builder for ai
OnChain
Joined March 2022
- Tweets23.7K
- Following3.1K
- Followers3.1K
- Likes64K
Flipping $mfer retweeted
🌉 The vGully Bridge is live!
Bring your vGully from #Voi to #Algorand as VGULL. Same bird, 1:1, network fees only.
1️⃣ Connect your Voi + Algorand wallets
2️⃣ Pick your birds
3️⃣ Opt in
4️⃣ Bridge 🐦
gullyflock.com/vgully-bridge
Flipping $mfer retweeted
The AI bubble might finally be popping, more than 50% of S&P 500 companies have dropped 20% or more from their highs
And we’re not talking about random small companies here. We’re talking about Nvidia, Amazon, Google, Intel, Meta and Netflix.
Investors are starting to question the insane amount of money being thrown at AI, the huge infrastructure costs and whether all this spending will actually pay off.
AI can absolutely change the world. But that doesn’t mean every company throwing billions at it is going to make money.
Flipping $mfer retweeted
$BILLY x @flamix_trade collab!
Flamix is an advanced decentralized perpetuals exchange native to Flare Network, offering high-leverage trading on crypto, forex, and commodities using any ERC-20 token as collateral.
Gully has put up 5m $BILLY to the prize pool so users can play with and earn $BILLY!
Use our link to join! 👇
app.flamix.trade/flare/arcad…
🤖 Made with AI
Flipping $mfer retweeted
Please point me to active projects building on @Algorand and @FlareNetworks I want to support everyone I can 😘✌️
Flipping $mfer retweeted
The boy is growing up day by day!
Don’t fade ol’ $BILLY on @FlareNetworks
Up 79.7% on the month!
Only 1 BILLION tokens EVER!
@scopia_xyz scopia.xyz/heatmap?w=30d&t=2…
Flipping $mfer retweeted
🚨 UPDATE: Node2Shell (CVE-2026-111497) has moved from PoC to the wild.
Scanning is live and the first exploit attempts are out. The RCE is now confirmed on STOCK x86-64 Node.js, not just arm64.
Patch now → 22.23.4 / 24.22.1 / 26.12.1
Read ↓ thehackernews.com/2026/10/re…
Flipping $mfer retweeted
🚨 Brotli2Shell goes beyond HTTP2Shell.
CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Google’s Brotli decoder that has been exploited for RCE and impacts far beyond HTTP.
JFrog reproduced RIP control in FFmpeg via a crafted JPEG XL file and identified additional attack paths in ClickHouse, .NET, and Apache Arrow, where some fixes were still unavailable at the time of writing.
We’ve also released an open-source scanner to uncover potential exposure beyond vulnerable package versions.
Full research and technical details in our blog 👇
Real question is how long do as this in the wild and unreported… weeks?? Months???
someone actually did it. the $2,000 bitcoin on the vulnerable PHP server just got taken
but here's the twist, the developer messed up and accidentally put the root wallet key on the server instead of a branch key. so the hacker didn't just get the challenge money, they got access to the whole wallet
the exploit worked. the PHP vulnerability is real. but it took the entire internet a full weekend to pull it off
that tells you everything. the flaw is dangerous but incredibly hard to use. most of those "exploits" flooding github still don't work
sometimes the best security test is just putting money on the table and waiting
Flipping $mfer retweeted
🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ thehackernews.com/2026/10/br…
Flipping $mfer retweeted
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-we-…
Readers added context they thought people might want to know
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…
msrc.microsoft.com/update-guide/v…
Flipping $mfer retweeted
BREAKING: AI cybersecurity startup founded by ex-DOGE staffers breaches Anthropic's internal systems in under 12 hours using AI agents, accessing sensitive employee data & Slack messages.
Yup
‼️ PHP patches Windows builds AGAIN, just 5 days after the PHP2Shell fixes.
This time, a Brotli flaw could allow code execution when cURL automatically decompresses crafted HTTP responses.
Updated builds cover PHP 8.2–8.5.
Full details: thehackernews.com/2026/10/ph…
