Avatar
William K⚡Santiago🔑☢️
bc52210b20d3fb89326463a3518674c7edde65794a7765c7f3a9119b20bfc6de
CEO, C4 CCSSA at PrivKey LLC, Blockchain strategist, cybersecurity. The Mission: The Separation of Money and State.

If the blockchain needs a token or a utility token to store data like Filecoin then it's a security asset and hard becoming a utility token.

So I see more the use of IPFS and #nostr to store hashes in a decentralized way, where a token is not needed and thus no need for a blockchain. Payment gets done to relay nodes with bitcoin/sats as incentive to relay the data.

GM #plebchain, stay humble, stack sats, and think for yourself.

DR Site IT backups are encrypted client side before being uploaded over Tor and are padded with random data.

Backups are made immediately as soon as the data store state changes.

However, proper 21st century cyber-security design also makes decoy backups at random intervals to prevent timing-analysis attacks.

These features combined ensure that the backup server doesn't learn any sensitive information about the user's data store.

Is your IT department doing this? Looking at incumbent national fiat currency banks?

GM #plebchain, stay humble, stack sats, and think for yourself.

Almost $200 million stolen from crypto lender

Hackers steal around $200 million from crypto lender Euler Finance

https://techcrunch.com/2023/03/13/hackers-steal-around-200-million-from-crypto-lender-euler-finance/

There's no way to leave your assets with a custodian without assuming risk.

Self-custody is the surest bet for keeping your wealth safe.

The wrong kind of viral: Governments ban TikTok en masse

https://www.zdnet.com/article/why-tiktok-is-being-banned-heres-what-you-need-to-know/

To be clear, other social media apps collect dossiers on their users — it's why they're free to use. Users are the product.

The difference is who owns the devices and the depth of TikTok's collection practices. In some eyes, surveilling government-issued devices could constitute a national security threat.

GM , stay humble, stack sats, and think for yourself.

Bitcoin Salability

Bitcoin combines gold’s store of value over time with fiat’s salability across space in one apolitical immutable open source decentralized platform.

Bitcoin's salability along three aspects:

-Salability across scale

-Salability across time

-Salability across space

This is why we have #nostr

I asked the Twitter bots:

“I understand this is done by bots but give me a break add some humans with souls to the mix.”

https://void.cat/d/4qGiCDzQCpnVvJu36RUsko.webp

Bravo Team #snort

Snort on Umbrel App Store available

https://apps.umbrel.com/app/snort

Replying to Avatar Warren Togami

According to Google Project Zero they discovered 0-day "Internet-to-baseband remote code execution" affecting many millions of Samsung and Pixel 6+ modems.

Read it for yourself. It sounds very bad. If you have an affected phone you may want to turn off your SIM card because the recommended "turn off VoLTE and WiFi calling" is impossible for many of these phones after they removed the VoLTE option back in 2021.

Only thing you can do is turn it off and put pressure on the vendors to fix it.

https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html

The writer claims it's already patched by Google in the March 2023 patch level. Unfortunately that patch had been withheld from Pixel 6* due to bugs so the blog is incorrect about this already being fixed for Pixel owners.

It sounds like Samsung has a much bigger mess due to the wider variety of phones, firmwares, and providers for which they must now rush an update without breaking it. Not an easy task but they must do it.

Don't blame Google for releasing this advisory. Samsung had months to respond in a timely manner.

Do blame Google for failing to protect their own customers prior to their own advisory. I like Pixel and I want them to do better.

How about Calyxos?

GM #plebchain, stay humble, stack sats, and think for yourself.

Credit Suisse is now Debit Suisse

I just had a presentation this morning to a group for Cyber-security legacy "experts" out of the North Carolina area basically "Yuppie Elite" on CCSS standard for securing digital assets and the attack came form, "Who certifies the certifiers?🤡 completely missing the point and their main focus was the super buzzword of password-less access basically trusting a reputable 3rd party. When the solution is multi-sig.

Its frustrating lack of understanding all over the world. Seems the only logical free thinkers left are #Bitcoin ers

GM #plebchain, stay humble, stack sats, and think for yourself.