Jameson Lopp
@lopp
Insights on security, privacy, technology, money · Co-founder & Chief Security Officer @CasaHODL · creator of
308 Following 531.3K Followers
While sitting in the barber shop, I hear one barber say to another:
"Hey can you text me the password to our Instagram account?"
Me: "NOOOOOOOOOOOOOOOOOOOOOO"
I'm publishing this not just because it's the 25th anniversary, but because 30% of Americans living today were born after 9/11 and never knew the Before Times.
"Never Forget" rings hollow to those who had no memories to lose in the first place.
Show more
25 years ago I was sitting in band class, watching thousands of my fellow citizens die on live TV. Little did I know that the horrors had only just begun.
25 years ago I was sitting in band class, watching thousands of my fellow citizens die on live TV. Little did I know that the horrors had only just begun.
obscura vpn listens to user feedback
been using it as my daily driver lately and I am starting to... love it!
AI can't kill us unless humans are dumb enough to connect military platforms or critical infrastructure to the internet.
😟😟😟😟😟😟😟😟😟😟😟
Critical infrastructure should not be connected to the internet. Full stop.
🚨Scam Alert🚨
Threat actors may have compromised the email provider(s) used by Trezor and BitBox; malicious emails claiming both have bad RNGs that require security updates are being sent and the emails don't appear to be spoofed. No such security advisory has been issued!
Show more
It's odd that so many people seem fixated on using the most expensive cutting edge LLMs. It's like being more interested in supercomputers than in distributed cloud computing.
If cost is the same, I'd rather have a swarm of 100 mid tier agents than a single S tier agent.
Show more
This one goes out to my fellow devs who are clanking out code at an accelerated pace.
Bitcoin wrench attacks rarely result in homicide. Unfortunately, the latest attack in Mexico had the worst possible ending.
🚨New Scam Alert🚨
Threat actors are sending out emails directing people to a "mandatory security update" site for Liquid Network that tries to trick you into downloading and running a malicious .exe file. /cc @Liquid_BTC
Show more
New tutorial!
This time, we're setting up Bitcoin multisig with @CasaHODL.
In this video, I explain how to:
- Set up a 2-of-3 vault with a @Trezor Safe 5 and @Ledger Nano S Plus
- Back up your keys and wallet data
- Send and receive bitcoin
- Recover your wallet in Sparrow, without Casa
We don't just set it up. We test the recovery too.
Check the video here:
Show more
Entering Day 39
In the 7 months before this post I contributed 300 lines of code to Casa repositories.
In the 1 month after this post I've contributed 50,000 lines of code - mostly tests, integrity checks, and security tooling.
Show more
To give some perspective of how AI tooling has also accelerated defender capabilities:
Before this year if I wanted a comprehensive external pentest & code audit I was looking at $50K - $100K and a month to receive the report.
Now I can do it for $1K in 1 day.
Show more
I seriously doubt it's a coincidence that the Liquid bridge got drained just a couple days after Astra dropped.
Looks like the Liquid functionary codebase hasn't been touched in 2 years, which isn't a good sign.
Show more
The accelerating pace of vulnerability discovery should be a wake up call for all software developers!
The threat landscape has changed.
If you wish to retain a strong defensive posture then you MUST adopt the same LLM tooling that attackers are using to find vunerabilities.
Show more
It looks like ~4,000 BTC just moved from the Liquid Network bridge all at once with an OP Return saying, "we are whitehats. contact us on chain".
TXID:
c103de95817b43f2df635ec6f35ff126ca26a7c6d20570c4b01866b2b3e69a19
Show more
I'm not a Fed, but...
I have no qualms coordinating with Feds when I cross paths with a threat actor who is in need of a serious smackdown.
Seinfeld Bitcoin Highlights 🎬₿
A montage of all the Seinfeld Bitcoin clips so far!
If you’ve been enjoying them, please retweet and follow. More on the way.
If Bernie Sanders and Greg Casar had any clue, they'd be proposing something more akin to Asimov's Three Laws of Robotics rather than an ineffective ban on strong AI.
IBM already foresaw how to approach the problem of machine intelligence 45 years ago...
Show more
It's a really bad month to be running always-online cryptocurrency wallet infrastructure.
"Don't get so busy making a living that you forget to make a life."
- Dolly Parton
Rest in Peace
