Sam Miorelli

🇺🇸🏳️‍🌈 lawyer. Worked on 3 continents in mega energy deals. Now recovering as a global biz lead in Cybersecurity. My tweets aren't my employer's viewpoint.

[Sam Miorelli @SamMiorelli]

My first DAO forum proposal got a little press.

[Cointelegraph @Cointelegraph]

Before @CurveFinance decides whether or not they CAN enforce their IP claims over @saddlefinance, the community needs to determine of they SHOULD, according to the author of a new proposal. @Blockanalia reports. https://t.co/15h3B6L0P1

[Sam Miorelli @SamMiorelli]

@thsottiaux I’d buy it. I’m a Plus subscriber who needs just a little bit more. Would be my sweet spot.

[Sam Miorelli @SamMiorelli]

@NVIDIAGeForce #RTXON

[Good Work @goodworkmb]

welcome back, friends

[Sam Miorelli @SamMiorelli]

@digitalshane_ Ship without friction!

[Sam Miorelli @SamMiorelli]

@nypost Went to law school with Fialho and her very handsome husband. Reminds me of the maxim that hot bi girls are in str8 relationships and it’s only the uglies that end up in these multi-pronged situations.

[Sam Miorelli @SamMiorelli]

How many more examples like this does anyone need to learn that @Railway is a dumpster fire to be avoided at all cost?

[NIK @ns123abc]

> Railway gets caught hacking competitor's infra
> “sorry, my agents accidentally did it”

This is insane

[Sam Miorelli @SamMiorelli]

@96fps @charizardavis @HaleyforMI Distance from “you disagree with my political party” to calling her a fascist and antisemitism? One X post. Very on brand for the tolerant left!

[Sam Miorelli @SamMiorelli]

@charizardavis @HaleyforMI Sad and simultaneously proving her point.

[OpenRouter @OpenRouter]

Going from 1 trillion tokens per week to 10 trillion took 50 weeks.

From 10 trillion to 100 trillion, 28 weeks.

1 quadrillion per week coming soon.

[Sam Miorelli @SamMiorelli]

@tomhfh The most conservative gay Halloween costume in history.

[Sam Miorelli @SamMiorelli]

@lex_node I think this kinda depends what people mean by “AI decompilation.” If they decompile with the target being an English written software specification, then separately build the new code exclusively off the spec, I think that’s defensible as clean rooming.

[Sam Miorelli @SamMiorelli]

@Nero I thought you weren’t a bottom anymore?

[Sam Miorelli @SamMiorelli]

Proud of my friend Max’s law school idea @NOYBeu blooming into a global powerhouse.

[zenarmor @zenarmor]

Privacy group noyb's annual report says complaints have led to about €2 billion in GDPR fines and it's preparing it's first collective redress case.

Fines from regulators are one risk, while users claiming damages is another. Know exactly where your users' data is processed.

[Dane Knecht 🦭 @dok2001]

Cloudflare previous CTO sent this into our bug bounty. We are investigating.

[Sam Miorelli @SamMiorelli]

Today’s timeline is incredible. My favorite banger:

[Zephyr @zephyr_z9]

> be me, CISO, $800k compliance chud
> need three approvals to patch a server
> thought bureaucracy was defense in depth

> open feed
> PHP2Shell, Railway, Node.js, LiteLLM
GitLab, eMudhra, OpenCode
> my incident queue needs its own fucking incident response team
> board asks if we’re facing sophisticated nation-state hackers
> say yes because “Discord dipshit with autocomplete” looks bad on the insurance form
> my nightmare attacker thinks SSH is a noise you make in a library

> he types “try again”
> I type “per my previous email”
> his agent keeps working
> ours needs approval to access the logs
> attacker already has admin
> ask if he can approve the fucking ticket

> rotate so many keys my password manager qualifies as a fucking turbine
> CEO asks whether AI has improved productivity
> our chatbot writes the apology
> their chatbot writes the ransom
> both thank us for being a valued customer

[Sam Miorelli @SamMiorelli]

Why was anyone storing secrets on what surely we all agree is the shoddiest vibe coded app platform of them all? Did everyone sleep through their other catastrophic failures this year?

[Tay 💖 @tayvano_]

They did drain crypto keys that were in Railway.

Seems like an okay sweeper script (read: not something homegrown for this one op)

Attacker:
0xd9773325282874d18cb83f1fe50f14c39750b2ee

~$371,000
Oct 21 19:36 UTC
500+ txns
200+ distict addresses
19+ EVM chains

[Sam Miorelli @SamMiorelli]

@BaleDaltonFL @chertz You can always tell a Democrat running in a safe Republican seat by the lengths he goes to pretending not to be a Democrat.

[Sam Miorelli @SamMiorelli]

@AlexanderPayton And it still won’t matter in the swamp!

[Sam Miorelli @SamMiorelli]

@GenXFLMom We have it in October because June is hot as hell in Orlando. Hope you enjoyed the parade and this lovely weather!

[🇺🇸 Mike Davis 🇺🇸 @mrddmia]

This is stunning a sitting U.S. senator is saying this out loud.

She is quite explicitly advocating for prosecutions to scare young people away from politics.

@ElissaSlotkin is truly a danger to democracy--a democracy she pretends she's protecting.

This is a fascist tactic.