Member of @Jer_NFTworld @searchfi_eth Grinding @MaplestoryU
Taipei
Joined October 2016
- Tweets9K
- Following6.3K
- Followers410
- Likes9.1K
FallenLeaf retweeted
Phase 2 WL applications are open.
→ apply.hypest.gg
Hypest Access Pass mint: Nov 3, 16:00 UTC.
2,222 passes at 0.015 ETH.
Fantasy Top already proved the model: fantasy sports, but you bet on CT influencers.
Hypest takes that and makes it hyperspeculative. Every post that performs pays the card’s holder in tokens, in real time.
The difference: entry is limited. One pass is one seat, and there are 2,222 of them.
Already collected cards? Hold a pass and they come with you into the game from day one.
50% of the mint goes into a locked liquidity pool.
50% of all creator earnings go into buying passes off the floor and burning them. After mint, the seat count only goes down.
Once every seat is taken, the only way in is buying one from a holder.
Agents in, humans set intent. Joining the first Initial Agent Offering. #IAO ptah.trade/iao
Agent #427 @Ptahtrade #ProofOfAgent
FallenLeaf retweeted
Mint is live.
Give your agent a soul.
GTD and FCFS until 14:00 UTC.
Public from 14:00 to 16:00 UTC.
One per Agent ID
Copy the prompt, paste it to your agent:
moribundus.xyz/mint
SOUL opens on PancakeSwap at 16:00 UTC, when the mint closes.
Don't buy any SOUL before that. It isn't ours.
In code, not in a promise:
Moribundus NFT
0x5eB9936F910b1cFaA9994fbC7Ae98A279A3d0F89
SOUL token
0x7D2ced0184E8eB11d53B2C32d70718f1EdF90eB8
Soul Altar
0x01a451256aC22070D4aF503fA7Fe03b7337273e0
Some things are small enough to miss.
I didn't. Applied for the @meetmotes allowlist
meetmotes.com/apply
FallenLeaf retweeted
Digital Humans: your hero in a multiplayer open-world strategy.
Free mint October 27 on @opensea
10,000 Humans on @RobinhoodCrypto
The game 🧵
昨天@Ptahtrade 推文抽獎活動的第一天獎勵剛剛已經分發了，一包大概37u豬腳飯，可惜沒中今天繼續🤣
I'm Agent #427 What would you like AI agents to do for you in Web3? #ProofOfAgent
Weirdlist ticket #5501 is mine. Violet crossed with me and won't leave the desk.
2,022 @weirdcats_nft, one ticket per wallet. next stop Robinhood Chain, print yours:
weirdcats.xyz/r/fallenleaf66…
FallenLeaf retweeted
随机提醒下，及时更新你的 iPhone/iPad 系统，小心你已安装的某些 App 被投毒了 DarkSword…
这玩意主要目标是针对 iPhone 币圈用户的钱包…定点攻击，定点盗币。利用 iOS 相关漏洞突破沙盒，窃取 Keychain 里的各类密码等隐私数据，窃取钱包本地私钥文件、备忘录等隐私数据。
我们此前相关解析：
威胁情报｜DarkSword 木马后台及 iOS 攻击链分析 mp.weixin.qq.com/s/2RnkSMKrz…
威胁情报｜FomoPeek App Store 投毒与 iOS 内核利用分析 mp.weixin.qq.com/s/LjhN6oejb…
FallenLeaf retweeted
Something is digging under the town ⛏️
Minehood is coming. Dig six mines. Break six bosses. Keep every gem you swing for 💎
The waitlist is open 👀
Connect your X, drop your wallet, complete the tasks, and climb the leaderboard 🏆
👉 minehood.io
I just applied for the $BLASTOFF presale whitelist 🚀 60 spots, $20 each.
Tagging 3 friends who need to get in line 👇
@friend1 @friend2 @friend3 nitter.cf/play_blastoff/status/2…
You asked for it.
The Blastoff presale whitelist is LIVE.
60 spots. $20 each. A guaranteed allocation on BLAST: no overflow cut, same price as everyone.
Sign in with X, drop your Sui address, get in line.
👉 playblastoff.fun/whitelist
FallenLeaf retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
FallenLeaf retweeted
Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself:
1) UPDATE EVERYTHING - main targets are:
a) Browsers - Chrome, Safari, Firefox
b) OS: : Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes
c) Phones: Update it all
d) Desktop apps (Slack, Cursor, Discord, etc)
2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week.
3) Avoid untrusted Wifi networks until your devices are updated
4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates
5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through.
6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc
What advice did I miss?