Community Lead @suku_world / Co-Founder @joinringo / DMs open! Personal account. Opinions are my own - former @yugalabs
The Jungle
Joined May 2009
- Tweets25.2K
- Following3.5K
- Followers7K
- Likes60.3K
Freeky.eth π’ππ retweeted
Points 1 and 4 meet in Guatemala for us: @Suku_Pay sends from the US land in @BancoIndustrial's Zigi app, so building with a bank was the way in, not a workaround.
Here is Argentinaβs Messi successor.
Heβs nowhere near half as good, but heβs highly marketable and has that βgood guyβ image.
Freeky.eth π’ππ retweeted
BREAKING: @Railway SAYS THAT "AN UNAUTHORIZED THIRD PARTY MAY HAVE ACCESSED ENCRYPTED ENVIRONMENT VARIABLES AND, FOR SOME OF THEM, OBTAINED THE DECRYPTED CONTENTS. ENVIRONMENT VARIABLES MAY CONTAIN SECRETS SUCH AS API KEYS OR DATABASE AND REGISTRY CREDENTIALS"
RECOMMENDS IMMEDIATE ROTATION OF ALL RAILWAY ENVIRONMENT VARIABLES, API KEYS, AND REGISTRY CREDENTIALS
Freeky.eth π’ππ retweeted
Railway has been compromised!!!
If you use OpenAI, Anthropic/claude, OpenRouter and stripe READ THIER STATEMENT:
But Here are the main risks and bad outcomes based on Railwayβs official disclosure and user reports:
β’ API key draining and unexpected charges, Attackers have already been actively using exposed keys, This can burn through AI credits or generate real billing charges in MINUTES
β’ Database and data access: Environment variables often include database credentials. Compromised ones can allow attackers to read, modify, or delete your data, or dump entire databases.
β’ Private registry/image compromise. Registry credentials (Docker Hub, GHCR, etc.) can let attackers pull your private images or push malicious ones, potentially leading to supply chain attacks
β’ Lateral movement into other services. Broad or high privilege keys can give attackers access to connected systems (cloud accounts, third-party APIs, email, analytics, payment processors, etc.), expanding the blast radius beyond Railway
What to do;
Rotate all environment variables and private registry credentials stored in Railway, then review logs of the related services for suspicious activity
Stay safe
An urgent notice from the Railway team
blog.railway.com/p/security-β¦
Freeky.eth π’ππ retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Freeky.eth π’ππ retweeted
Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself:
1) UPDATE EVERYTHING - main targets are:
a) Browsers - Chrome, Safari, Firefox
b) OS: ο£Ώ: Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes
c) Phones: Update it all
d) Desktop apps (Slack, Cursor, Discord, etc)
2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week.
3) Avoid untrusted Wifi networks until your devices are updated
4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates
5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through.
6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc
What advice did I miss?
Freeky.eth π’ππ retweeted
An urgent notice from the Railway team
blog.railway.com/p/security-β¦
hey @joinringo Im saying that PSG will beat Barcelona in today's match and Desire Doue will score a goal.
Lock it in for $10 USDC
Freeky.eth π’ππ retweeted
Our CEO @tatolapchik is at @Money2020 in Las Vegas this week.
Money 20/20 brings together the people shaping the future of fintech and payments.
Right where @Suku_Pay belongs. π
Freeky.eth π’ππ retweeted
Some of that money movement is already landing in Guatemala: @Suku_Pay sends from the US run on Polygon and arrive in @BancoIndustrial's Zigi app.
This is why we can't have nice things.
PSA just emailed me letting me know that FedEx STOLE my 104 card submission. Over $100,000 in cards just gone....πππ
ApeBALLZ by @OtherBallz is happening IRL now, and Ringo is in the mix! π΄ποΈ
Pick a side for every matchup, back your take, and cash out if you called it right.
Hereβs how it works:
1β£Sign in with X (Glyph supported)
2β£Add or bridge funds
3β£Pick a side for each matchup
4β£Cash out when you win
π app.joinringo.xyz/apeballz
Need help? Reach out on Telegram or open a ticket on the SukuWallet Discord.
Proceeds will be donated to 50 Ways Foundation charity
Freeky.eth π’ππ retweeted
ApeBALLZ by @OtherBallz is happening IRL now, and Ringo is in the mix! π΄ποΈ
Pick a side for every matchup, back your take, and cash out if you called it right.
Hereβs how it works:
1β£Sign in with X (Glyph supported)
2β£Add or bridge funds
3β£Pick a side for each matchup
4β£Cash out when you win
π app.joinringo.xyz/apeballz
Need help? Reach out on Telegram or open a ticket on the SukuWallet Discord.
Proceeds will be donated to 50 Ways Foundation charity
Freeky.eth π’ππ retweeted
I once ran a 300k user community from my phone. Not a laptop. A phone. Because the people signing up at 3am in Bangladesh don't wait for office hours.
That's the job. Somebody has to be there.
Hiring for community or mods? I'm here
