Sometimes, trust your guts. Even when you are told it's FUD. Turns out I was right, and that instinct saved so many fucking people. 5 days later, I think I'm not needed anymore, thank you everyone who trusted me and spread the word so quickly.
I'll write a "post mortem" as I lived it, as I think it's probably going to stay as my most valuable contribution to Bitcoin. Good night people, I hope you are safe.
📢Meet Qwen3.8-Max — our most capable model to date.
Next week, the open weights of Qwen3.8-Max will be released, and Qwen3.8-27B is also going open-weights to meet you all!🎉
Qwen3.8-Max, a new bar for coding and cowork at 2.4T parameters:
- Autonomous coding: 10+ days of self-evolving development, from empty folder to production without hand-holding, complete project trace in the GitHub:https://t.co/iVHZWQoeSo
- Real work, real results: Production-quality deliverables across hundreds of professions.
- Long-horizon mastery: System-level autonomous planning with closed-loop adaptive learning, driving 500+ turns of chip design optimization and 365 days of e-commerce strategy.
- Native multimodal intelligence: Vision isn't just input — it's a continuous feedback loop for planning, execution, and self-correction.
💰Pricing:
Input: $2.0 / M tokens
Output: $6.0 / M tokens
Implicit Caching: $0.25 / M tokens
Start building with Qwen3.8-Max! 🚀
📖 Blog: https://t.co/iwjmQxLBof
✅ Qwen Studio: https://t.co/4V2pFvDovG
⚡ API: https://t.co/gAGqaLQGbN
The obvious result of a lack of serious pen-testing.
In a strict institutional pentest or design review, the mere existence of a non-cryptographic software PRNG (the MicroPython fallback, a simple deterministic generator seeded from device state and timing) inside the same binary that participates in seed generation is a red flag. Even if the intent is that it is disabled, reviewers commonly demand that weak or non-approved RNGs be removed entirely or made impossible to link or reach in production builds. Dead code with the same signature as the real RNG creates exactly the misconfiguration risk that occurred here. A reviewer operating under no weak crypto in the TCB, period would have flagged the upstream MicroPython rng.c fallback and required it to be excised or hard-excluded by the build system so it could never resolve. Coldcard’s published architecture intentionally ships a full MicroPython runtime for the higher-level logic with UI, PSBT handling, policy, etc. The fallback came along with the STM32 port and the 2021 libNgU integration. Coinkite treated it as inert because they set MICROPY_HW_ENABLE_RNG to zero and expected the hardware path to be used. That assumption failed silently. A reviewer who only checked is the hardware TRNG code present? would miss the problem. A reviewer who insisted no software PRNG of any kind may exist in this binary would have caught the risk earlier.
Releasing the model weights and technical report of Kimi K3.
Kimi K3 is our most capable model: a 2.8T MoE model with native visual understanding and a 1M-token context window.
New model architecture: 2.5x the intelligence per unit of compute, not just more params.
Alongside Kimi K3, we're opening up more of the stack behind it — high-performance attention kernels, MoE communication library, and infrastructure for running agent environments at scale.
Model weights: https://t.co/7m7eEg6Y0B
Tech report: https://t.co/yeu6cjpMCT
Tech blog: https://t.co/YTfiMSNM1f
Ceux qui tournaient dans Paris - Orange et l'ANFR n'avaient pas eu la berlue: des voitures équipées d'IMSI-catcher circulaient bien dans les rues de la capitale
https://t.co/DVtMRJmI1U
BULL is challenging in court the EU's dangerous mass surveillance program for crypto users, DAC8.
I cannot stand by and do nothing while faceless globalist bureaucrats put the security and privacy of millions of Europeans at risk.
We will get DAC8 repealed.
Dans un souci de transparence, j'ai introduit sur l0g une boite noire permettant de rejouer les signaux passés : https://t.co/qXAaI4Cqbz
Ce mécanisme commence donc aujourd'hui.
Comme tout est associé à un hash cryptographique, tous les signaux passés deviennent rejouables et sont accompagnés d'une preuve mathématique.
Vous pouvez ainsi auditer vous-même, et vous faire une idée précise de leur efficacité ou de leur faiblesse.
Les erreurs ne sont pas cachées et je vous donne l'outil qui vous permet de les voir (et moi de corriger si une erreur structurelle ou une rupture d'API apparait).
Mon rêve... que les sites de presse s'imposent un jour la même discipline.
La preuve n'est plus une autorité de factchecking, elle doit être auditable et transparente.
People are shocked their digital purchases disappear after a while. I’m surprised they ever thought a 3rd party wouldn’t screw them. Physical media isn’t a solution either: it degrades. Really the only way is by DRM free copies. Same problem as contrived coins: you need the power