INVINCIBLE PRIVACY GROUP
Joined January 2018
- Tweets18K
- Following346
- Followers7.3K
- Likes79.2K
Pinned Tweet
I have created a donation page to support my work: donate.joinstr.xyz/
This would help me continue to work on joinstr and other projects.
floppy.md retweeted
In August 2026 I reminded @Ledger again about the hardware tampering issue in Vietnam & that I already reported it to @DonjonLedger.
So no one at Ledger can claim they were NOT aware of the device tampering & Supply Chain Attack issues starting in Vietnam where Ledgers are made.
U guys should really consider putting some type of tamper-evident seals on ur @ledger wallets manufactured in Vietnam because hackers in Vietnam are opening ur wallets & installing extra hardware inside the devices to steal people's coins, I told @DonjonLedger about this already.
floppy.md retweeted
Claude figured out the origin of the NIST curve parameters. Turns out to have been timestamps!
anthropic.com/research/ecdsa…
4/ I reported this publicly in August and to their security email on Oct 18 no response.
More on the directory side: uncensoredtech.substack.com/…
floppy.md retweeted
This is the first HIGH severity curl vulnerability in years. It is cool, but take note of the report format. This is the level of detail you should aim for when disclosing vulns hackerone.com/reports/403033…
floppy.md retweeted
🚨 RCE in curl (CVE-2026-92392, HIGH Severity) 🚨
A malicious HTTP/2 server can turn a use-after-free during uploads into remote code execution.
Prerequisites:
● curl -T over HTTP/2 to an attacker-controlled server
● is ~135KB+ and contains \n\n anywhere
● -Z / --parallel for exploitation when PIE/ASLR is on
Affected: 8.12.0–8.22.0
Fix: 8.23.0 (or 8.20.2 / 8.16.2 / 8.14.3)
floppy.md retweeted
Introducing LayerTree, a non-custodial scaling solution on bitcoin that connects to Lightning.
Using covenants, one UXTO can be shared by a million users. Any user can leave at any time in a single transaction. Users don't need to be online to receive. Funds never time out.
LayerTree is the next step in bringing bitcoin to billions.
Learn more: layertree.tech
floppy.md retweeted
One of the biggest victims of the Ledger theft was a scammer themselves. They lost more than 60BTC, about $4.8M. The funds were from a task scam.
In this task scam, people were paid to fake sales and reviews of real items. Then a "negative balance" appeared, and they were told to add their own money in order to get paid.
On Sep 22, the person behind the scam moved the proceeds into three separate Ledger addresses. On Oct 9, thieves emptied all three. One transfer each, into the same wallet. The wallet is reported as stolen funds.
floppy.md retweeted
White American Terrorist Goes To Chicago Hindu Temple For Mass Shooting, Jammed Rifle Stops Him ndtv.com/world-news/us-teen-…
