Alison Oliveira

Engineering critical infrastructure across different stacks and timezones. Coffee helps.

[Alison Oliveira @Alisovsky]

I've come up with an interesting design to securely support persistent sessions in @NautilusWallet.

A technical blog post on it soon™

[Alison Oliveira @Alisovsky]

WTF!?

[Daniel Lockyer @DanielLockyer]

oh great, ssh on musl linux (alpine etc) accepts any password longer than 256 characters

updating to openssh 10.6p2 fixes it

and/or disable PasswordAuthentication

[Alison Oliveira @Alisovsky]

Awesome!

[Zed @zeddotdev]

🚀 Zed v1.26 is out!

While paused at a breakpoint, you can now inspect a variable’s state right in the editor by hovering over it.

Thanks Tortes!

[Alison Oliveira @Alisovsky]

I ported the Vim's Edge color theme to @zeddotdev! Check it out: https://t.co/CpDwQZLbOv

[Alison Oliveira @Alisovsky]

@shishirpai @neurable Awesome!! Congratulations!

[Alison Oliveira @Alisovsky]

@Armeanio @ergo_platform This is awesome!

[Armeanio @Armeanio]

Exchanges that list anything with enough capital to cover their listing fee deserve to die.

Garbage in garbage out.

[Alison Oliveira @Alisovsky]

@sigmanaut Hey, mate! It’s been a long time. How are you doing these days?

[Rosen.Tech @RosenBridge_erg]

Firo integration showing excellent progress, real shot at first external chain completing integration standards.

Delisted for privacy? Not anymore. This is what matters.

[Armeanio @Armeanio]

Machina contracts and SDK repo are now public:

https://t.co/NuKwNZU6iq

[Armeanio @Armeanio]

Watcher operators, we kindly request you to update your watcher-service to version [6.2.0](https://t.co/mhKYYPu2ci).

This version fixes a minor security bug and you should unlock all of your permits and collateral via the action section in your watcher dashboard and wait for all permits to be unlocked. DO NOT UPDATE YOUR WATCHER BEFORE UNLOCKING YOUR COLLATERAL.

‼️Make sure to follow the instruction for this update. Without following the instruction, your watcher will certainly miss all events onward and receive no reward. ‼️

## 1. Unlock your permits and collateral
Head to Watcher Dashboard -> Unlock, set the Api-key and unlock all of your RSN. Wait till the transaction is mined.
Then dashboard will show 0/0 _Total Locked RSN_ and 0/0 _Total Reports_ and the health will be broken (due to `No WID is available for this address`).

> Note that you need at least 2 WIDs to unlock your permits and collateral!

## 2. Update your watcher
Pull the latest docker image, stop and then start your watcher:

- docker compose pull
- docker compose down
- docker compose up -d

## 3. Lock your permits
Head again to Watcher Dashboard -> Lock, set the Api-key and lock your RSN. Wait till the transaction is mined.
Then dashboard should show the _Total Locked RSN_ and _Total Reports_ correctly and watcher should be healthy.

> Note that the transaction should be displayed in the explorer after ~5 minutes!

> In case you get Error code 400, just try again after ~30 minutes!

📢 If you encounter any issues, please report them in:
🔗 [Discord troubleshooting Channel](https://t.co/neRBK2Fude)

❗ Security Reminder: Do not respond to direct messages (DMs). Our team will never contact you via DM. Stay alert for potential scams.

[Armeanio @Armeanio]

https://t.co/XFR77FR3Vr

[Armeanio @Armeanio]

Lithos Client v4

=====PlasmaDex:
- Added PlasmaDex LP contract, a new AMM Liquidity Pool which collects constant fees that are not subject to impermanent loss
- Added off-chain code for deposits, swaps, redemptions, fee withdrawals and fee claims
- Added corresponding API calls on Lithos Client Docs (localhost:9000/assets)
- Added initial ERG / LIT PlasmaDex Liquidity Pool
- Added synchronization process for PlasmaDex dictionary
- Added historical synchronizer for PlasmaDex dictionary in order to claim fees

=====Emissions:
- Added emission contract for LIT token
- Enabled token distribution for Lithos rollups
- Modified self-collateralization to use emission contract to create collateral boxes

=====Bug Fixes:
- Fixed bug where change values less than 1000000 nERG were not added onto the miner fee
- Fixed bug where self-collateralization caused abnormally large amounts of double spend errors
- Fixed stratum bug causing job ids to not increment properly

[Alison Oliveira @Alisovsky]

Good opportunity to be a man and use fetch directly ;)

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Armeanio @Armeanio]

https://t.co/lTHTZKlVwz

[Alison Oliveira @Alisovsky]

Integrity over compliance.

[GrapheneOS @GrapheneOS]

GrapheneOS will remain usable by anyone around the world without requiring personal information, identification or an account. GrapheneOS and our services will remain available internationally. If GrapheneOS devices can't be sold in a region due to their regulations, so be it.

[Alison Oliveira @Alisovsky]

Brazil is always at the forefront of stupid laws.

[vx-underground @vxunderground]

Meanwhile in Brazil: Arch Linux has to suspend access from Brazil because kids could use Arch Linux, or something, and something about pedophiles.

I actually have no idea what the politicians are even saying anymore. It's all bullshit and it's fucking over FOSS.

[Armeanio @Armeanio]

Machina Finance has been an idea/work in progress for idk 3+ years.

The broad consensus around UTXO defi is that it kind of sucks compared to the account model.

This thought does have some merit, but to be concise imitating and emulating the account model on eUTXO kind of sucks.

Many things try to be a copy of a copy of a copy. The next (insert popular project)(insert different chain name).

As open stack from the chain up built specifically for Ergo, to challenge that belief and do our own thing. Leave something behind to play with and build on.

Start with no third party batchers. Replace this with client side batching in the wallet.

Built on a new mempool aware, real-time UTXO streaming layer.

Add local logic. Every order is its own atomic contract.

Grid based strategies both auto compounding and cumulative. Supporting Ergo and all the tokens on Ergo.

Built for composability across Ergo protocols.

Every box can be an order and the chain state can be the book.

Open source code, fully auditable, clone able, fork around and find out.

It has no fees, no token. I hope to not see knockoff scam tokens but crypto does have a parasitic class of users around. So please beware.

It's a public good. Each peer has local control.

We will make the repository public soon. Hopefully next week.

[Alison Oliveira @Alisovsky]

Interesting take

[Boshen @boshen_c]

AI coding is leading to a loss of innovation.

Innovation requires long periods of refinement and those “shower thought” moments.

Right now, it’s impossible to innovate with so many coding sessions open, where you are high as fuck with intracranial tinnitus that won’t stop.

[Alison Oliveira @Alisovsky]

@darrenjr What a legend!