Crypto & Blockchain is the future - Always mining something - 💾📼📸📹☎️📺📠
Greece
Joined June 2013
- Tweets22.2K
- Following4.5K
- Followers1.5K
- Likes35.4K
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
Διαβάστε τι γίνεται σε έναν διπλανό μας….πλανήτη…🙇♂️🙇♂️👇
Ο πρόεδρος μιας εταιρείας παγωτού στην Ιαπωνία φόρεσε το πιο σοβαρό μαύρο κουστούμι του, στάθηκε μπροστά σε εκατό εργάτες του εργοστασίου και υποκλίθηκε ζητώντας συγνώμη στην τηλεόραση, εξαιτίας μιας αύξησης ...9 cents.
Η εταιρεία του παράγει ένα δημοφιλές μπλε παγωτό ξυλάκι με γεύση αναψυκτικού, το οποίο πολλά παιδιά στην Ιαπωνία αγοράζουν με τα ψιλά που έχουν στην τσέπη τους μετά την προπόνηση στο μπέιζμπολ, τα ζεστά καλοκαιρινά απογεύματα.
Για ένα τέταρτο του αιώνα, η εταιρεία πάλεψε ενάντια στον πληθωρισμό για να διατηρήσει την τιμή στα 40 cents, καθώς όλοι στο εργοστάσιο γνώριζαν ότι τα μικρά παιδιά μετρούσαν ένα-ένα τα κέρματά τους μπροστά από το ψυγείο.
Όταν η ραγδαία αύξηση του κόστους των πρώτων υλών τους ανάγκασε τελικά να ανεβάσουν την τιμή κατά 9 cents, τα στελέχη αρνήθηκαν να μειώσουν το μέγεθος ή την ποιότητα του παγωτού "στα κρυφά" ή να αποκρύψουν την αύξηση με ψιλά γράμματα.
Αντ' αυτού, ο πρόεδρος και εκατό εργαζόμενοι παρατάχθηκαν έξω από τα κεντρικά γραφεία της εταιρείας, στάθηκαν ακίνητοι για εξήντα δευτερόλεπτα σε ώρα υψηλής τηλεθέασης και υποκλίθηκαν, ζητώντας σιωπηλά συγγνώμη από τα παιδιά της Ιαπωνίας.
Κανείς δεν θύμωσε. Οι πωλήσεις αυξήθηκαν κατά δέκα τοις εκατό τον αμέσως επόμενο μήνα, καθώς οι γονείς θέλησαν να στηρίξουν μια εταιρεία που αντιμετώπιζε το χαρτζιλίκι ενός παιδιού σαν μια ιερή συμφωνία.
Η ακεραιότητα ενός έθνους δεν μετριέται από το μέγεθος των εταιρειών του, αλλά από το πόσο ειλικρινά συμπεριφέρονται αυτές απέναντι σε ένα παιδί που κρατά μια χούφτα κέρματα.
Αυτό βέβαια προϋποθέτει όχι μόνο παιδεία και κοινωνική συνείδηση. Προϋποθέτει και ότι οι εταιρείες μιας χώρας ανήκουν σε πολίτες της, και δεν έχουν ξεπουληθεί όλες σε απρόσωπα και ανάλγητα επενδυτικά funds.
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
🚨ALARMING: Germany is investigating suspected iPhone spyware attacks targeting lawmakers and government officials, per FT.
The reported “zero-click” attack needed only a target’s PHONE NUMBER. No links, files or any action from the owner were required.
Germany’s cybersecurity agency urged recipients of Apple’s alerts to treat their phones as potentially "compromised".
Oct. 29: Alerts began reaching German users.
Nov. 1: Digital Minister Karsten Wildberger confirmed the warning.
Nov. 2: Authorities said they were urgently investigating.
Apple’s latest alerts reached targeted users in 99 countries, bringing its overall reach to more than 150 countries.
The attackers and spyware remain UNIDENTIFIED.
The alerts indicate targeting, NOT confirmed infections.
Προσοχή, προσπάθειες υποκλοπής λογαριασμών Google. τις τελευταίες ώρες παρατηρείται νέα προσπάθεια υποκλοπής λογαριασμών που στελνουν ειδοποιήσεις της Google και ζητούν επιβεβαίωση ταυτότητας μέσω τρίτων διευθύνσεων email. 1/2
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
⚠️ALARMING: Using an OLD iPhone as a cold wallet may not be as safe as you think, OneKey founder Yishi Wang warns.
Following several public iPhone jailbreak demos over the past two weeks, he highlighted a risk for crypto holders.
Wiping the device and enabling airplane mode does not remove chip vulnerabilities affecting iPhone 11 and earlier models, including the second-gen SE.
The BootROM flaws cannot be fixed through iOS updates.
THE RISKS:
- A phone accessed while unattended or borrowed may look normal when returned. This is known as an “evil maid” attack.
- An attacker could use specialized USB tools to run code before iOS starts. No internet connection is needed.
- Outdated software, short PINs and weak wallet passwords could make an attack easier. If an encrypted wallet file is extracted, attackers could keep guessing its password offline.
- Yishi cites ChoiceJacking, a separate technique that can approve data-access prompts on vulnerable older software. Apple addressed it in iOS 18.4.
Yishi recommends generating a completely new seed in a trusted environment and transferring funds. A new address under the old seed is not enough.
Of note, users with recent, updated iPhones have LESS reason for concern.
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
Ας εκμεταλευτούμε την δύναμη των socials και για κάτι πραγματικά σημαντικό.
Ένα παιδί μας έχει ανάγκη.
Join on cPen and get 25 HATN when you sign up! I earn HATN too if you join with my code or link. Use my invitation code leftkoyl or sign up here: cpen.io/?r=leftkoyl&s=share
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
⚠️ ALERT: “HTTP2Shell” raises fresh concerns after the PHP warnings leaving Google’s Brotli compression library potentially vulnerable.
Discovered by OpenAI’s security team, CVE-2026-111497 affects software that decompresses malicious Brotli data, with risks extending beyond Node.js and Python.
The flaw can cause crashes, expose sensitive memory or potentially enable remote code execution BEFORE authentication in affected setups.
Researchers have demonstrated code execution in a vulnerable Node.js application.
Fixes are available, but not for every affected package. Users are urged to check bundled dependencies and upgrade to Brotli 1.2.1 or your vendor’s patched release.
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
⚠️ALERT: Python warns unpatched apps could trust FAKE WEBSITES after 8 certificate keys were EXPOSED.
Attackers could intercept connections, including to Python's own sites, python(.)org and PyPI.
Each secret key was a number below 256, per Python core developer Christian Heimes, so anyone could work it out.
Unpatched tools would show no warning, so a fake PyPI could hand you tampered packages.
Apps could also hand passwords or API keys straight to an impostor, as a fake site "receives whatever those clients send," per security firm Endor Labs.
There's no evidence the keys have been used in attacks so far, per BleepingComputer.
Browsers are protected, as Chrome, Firefox, Microsoft and Apple have now blocked the affected certificates.
If you use Python, here's how to stay safe:
1. Check your pip with "python -m pip --version"
2. Upgrade to pip 26.2.2 or later, using the secure command in Python's announcement
3. Upgrade certifi and uv too
4. Repeat in every virtual environment you use
5. Rebuild your Docker images with caching off, and upgrade pip inside them, as some official Docker Python images still ship an older version
Updating your computer alone won't fix older pip, because it carries its own certificate list.
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
⚠️ ALERT: More “Black October” PHP2SHELL breach reports are emerging, including a massive new allegation involving PwC.
Everest group claims to have stolen 590.69 GB of PwC files, including sensitive employee and HR data.
Many other verified breaches have emerged such as Capcom's exposure of 11.77 million email addresses, and Onamae Cloud's discovery of malware on customer servers.
These incidents are a reminder to do our part to protect our accounts.
Here are 5 precautions to take to stay safe:
1. Expect fake “Breach alerts”
“Your account was exposed.”
“Install this emergency security update.”
“Verify your details to avoid suspension.”
A real incident gives scammers a believable story.
Open the company’s app or use a saved bookmark to check. Don’t use the link or phone number supplied in an unexpected message.
2. Don’t install a “PHP security patch” from a message
PHP2Shell is a server-side problem. Ordinary visitors do not need to install PHP software on their phone or laptop to browse.
Keep your browser, operating system and apps updated through their built-in settings or official stores.
Do not follow a website’s instructions to paste commands, install certificates or disable security protections to “fix” this incident.
3. Check your accounts for changes
Look for unfamiliar devices, changed recovery details, unexpected purchases and messages you didn’t send.
For email, check forwarding rules and filters too. An attacker can use them to keep receiving your messages.
4. Secure your main email first
Your inbox receives password-reset links for other accounts.
Give it a unique password, review its recovery email and phone number, and enable a passkey or two-factor authentication.
5. Use passkeys where available
Passkeys resist fake login pages because they are tied to the genuine service.
Where passkeys aren’t available, enable two-factor authentication. Prefer a security key or authenticator app where supported.
We can’t prevent every company breach. But unique passwords, passkeys and quick action can help stop one breach from spreading to our other accounts.
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
🌍40+ countries in the world now TAX crypto!
Here’s every rate:
🇯🇵 Japan: 55% (20% expected from 2028)
🇩🇰 Denmark: 52%
🇩🇪 Germany: 45% (0% if held 1yr+)
🇦🇺 Australia: 45% (50% discount if held 1yr+)
🇱🇺 Luxembourg: 42% (0% if held 6mo+)
🇺🇸 USA: 37%
🇲🇽 Mexico: 35%
🇹🇭 Thailand: 35% (0% on local exchanges until 2029)
🇫🇮 Finland: 34%
🇮🇹 Italy: 33%
🇮🇪 Ireland: 33%
🇫🇷 France: 31.4% (stablecoins swaps from 2027 if passed)
🇮🇳 India: 30% (+1% TDS)
🇸🇪 Sweden: 30%
🇪🇸 Spain: 30%
🇵🇹 Portugal: 28% (0% if held 1yr+)
🇦🇹 Austria: 27.5%
🇨🇦 Canada: 27% (half of gains taxed)
🇱🇻 Latvia: 25.5%
🇸🇮 Slovenia: 25%
🇬🇧 United Kingdom: 24%
🇺🇦 Ukraine: 23%
🇧🇷 Brazil: 22.5% (0% under R$35K monthly sales)
🇳🇴 Norway: 22%
🇪🇪 Estonia: 22%
🇵🇱 Poland: 19%
🇿🇦 South Africa: 18%
🇷🇴 Romania: 16%
🇷🇺 Russia: 15%
🇭🇺 Hungary: 15%
🇱🇹 Lithuania: 15%
🇦🇷 Argentina: 15%
🇨🇿 Czech Republic: 15% (0% if held 3yrs+)
🇭🇷 Croatia: 12% (0% if held 2yrs+)
🇧🇪 Belgium: 10% (first €10K exempt)
🇧🇬 Bulgaria: 10%
🇨🇾 Cyprus: 8%
0% tax:
🇰🇷 South Korea (22% from 2027)
🇹🇷 Turkey
🇦🇪 UAE
🇸🇬 Singapore
🇨🇭 Switzerland
🇭🇰 Hong Kong
🇬🇪 Georgia
🇲🇾 Malaysia
🇸🇻 El Salvador
🇧🇸 Bahamas
🇰🇾 Cayman Islands
🇧🇲 Bermuda
🇵🇾 Paraguay
🇵🇦 Panama
🇻🇬 British Virgin Islands
🇧🇧 Barbados
Where do you live?👇
l̷e̷f̷t̷k̷o̷y̷l̷ retweeted
Sui Devnet Adds Post-Quantum Signature Support, Targets Mainnet Rollout in Q1 2027
Mysten Labs co-founder and chief cryptographer Kostas Chalkias announced that Sui Devnet has successfully processed its first native quantum-safe transaction, sharing the on-chain transaction record. Sui's core developer Mysten Labs has introduced ML-DSA-65 post-quantum signature support in Devnet release v1.82.0, allowing signed transactions to be submitted through the ExecuteTransaction API and verified through the VerifySignature API.
ML-DSA-65 is also supported in multisignature transactions, with additional integration into GraphQL and the Rust SDK. According to Sui's previously announced roadmap, native ML-DSA-65 accounts are expected to reach Testnet by the end of 2026, with native account authentication on Mainnet targeted for Q1 2027, subject to security audits and testing results.
Join me and over 80 million users who love Revolut. Sign up with my link below: revolut.com/referral/?referr…