bretep

PulseChain Dev

[bretep @bretep]

The most honest man in crypto. He also launched PulseChain $PLS, PulseX $PLSX, and $HEX.

https://t.co/JqpdMqhcZy

[Richard Heart @RichardHeartWin]

Hello PulseChain, PulseX, HEX, Bitcoin, Ethereum, and free speech, I won for us all!

[Richard Heart @RichardHeartWin]

Congrats @krakenfx @arjunsethi @jespow

[Richard Heart @RichardHeartWin]

Happy 4th of July! People forget that means INDEPENDANCE DAY! Independence from what you say? Tyranny and injustice is what. BE FREE! Enjoy your freedom and help others do the same.

Ethereum, Bitcoin, Solana bros should help out https://t.co/IAM8Z602cO

If there's another chain or app with devs that you can tag. This is of interest to every app and every dev in the blockchain world I think.

[Richard Heart @RichardHeartWin]

I've decided it's not my mission in life to gather the bad news of the world and deliver it to you. It's doom scrolling with extra steps. I will focus on building the good of the world. This leads to glory.

[Richard Heart @RichardHeartWin]

Base network was down a couple hours today. PulseChain was not. Security and reliability are great features PulseChain has that many networks do not.

[Richard Heart @RichardHeartWin]

It's quite a slippery slope to accept a government's control over speech, even the speech emitted by a machine, because how different really is the text you read from a book, or the text you read from an AI model?

Today for the first time I'm aware of, a government made an AI company turn of it's model to the general public. This is interesting, because all the model does is generate "speech." You could say it emits knowledge. Humans also emit knowledge, and speech. Would it make sense then for the government to shut up humans that could have said or transmitted the same information the AI model could do? That would be an obvious violation of several rights guaranteed under the constitution.

The most slippery of slopes.

re: "Anthropic"

[Richard Heart @RichardHeartWin]

Happy memorial day. Remember those that gave their lives to PROTECT your rights and your freedom. They died so that you might thrive.

Honor their sacrifice by continuing to fight for the same rights and freedoms they did.

[bretep @bretep]

Night and day difference using Grok Build from day one to v0.1.212 -- No joke, at this rate of improvements, they will wipe out the competitors.

[bretep @bretep]

@Tobiwan_Hexobi Yeah, I block to the max now. If people don’t like me, they shouldn’t follow me. I help them with that. Hopefully, it makes their life better.

Hope your family is well @Tobiwan_Hexobi

[bretep @bretep]

@Tobiwan_Hexobi @10dollarsdream @Apple Basically what @Apple said, sure you found a critical bug that bypassed the Stolen Device Protection, which is an iOS feature, but because the bug was fixed in the Find My app, it’s not an iOS bug. This is concerning that an app can bypass protections built into iOS…

[bretep @bretep]

Was reviewing my internal communications with @Apple this past week. Still amazes me that I was a good actor and received zero compensation for finding and reporting this extremely critical security vulnerability. No AI, just real intelligence.

[bretep @bretep]

On May 30, 2024, I reported a critical exploit to @Apple that bypassed Stolen Device Protection for iPhone. This feature is designed to safeguard key settings, including Find My, which prevents a stolen device from being reassigned to a new user. By exploiting this vulnerability, an attacker could disable Find My, removing a crucial theft deterrent and allowing the phone to be fully usable by anyone.

Apple released a fix on July 29, 2024, after asking me on July 23 to confirm the resolution in a beta release. The issue was indeed fixed.

To date, I have not disclosed this exploit outside of Apple, yet getting proper recognition took significant follow-up. Apple finally acknowledged my report on October 15, 2024, under the Find My category. However, the fix was not applied within the Stolen Device Protection library itself, which is concerning—this suggests that similar bypasses might still exist for other features supposedly safeguarded by Stolen Device Protection.

Despite the severity of this issue and my effort in responsibly disclosing it, Apple only issued an acknowledgment—no compensation. Given the time and effort I invested in
discovering, reporting, and keeping the exploit confidential, I’m disappointed by their response.

Note: I also asked them to credit Bret Palsson (@bretep)

https://t.co/tqgo8OPZ3G

[bretep @bretep]

Oh, I followed up with them. Because they decided to fix the issue at the wrong layer, in the Find My app, it didn’t qualify for compensation. 🙄 Notice the time between October and February, where I publicly came out to express my disappointment. I still have not disclosed the exploit itself.

[bretep @bretep]

@10dollarsdream @Apple There are classifications and I followed the process documented here: https://t.co/kYkvmKN4gq

[bretep @bretep]

This is extremely exciting. 🙌

[Elon Musk @elonmusk]

As the recently expanded partnership with @AnthropicAI demonstrates, @SpaceX is offering AI compute as a service at significant scale.

We are in discussions with other companies to do the same.

Over time, especially with orbital data centers, we expect to serve AI at extremely high scale.

[Richard Heart @RichardHeartWin]

Birthrates are down because:
No 3rd place, only work & home. No romance @ work.
No mingling & no alcohol to reduce inhibitions.
No dancing just phones in hand facing forward.

[bretep @bretep]

Imagine when @SpaceX deploys datacenters in space, which will be before May 2029. They will become the defacto collocation/infrastructure provider. $1.25B/mo. is a drop in the bucket.

😎

Making the world a better place is out of this world! Congrats on the IPO!

[bretep @bretep]

@ronaldarguello Terrible. I’ve worked with some of the best security teams in the industry. This is NOT how they behave. Sorry man.

[bretep @bretep]

Exactly. This is a practice I employed very early in my career. If you’re updating, you need to have a reason and reference the commit with the reason. Security, performance, bug, etc.

Most people don’t understand how much work, testing, and validation goes into a release.

[Mitchell Hashimoto @mitchellh]

Fork your dependencies, trim them to only your use case, never update unless it breaks for your users. I’ve been vocal about this for 10+ years. I’ve always said that updating is way riskier than latent bugs (which can be tracked and CVEs monitored).

If you are updating a dependency, it’s on you to analyze every single commit in the full transitive set of dependencies. If you dont see anything compelling, dont update!

I remember at HashiCorp once in awhile an engineer would try to update a dep or replace a DIY lib with an external one and id always ask “show me the commit we need.” Dont update for the sake of it.

Feeling pretty swell about this mentality with all the supply chain attacks happening.

[bretep @bretep]

@kossman11 Always. 🤜🏻🤛🏻

[Richard Heart @RichardHeartWin]

Versus bridge was just hacked for $14.5M.
Last week Thorchain was hacked for $10M.
Just figured I'd mention it, so all you unhacked out there can feel good.

[Richard Heart @RichardHeartWin]

Happy 3 years of flawless operation PulseChain!