So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

Absolutely losing it at La Guardia's Temu version of the Changi airport waterfall

NEAR HACKATHON is now live with $250K+ in prizes. No signup. Just ship a public repo + public demo post between November 1st & Nov 14, 23:59 UTC. Build on NEAR Intents, chain signatures, chain abstraction, NEAR AI Cloud, & more. Full details:

Africa, we’re back. 🌍 From the early 2030s, the African Grand Prix will join the calendar and take place in Bugesera, Rwanda 🇷🇼 #F1

The winning robotics data business has a much higher terminal value than investors are underwriting today. Robotics will be a long race with many twists and turns, but when the ChatGPT moment hits, the winning data player will be in a very strong strategic position to capture token value. They will have large revenue, a strong balance sheet, talent density, deployments experience, and hardware supply chain knowledge. When it comes time to blitzscale they will be amongst the players that can capture the most value. The reason this is misunderstood today is because most people are using traditional LLM data businesses as a prior for robotics data businesses and what their terminal value could be. I posit this is incorrect framing. Because the model and harness are integrated in LLMs, there is very little room for data players to play meaningfully in the token value flow in the long term. In robotics this is exactly the opposite, the model and harness (hardware) are separate, the pretraining era is just beginning, there are many more dependencies on distributors/deployers, and there is a large surface area for other players than just models to capture value. Open source will also play a larger role earlier in the robotics race, as all prior LLM learnings will be incorporated as the race is run. This also creates opportunities for long term infrastructure players. There is a massive amount of terminal value in winning robotics data and participating in the path of the industry from a position of strength. From first principles: The endgame of robotics will take place over the next decade. Empirically, today, no player has enough data, enough model intelligence, or sufficient hardware to facilitate a fast revenue takeoff in the field. No player has reasoned through the right sales motion either, which can take years to develop pilots and move to production. Serious players are correctly focused on scaling up pretraining/deep learning vs. who has the best model, deployment, or hardware today. The robotics data business takes participants on a global hunt to build data, supply chains, and hardware. Along the way it also teaches deployment and deep knowledge of SOTA model development. Winning data participants also get the first crack at the still nascent robotics RL market, which will likely be the next large revenue stream after pretraining. As they compete to win data, data players must develop incredible talent density across both Asia and the US. The winning data business will have both Asian and North American DNA. Canada 🇨🇦 encompasses an interesting cultural mixture of both of these parts of the world. Bullish Canadian Robotics Mafias, more specifically Waterloo/Toronto. So: What would constitute a strong strategic position to capture value once the ChatGPT moment of robotics hits? You need a large revenue base, a strong balance sheet, and talent density + experience across data, deployments, hardware, supply chain, and RL. The hyperscalers, the frontier labs, and the winning data player all qualify. Anyone under time pressure in what will be a long race is in a weaker strategic position in my view. Given the costs of integrated hardware+software+deployment, this would actually be most robotics-native players. They will depend on VC interest, which can be fickle.

🚨 BREAKING: Lagos Life has crossed 100,000 users! And right now, more than 11,000 people are online, playing, chatting, meeting, and making memories together. We’re still taking this in. What started as an idea is growing into a whole city full of life. 😭 Thank you for being part of this. Lagos Life is just getting started! 🎉

The future is NEAR. Introducing $NRR—the Bitwise NEAR ETF—giving investors exposure to the emerging agentic economy. $NRR is the first spot $NEAR ETP in the U.S. and offers in-house staking to maximize NEAR's ~5% staking rewards.* Why @NEARprotocol? ↳ Built at the intersection of AI x crypto by foundational AI researchers: The team helped shape modern AI, and now they're building its transaction layer. ↳ Growing quickly: NEAR Intents has processed $32B+ in volume, up from under $1B a year ago. ↳ Designed for security: NEAR Intents settle cross-chain transactions through smart contracts to avoid the potential risks of centralized bridges. ↳ Made for scale: Transactions finalize in ~1.2 seconds and cost a fraction of a cent. ↳ Smart tokenomics: With a ~$6B market cap, NEAR's supply is fully unlocked, inflation was recently halved to 2.5% per year, and fees now fund buybacks. Why in-house staking? Staking in-house brings Bitwise's institutional expertise directly to NRR investing with transparency, security, and oversight. As AI and crypto converge, the Bitwise NEAR ETF ($NRR) gives investors straightforward exposure to the network leading the charge. Learn more at nrretf.com