security operations | engineering | incident response
Joined November 2014
- Tweets499
- Following291
- Followers313
- Likes5.6K
“Moved my firm from Boston to Shenzhen”
Some of my smartest friends at Huawei in Shenzhen have gone quiet recently… quite a few appear to be in Hangzhou (DeepSeek)… they can only WeChat their spouses and parents. From what I’ve heard, V5 is already in pretraining: ~2T parameter ultra-sparse MoE on Huawei Ascend 950/950DT, no NVIDIA (!!!). If it converges, it’ll be the first frontier model trained entirely on Chinese silicon.
1
53
Loving all the commentary from people who have clearly never done investigations:
“Binance should have simply avoided being hacked”
“Who interviews for a new job on their work computer?”
“Their developers should have been reading the intel reports!”
2
139
Absorb cost
Update: SAFU fund transfer is complete - this was the large 7,499 $BTC transfer visible here: blockchair.com/bitcoin/trans…
89
“Security through obscurity is dead”
…is dead
DPRK isn't just scrambling the money trail — they're literally DDOSing the visual tracking tools:
they've automated the split of $6.3b into tens of thousands of microscopic, cascading peeling chains inside a few blocks.
the sheer volume of addresses is designed to crash the GPU/CPU of any tracker trying to render the multi-chain flow, rendering forensics screens totally useless.
"WTF are you even doing here" = 50,000 automated micro-transactions designed to give chainalysis' analytics server a meltdown.
🤓
2
102
Blue Magic that's a brand name; Like Pepsi, that's a brand name. I stand behind it, I guarantee it!
bro, you literally challenged us first.
you posted “one step ahead of you boss” and we took it as a friendly challenge.
so we accepted it and built our own Red Eyes Toon Dragon PCB.
now you’re publicly accusing us and throwing insults because we accepted your challenge?
what exactly did you expect us to do?
tech moves fast. people compete, build, learn from each other, and make things better. that’s how innovation works.
we love challenges. if someone builds something better than us tomorrow, we’d happily accept that challenge too.
we don’t beg, and we’re not going to apologize just for competing. competition is fair.
what i don’t understand is why you keep attacking us over a challenge you started.
you can’t challenge someone to a race and then get mad when they show up.
that’s just poor sportsmanship.
we’re here to build cool stuff, not fight over who gets to build it first.
Readers added context they thought people might want to know
Will's "One step ahead of you boss" post replied to a general collectible PCBs idea by showing boards he was already making and selling; it did not challenge anyone to copy his specific design.
x.com/realwillreil/s…
x.com/realwillreil/s…
1
88
“logging, auditing, and monitoring” is not defense in depth, and you’re just describing run-of-the-mill slow banking environments, not elite security
The North Korean actors and other crime actors of today are on a different level
2
105
And you get the MOST leverage by absorbing the cost of an intrusion with your bank account
Most of the cybersecurity world is focused on the risks and vulnerabilities that lead to initial access, but defenders get *way* more leverage from making lateral movement impossible. You want to get to where the most an attacker can do is screen-scrape the victim's workstation.
1
94
We may find out it wasn’t exactly “free and open”…we’ll see I suppose.
Regardless, Binance doesn’t get built without letting developers just do things. Messaging like that neglects the fundamental nature of the company IMO
70
Does this messaging actually work anywhere that isn’t a corporate bureaucracy?
If society fixed the incentives to the point of actually getting serious about security, the entire infosec industry would be inverted to eliminate charlatans and paper pushers, and tbh infosec would be very loud and unhappy about that
1
91
If a company has a button, that when pushed, liquidates six billion dollars, ISO and SOC 2 are just the things that distract you from actually protecting your environment
Founded in China, holding company registration in the Cayman Islands, targeted by infinite hordes of high end craven attackers…ISO has no power here tbh
By the way, in case anyone was still wondering whether they are completely useless, Binance holds SOC 2 Type 2, ISO 27001, and several other certifications.
98