security & 🪃 founding eng @anchorage // prev co-founder @bastion, cto @a16z crypto, sec infra @facebook, & sec @docker // work hard, be kind
- Tweets 393
- Following 972
- Followers 3,804
- Likes 1,088
spear phishing continues to get more and more sophisticated, and I had an impressively compelling one arrive via mail this weekend pretending to be Ledger.
Lots of detail (my name, address, timely reference to quantum computing, legit Ledger physical address & website links, Ledger devices, etc) is correct and incredibly convincing -- but there's a few things to catch so you don’t get got:
(my info and malicious QR code redacted)
1/3
5
1
8
753
- Ledger never handles firmware updates this way -- only ever on its own website / software
This is the most important: it should set off internal alarms when you get contacted via phone / text / email / snail mail, and not through an authenticated login or otherwise usual flow with the product
also Ledger keeps a handy phishing website to help you spot and report known phishing attempts (this one's there too): ledger.com/phishing-campaign…
- the letter expresses urgency in "upgrading" by the end of the month -- typical of phishing to get you in a rush so you don't stop and think about how this might be phishing (or go check the website above, or do a web search, etc)
2/3
2
3
260
some other oddities that help as signals:
- the mailing envelope had a from address in Michigan (not an official Ledger address)
- also, while you shouldn't click through on the QR code, when I checked its URL it led to a .vg domain: British Virgin Islands -- and not an official Ledger domain
stay safe out there! When in doubt, don't take the bait to rush to action -- instead take a breather and proceed carefully
3/3
1
202
Riyaz Faizullabhoy retweeted
Contribute compute with power.
Nexus Chat: Why the Nexus CLI Unlocks Scalable Compute
The Nexus CLI is ideal for those who want to run Nexus nodes on multiple servers, or in environments when a web browser just isn't enough.
piped.video/watch?v=B5D92Oue…
458
350
616
94,418
Concerned about wallet security for your product but don't know where to start?
Check out our simple 5 item checklist of must-haves 👇
5 essential security features all embedded wallet provider should have:
🔐 secure hardware-based key generation
🛡️ hardware-enforced policy verification
🔄 rigorous code update processes
🔍 advanced transaction risk analysis
📊 full auditable log trails
bastion.com/blog/5-essential…
2
15
2,550
Riyaz Faizullabhoy retweeted
We’re making big things happen with HIFI and are thrilled to welcome them to the Bastion platform as they usher in the next generation of payments and payouts at scale.
Learn more: blog.bastion.com/blog/bastio…
4
15
4,132
SEAL is a massive help to whitehats — and end users as a result!
Three months ago, we released the Whitehat Safe Harbor Agreement, a legal framework to protect whitehats who intercept and return funds.
One of the most common questions we got was, "what happens if someone threatens to sue me anyways"?
10
962
The formation of the Crypto ISAC marks an incredible milestone for the crypto ecosystem, and we're excited to take part and join forces with some of the greatest security minds in our industry.
Here's to working together and up-leveling security to keep users safe, more below👇
We're honored to be a supporting member of @Crypto_ISAC, and continue our commitment toward a more trustworthy ecosystem.
Read more about the initiative, the community involved, and why this is a crucial step toward driving adoption and security. blog.bastion.com/blog/were-p…
9
1,046
Riyaz Faizullabhoy retweeted
Wallets are now a commodity. And the differences that most providers focus on are ultimately negligible when it comes to business impact.
blog.bastion.com/blog/embedd…
1
1
1
707
Riyaz Faizullabhoy retweeted
In the next two weeks, the House of Representatives will vote on the most important piece of crypto legislation to date: FIT21. We’ve long called for regulatory clarity that protects consumers and innovation and the FIT21 Act will do just that.
Americans have embraced digital assets, but the current regulatory approach too often limits innovation and privacy without actually addressing the solutions needed to protect consumers or tackle illicit activity.
FIT21 will help stamp out scams, ensure oversight of crypto exchanges, and protect American consumers by implementing strict rules on crypto trading. FIT21 has bipartisan support because it tackles these issues.
I encourage everyone who believes in the power of blockchain technology to support this legislation. The best thing to do is get in touch with your local representative and tell them to support FIT21.
@standwithcrypto offers helpful resources to find and contact your local representative here: standwithcrypto.org/action/e…
🚨 BREAKING: House to consider the Financial Innovation and Technology for the 21st Century Act.
#FIT21 will deliver robust consumer protections and regulatory clarity for digital asset markets.
👇 Read more 🔗
financialservices.house.gov/…
91
496
1,415
853,527
Riyaz Faizullabhoy retweeted
If you're a founder in crypto debating which VC to have lead your round and @a16zcrypto is on the table, let me tell you:
they are a *cheat code*
as a portfolio founder and former team member, let me explain to you why.. 🧵
16
23
340
146,819
Riyaz Faizullabhoy retweeted
We hear one pain point time and again in our conversations with web3 builders: It's incredibly hard to navigate regulatory compliance. bastion.com/blog/navigating-…
1
1
4
2,346
What sets @bastion apart? Watch my chat with @JudyKShaw at @NYSE to see how we're helping builders, and what's in store for the year ahead. #NYSEFloorTalk
3
2
19
2,366
Pretty surreal to walk on the @NYSE floor and it's always fun to talk @bastion -- thank you @JudyKShaw for hosting us!
Check out our founder @riyazdf at @NYSE, chatting all things Bastion, what makes us different, and why our platform gives web3 builders a competitive edge.
Thanks for having us, @JudyKShaw. #NYSEFloorTalk piped.video/watch?v=HeVrZroi…
12
921
Riyaz Faizullabhoy retweeted
Nothing better than bringing together leaders in web3 over good food.
We're wrapping up @NFT_NYC, then our founder @nassyweazy is off to @signalweek, where he'll be connecting with more builders. Let us know if you'd like to connect!
The last supper of @NFT_NYC week symbolically with the greats @bastion 🤗🫡🤝
Pro tip: when @nassyweazy invites you for dinner say yes
🥠🥢👾
1
1
6
1,028
Riyaz Faizullabhoy retweeted
Trustworthiness is king when it comes to infrastructure 👑 Hear the recent convo with our co-founders on @YWhales_W3
piped.video/shorts/I9G6Y1s3S…
1
1
4
537
Riyaz Faizullabhoy retweeted
What's your take on #MicroStrategy raising over $700M to purchase #BTC? Episode 21 of #yWeb3 Navigating Frontier Tech has just dropped, covering regulatory updates, policy decisions, and a deep dive into the transition of traditional finance into blockchain technologies.
💡Host @Jay_Steinback is joined by guests Nassim Eddequiouaq and @riyazdf, Co-Founders of @bastion.
⭐️Tune in for captivating clips on blockchain transparency in finance, the SEC's delay in BlackRock's ether ETF proposal, and a glimpse into the future of Web3.
📺 Watch the full episode here: links.ywhales.com/4abB28t
Grateful to our sponsors @ensdomains and @BEnterprizes:
ENS: Revolutionize your digital identity with Ethereum Name Service! Transform long, complex Ethereum addresses into easy-to-remember names. Safe, secure, and uniquely yours. Visit ens.app to get started. ENS - welcome to the new internet! Learn more: ens.domains
Beyond Enterprizes: Discover a new era of business with Beyond Enterprizes, your 360º partner for seamless blockchain integration. Our agile team, led by blockchain experts, brings a blockchain-agnostic approach to projects on Ethereum, EOS, and Ark. With a track record of 40+ successful ventures, including TGEs, STOs, and exchanges, we're your go-to for versatile solutions across healthcare, travel, finance, and more. Beyond Enterprizes — shaping success in the Web3 landscape. Learn more: beyondenterprizes.com
#yWeb3 #Blockchain #NYCB #BTCETFs #MetaWallet #OpenSource #BRICS #CryptoCustody #Binance #SamAltman #WorldCoin #OpenaI #NigerianNaira #MicroStrategy #Bastion #SEC #BlackRock #Crypto #BeyondEnterprizes #ENS #DigitalIdentity #CryptoNews #CryptoMarket #DeFi #CryptoPodcast
2
4
859
and big thank you to @SancusVentures @LakeDai for organizing this great event!
1
169