Mehow

CEO @Americanfort_io, Life hax0r, multi-patented inventor, husband, EMT, SAR, HAM, pilot, eng, river runner, maker, skier, guitarist, hunter, longevity gym bro

[AmericanFortress @Americanfort_io]

Cicada is backing AmericanFortress.

They’ve seen a lot of token launches. They chose to get behind the one building the naming and privacy layer under every wallet: one @name, every chain, and a private address for each person who pays you.

Glad to have @cicada_mm with us.

[Mehow @MehowHacks]

@eth_apple is terrific and gracious host and def gets the space. Was great joining him on this space!

[ZAMA_APPLE🇰🇷 @eth_apple]

https://t.co/MPMsjsDaKs

[ZAMA_APPLE🇰🇷 @eth_apple]

https://t.co/MPMsjsDaKs

[AmericanFortress @Americanfort_io]

We’re live tomorrow with @eth_apple and @MehowHacks to get all your questions answered, including:

• How we differ from Zama, Aztec and Arcium
• ZK-POSP: proving wallets are linked without revealing a seed or key
• Post-quantum protection without moving funds or changing addresses
• $AF TGE update

See you there: https://t.co/p7KTgSlnOY

[AmericanFortress @Americanfort_io]

It took Ronin 6 days to notice their hack. Ankr's exploit was detected in 3 mins, and the money was lost anyway.

Faster alarms are not the fix. Bridges pay whatever address they're handed, and nothing at the point of payout checks whether that wallet belongs to the depositor.

That's the check that we published in September: https://t.co/OU1nnudKZt

[Mehow @MehowHacks]

When I get asked if I work out, the answer is always yes.

[AmericanFortress @Americanfort_io]

If our half-naked CEO explaining crypto hacks doesn’t get your attention, we don’t know what will.

@MehowHacks took one for the team to explain why your money is naked, and how to cover its assets.

He can put his shirt back on. Your money needs a better solution.

👇

[AmericanFortress @Americanfort_io]

If our half-naked CEO explaining crypto hacks doesn’t get your attention, we don’t know what will.

@MehowHacks took one for the team to explain why your money is naked, and how to cover its assets.

He can put his shirt back on. Your money needs a better solution.

👇

[Mehow @MehowHacks]

@exocognosis @opentensor Ya were looking at the SLH-DSA.

[Mehow @MehowHacks]

@Americanfort_io The patent for the off chain cryptographic HSMs is here ... https://t.co/lj5azk8yXu

A description of the overall system is here...
https://t.co/mvGIk4m2z2

[AmericanFortress @Americanfort_io]

The two ways to fix 95% of CEX hacks.

Getting deployed to @Brinks Global first.

[Mehow @MehowHacks]

I'm always happy to keep spreading the message on improved software security around fintech, @Forbes

[AmericanFortress @Americanfort_io]

Our CEO @MehowHacks spoke to @Forbes on what the $6.3B Binance hack means for banks heading into stablecoin issuance under the GENIUS Act.

The short version: the attackers didn’t break code. They compromised three people.

At a bank there are no cryptographic proofs at all, only more people in the way. The fix isn’t more approvals but a system where withdrawals can’t happen unless the user authorises them, and nobody can withdraw what they can’t prove they deposited.

That’s what we’ve built. Full piece ↓

[AmericanFortress @Americanfort_io]

Our CEO @MehowHacks spoke to @Forbes on what the $6.3B Binance hack means for banks heading into stablecoin issuance under the GENIUS Act.

The short version: the attackers didn’t break code. They compromised three people.

At a bank there are no cryptographic proofs at all, only more people in the way. The fix isn’t more approvals but a system where withdrawals can’t happen unless the user authorises them, and nobody can withdraw what they can’t prove they deposited.

That’s what we’ve built. Full piece ↓

[Cyrus The Great 👑 | 🚢 @CyrusGreat7777]

Cross chain bridges face a simple but costly question: does the payout address belong to the same person who made the deposit? 🌉

AmericanFortress' provenance proof research explores proving a shared hidden origin between source and destination addresses before a bridge releases funds. 🔐

The idea could make address substitution harder without exposing private keys or the wider wallet structure, but it still needs real integrations. 🧪

@Americanfort_io

[Mehow @MehowHacks]

@JordanHallWX Um no. The PIC caused the jet to break apart with incredibly high certainty.

[Mehow @MehowHacks]

@cryptomanran @heisola12 @grok I’m a pilot but I’m not a Lear 60 pilot. Here is the best explainer why going through bad weather in a Lear 60 is an even worse than usual idea @cryptomanran.

[Dave @HangryDBowman]

Long post worth the read. I have a close friend who flies private jets. He flew Lear 60 for over 15 years and now flies a Gulfstream. This is a copy and paste of his response to me asking him if he thought Ice was the issue.

“We always fly in ridiculous cold temperatures.”

“Usually you get the bad ice when the temperatures are like 0 to negative 20. Believe it or not, there's a point where it gets too cold for ice. At negative 40, you pretty much can't get ice. Besides that, the airplane is equipped with hot wings and hot tail.”

“I flew the Lear 60 for like 15 years. It's a no joke airplane and probably the most dangerous airplane I've ever flown. It has a super critical wing. The airflow has to be perfect. When it gets into rough air and turbulence, it will easily stall. It has stalled on me at 41,000 feet just because we got into some turbulence. (On the way to Palm Beach as a matter of fact. ) we recovered and got her flying again around 30,000 ft. Scary

But here's the problem. This airplane has a terrible coffin corner. (At high altitudes) what that means is, you fly in a really narrow window where if you lose 20 knots, it stalls. And if you gain 20 knots, it goes into overspeed. The air goes supersonic over the wing and it goes into a high speed stall, or worse, a Mach tuck.

So if you stall, the normal recovery is to push the yoke forward to lower the nose and gain air speed again. At low altitude, you can push really hard and recover quickly. But in the 60... if you push hard, it will gain air speed and go into a high speed stall, it doesn't take much. It's very sensitive. The 60 has super short wings that don't make much lift. So then you high speed stall, and the computer is yelling at you... OVERSPEED! So then you pull back and enter a low speed stall. And you go back and forth trying to keep it in the air speed window.

This whole thing is pretty scary. And you should recover basically by using your finger tips using super small corrections. You can't over do it. If you try to muscle the recovery, she gets mad and will become unrecoverable. If she enters a mach tuck. You're done.”

“I taught the Lear 60 to other pilots and mentored them. I told them... this airplane has a soul and it's trying to kill you. Do not ever try to top the weather. Don't go over a thunderstorm. Go around it. If it means a half hour longer, then do it. Going over the thunderstorm will go into turbulence that you might not recover from.

These pilots went right over a thunderstorm. I think it stalled which caused them to drop down into the thunderstorm and ended up in mach tuck. They picked up so much speed that it ripped off the horizontal stabilizer. At that point... chuck Yeager can't fix it.

These same pilots did something similar a couple months ago. ATC got mad at them. They poked the bear one too many times.

This is not a beginner airplane. The Gulfstream would never do this. It has HUGE margins of error and won't stall like that. But then again... it's got HUGE wings. It's a pussy cat.

The Gulfstream is like driving a 4 wheeler. The Lear 60 is like riding a uni cycle.”

[Mehow @MehowHacks]

@binance Most of the criticism of Binance in the comments are just plain wrong. The error isn’t that some ops engineer got compromised - it’s that withdrawals wo a cryptographic signature from the owner of the money shouldn’t be initiated in the first place.

[Mehow @MehowHacks]

“The attacker exploited unauthorized access to an internal wallet signing service to initiate transactions outside the normal withdrawal process.”

Wd should always be cryptographically initiated by the end user and not any internal service.

I posted about this cause and the solution 3 days ago because it’s a classic software security problem that has existed since the dawn of software. Video here:

https://t.co/Q7jsETIsG3

[Mehow @MehowHacks]

The 2 Ways to Fix 95% of CEX Hacks. Getting deployed to @Brinks Global. Patent pending and patented tech from Jackson Hole, Wyoming @Americanfort_io.

[Mehow @MehowHacks]

@cryptomanran @heisola12 @grok Not flown into the bad weather.

[Mehow @MehowHacks]

@naomibrockwell Yes absolutely