prophets led them to search for revenue, but they lost logic in the process. they fell for their easy narratives and missed the obvious source of existing value assignment and fund flows which have existed since the very emergence of crypto. the value proposition which underpinned everything they first believed in, then came to reject now, the revolution we forced onto Wall Street actually worked. they are here, and we the barbarians are at the gate, but many soldiers have been lost. they are still alive, but they live in a state of dread. perhaps many would rather be dead no amount of soma can ease the pain of realizing they were very likely wrong. they missed the most obvious adoption arc they spent years desperately searching for. and they loudly and gloriously panned the one network and asset which actually had the best shot at it despite this malaise, there is an antidote. a simple one. but they shall refuse to take it because it doth taste too bitter. the very thought of it makes them physically ill the antidote is to bid. bid MOG 🫵😹 *the end*
10
20
91
4,016
without privacy, we lose money. without privacy, we lose speech. without privacy, we lose love. without privacy, we lose freedom.
without privacy, we lose money. without privacy, we lose speech. without privacy, we lose love. without privacy, we lose freedom.
2
88
ONCHAINMANIAC - e/acc retweeted
do you understand?
20
51
197
11,410
ONCHAINMANIAC - e/acc retweeted
Privacy is the base of freedom. So don't let anybody take either of it away. RESIST THE SLAVE MIND.
3
12
69
2,457
ONCHAINMANIAC - e/acc retweeted
People go broke to Prove they are not broke to people who are broke.
52
32
376
18,900
Good interview from Roman Storm. His trial is coming soon in 10 days. Privacy of messaging without backdoors is now widely accepted, and many in business and government regularly use tools like Signal. Given the extremely regular hacks of centralized databases that we see today, improving privacy in other domains (including payments, identity, AI) is not something to be "balanced" against security, it's a necessary _part_ of our security. I hope 🇺🇸can lead the way in making a more secure world with stronger freedoms and fewer data leaks a reality. The first step is sending a clear signal to developers that this important work is welcome. #FreeRomanStorm
2
108