schattenFeuer

There is a high demand for a devcon side event where devs can share their frustration about the current state of AI, security, bug bounty and support each other. Like a group psychotherapy, you know

Wondering how frustrating and scaring all these hacks, exploits and data leaks could be. How scary it is becoming to interact with the technology

Ugh…. Turns out EIP-7702 is the most expensive one

I was always wondering - how do people build on top of different AI models and measure that they have actually improved something above just prompting the model and getting the result back? Where is that line that you cross and definitely know that you’ve built something valuable that no one has? In different areas - be it a SaaS service or some security tool

Choose your fighter: clownish ethereum intern claiming they are going to disclose some critical issue in Solana or Solana circle who gave zero about it

Now I got it

How to apply for a remote job without getting scammed (TL;DR be an unbearable critic) 1. Companies rarely publish salaries for a particular role - it usually depends on the candidate and their experience - so there's often little point in showing numbers before an interview. Compensation is typically determined after some negotiation. So if you see lucrative numbers, especially equity in a startup, right in a job offer on some board, you should double-check and ask yourself why they're doing that. Maybe do draw as much attention as possible? 2. If the company is new and doesn't have a credible name yet, you can still check whether they have money: public funding rounds, posts from investment funds backing them, and so on. If the money seemingly came out of nowhere and they claim they will pay you generously, you should also be extremely cautious 3. Look for public proof of work. Github profiles of team members showing active development are the first place to check, followed by blog posts with research on real topics - not just abstract, generic AI slop written for SEO optimisation. If there are no signs of continuous progress, especially from a startup, that's fishy 4. Look up people who already work for them - you can search on X, Github, or Linkedin. The accounts you find should be active and not recently created (search for their names, check when their profile pictures were uploaded, when did they change their user name last time and so on). It's hard to determine whether a single account is fake, but looking more broadly at the whole team may give you a sense of what is actually happening 5. And finally, interviewing and communication - the initiative should be on their side. You shouldn't be asked to message someone, log in somewhere, download something, or send private data. The process should be transparent: if they want something from you, they should tell you why they need it, and the reason should be extremely strong. Be a passive critic - question everything, and don't clone shady repos, join calls through unknown links, run/install scripts, send funds, or share your screen If you feel you're being asked for something weird, ask twice. A real company that wants to interview you will kindly explain why it needs certain info from you. There shouldn't be any secrets. Stay safe and be cautious in that dangerous age when everything can be easily faked!

Beware of a massive scam campaign going on in the Web3 hiring market - I've only come across one so-called "company" posting jobs, but there could potentially be more of them So, let's start digging into @saifuro_finance (PLEASE VERIFY and don't interact with them) They have a lot of vacancies on their careers page and a lot of jobs listings across almost every Web3 job aggregator: web3[.]career, CryptoJobsList and many more - with decent salaries and a wide variety of positions. Ithelia Dias - their CEO (absolutely zero info on him on the web) @Ed_Wynand - is listed as their CTO (severe signs of mass-following everyone on X) + AI-slop responses to other accounts (even ones posting in Chinese, which doesn't seem to confuse them - potentially multilingual person I guess) - zero public track of working anywhere else Each Telegram account posted in their company's "About" section is linked to the others - they send gifts to each other, all their profile pictures were uploaded within the last two months, and their last-seen times are almost identical - likely all operated by the same person In their job listings, they stress that they will never ask for money during the interview process - and I can almost guarantee they will scam you in some other way After applying, you receive an email asking you to contact their CTO on Telegram - wtf?? Likely an attempt to bypass potential spam reports Whether it's a campaign to collect private data or target people with crypto stealing scripts during interviews, it looks like a well-prepared, polished, ongoing scam that no-one is writing about All of them are anonymous, with zero track record and zero info about the company having raised money - and they're spamming every job board with posts that they are hiring. I'm sure everyone who moderates these platforms should address this issue - job boards shouldn't be a way for scammers to spread their fraud campaigns. cc: @CryptoJobsList @Web3Career

Attending Ethereum Devs calls turned out to be extremely valuable and challenging - lots of smart guys debating with each other over the next upgrade path. Gives you a lot of context on the upcoming updates and potential thin places in clients implementation Highly recommend!

Rust is beautiful - each time reading docs and getting to know some little interesting particle that makes the whole concept more clever and safe

I'm in! Accepted to Cohort 6 of the Solana Rust Security Bootcamp by @rektoff_xyz Time to secure Rust based apps!

Never confirmed criticals were better than sex for me (i've never found criticals (I've never had sex))

Why X feed causes a lot of fomo after a few scrolls? I am starting to feel scared of opening this all

Borrowing against your credibility on Ethos is a complete no-brainer

Are there any companies that hire junior level devs? It’s interesting how AI usage cost relates to this - is it still cheaper than a beginner level position?

It’s scary how a lot of devs/protocols/auditors decided to delegate their work to AI agents without even verifying the output and spending enough time to judge its results