🚨Black belt on blockchain 🇰🇿
Pyongyang
Joined January 2022
- Tweets2.5K
- Following3K
- Followers1.3K
- Likes6.4K
My first article in Japanese
公開されたnpm脆弱性は誰が先に使うのか？攻撃者と防御側から見るNPMScan｜shyngys zenn.dev/shyngys/articles/12… #zenn
Blockchain hacks | Investigaton🔍 retweeted
公開されたnpm脆弱性は誰が先に使うのか？攻撃者と防御側から見るNPMScan｜shyngys zenn.dev/shyngys/articles/12… #zenn
Blockchain hacks | Investigaton🔍 retweeted
ALWAYS hiring Talented Frontend / Backend developers
- Work on Prediction Market Adjacent products
- Solving user problems with inventive solutions
- Backgrounds in SaaS development
ALSO, anyone with a history of robbing sports books with +EV Strategies, we want to hire you
Didn’t age well
COLDCARD makes retirement attacks impossible, generate your own entropy and reproduce it provably! coldcard.com/docs/verifying-…
A VPN changes your IP address.
But websites can still see your timezone, language, device, screen size, CPU, GPU, and other browser signals.
So I built Spoof Me, a free extension that lets you switch your browser identity in one click.
ALT Spoof Me running with the “French iPhone” identity enabled. The browser test detects French language settings and the Europe/Paris timezone, matching the selected profile.
Spoof Me for Chrome:
chromewebstore.google.com/de…
Try it and tell me which identity profiles or features I should add next.
Spoof Me is also available for Firefox:
addons.mozilla.org/en-US/fir…
Free to use. Feedback, bug reports, and feature requests are welcome.
Free WiFi scanner
El README de este repo tiene una frase que no debería estar permitida:
"usa los routers de tus vecinos como iluminadores de radar gratuitos".
RuView transforma cualquier WiFi doméstico en un radar que atraviesa paredes. Sin cámara, sin micrófono, sin nube. Cuenta personas, las localiza por habitación, distingue si caminan o están tiradas, estima respiración y ritmo cardíaco, avisa si alguien se cae.
Y para afinar la señal, se cuelga pasivamente del router del piso de al lado. Sin pedir permiso. Sin que el vecino sepa que lo está usando como antena.
GitHub, MIT, 58 mil estrellas. ESP32-S3 de 9 dólares o Docker para probar sin hardware.
Espiar al vecino ya no es cuestión de cámaras. Es cuestión de compilar un repo.
Se llama RuView.
Monitor all the vulnerabilities in real time and stay on top of everything
‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you.
The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads.
The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate.
Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.
Blockchain hacks | Investigaton🔍 retweeted
I just completed a new upgrade to the Polymarket Arbitrage Trading Bot!
New Feature to make Arbitrage Easier for Beginners!
+ $12,500 in Extractable EV!
When i first released the Arbitrage Finder the audience was very different:
- Chinese Sports Betting Syndicates
- Professional Sports Bettors
- Small Scale Trading Firms
But since Polymarket trading bots started becoming so popular on X many retail traders found my page and joined the platform.
To make it easier for the new users who has never arbitraged before i've added some new features to the bot
+ Step-by-Step Guide
The bot will instruct you exactly how to execute the arbitrage by telling you how much to buy on each platform according to your specified investment amount
+ Position Manager
Enter your wallet to see all your arbitrage positions in one place, calculating your current profit and telling you when you can sell early.
You do not need to wait for the market to finish to take profits, just wait until the Position Manager tells you that you can sell profitably and then sell!
+ Discord Chat
I've created a new private Discord room for Prediction Market Arbitrage traders, you can access the discord as long as you have a AlertPilot account!
Here you can ask questions relating to arbitrages you want to take / have taken and we can advise you on our views.
Checkout these in action features below: