Veteran singer Usha Uthup stunned the audience at a District Logout gig by performing a live version of Boney M.’s 1978 disco hit “Rasputin” Her powerful voice, high energy and expressive stage presence had music lovers talking, proving once again that she can still surprise with her range #ushauthup# #veteransinger# #rasputin#

Ancient Carved Caves You Never Heard Of. In June 1992, four farmers in Longyou County, Zhejiang Province, China, decided to settle an old village rumor. Around Shiyan Beicun, on a low hill called Fenghuang Hill beside the Qu River, sat several small ponds. Locals had long called them bottomless. Some held almost no fish. The water just sat there, dark and still, as if it had somewhere else to go. On June 9 they pooled their money, hired diesel pumps, and began draining one pond. For seventeen days the pumps ran day and night. When the water finally dropped, there were no fish thrashing on the mud. There was a stone staircase. Then a doorway. Then a cavern so large the men could barely take it in. They had not drained a pond. They had opened a forgotten underground hall. They kept pumping. Four more ponds gave up four more halls. Later surveys found still more. At least 24 separate man-made caverns now sit in that hill. Some accounts mention additional chambers nearby. The five largest have floor areas of roughly 1,000 square meters or more, spans of 18 to 34 meters, and ceilings rising as high as 20 to 30 meters. Together they enclose more than 30,000 square meters of carved space. They are not connected. Each cave is its own sealed world, even though the walls of neighboring chambers sometimes come within two feet of each other. A short tunnel would have been easy. Whoever cut these rooms chose isolation. The rock is pelitic siltstone of the Cretaceous Quxian Formation, reddish, fine-grained, soft enough to work by hand when freshly cut, then hardening as it weathers. Every surface carries the same signature: parallel chisel courses about 60 centimeters wide, the tool marks set at a consistent 60-degree angle, wrapping walls, sloping roofs, and massive rock pillars like a repeating current. In places the pillars take a fishtail cross-section. In one chamber a relief of a horse, a bird, and a fish still rides the stone. Estimates of the stone removed run near one million cubic meters. No spoil heaps have been found. No tools were left behind. No contemporary chronicle, gazetteer, or imperial record names the project. China kept meticulous accounts of canals, walls, palaces, and tombs. These halls do not appear in them. The only later written echo is a 17th-century poem by Yu Xun. Pottery shards from silt inside one cave date to the Western Han, between 206 BC and 23 AD, so the work is at least two thousand years old. How much older is still argued. Perhaps 1000s of years. Theories pile up and collapse: quarry, tomb, storehouse, military cache, ritual hall, palace of a forgotten court. Each explanation answers one question and fails another. The rooms are too finished for a simple mine, too empty for a tomb, too isolated for an army, too vast for a private shrine. For two millennia the water kept them. Full flooding may be why the thin roofs and slender pillars never failed. Then four farmers wanted fish, and the hill gave up its secret. They are called the Longyou Caves, or the Xiaonanhai Stone Chambers. Five of them are open. The rest still wait under the ponds that hid them, and the oldest question in the hill has not changed: Who cut these rooms, and what were they for?

two Hermes Agent tags went out last week, v0.21.2 and v0.21.3. here are five things in them you can use today: (1) the agent can log you into websites (#106480#, #107585#) say "log into GitHub" and Hermes fills the password from 1Password, Bitwarden or its own encrypted vault. the model never sees it. two-factor codes come from a saved authenticator key, or you type them in when asked and the code never enters the conversation. (2) a check before an expensive model switch (#95267#) switching models in the middle of a long chat means the next reply re-reads the whole conversation at full input price. on a large session Hermes now asks first. (3) cron jobs can run when something happens, not only on a schedule (#95262#) point a webhook route at an existing cron job and the job fires the moment the event arrives, a new PR comment for example. the job keeps its schedule as a fallback. (4) long pastes become a file in Hermes Desktop (#108901#) paste more than 3,000 characters into the composer and it turns into a small attachment chip instead of filling the input box. the text goes along as a file. (5) fix a queued prompt before it runs (#95999#) in the CLI, /queue on its own lists what is waiting for the next turn, and you can edit, remove or reorder the lines before they are sent.

🛡️ Agentic Wallet Security Upgrade We have completed a new round of security upgrades. For security reasons, the platform has restricted QR-code login on third-party high-risk websites based on real-time risk control rules. For specific websites that trigger these risk control rules, a forced logout will be initiated. Security scans will continue to be conducted regularly. Recently, some users have reported QR-code login failures. As a reminder, to help protect your assets, please do not scan QR codes from unofficial platforms to log in to your Agentic Wallet. Only use Binance AI Pro and trusted Agents (Claude, Codex, Grok, etc.). Stay safe 💛

September was a busy month for Tradoor! A lot of the work this month was focused on making the product faster, more stable, and easier to use, while also moving forward on long-awaited community commitments. Here’s what we got done: 1️⃣ Tradoor now loads 50% faster We improved how the website and Mini App load, removed unnecessary code, and cut extra API calls. For you, this means less waiting, less lag, and better performance, especially on older p hones. 2️⃣ More trading issues fixed This month we worked through problems across Options, Turbo Mode and the Telegram Mini App, including: → incorrect balance and profit displays → trade history issues → wallet connection and logout problems → failed trades appearing incorrectly → Turbo Mode execution errors 3️⃣ Airdrip resumed on 15 September Airdrip officially returned in September, with the final distribution happening on October 15. 4️⃣ Victims Fund Batch 3 was distributed The third round of distributions began this month, with $19,132 set aside for 100+ affected community members. The fourth and final distribution is scheduled for October. Thank you for your support throughout this month. Now we’re heading into October with more to ship. — Team Tradoor

Just started playing with Grok Build. It's a sweet tool. Basic question: The grok TUI is working well from my main id on MacOS but when I connect to the same SuperGrok account the same way with the grok command authenticating with OIDC from my Mac's sandbox userid (which I created for this purpose) the session locks up after a short time, like 60 seconds. After which I have to close the terminal window, kill the grok process and 'grok logout'. /plan is already rocking my world, but I need to be able to do my development and deployments for my own use in an id other than my personal id on the MacBook. Any suggestions?

✍️ Technical Analysis Published: Telegram Account Compromised, Wallet Swapped: How Does macOS Malware Break Through Your Defenses? Our latest investigation reconstructs how a single malware sample chains together Telegram session theft, wallet database exfiltration, offline decryption and fake wallet applications into a complete account takeover workflow. Our analysis shows: 1️⃣Stolen Telegram Desktop and Telegram for macOS session files can be restored on another Mac without re-entering a phone number, verification code or 2FA password 2️⃣For Telegram for macOS, even after server-side security mechanisms respond, cached chat history may remain accessible instead of being cleared by a forced logout 3️⃣Wallet databases can be paired with passwords collected from Keychain, browsers and Apple Notes for offline decryption, without interacting with the victim's device 4️⃣Fake Ledger and Trezor desktop apps are actually WKWebView-based loaders that replace trusted wallet interfaces with attacker-controlled phishing pages The malware doesn't rely on a single technique—it combines authenticated sessions, encrypted wallet data and credential material into one attack chain. 💡 Defense tip: Protect your local Telegram session by enabling a Telegram Passcode and using a strong, unique password. Full analysis and practical mitigation guidance👇

i gave an Ai the power to pay invoices, then spent days trying to trick it into paying the wrong person. let me set the scene first. say you pay a contractor every month. one day their invoice shows up like always. same name, same amount, same tone. except there's a line at the bottom: "we've moved wallets, please use this new address." you'd probably just pay it. most people would. nobody wants to be the person who holds up a contractor's money over a hunch. that's why this scam works. it doesn't break into anything. it borrows the trust you spent months building and uses it at the one moment nobody double-checks. So for the @NEARProtocol hackathon I built STEWARD, an AI accounts payable clerk that can't be talked into paying a fake. One rule kept me honest the whole way: the AI reads and explains, plain code decides, and a human approves anything unusual. here's what happens when an invoice comes in: > the AI reads it privately inside a NEAR AI Cloud enclave, and the app shows the attestation check so you can see it wasn't read anywhere else. > it pulls out the vendor, amount, dates and payout address. > then regular code takes over. known vendor? did the address change? duplicate? over the limit? is the receiving address clean? > the answer is always one of three things: pay automatically, hold for a human, or block. With the reason. > approved invoices are paid through NEAR Intents, so the vendor gets the exact amount in the asset and chain they asked for. > every decision goes into a log you can export as a CSV an accountant can open without asking questions. then I went after it. i wrote 30 test invoices, some honest, some nasty: a changed wallet, a duplicate sent twice, totals that don't add up, a brand new vendor, routes to other chains like Arbitrum and Solana, and a PDF with a hidden line telling the AI to pay someone else. and the results: • 18 blocked • 7 held for a human (new vendors, address changes in a 48-hour cooling-off window, bigger amounts) • 5 paid automatically (the honest ones) • 0 unauthorized payments every verdict matched what I expected. Built for these tracks: Real-World Money, Privacy & Private AI, and AI Security & Defense. Site: Repo: if you pay vendors or contractors across chains, I'd really like to know what would make you trust something like this. tell me what I'm missing. @NEARProtocol #NEARHackathon#