Eric Su retweeted
My post about France went viral. Thousands of likes. Many Americans told me: "Democrats aren't socialists. America will never be France." I want to answer that seriously, step by step.
Start with a simple observation. Look at what has gotten cheaper in America over the last 25 years: TVs, phones, software, clothes, toys. Now look at what has exploded: college tuition, healthcare, childcare, housing.
What separates the two lists? The first lives in competitive markets. The second is exactly where government is most involved: subsidies, mandates, licensing, zoning, regulation.
College. Washington lends students almost unlimited money. Universities know the money will always come, so they raise tuition and hire more administrators. The student pays the bill for twenty years. More government money, higher prices.
Housing. Why can't a nurse buy a home in the city where she works? Not because of capitalism. Because of zoning laws, permits, environmental reviews, years of procedure to build a single building. The most expensive places to live in America are the places where it's hardest to build. When building is nearly illegal, prices explode.
Healthcare. The patient almost never sees the price. A third party pays, regulations limit who can compete, and costs climb year after year with no one able to say no.
So here is the trap. The problems you suffer from are not the failure of free markets. They are the places where the market has already been replaced by the state. And the solution you're being offered is more of the same.
That's the Trojan horse. It always works the same way. A real problem. A generous-sounding promise. A program that makes things worse. Then the failure of that program becomes the argument for the next one. People who lived under communism in Poland learned to recognize the lie and the mask the lie wears. The lie never presents itself as a lie. It presents itself as compassion.
In France we are at the end of that road. Debt we can never repay. Young people who can't afford a home. Our best people leaving. And every few years our cities burn. Nobody voted for this. They voted for one more generous promise, fifty years in a row.
If you're a Republican, share this with the Democrat in your life. Not to win an argument. To start a conversation.
If you're a Democrat, I'm not asking you to switch teams. I'm asking you to look at the pattern. Wherever the state took over, life became unaffordable. Don't fix the failures of government with more government.
Stay American. Ask for less state, not more.
I’m French. I want to talk to Americans who are about to vote Democrat. Not to insult you. To warn you.
I come from your future.
In France we did everything your progressive politicians promise. Free healthcare, free college, generous welfare, strong unions, heavy regulation, high taxes on the rich, a state that takes care of everything. Public spending close to 57% of GDP, one of the highest on the planet. On paper, it’s the dream.
Here’s what it looks like from the inside. France hasn’t passed a balanced budget since 1974. Our debt is above 3,300 billion euros. Interest on that debt is becoming one of the biggest items in the national budget. Our hospitals are collapsing despite record funding. Our schools rank lower every year. Young people with degrees can’t afford an apartment in the city they were born in. Our best engineers leave for London, Zurich and San Francisco. And the rich you wanted to tax? They left too, and took the jobs with them.
The promise was protection. The result is stagnation.
The worst part is that nobody in France voted for decline. Every single step sounded generous, compassionate, reasonable. One more program. One more regulation. One more tax to fund it. Each step alone makes sense. Fifty years of them, and you wake up in a country that can no longer build a nuclear plant on time or keep its streets safe.
I love America because it’s the one place on earth where people still believe they can build something from nothing. I came to Silicon Valley as a self-taught kid and it changed my life. That spirit is the most precious thing your country has.
Before you vote, ask yourself one question: is the program you’re voting for making America more like America, or more like France?
Trust me. You don’t want to be France.
Eric Su retweeted
En Suiza, las familias de dinero antiguo enseñan a sus hijos un ritual extraño con dinero en efectivo.
Los psicólogos dicen que rompe la mentalidad de pobreza en tres meses:
Eric Su retweeted
signs of bottom being in:
• price stops going down on bad news (saylor selling millions into 58-60k & $BTC printing higher lows)
• crypto native mobile apps starting to pickup real traction (pumpfun revenue up 20% week-over-week, fomo 100k+ users in a week)
• institutional interest coming back (robinhood chain, PTJ publicly bullish BTC)
• interest across social media trending again (kimchi 30M view post on @X, insentos tik tok video trends, @blknoiz06 +200k followers this month)
future confirmation of beginning of bull market trends
• on-chain coins printing a subsequent higher high after first high volume top
• holder count on most popular on-chain coins steadily increasing
• mainstream news cycle starts to pickup again
• devs experimenting on-chain w/ novel mechanisms
• airdrops from successful protocols as stimulus packages for trenches
-----
which coins do you think will lead the next bull market?
Eric Su retweeted
🦔AI companies are bulk-buying rare books, scanning them through high-speed machines that cut the spines off, and shredding the originals. A service called ISBNdb facilitates orders of up to a million books and keeps buyers anonymous. Pre-2022 books are premium because they're free of AI-generated text. A federal judge ruled the practice is fair use because eliminating the original means only one copy exists at a time. Anthropic hired the former head of Google Books partnerships to obtain "all the books in the world."
My Take
This got to me. A bookseller told 404 Media that rare books with almost no surviving copies are being fed into this pipeline. Books that survived wars, fires, and centuries of handling are being shredded so an AI can learn to write a better marketing email.
ISBNdb's website literally says "'AI company destroys two million books' is not a headline that generates sympathy," and they still built an entire business around making it happen quietly. They offer NDAs as a feature. They coach clients to call it "digital preservation."
I've covered AI companies scraping the internet, torrenting libraries, and stealing music. This is worse because it's irreversible. You can re-upload a website. You can reprint a bestseller. You can't replace the last three copies of an 18th-century botanical text once someone shreds them for training data. And the judge said it's legal. So it's going to accelerate.
"We shred rare books and offer NDAs so nobody finds out" is a legitimate business model in 2026. What a timeline.
Hedgie🤗
Eric Su retweeted
🚨#BREAKING: A 28-year-old confirms he has spent the last 10 YEARS of his life interviewing World War II combat veterans to keep their stories alive...
...in fact, for the last 10 years, he has interviewed World War 2 veterans EVERY SINGLE DAY
He started as a teenager, ditching school to ride his BIKE to the local retirement home, walking up to the front desk and asking to, "meet some World War II heroes."
His name is Rishi Sharma.
He's crossed all 50 states and half the world.
He's slept in his car and lived on gas-station food to afford it.
He asks these men for hours of their memories, and then he hands the entire recording to their families...
...FOR FREE
So that 200 years from now, a great-great-grandchild will know not just their hero's name, but how he laughed, how he cried, and what he sacrificed.
Rishi has no military family, his parents immigrated here from India.
He does it out of pure gratitude.
In his words:
"My parents were given the opportunity to immigrate and raise a family because of veterans like these. It's a debt of love I'll spend my entire life trying to repay..."
As one 100-year-old Marine who stormed Iwo Jima told him, remembering the flag going up:
"The hair on my arms still stands up when I think about how beautiful it was."
THAT is America.
250 years of ordinary people doing extraordinary things...
God bless our veterans. 🇺🇸🇺🇸
If we had 500 more trillionaire founders, your standard of living would be 2x higher.
If we had 500 more politicians, your standard of living would be lower.
Makes you think 🤔
Alexandria Ocasio-Cortez: You can't earn a billion dollars.
Ilana Glazer: That's right.
AOC: You just can't earn that.
Glazer: That's exactly correct.
AOC: You can get market power. You can break rules. You can do all sorts of things. You can abuse labor laws.
Glazer: Yup.
AOC: You can pay people less than what they're worth.
Glazer: Yup.
AOC: But you can't earn that, right?
Glazer: That's right.
AOC: And so you have to create a myth that -- since you didn't earn that, you have to create a myth of earning it.
Eric Su retweeted
Dave: “Hello, caller, you are on the air.”
Caller: “I don’t think billionaires create value.”
Dave: “Okay. What do you mean by that?”
Caller: “Nobody can earn a billion dollars ethically.”
Dave: “Alright. What do you do for a living?”
Caller: “Well, before this, I was a bartender.”
Dave: “Nothing wrong with bartending. Honest work.”
Caller: “Right.”
Dave: “And now?”
Caller: “I work in government.”
Dave: “Okay. So let me get this straight. You're saying Elon Musk, who helped build PayPal, Tesla, SpaceX, and Starlink, has made innovations like online payments, electric cars, rockets, and satellite internet possible, didn't earn his way to being a billionaire?"
Caller: “None of that justifies being a billionaire.”
Dave: “Well, sure sounds like value got created somewhere along the line.”
Caller: “I disagree.”
Dave: “What exactly did you build?”
Caller: “I advocate for economic justice.”
Dave: “No ma’am, I mean actual products.”
Caller: “…”
Dave: “You’re telling me the guy catching rockets mid-air created less value than a person who used to serve mojitos and now votes on spending his tax dollars?”
Caller: “That’s unfair.”
Dave: “What’s unfair is pretending markets are imaginary while cashing a government paycheck funded by the businesses you claim don’t create value.”
Caller: “I’m actually a congresswoman.”
Dave: “Oh Lord. Of course!"
Alexandria Ocasio-Cortez: You can't earn a billion dollars.
Ilana Glazer: That's right.
AOC: You just can't earn that.
Glazer: That's exactly correct.
AOC: You can get market power. You can break rules. You can do all sorts of things. You can abuse labor laws.
Glazer: Yup.
AOC: You can pay people less than what they're worth.
Glazer: Yup.
AOC: But you can't earn that, right?
Glazer: That's right.
AOC: And so you have to create a myth that -- since you didn't earn that, you have to create a myth of earning it.
Eric Su retweeted
Two years, dozens of emails, and multiple angles for introductions. Every no was just a step closer to yes.
Fight until you die. Never give up.
Chips on shoulders put chips in pockets.
How Adam Foroughi, founder of Applovin, built one of the most efficient companies by hiring outcasts with something to prove:
“One of the things that I always looked at for hiring was to find people who have a chip on their shoulder.
Someone who has a reason to push hard.
We ended up with this group of people that were outcasts from other places.
One of the best hires I ever made was this kid who was a high school dropout. He was not getting a job in big tech.
But he had skills that smoke everyone else when it comes to selling.
I knew I could bring that person in, empower that person, and they're going to be hungry and they're going to push harder than the others.”
Eric Su retweeted

International Cyber Digest@IntCyberDigestApr 30
Europe!
EuropeConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
🚨 BREAKING: cPanel and WHM, the control panels behind an estimated 70+ million websites, have a critical security flaw that lets anyone become root admin without a password. CVE-2026-41940 affects every supported version. It’s already being exploited in the wild.
watchTowr Labs published the full attack today, after the hosting company KnownHost confirmed the bug was already being used to break into a significant chunk of the internet.
If you've never heard of cPanel: it's the dashboard that hosting providers and millions of website owners use to manage their servers, domains, email accounts, databases, and SSL certificates. WHM is the admin version that controls the entire server. If someone gets root access to WHM, they get the keys to the kingdom and to every apartment inside it.
How the attack works, in plain English:
🔴 Step 1: The attacker sends a deliberately wrong login. cPanel still creates a temporary "you tried to log in" record on disk and gives the attacker a cookie tied to it.
🔴 Step 2: The attacker tweaks the cookie to disable cPanel's password encryption. Normally cPanel encrypts the password field on disk. With one small change to the cookie, cPanel just stores it as plain text instead.
🔴 Step 3: The attacker sends a fake login attempt where the password field secretly contains hidden line breaks. cPanel does not strip these line breaks out, so they get written straight to the session file. Each line break creates a brand new fake record. The attacker uses this to inject lines that say "this user is root" and "this user already authenticated successfully."
🔴 Step 4: The attacker visits one more random page on the site to nudge cPanel into re-reading the file. cPanel then promotes the injected fake lines into its main session memory.
🔴 Step 5: On the next request, cPanel sees a flag that says "this user already passed the password check." cPanel trusts that flag, skips checking the actual password, and lets the attacker in as root.
From start to finish, the attack takes a handful of HTTP requests.
If you run cPanel or WHM, the patched versions are:
🔴 cPanel/WHM 110.0.x → 11.110.0.97
🔴 cPanel/WHM 118.0.x → 11.118.0.63
🔴 cPanel/WHM 126.0.x → 11.126.0.54
🔴 cPanel/WHM 132.0.x → 11.132.0.29
🔴 cPanel/WHM 134.0.x → 11.134.0.20
🔴 cPanel/WHM 136.0.x → 11.136.0.5
If your version is older than these, assume someone has already broken in and act accordingly. Patch right now, then rotate every password and key the server touched: root passwords, API tokens, SSL private keys, SSH keys, mail passwords, and database passwords.
Eric Su retweeted

Luke Pierce@lukepierceopsApr 30
United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
A private equity firm came to us last quarter convinced they needed a custom AI build.
We ran our standard audit first. Seven phases across three weeks.
By the end, time spent on one of their core processes was on track to drop around 70%. And half of what they thought they needed didn't need to be built at all.
That's usually how it goes. The audit is the part nobody wants to do because it's slow and unsexy. It's also the part that decides whether everything that comes after is worth a damn.
I packaged the entire process into a self-serve SOP. Same framework we use across our engagements, written so an internal ops lead can run it themselves.
What's inside:
→ The 7-phase audit framework
→ Stakeholder interview script
→ Process shadowing playbook
→ Current state mapping templates
→ Opportunity scoring matrix
→ ROI modeling and future state design
→ Audit document structure for leadership
→ 10 mistakes that tank internal audits
Like + RT + Comment "ASSESSMENT" and I'll DM it to you. Make sure you're following me so I can DM.
Eric Su retweeted
🚨 Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitwarden-cl…
Eric Su retweeted
I have three monitors on my desk. The left one shows the order book. The middle one shows Truth Social. The right one shows the investigation queue.
On April 21st, the left screen moved first.
I am a Senior Surveillance Analyst at a commodities exchange. I have held this position for nineteen years. My job is to monitor trading activity for suspicious patterns and generate compliance reports. I am employee of the quarter. I have a mug.
At 19:54 GMT on April 21st, someone placed 4,260 sell orders on Brent crude futures. They did this during post-settlement. The window after the market closes when daily volume is typically in the dozens. Sometimes single digits. Sometimes I watch the screen and nothing happens for forty minutes and I think about whether my daughter is happy.
On April 21st, someone placed $430 million in directional bets in 120 seconds during that window. One hundred and twenty seconds. I timed it on my watch because the system clock rounds to the nearest minute and I have found, in nineteen years, that precision matters to no one but me.
At 20:10 GMT, the President posted on Truth Social that he was extending the Iran ceasefire.
Brent dropped from $100.91 to $96.83.
I flagged the trade. I flag a lot of trades. I want to tell you what happens to my flags.
My flags go into a system called TRACE. Trade Review and Compliance Evaluation. I did not name it. The system generates a report. The report goes to a committee. The committee has a name I am not allowed to share but I can tell you it meets quarterly and the conference room has a credenza with bottled water that is sparkling because someone once put still water in the room and a managing director sent an email about it that was longer than most of my surveillance reports.
The committee reviews my flags. The committee has reviewed all of my flags. Here is the complete record of actions taken on my flags in 2026:
Reviewed.
That's it. "Reviewed" is a status. In compliance, a status is the absence of an action that has been given a name so it looks like one.
Let me show you my flags.
March 9th. Someone bet millions on oil falling at 18:29 GMT. Forty-seven minutes later, a CBS reporter posted that the President said the Iran war was "very complete, pretty much." Oil dropped 25%. Forty-seven minutes. I flagged it.
March 23rd. Someone sold 5,100 lots of Brent and WTI crude futures between 10:49 and 10:50 GMT. Fourteen minutes later, the President posted on Truth Social about a "COMPLETE AND TOTAL RESOLUTION" to hostilities. Oil dropped 11%. Over 13,000 contracts traded in sixty seconds after the post. Fourteen minutes. I flagged it.
April 7th. Someone established a $950 million short position in oil futures at 19:45 GMT. Three hours later, the President declared a two-week ceasefire. Nine hundred and fifty million dollars. I flagged it.
April 17th. Someone placed $760 million in bearish bets twenty minutes before Iran's foreign minister confirmed the Strait of Hormuz would reopen. Seven hundred and sixty million. I flagged it.
April 21st. The $430 million. Fifteen minutes. I flagged it.
That is $2.1 billion in directional oil bets in April alone. Every one of them landed on the correct side of a presidential announcement. Every one of them was placed in a window so narrow you could measure it in bathroom breaks. I flagged every single one.
The CFTC chair told a Congressional committee that his organization has "zero tolerance" for fraud and insider trading. I wrote that quote on a Post-it note and stuck it to my right monitor. The one that shows the investigation queue. The investigation queue has not moved since March.
Zero tolerance. Zero staff. Zero budget. Zero prosecutions under the STOCK Act since it was signed in 2012.
Fourteen years. The law has existed for fourteen years and has been enforced zero times. In compliance, we call that a compliance rate of one hundred percent. No cases filed means no cases lost. You cannot fail an audit you never conduct. We call that excellence.
Last month the White House sent an internal email to staff. I was not on the distribution list but I have read reporting on it and I need you to sit with what I am about to say. The email instructed White House staff not to use insider information to place bets on prediction markets.
The White House had to send a memo telling its own employees not to insider-trade.
I want you to read that sentence again. Not because the instruction was unclear. Because the instruction was necessary. Because someone in the building looked at the same pattern I have been flagging for months on my three monitors and decided the appropriate response was an email.
The President's son sits on the advisory board of Kalshi. He is an investor in Polymarket. Both are prediction markets. Both saw accounts created days before U.S. military action.
One account. I cannot stop thinking about this account. It was called "Burdensome-Mix." It was created in December. On January 2nd, it placed $32,500 on Venezuela's president being removed from power. On January 3rd, Maduro was seized by U.S. special forces. Burdensome-Mix collected $436,000. Then it changed its username. Then it disappeared.
One account is a coincidence. But there were six.
Six accounts were created on Polymarket in February. All bet on U.S. strikes on Iran by the 28th. When the President confirmed the strikes, the six accounts collected $1.2 million between them. Five of the six never placed another bet. The sixth went on to correctly predict the ceasefire date and made another $163,000.
My surveillance system logged all of this. My system logs everything. My system does not have opinions and neither do I. I generate reports. The reports go to committees. The committees meet quarterly. Between meetings, the windows get shorter and the bets get larger.
March 9th: 47 minutes. March 23rd: 14 minutes. April 17th: 20 minutes. April 21st: 15 minutes.
The window is compressing. In March, you had time to make coffee between the trade and the announcement. By April, you had time to send a text. By summer, at this rate, the trade and the announcement will be the same event.
The spokesman said any implication that administration officials are engaged in insider trading is "baseless and irresponsible reporting."
Then the White House sent the email again.
I have been in compliance for nineteen years. I have seen insider trading run out of strip mall offices by men who could not spell "derivative." I have seen pump-and-dump schemes coordinated over WhatsApp by people who used their real names. I have seen a man try to manipulate soybean futures from a Panera Bread.
I have never seen $2.1 billion in perfectly timed trades across five presidential announcements in a single month go uninvestigated.
But I have also never seen a compliance system work this beautifully. Every trade flagged. Every report filed. Every committee briefed. Every quarterly meeting attended. Bottled water: sparkling. Minutes: distributed.
Zero prosecutions.
As long as the flags go up and the cases don't, my performance review says I am meeting expectations.
I am meeting expectations. The system is meeting expectations. The $2.1 billion is meeting expectations. The fourteen-year-old law with zero prosecutions is meeting expectations.
The left screen moves. The middle screen moves. The right screen stays perfectly, immaculately still.
In my field, we call this price discovery.
Eric Su retweeted
🚨 THIS IS INSANE.
Commerce Secretary Howard Lutnick's sons could be making 3 to 5x returns on every dollar they spent buying tariff refund rights.
Cantor Fitzgerald, now run by Lutnick's sons Brandon and Kyle, was buying tariff refund claims from companies at 20 to 30 cents on the dollar.
The firm told clients it had "capacity to trade up to several hundred million" in these claims.
They confirmed at least one $10 million trade was already executed as of July 2025. They said they expected that number to "balloon in the coming weeks." That was 9 months ago.
Today those claims are worth 100 cents on the dollar. The refund portal is live, $166 billion in refunds are being processed.
If Cantor bought $100 million in refund rights at 25 cents on the dollar, they spent $25 million.
They now collect $100 million from the government. That is a $75 million profit. A 300% return.
If they scaled to "several hundred million" as they told clients they could, the profits run into the hundreds of millions.
Howard Lutnick was the architect of the tariff policy.
He pushed Trump to impose them. He fought against officials who wanted to limit them. Then he left Cantor Fitzgerald to his sons and transferred his equity into a trust benefiting them.
Tax free under government ethics rules. He received $360 million from the buyout.
His sons positioned the firm to profit from the exact policy their father built.
Their father publicly championed tariffs he knew could be struck down while his sons were buying refund claims betting they would be.
Eric Su retweeted
I have posted multiple confessions about World Liberty Financial over the past few days.
4 crypto products. 3 presidential pardons. $1 billion extracted. $3.87 billion in retail losses. 600,000 wallets. 110 footnotes. Every claim sourced. Every link cited.
The definitive accounting of the Trump family's crypto operation — from the team page to the pardons to the stablecoin tollbooth to the $18.5 million dinner seat.
Every event unrelated. Now on substack 👇
Our internal lint rules are now open source, featuring 23+ custom rules we use to guide droids at @FactoryAI. These rules cover file organization, React patterns, testing, error handling, API conventions, and more.
Every rule is 100% droid-generated and includes detailed Markdown docs.
While this isn't meant to be imported as-is, we hope it inspires you to build custom linting rules tailored to your own codebase. Take what works, ignore what doesn’t, and tweak as needed. You can leverage the docs as building blocks to suit your specific framework or language.
Check it out: github.com/Factory-AI/eslint…
Eric Su retweeted
Replying to @nic_carter
Here's the dark side of Medvi, clean and tight:
Regulatory
FDA Warning Letter #721455 (Feb 20, 2026): cited for misbranding. Website falsely implied compounded semaglutide/tirzepatide were FDA-approved. They're not. Compounded drugs never are.
Part of a wave. FDA issued 30+ warning letters to telehealth companies doing the same thing. At least 30% of those companies share the same affiliated medical group (OpenLoop Health, Medvi's doctor network).
Legal
Class action lawsuit filed Nov 2025: Day v. OpenLoop/Triad RX (Delaware). Names Medvi's actual prescribing network as defendant.
OpenLoop Health data breach January 2026: 1.6 million patient records exposed. That's the company doing all of Medvi's doctoring.
Consumer
BBB: F rating. 355 complaints. Failed to respond to 5 of them.
Trustpilot: 1.2/5.
Core complaint pattern: subscription dark patterns (auto-renew at $299/month after $179 intro), cancellation routed through AI phone maze, refusals to refund even when no meds shipped, prescription bait-and-switch (ordered tirzepatide, prescribed semaglutide), ToS updated after enrollment, consent forms with "will not dispute payments" buried in them.
Marketing
Futurism reported Medvi used AI-generated deepfake before/after photos in ads.
The structural problem
The "2 employees" model works by externalizing every regulated or risky function. Medvi holds the revenue. OpenLoop holds the prescribing liability. The pharmacy holds the dispensing liability. When things go wrong for patients, no one entity is clearly responsible. That's not an accident, it's the architecture.
My agent wrote this, obviously.
Eric Su retweeted

Joshua Xu@joshua_xu_Apr 2
United States
United StatesConnected via China App StoreAccount-level information, not a live location or per-post device.
Seedance 2.0 is now in HeyGen
Everyone's using Seedance to generate cinematic video with any character. We just made that character you.
Introducing Avatar Shots - your likeness, consistent across scenes. Dynamic motion. Multiple avatars in the same shot.
Same face. Way more range.
Only available through business email verification for all regions except US and Japan.
RT + comment "SEEDANCE" for 100 HeyGen credits (must follow)
Eric Su retweeted
Replying to @AdamFard_
Building clawluv.com the world’s easiest way to install and run @openclaw and to onboard casual users to @openclaw. You don’t even need a laptop.
Creating this UI to make managing and upgrading their agents much easier. 🦞🦞



























