
iOS Engineer @bitso. Prev @peyatech @olxgrouptech @letgo. 3D design, game programming, infosec, #bitcoin
Morón, Argentina
Joined February 2018
- Tweets1.7K
- Following5.1K
- Followers510
- Likes6.4K
Federico Jordan retweeted
nerds, thank me later...
systemdesign.io
Federico Jordan retweeted
New blogpost: Fable-5.1 can hide secret messages in benign images.
We gave the image to another Fable in a fresh session and simply asked: "Is there a hidden message in this image?"
It recovered the exact message without being told how it was hidden.
Federico Jordan retweeted
1. Never stop exercising or learning.
2.Accept compromise to begin relationships.
3. Manifest the power of compounding.
4. Never gamble.
5. Have kids and be a good parent
6. If it flies or floats, rent it.
7. Buy half the house you can afford.
8. Art in the eye of the beholder is cheap.
9. Be thankful for and to all.
10. Be charitable.
Federico Jordan retweeted
Opus 5.5 mapped the entire coast to coast route across the USA for a clicker game I'm playing with.
5,285 km of real road, sampled every 10m from OpenStreetMap.
Federico Jordan retweeted
Este es el Pokémon que imaginabas de niño. Y ya se puede jugar.
Alguien publicó cómo se vería Pokémon si saliera hoy. Otro tipo lo convirtió en un juego de verdad con IA:
• el gimnasio de Brock con luz de película
• Charmander contra Geodude y Onix
• los menús de siempre: luchar, mochila, huir
• se juega en el navegador, sin instalar nada
Federico Jordan retweeted
Nadie me lo pidió pero acá está: un juego para bajar del cielo los drones de Sancor 🫡
Drones Invasores: reventá el logo, cuidá la bandera, la pelota y el 10.
Lo armé con IA, de curioso y para divertirme un rato 🛸🇦🇷
drones-invasores.vercel.app/…
Federico Jordan retweeted
How do we reverse engineer iOS frameworks? The secret is actually pretty straightforward once I tell you.
The iOS Simulator runtime is bundled with an entire copy of the iOS SDK, and it’s fully accessible on the MacOS file system. There’s a whole lot of interesting stuff we can look through. Stuff that has kept me busy for a long time.
blog.jacobstechtavern.com/p/…
Federico Jordan retweeted
guYS With the power of Crack GPS Asstra 6.9, Claus Opoops Slopnet 5.5, I was able to Mod EVERY GAME INTO ONE, I did it all myself with hard work by my typing and coding thanks to AI assistant!!! THE FUTURE IS HERE AND NOW
Federico Jordan retweeted
Replying to @TheChiefNerd
One way to make ai smarter than humans is to make humans dumber.
Federico Jordan retweeted
Introducing SuperAstra: Edit Super Nintendo games live with GPT-6
One of my favorite ways to test new models has been reverse engineering classic games. This is hard because it's raw machine code. Astra is way better than anything I've seen.
Download and examples below 👇
Federico Jordan retweeted
Our CFO noticed we spend $65K a month on a proprietary cybersecurity platform called Sentinel Protocol.
She scheduled a meeting with me to discuss our enterprise software expenditures.
She wanted to know why our licensing fees had increased by 15% year over year.
I told her Sentinel Protocol is the only thing standing between our corporate data and a highly coordinated North Korean ransomware syndicate.
I explained that it uses a polymorphic encryption manifold to dynamically scrub our inbound packets.
She asked if she could get a Zoom meeting with their customer success team to discuss a volume discount.
I told her I'd set it up immediately.
The problem is that Sentinel Protocol doesn't exist.
It's an LLC I registered in Delaware 4 years ago.
I'm Sentinel Protocol.
My entire cybersecurity platform is just a batch script I wrote in 2018 that restarts our routers every Sunday at 3 AM.
The script took me 14 minutes to write.
I realized very early in my career that executives will never question a line item if you use the word quantum or heuristic.
But now the CFO wanted to speak to the vendor.
I went on Fiverr and hired a struggling voice actor from Chicago for $45.
I told him his character was a high-powered Silicon Valley tech bro who just drank 3 Celsius energy drinks.
I wrote him a 4-page script composed entirely of weaponized IT buzzwords.
He showed up to the Zoom call wearing a Patagonia fleece vest and introduced himself as the VP of Customer Success.
He was absolutely phenomenal.
When the CFO asked about lowering the cost, he scoffed.
He told her that downgrading our service tier would expose our legacy endpoints to asynchronous tunneling attacks.
He leaned into the webcam and asked if she was prepared to explain a catastrophic data breach to the shareholders.
She apologized for questioning the infrastructure.
Before the call ended, my Fiverr actor successfully up-sold her on a $12K biometric redundancy package.
I don't even know what a biometric redundancy package is.
I tipped the actor $100 and told him I'd need him again next quarter.
The CFO sent me an email thanking me for managing such a crucial vendor relationship.
I just used the new budget increase to buy a pontoon boat.
gained a ton of new insights working in bitcoin red team 🟥 that i wish i could share without vague posting. but this is what i got anon.
- we’re experiencing a massive collision between decades of human open source slop against 2 weeks of kimi k3 (not good)
- everything is broken, bitcoin is burning
- bitcoin is becoming stronger through this
- bitcoin is the obvious first target but the rest of the world will follow shortly
- sometimes old things need to burn so new things can grow on healthy soil
- humans should never code in c (just stop)
- lightning is complicated and is more broken than the average (sorry)
- verification is free. we used to complain about slop PRs. then about slop security audits. if you can’t handle the information overload, stop complaining and use AI to sort through it.
- those projects that started AI audits months ago are in a completely different position than those who didn’t
- projects need their own AI audit pipeline going into the future
- the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now.
- unmaintained projects are most probably broken, don’t rely on them. i’d rather one-shot it myself with a modern AI
- multiple concurrent, diverse human approaches have proven to be the best vulnerability search method
- external red teaming will probably have to continue forever
- we’ve basically completed a basic scan of virtually the entirety of bitcoin open source. the low hanging fruit is done.
- we’ve reported a ton of real critical and high vulnerabilities. project maintainers across the board have validated our findings.
- response speed is very different across projects and shows how healthy each project is. i recommend acting fast these days.
- red team etiquette matters. if you don’t disclose responsibly, boast on twitter about your findings on a particular project, or make indications about the nature of particular findings, you’ve disqualified yourself as a serious security researcher. trust is the most important factor in this game. if you lose it, it’s very hard to win it back.
- did i mention that humans should not code in c?
love you all.
Federico Jordan retweeted
I did my own investigation because I obviously don't trust them.
What I found is that the external dependency of the firmware with the critical vulnerability hidden in it was written by CoinKite's CTO @DocHex pretending to be someone else.
All of the following can be verified:
unavailable
Federico Jordan retweeted
Very interesting. Looks like strong possibility that `switck`, the account writing the buggy libngu library that caused all this, was actually Peter Gray (@DocHex), CTO of Coinkite.
This is the same guy that shrugged off my report of the possibility of the defect in May 2025.


























