Australia
Joined December 2023
Need a ristreto
3
LATEST: 🚨 Polkadot warns the Fearless Wallet browser extension has been compromised and leaking private keys since February 2025, urging affected users to create a new keypair and move their funds.
32
24
8
119
44,615
G DAXY retweeted
Security Alert for Fearless Wallet Fearless Wallet is a third-party application, built and maintained by an independent team. Following an investigation by the Polkadot Technical Fellowship on behalf of the @PCF_org, it was found that the Fearless Wallet browser extension had been compromised and had been leaking users’ private keys since February 2025. If you have used the Fearless Wallet browser extension, please create a new keypair with a different wallet and move your funds as soon as possible. Remember to never share your private keys.
20
51
24
251
48,201
G DAXY retweeted
Chopin + Proof-Driven Development Kit from @GitHubNext and @MSFTResearch enable teams to ship AI-generated code to production without reviewing it line by line, with stronger assurance than code review and testing alone. Now in research preview ⬇️
How do you _guarantee_ your agent's code is correct? You prove it. Introducing Proof Driven Development Kit (PDD Kit) from @MSFTResearch. PDD Kit helps turn your plan into a formal spec, then proves the agent's code meets that spec for every input. No vibe verification. PDD Kit is integrated with @GitHubNext's Chopin, so you can plan as a team. PDD Kit takes an app's login flow from intent to a verified pull request: It discusses your code, infers your intent as it goes, and proposes a formal spec in Verus, a proof language for Rust. Once you approve the spec, the Verus verifier automatically proves the code meets it. Where proof isn't possible, it falls back to empirical verification with tests and computer-use agents (CUAs). It works on Rust today. No new language, no change in how you produce the underlying code, making formal methods more accessible. The goal is a verified software factory, where engineers review specifications instead of code. Come see it in action at GitHub Universe, Oct 28–29. Swing by the Speakeasy and ask for GitHub Next!
36
46
12
466
64,213
G DAXY retweeted
Security reminder The SecondFi Asset Recovery Tool is live for wallets affected by the June 2026 security incident. Recovery has worked successfully for those users who have followed our instructions. The recovery tool uses your existing recovery phrase to prove ownership of your wallet. Your recovery phrase is used locally in your browser to generate the zero-knowledge proof. It is not stored or transmitted. Only the proof is submitted with your recovery request. Impersonators and scammers will continue to target affected users. Only access the tool through the official SecondFi website, secondfi.io, either by typing it directly into your browser or by clicking through from within the SecondFi app. Do not use links from emails, ads, DMs or search results. Only enter your recovery phrase yourself, within the official recovery flow at secondfi.io. SecondFi support, staff, partners and community members will never ask for it. There are no recovery fees, and SecondFi will never contact you first to start a recovery. Official channels: @secondfiapp and @secondfi_jp
5
1
28
1,617
‼️ PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers Details: cybersecuritynews.com/php-re… PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. The PHP project rates both vulnerabilities 9.2 out of 10 under CVSS 4.0. Administrators should update PHP as soon as possible. The fixed releases are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. The vulnerabilities affect earlier versions in those branches. #cybersecuritynews #PHP #Securityupdate
5
154
7
485
18,865