People should pay attention to DeWEB (@Blonskr @TapeOutWorld) for web app security in the AI era. Just a few hours ago, @blockaid_ flagged 12 crypto sites serving a wallet drainer, and @flapdotsh and @Kintsu confirmed DNS hijacks. Right URL, attacker's code, no contract bug needed. @VitalikButerin is experimenting with digital minimalism. One part is web minimalism, relying less on website UIs. One reason, you re-download a web application from the server on every visit, so if the server gets hacked even once, you might be screwed. Towards the issue, vitalik's answer is CLI tools and local AI. DeWeb tackles the same risk differently. For DeWeb, website lives on blockchain. You download website from blockchain through multiple RPCs, and reject any mismatch. With a local client, there's no server or domain to hijack. The attack shifts to the owner's private key for modifying on chain website content, where every change is public on chain, or to several RPCs lying in sync. check out DeWeb and TapeKit: