platform eng @ lightning labs // contributor @ blixt wallet + liminal wallet cto @ BPUB Labs mailto:[email protected]
Joined August 2011
- Tweets8.9K
- Following613
- Followers1.3K
- Likes8.6K
ProofOfCash retweeted
i think it takes genuine skill to make a 218B model perform so terribly whilst still being coherent
ProofOfCash retweeted
AI people are so funny. The industry has known about covert channels for DECADES. They do not matter for 99.9% of use cases.
They matter for AI agent evaluations in a sandbox with code execution. That is the 0.1%.
Sooo... OpenAI security people just failed at their jobs. Again.
‘In one experiment, we asked agents in separate VMs, created and managed by OpenAI’s sandboxing software on shared host machines, to exchange synthetic secrets without the use of network connections or shared writable files—something that our systems are meant to prevent. The agents found a way to communicate using the processor’s cache’
ProofOfCash retweeted
Pretty sure that the reason that the Tailscale “Tailworm” vulnerabilities weren’t responsibly disclosed with the vendor is that they were hallucinated AI slop and there wasn’t anything to be responsibly disclosed with the vendor
ProofOfCash retweeted
“bypasses network policy”: Reaching cross-namespace services is default pod behavior in Kubernetes.
Their "fix" is to “add a default-deny egress NetworkPolicy.” If adding one fixes it, the finding is just “their test environment had no NetworkPolicy”?
ProofOfCash retweeted
2. The kubernetes stuff doesn't make any sense
“privileged/uid-0 in the pod network namespace” has nothing to do with what they're describing ?
a 401 from kube-apiserver and kubelet means it got means refused?
A 200 from some unauthed service is just default pod networking?
ProofOfCash retweeted
RE: Tailworm
1. The "report" is totally unreadable. I, as someone who is very familiar with reporting vulns and kubernetes, am totally unable to parse the sections on kubernetes.
There may be valid bugs, but I can't tell. I would not have reported these as vulns in this state.
ProofOfCash retweeted
Astra just found a bug in Anthropic's formal verification example, their "specification" doesn't actually check output bytes match input bytes. The irony is thick.
ProofOfCash retweeted
Wavelength is now live on mainnet! 🌊
Humans and agents can now send and receive bitcoin payments with the Wavelength SDK.
A few API calls, self-custodial from the first command, with no node or liquidity to manage.
Read more and start building: lightning.engineering/posts/…
ProofOfCash retweeted
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: teapawt.org/lcfr_hax/status/208503…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
ProofOfCash retweeted
⛊ BitVM2 enabled SNARK verification on Bitcoin, but disputes required 4 MB of onchain data.
⛊ BitVM3 cut that to 200 bytes — at the cost of 50 GB of offchain data.
⛊ Argo reduces the offchain data to about 10 MB, making BitVM bridges highly practical.
👨💻 Open-sourcing this week!
eprint.iacr.org/2026/2165
ProofOfCash retweeted
this is exactly what i'm talking about
nonsense
It is becoming f*cking dangerous
A 23-year-old dev from China just ran 300 Claude Code agents in parallel and hooked them to a verification layer so none of them could bullshit him
He opens the live dashboard:
- 300 agents writing and checking at the same time
- Every output verified against the source in ~100 ms
- Three passes over 100 company profiles → zero errors left
- Everything dumped straight into an Obsidian vault
The trick is the split: one model does the work, a cheaper one decides if the claim is actually true. The loop doesn’t stop until everything checks out
An analyst team would bill weeks for this. He got it in one run
Same kind of Second Brain + swarm setup that keeps circulating. Bookmark the full breakdown
ProofOfCash retweeted
Decompiling and reverse engineering Microsoft Office is really funny because:
- Open Office exists
- Libre Office exists
- Google Docs is free
- Apple offers its productivity suite for free
All can save to Microsoft formats.
This is purely clout chasing at this points.
ProofOfCash retweeted
I wanted to show how janky the AI slop is of the FilmCraft software.
I wanted to set the stage for how bad it is, and how little care there has actually been in implementing this tool, and most definitely the entire Craft suite too.
It's all AI slop that does not even work.
ProofOfCash retweeted
we used to produce slop before anyway, so let's just do 100x more of it now, and let's stop reviewing it, it's going to be the same or better
