
Alter ego: @AlgoFoundation / Opinions personal
Algorand Mainnet
Joined December 2021
- Tweets9.3K
- Following2.3K
- Followers4K
- Likes24.8K
Go sockets will default to MPTCP if it is supported by the OS, so most Go servers on Ubuntu (among others) will be vulnerable. The race needs time to trigger, but doesn't mean this should be ignored. If you have publicly exposed Go servers:
1) Disable MPTCP now, and
2) Patch when there's a fix from your distro
@Canonical any timeline for the patch?
I spent the last few hours going down the CVE-2026-98432 Critical Linux Kernel Flaw rabbit hole 🕳️ and here are a few thoughts:
- It is legit and scary. Kinda crazy that it's been known for 2 weeks & there is still no patch for popular distros (the Ubuntu fix, for example, is developed but not publicly released, still in testing).
- MPTCP needs to be enabled, and on some unorthodox port. It seems that ISPs globally have started blocking options on 22, 80, 443 and other popular ports (good!).
- If you're running a server with valuable data, disable MPTCP and/or IP options NOW. They are not necessary in 99% of use cases anyways.
- It takes about 50 minutes on average to gain access to a server if all conditions are met. My servers started getting hit today; luckily the script I shared earlier handled the situation and rejected the probes.
Stay safe & enjoy the wild AI psychosis ride we're in.
D13 retweeted
Flying cars get patched mid-roll.
#Algorand nodes need you. 5.0.5 is out.
github.com/algorand/go-algor…
D13 retweeted
Price of any Algorand token at any round since 2022, exact to the block. 0.001 USDC, no account.
"Tomorrow is not for sale."
nodely.io/docs/x402 #x402 #algorand
You'd be lucky to have her on your team. I occasionally forget that SJ is 21 & just graduated uni, it breaks my brain to reconcile that with how much she knows and does. If anyone has ever given me "you're gonna go far" vibes, she's it.
Hey #AlgoFam 💚
Yesterday, I was also impacted by the @AlgoFoundation layoffs.
#Algorand helped me discover my obsession with blockchain at 16 and inspired me to study softdev. The journey from Ambassador to Integration Specialist, working my way up for nearly 6 years!
🧵1/4
D13 retweeted
Fastest way to learn how a blockchain works ?
Build a public explorer. ⛓️
explore.xmr.nodely.dev/
D13 retweeted
Creator Week starts Friday.
Every token launched on HayLaunch since Oct 1st is in, and so is any token launched during the week. The creators of the 5 tokens traded most on Haystack from Oct 23rd - 30th split 300 USDC + 25,000 HAY.
Traders have 50,000 HAY to win.
How it works:
D13 retweeted
📢 @Algorand node runners: algod v5.0.4 has been released 🔥
Check the changes at github.com/algorand/go-algor… & upgrade your nodes.
This upgrade includes protocol change. 🌐
If the upgrade is successful and you don't upgrade, your node will stall.
D13 retweeted
Replying to @PeraAlgoWallet
@PeraAlgoWallet is pure magic everyone can master.
Start casting spells today.
#algorand #postquantum #falcon
The RE-KEY Spell
Any mortal can cast a RE-KEY Spell on their purse and protect it against Quantum Dark.
D13 retweeted
Attention all node runners: please upgrade your node to v5.0.3 as soon as possible.
This patch fixes an issue with DNSSEC validation that prevents nodes from bootstrapping into the network when (re)started.
D13 retweeted
After nearly 4 years, I've decided to resign and move on from my role at the Algorand foundation. I'm super grateful for the experience and look forward to my next chapter.
I'll remain part of the community and will be cheering for the success of the Algorand network.
D13 retweeted
New on hay.app: deposit from anywhere.
Card, Apple Pay, Google Pay, Cash App, an exchange, or another chain, all from one screen.
Powered by @unifold_io
D13 retweeted
AI on Algorand keeps growing, and @zerosignal_ai is a good example.
Private AI with no account or API key. You pay per message, settled on Algorand.
Claude, Gemini, Grok, DeepSeek, Llama, Qwen, Mistral, and more in one place.
Try it today: zerosignal.ai/
Wrote a proof of concept DNSSEC Oracle on Algorand: proves TXT records on-chain, every signature checked from the root down, without trusted intermediaries. Same trust model as DNSSEC, relies only on the IANA root KSKs, with trustless rollover support.
You can explore it here: dnssec-oracle-testnet.pages.…
"what does it do?"
Domain owners publish values as TXT records (e.g. "admin=ABC..") and anyone can bring them on-chain, without the sender being trusted. If it is on the Oracle, it was backed by cryptographic signatures all the way down.
Unaudited and highly experimental. Includes home-made RSA validation in Algorand TypeScript: @d13co/puya-ts-utils/rsa
I've been cooking a bunch of things, ranging from silly to not-silly, but have been bad at finishing/publishing.
Meet @d13co/puya-utils-ts: stuff that is probably too specific/opinionated to be in puya proper, but still useful to have/reuse:
github.com/d13co/puya-ts-uti…
published as: npmx.dev/package/@d13co/puya…
so far there's some fairly straightforward utility subroutines:
- createFundedAccount/createUnfundedAccount
- getTxnCounter
- base32Encode (!) and encodeAddress
and some less straightforward stuff:
- there's a nutty rsa validator for a science class project i have coming up, and a nuttier multi-step part (not enough opcodes in a group to validate RSA 4096) + sdk
- a nice (?) "mbr manager" pattern that you can use for simple "user own box" caveman data models (which is a lot of them) + composable sdk functions
Lets grow the kitchen sink 🍽️
D13 retweeted
Tenor cutting off API access is pain. Re-uploading decades of custom brand GIFs to Giphy 1-by-1 manually? Absolute nightmare fuel. 😭
So we built Uploaf 🥖✨
Scan your Tenor profile, batch-edit tags, and bulk migrate your entire GIF stash in seconds.
uploaf.loafpickle.com














