@Rob1Ham

CEO @AnchorWatch, Bitcoin Custody & Insurance You can't stop Math, molon labe.

Joined June 2009
IBM in 1979:
Claude Code wiped our production database with a Terraform command. It took down the DataTalksClub course platform and 2.5 years of submissions: homework, projects, and leaderboards. Automated snapshots were gone too. In the newsletter, I wrote the full timeline + what I changed so this doesn't happen again. If you use Terraform (or let agents touch infra), this is a good story for you to read. alexeyondata.substack.com/p/…
93
3,067
82
17,382
1,015,955
Rob Hamilton 🟥 retweeted
We asked @Rob1Ham: what is the single most important thing you can do to protect yourself from attacks like the Coldcard and Ledger hacks? This was his advice. "The core lesson here is if you're buying a hardware wallet, you should be buying it directly from the vendor. Any possible amount of savings you're getting is not the worth the security tradeoff on it." "And as for the new Ledger device, I'd never use it... I would never want to walk around with a phone that said Ledger on it. It's anti-opsec." 📍 PUBKEY NYC
3
23
2,414
🫩 H/T @itme_brain
If you or someone you know uses PHP infrastructure, full RCE exploit dropping tomorrow
4
1
2
37
2,854
If you or someone you know uses PHP infrastructure, full RCE exploit dropping tomorrow
php2shell Tomorrow is a helluva day.
10
7
1
110
17,427
Rob Hamilton 🟥 retweeted
Given the lack of price movement in response to all of the security incidents…. I think it’s safe to say Bitcoin is getting a little too big for its breaches.
2
3
1
21
1,552
Rob Hamilton 🟥 retweeted
🚨 BREAKING: PHP is warning admins to prepare for emergency security updates tomorrow to fix two critical vulnerabilities rated CVSS 9.2. However, security researchers at @watchtowrcyber rate the flaws CVSS 10.0 and say they are RCE vulnerabilities affecting PHP 5 through 8. Information about the vulnerabilities has reportedly leaked ahead of disclosure. No known exploitation in the wild. 🔗 bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
24
323
69
1,139
178,499
The 8 certificates were numbers between 0 and 255. Not 255 bits of entropy. Just, the number 4 for one of them. Not an example of an AI hack.
‼️ BREAKING: Go has issued an URGENT security update blocking 8 certificate authority keys over undisclosed security concerns. It will reject certificate chains using these keys, potentially breaking connections for rebuilt applications. The filter cannot be disabled. Here's what we know: thehackernews.com/2026/10/go…
7
4
42
3,810
In Control
Bitcoin CEO @Rob1Ham reminds @YouTube who's in control after surprise @SimplyBitcoin ban.
1
27
1,414
On my way to @tabconf can’t wait to see you @miketwenty1!
9
32
2,317
Rob Hamilton 🟥 retweeted
The industry is frustrated paying bips on custody... ... you are paying custodians and the ETFs an eternal percent of your private data (keys) just because the data is valuable. There are real costs to institutional-grade custody: safe custody cannot be free. But with @AnchorWatch, they are predictable, reasonable and capped.... which makes them the best prices in the world for similar levels of security. If you're an institutional player, check out Qualified Custody with AnchorWatch Trust Company.
"With AnchorWatch [Qualified Custody], you cannot pay more than $10,000 a month." @BeccaAmilee at the @BTCTreasuries Conference, on why qualified custody should no longer be charged in basis points, and why AnchorWatch Trust Company built a tiered, capped fee model.
2
8
21
1,288
Rob Hamilton 🟥 retweeted
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
78
543
222
3,143
1,094,429
Rob Hamilton 🟥 retweeted
Find the holes in your code before someone else does. DeepSeek V4.1 Flash 1017 is live in Maple, with 1M tokens of context and provably private chats. Your code stays yours.
DeepSeek-V4.1-Flash-1017 is the new kimi k3. I'd advise rescanning your code with this model, it finds things everything else previously missed, and its cheap!
1
8
23
1,247
Rob Hamilton 🟥 retweeted
How do you upgrade a $1.5 TRILLION network without compromising what makes it secure? 🟠 Vlad Costea, Sjors Provoost, Paul Sztorc, and Rob Hamilton tackle the future of #Bitcoin upgrades, forks, and scaling at Bitcoin Amsterdam. 📍 Nov 5 | 2:30 PM | Orange Stage DON'T MISS THIS 👀
2
7
41
10,663
Rob Hamilton 🟥 retweeted
Bitcoin Red Team is just the canary in the coal mine. If you haven't been paying attention, the cybersecurity world has been forced to play an entirely new game. "I know of a bunch of companies that have daily Red Team AI agents running." @MartyBent "Attacking with these LLMs is a verifiable state. You can verify there is a bug here. Whereas to prove there is NOT a bug is a much more difficult, time-consuming task. It requires constant vigilance." @Rob1Ham 📍 PUBKEY NYC
1
7
29
4,399
Rob Hamilton 🟥 retweeted
At the @BTCtreasuries Conference, @Rob1Ham and @BeccaAmilee presented "A New Standard for Qualified Custody". They break down what AnchorWatch Trust Company changes for fiduciaries, funds, trusts, and public companies holding Bitcoin, and how it can benefit them.
1
5
12
1,271
Rob Hamilton 🟥 retweeted
We had Rob Hamilton call in to explain the recent Ledger hack and why it was always a looming threat. "There were small accounts with a couple hundred views that were posting about this stuff a year ago. And now it's way more spread out." @Rob1Ham "And if Mark Karpelès didn't tweet about this, [the attack] could be ongoing today and into the future." @MartyBent 📍 PUBKEY NYC
2
18
1,616
Rob Hamilton 🟥 retweeted
We’re LIVE with @Rob1Ham with an announcement 📣
7
10
2,723
Rob Hamilton 🟥 retweeted
Set a reminder for my upcoming Space! xitter.cf/i/spaces/1qKVmyqOZMpxB

1
3
1
6
3,813
Rob Hamilton 🟥 retweeted
OpenCode got hacked. Frontier models started refusing to help. You need a fire extinguisher that works every time, not one that will unpredictably refuse to discarge because it has misunderstood the situation. Open weight models fix this.
OpenCode is currently under a sustained cyberattack, and mid-incident they ran into the same problem Hugging Face did: the frontier models they were using for defense began refusing to help fight attacking agents because analyzing the attacks started triggering safety guardrails.
7
32
86
9,720