Heads up for anyone writing Rust today. The Rust Security Response Team just disclosed a supply chain attack. The popular arrayref crate was republished to pull in a malicious dependency that downloaded a payload through its build script. arrayref isn't obscure. If you or your dependencies pulled it recently, you'll want to check now. The malicious versions to look for: > arrayref 0.3.10 > internment 0.8.7 > append-only-vec 0.1.9 > proc-macro1, plus typosquats: proc-macro-en, aovine, arone, aronenao, tinymember All deleted from and the maintainer's account is locked. The team believes the author's credentials were compromised rather than the author acting maliciously. Full advisory, including the one-line command to scan your local cargo cache:

I don’t wanna fud this wallet but given the amount of developer machine compromise going on right now, people should consider the strength of the security program around their favorite wallets. Having multiple human reviewers with deep expertise, a corporate security program that secures laptops and saas systems like github, logging and alerting on all that, supply chain hardening, 24/7 monitoring and response, ai review pipelines, etc takes a ton of resources and is difficult to do even with the resources of a larger company. Wallets and libraries created and controlled by single devs or small teams are being targeted by hackers.

THE "FED PUT" ISN’T A CONSPIRACY. IT’S MATH. The Fed doesn’t really have a put under the stock market. It has one under the debt system. And once you understand why, you understand a lot more about where the dollar is headed, and why many choose to store value in hard assets.

People have been saying that because the UASF succeeded in 2017, but BIP110 failed, it means the mining pools are now in charge. That the suitcoiners run Bitcoin. To the contrary, a clear picture of the balance of power between miners, ecosystem builders, and the nodes/users actually tells us why BIP110 failed, and the UASF succeeded. The difference isn't in Bitcoin being captured (regardless of any other changes good or bad), the difference is a misunderstanding of history and why the UASF won.

The quote by @boomer_btc is on point - a chain split is worse than not having bip110. Once you realize every miner and every economic node had to individually make that assessment, you see what the game theoretic conclusion is - there is no overwhelming _need_ for bip110 and the risk outweighs any upside. That is why it failed. Not collusion. Not the deep state. Not any of the lies some people are trying to sell you.

THE SOVEREIGN REVOLUTION I believe Bitcoin is the beginning of the Sixth Technological Revolution in the framework of @pmarca's favorite economist, @CarlotaPrzPerez. Tell me why I'm wrong!

👀Mainstream Bitcoin mining flippening continues The author who goes by the name Jennifer L, from Carbon Credits spent years writing negative pieces on Bitcoin mining She just published an article titled that says Bitcoin's "Biggest Story Is the Green Revolution in Mining"

It took the United States 192 years to borrow its first trillion dollars. Inside that span: the Civil War, two World Wars, the Great Depression, and the moon landing. The latest trillion took 147 days. Inside that span: one Thanksgiving, one Christmas, and one Super Bowl.

This is unbelievable and awesome! Has the government finally realized the gross harm that comes from centralized identity databases? Or is there a sinister reason for this? I am just baffled to see even an inch of reversal of policy from the non constitutional surveillance state.