NPMing the universe since 2012 Building every day: 👀 https://nitter.cf/t.co/IoEZ0ua4Ay 🇨🇿 Invoicing: https://nitter.cf/t.co/vrHaLktvdK 🔑 Password manager: https://nitter.cf/t.co/LqhnRe11jw
San Francisco, California
Joined February 2012
- Tweets38.3K
- Following1.8K
- Followers1.7K
- Likes319K
Capaj retweeted
binance official post-mortem just dropped: $6.3b affected, caused by a single devops engineer's laptop getting compromised.
the corporate spin is wild: "no evidence of private key leakage."
you didn't need the private key. the attacker had remote access to your devops machine, hopped onto internal servers, and used your own signing pipeline to authorize the eip-7702 sweep.
billions in security budgets and multi-sig infrastructure, completely undone by an endpoint sitting on an engineer’s desk.
crypto in 2026:
- eip-7702 delegation hijack
- $6.3b total drained
- $3.0b frozen by centralized issuers
- root cause: one devops laptop breached
you don't attack the cryptography. you attack the guy with sudo access.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Capaj retweeted
Android SMS of Death smsofdeath.com
Capaj retweeted
Jako ten Staromák je tuze pěknej. Ale uvědomte si, že těch, proti kterým se v součtu vede soudní řízení, nebo předžalobní vymáhání a exekuce bude mnohem víc, než se sešlo lidí na tom Staromáku.
Capaj retweeted
Everyone: "Vibe coding is causing all these security bugs"
Reality: PHP, Node, Linux kernel, GitLab. All hand-written code by humans, some of it 20 years old.
AI isn't creating the slop. It's finding it 🫠
Capaj retweeted
Does any serious open-source project need performance improvement?
Ideally,
- it should have proper benchmarks
- the performance is a real, verified problem
- the project should be serious, and used by the ecosystem
I can send many performance-improvement PRs based on AI and benchmark data.
e.g. github.com/lynx-family/primj…
I had to fork gnome-shell-extension-clipboard-indicator
it's been too slow. Painfully slow.
github.com/capaj/gnome-shell…
Claude vs Codex for browser automation
Claude is better at coding, but when it comes to driving a browser codex with sol or astra they are better. They have the balls needed to actually drive the browsers.
Claude will stop at checking random checkbox telling the user it cannot…
I can't go back to a CLI
this is the number 1 reason why I am using a desktop client rather than claude CLI
ability to easily target a passage of text and reply to it directly is a must have.
moot.fyi/p/m2qu3rk78czldar0i…
Capaj retweeted
Since September, we have been unable to publish because every URL under `PUT registry.npmjs.org/@trpc/` is being blocked by a @npmjs @Cloudflare WAF. You can even prove it locally, they've just wholesale blocked our npm scope.
Support have not yet done anything to help.
anyone from @npmjs that can have a look at request #4870687 from me?
nick tried first but got a non-response
Capaj retweeted
This is Pele, my new rendering library for diagrams and charts, compatible with the latest Mermaid syntax.
- 100-500× faster than mermaid.js
- 6× smaller bundle
- No dependencies
- Easy to theme
- Responsive to device width
In pursuit of making Obsidian insanely fast and cohesively designed, I always found the Mermaid library to be too big, too slow, and too hard to theme. Pele will be the new renderer in the next version of Obsidian, but you can start using it now.
Pele [ˈpɛlɛ] is named after the goddess of volcanoes and fire. It's open source under the MIT license. Try the playground!
