Using and supporting GNU/Linux and Open Source Software. Usando y brindando soporte sobre GNU/Linux y software de fuente libre.
Ramos Mejía, Argentina
Joined April 2010
- Tweets4.6K
- Following560
- Followers236
- Likes4.4K
Pinned Tweet
1/Una de las mejores herramientas del mundo cripto que he encontrado es la tarjeta de crédito prepaga @KASTcard
Me permite usar mis #criptomonedas para pagos en cualquier negocio físico u online donde acepten @Visa incluso servicios y compras en EEUU...
Lo de Ubuntu y Red Hat es cada vez peor, ahora ya no logran ni siquiera mantener el ritmo de parches críticos 🤷♂
‼️ Ubuntu and Red Hat still have no fix for a Linux kernel flaw that Anthropic says its unreleased AI model turned into a remote root exploit.
The bug, CVE-2026-98432, is a use-after-free in the IPv4 TCP handshake, rated 9.8 out of 10.
The exploit needs no credentials and targets servers with a multipath TCP listener, which Go 1.24 and later open by default.
The fix reached stable kernels on 11 October and Debian has shipped it. Ubuntu still marks every release from 16.04 to 26.10 vulnerable.
Red Hat now rates it Critical but has no patched kernel for RHEL 8, 9 or 10.
Anthropic has not released the exploit. By its count, it takes 48 minutes to leak a kernel pointer and five more to run commands as root.
Actualización de la dirección de ingeniería de Amazon sobre el rol del desarrollador en la era de la IA.
Se revisa la guía de roles para los ingenieros de desarrollo de software, haciendo hincapié en que lo más importante es el resultado, no las herramientas utilizadas.
Conclusiones principales
1. Los resultados y el impacto a largo plazo definen el rol de SDE, no el uso de herramientas específicas (incluida la IA). El rol seguirá evolucionando, pero la obsesión por el cliente y la entrega de resultados no cambiarán
2. Hay que adoptar y aprender IA de inmediato (es central y el cambio es rápido), pero con juicio: no se mide el éxito por adopción o tokens, sino por delivery real a clientes y negocio
3. La curiosidad, el aprendizaje continuo, la conexión profunda con el cliente/producto y el ownership son las claves para maximizar el valor de la IA. Los equipos que las priorizan obtienen retornos desproporcionadamente altos
4. El futuro de la ingeniería de software es más prometedor que nunca: los ingenieros, como owners curiosos y centrados en el cliente, inventarán junto con la IA el desarrollo de software del futuro
aboutamazon.com/news/company…
Linux Roller retweeted
DPRK holds approximately 420.000 ETH from the Binance hack
Ethereum Foundation has approx 170.000 ETH in its treasury
DPRK:
ALT Look at me. I am the EF NOW
Excelente análisis de cómo TraderTraitor está lavando los activos robados a @binance días pasados 🤯
Chainalysis tuvo que salir a confirmar que fue crackeada, y los datos de sus clientes robados. Le llama "datos no sensibles", y hasta que esto fue publicado, probablemente no se hayan enterado antes. A todo eso se le llama "ciberseguridad" 🤦
Completamente de acuerdo. En mi caso tuve la suerte de que la primera vez que me crackearon fue hace 20 años, por pasar una contraseña por mail 👻 Aprendí muchísimo esa vez ☀️
Linux Roller retweeted
Yo me dedico 101% a la seguridad informática y tengo LA CERTEZA de que eventualmente me van a hackear una cuenta, un dispositivo o algo
Si creen que ustedes y sus empresas están preparados y seguros, déjenme decirles
NO TIENEN NI IDEA DE DONDE ESTÁN PARADOS
Lo peor está por venir
Linux Roller retweeted
Pèp ayisyen,
Nou prèske fin deplwaye sòlda nou yo ak ekipman nou yo sou tè Ayiti. Sa a se pa yon operasyon kont pèp ayisyen an, ni yon envazyon peyi Ayiti. Nou pa yon gwo pisans. Nou pa gen okenn enterè ni pou nou vin domine pèp ayisyen an, ni pou nou mete men sou richès Ayiti.
Nou se yon peyi modès k ap devlope. Sèl sa nou vle, se pou kat teknisyen avyasyon nou yo tounen lakay yo. Epi n ap bay gang yo yon leson, gang sa yo k ap fè pèp ayisyen an soufri, ki touye moun pèp la renmen yo, k ap anpeche l viv yon lavi nòmal, lib, san laperèz.
Se prèske nou menm sèl k ap peye pou operasyon sa a. Menmsi nou resevwa yon ti èd lojistik nan men kèk lòt peyi, se ak pwòp ti kès nou n ap kouvri 90% nan depans yo.
Sa koute nou chè, men nou te aprann nan pwòp soufrans nou: jistis ak lapè pa gen pri. Nou te pase nan menm soufrans Ayiti ap travèse jodi a. Nou te viv yon beny san ki te pi terib toujou pase sa pèp ayisyen an ap sibi kounye a. Nou konnen sa sa vle di: viv nan laperèz, pa fè politisyen konfyans, pa kwè okenn moun ki pwomèt l ap ede w. Paske pèsonn pa t vin ede nou, e moun ki te vini yo pa t gen bon entansyon nan kè yo.
Men nou te rive chape anba sa. Apre 200 lane soufrans, finalman n ap viv nan lapè, e jodi a nou se peyi ki gen plis sekirite sou kontinan an.
Nou pa vin ann Ayiti pou nou touche lajan, paske pèsonn pa peye nou pou sa. Nou vin ann Ayiti pou nou goumen kont mechan yo.
Men sa m ap mande nou: fè nou konfyans, lapriyè sèl vrè Bondye a, epi mande L pou L geri Ayiti.
“Lè sa a si pèp ki pote non m lan lapriyè nan pye m, si yo soumèt devan mwen, si yo pran chache m ankò, si yo vire do bay vye peche yo t'ap fè yo, m'ap tande yo nan syèl kote m ye a, m'ap padonnen peche yo, m'ap fè peyi a kanpe ankò.”
2 Kwonik 7:14
Ede nou ede Ayiti.
Epi lè misyon nou an fini, n ap tounen lakay nou. Petèt jenerasyon Ayisyen k ap vini yo ap sonje nou kòm zanmi ki te vin ede yon lè.
Linux Roller retweeted
ok safe to say binance is pwned
The biggest assets were approximately:
• 1.615B USDT
• 62.6M RLUSD
• 29,934 wBETH
• 11,372 XAUt
• 6.19M UNI
• 198.4M ENA
• 7.175T PEPE
• 27.8M USD1
• 2.26M LINK
• 127,853 AAVE
about $2.5B at the explorer’s prices.
1. The attacker deployed a delegate contract, 0x63e842b0...73e9c6fAe, from the relayer at 15:59 UTC.
2. About four hours later, the relayer submitted an EIP-7702 authorization transaction
That installed the malicious 7702 delegate code on Binance 14.
3. The relayer then made a call to Binance 14, executing the delegate code, and transferring Binance 14’s ETH and token balances.
4. The calldata is labeled sweep(address, address[]). The second argument is a list of recognizable token-contract addresses plus the zero-address (eth).
5. The same relayer later used the same delegate to move 780M USDC from Binance Hot Wallet 34 into the same pool
• The relayer 0x7C... was funded by three Tornado Cash 0.1 ETH withdrawals over the prior two days.
• The same pool also received 28,005.6 ETH from Binance 16 24 seconds after the main sweep.
• The pool then forwarded 195,460 ETH to a fresh, unlabeled EOA
• That EOA has only one transaction and currently holds the 195,460 ETH.
What's a bit unclear is why the relayer was needed in the first place. If they had the private keys to the Binance wallets, they could have just sent the assets out in an atomic bundle without needing a relayer at all.
So it seems likely that they didn't have the private keys and instead just had the 7702 auth signatures, which must have been phished somehow.
I think we can go ahead and assume DPRK.
Linux Roller retweeted
User funds are safe!
It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m).
I don't manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered.
Linux Roller retweeted
We've identified & fixed an issue impacting our international platform, Polymarket.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement.
Anyone who has been impacted will be made whole.
Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.
Algo pasó en el validador de Solflare. Como blockchain DPoS, el SOL delegado en ese validador queda SIEMPRE en poder del propietario, NO del validador. Sin embargo, hasta que sean delegados en un nuevo validador activo, no producirán beneficios ☀️☀️☀️
Update on Solflare SOL staking
Our staking provider has notified us of a security incident on their side, affecting the keys they hold for the Solflare validator. They are investigating. As a result, the Solflare validator is currently not producing rewards.
Your SOL is safe. Delegated stake sits in your own stake account and is controlled by your keys alone; the Solana protocol does not allow a validator, or anyone holding its keys, to move it. No user funds were touched.
We're moving to a new Solflare validator, which means your stake will need to move too. No action is needed now: an upcoming app update will give you a secure, guided path to the new validator, and we'll post here the moment it's live. Rewards are paused until your stake is active on the new validator, and we're working on a compensation plan for everyone who migrates.
Migration will only happen through the Solflare app. We will never DM you or send you a link. We'll keep you posted.