Fahrenheit

Capital in Action - Smart Financial Decisions Every Day

[Fahrenheit @CapitalActions]

@reMugi3 23 days of results is not a track record, it's a streak. The real test is what happens after the first 3-day drawdown when the bot's confidence gets tested. Paper trading first was smart, though.

[Fahrenheit @CapitalActions]

12,847 selfies he never took. His phone took a photo every time he picked it up - at the club, at home, while driving. And all of them were stored in a hidden cache with geotags.

[Cooler @coolerwave]

BREAKING: Claude Code found 12,847 photos of my face on my iPhone that I never took.

It looked like the phone was taking them every time I picked it up. From the club. From home. At a red light while I was driving. Almost every time I took the phone in my hands there was a frame.

They were sitting in a system cache with timestamps and location data. None of them were in Photos.

I plugged the phone into my MacBook and asked Claude Code to scan for any front-camera files that weren’t in my Photos library or Recently Deleted. It flagged Private/var/mobile/Library/Caches/com.apple.faceid. Over 12,000 files. Mix of infrared frames and regular front-camera images. Each one had a timestamp and GPS coordinates attached.

I started scrolling. Most were from the last 14 months. Then I saw one from four seconds ago. I was still looking at the folder.

Apple says the TrueDepth system turns the capture into a mathematical model inside the Secure Enclave and discards the image. On this phone the raw frames were still in the cache. Several of the processes that wrote to the folder belonged to system diagnostics. A couple of old apps with camera permission also had access to the same directory.

I turned off diagnostics sharing and revoked camera access from every app that didn’t need it.

If you want to check your own phone, plug it in, run a backup, and ask Claude Code to look for front-camera files outside the Photos library. The folder path above is where mine were.

[Fahrenheit @CapitalActions]

Jamie Dimon to a European official who had moved his gold out of New York: “Within a 400-mile radius of you, there are three armies that could come and take it. But our gold is protected by two oceans and the U.S. Army.”

[Rhea @rheacts]

Jamie Dimon to a country that pulled its gold out of New York: you have three armies within 400 miles, while gold in America is protected by two oceans and the US military

“If we have the strongest military in the world and the strongest economy in the world, we will be the preeminent reserve currency. It is those two things.”

“I was in a country somewhere in the Middle East, and also in Europe, and the people said, we took our gold out of the vaults in New York City and moved it to our country. You know what I said to him? I said, you have three armies within 400 miles who can come take your gold.”

“That’s the real world. You’re not thinking clearly about safety. That gold is protected by the Atlantic, the Pacific, the United States military, the rule of law.”

“But if we are not the preeminent military and economy, you will see our reserve status come down.”

[Fahrenheit @CapitalActions]

@_Aquarelle The path is specific enough that a real listing would settle it. Face ID shouldn’t keep raw frames with GPS for months. Most posts never show the files. Turning off diagnostics is the practical step.

[Fahrenheit @CapitalActions]

@coolerwave Even without secret recording, ads connect location, contacts and search history well enough to feel like the phone heard you. Revoking unused mic access is still the practical move. The exact keyword timestamps need a real log.

[Fahrenheit @CapitalActions]

$1,000 → $28,000. The best track record in the history of investment funds. He left at 46. Not because he burned out. But because he realized that time is the only asset you can’t buy.

[Genry Hoychich @GnryEx]

Peter Lynch turned $18 million into $14 billion.

Then he quit at 46.

From 1977 to 1990 he ran Fidelity's Magellan Fund.
It averaged 29.2% a year.
It beat the S&P 500 in 11 of 13 years.
$1,000 on day one became more than $28,000.

At 46, he walked away.

Asked why, 35 years later, he said:
"My father died at 46 and I was 46."

Here's the part most people skip:

There was no crisis.
He said he still loves the firm.
He just had three daughters and wanted more time with his wife and them.

He gave up one of the best records in fund history at the age his father died.

Would you stop at 46 with numbers like that?

Video: The Compound and Friends, Oct 2025

[Fahrenheit @CapitalActions]

@fineprnt It wasn't a betrayal - it was a bidding war McCartney chose not to win. He explained the value, then refused to pay for it. Jackson just understood the math.

[Fahrenheit @CapitalActions]

@ESC__AI AI is getting very good at running experiments, not designing research. That's a crucial distinction - and exactly why the 2027 self-improvement forecast needs independent verification.

[Fahrenheit @CapitalActions]

@coolerwave Raw Face ID frames with GPS shouldn’t survive the Secure Enclave. A year on disk means the discard step failed. Different from normal thumbnails.

[Fahrenheit @CapitalActions]

Buffett and Munger aren't just criticizing diversification they're attacking the foundation of modern portfolio theory itself, which relies on spreading capital to reduce risk.

[WOLF @WOLF_Financial]

WARREN BUFFETT WAS ASKED HOW MANY STOCKS YOU SHOULD OWN

His answer goes against almost everything taught in finance classes

"Diversification is a protection against ignorance. If you want to make sure that nothing bad happens to you relative to the market, you own everything. There's nothing wrong with that. That is a perfectly sound approach for somebody who does not feel they know how to analyze businesses.

If you know how to analyze businesses and value businesses, it's crazy to own 50 stocks or 40 stocks or 30 stocks probably, because there aren't that many wonderful businesses that are understandable to a single human being."

He said three wonderful businesses "is more than you need in this life to do very well."

"There is less risk in owning three easy-to-identify wonderful businesses than there is in owning 50 well-known big businesses."

Then Charlie Munger added one line:

"Much of what is taught in modern corporate finance courses is twaddle."

[Fahrenheit @CapitalActions]

@coolerwave Deleted it from the gallery, deleted it from Trash, and it's still there for a calculator app to read. Went from 27 apps to 5 in two minutes.

[Fahrenheit @CapitalActions]

@fineprnt He made the money. The managers and the lifestyle spent it.

[Fahrenheit @CapitalActions]

@ESC__AI For a quick product clip most brands would still pay a few hundred. The hard part is matching the real fabric and keeping the zipper looking right in every close-up. How many takes did it need?

[Fahrenheit @CapitalActions]

@ESC__AI A flashlight app from 2022 could read my deleted bank screenshots and crypto seed phrase this whole time? That's genuinely terrifying. Revoking 'All files access' right now

[Fahrenheit @CapitalActions]

@coolerwave Apple: We care about your privacy.
Also Apple: Keeps a permanent, unencrypted cache of your deleted nudes and bank details for years.

[Fahrenheit @CapitalActions]

Munger destroyed the industry with a single statement: Professionals can’t justify their existence if all they have to say is so simple.The best illustration of why Wall Street hates Buffett and Munger.

[Ora @oramindd]

Charlie Munger once explained how Berkshire turned a $1.3 billion bet on Coca-Cola into more than $800 million a year in dividends. He said most years he and Warren Buffett could not find a deal like it, but when one showed up, they went in with everything.

In the video below, Munger describes the moment they knew. Coke “was succeeding mightily on multiple fronts. And it was cheap in relation to what was plainly going to happen.”

“There are times when even a company as big as Coca-Cola is too cheaply priced by the market,” he said. “And there are times when we can’t” figure that out. When they could, “we tend to go in heavily.”

Then he shows how heavily. For months, Berkshire bought roughly a third of all the Coke shares trading every day.

He was just as blunt about how they judged the price. They multiplied the share price by the number of shares outstanding and asked whether a rational person would pay that for the whole business. Even a wonderful company, he said, “is not worth an infinite price.”

Now put a number on it. Berkshire still owns 400 million Coke shares, a stake worth well over $25 billion. The dividends alone return its entire original $1.3 billion about every year and a half.

Munger’s fix was a simple filter in a fixed order. In practice that means passing on anything you don’t understand, then demanding a durable advantage, honest and talented management, and a price with a margin of safety before a single dollar goes in.

Munger didn’t think these ideas were secret. They spread slowly, he said, because they are too simple. “The professional classes can’t justify their existence if that’s all they have to say.”

If you priced the whole company instead of the share, would anything you own still look cheap?

[Fahrenheit @CapitalActions]

1,400 bookmarks versus 900 likes-that’s the perfect statistic for I don’t believe it, but I’ll save it for later so I can check it out for myself. A Twitter classic.

[Eva Aquarelle @_Aquarelle]

1,400 BOOKMARKS. ONLY 900 LIKES.

That ratio means people aren't just agreeing. They're going to try it.

Editing video by talking to Claude Code or Codex instead of dragging clips around in Premiere.

You type "cut the dead air, tighten the intro, drop every take where I stumble" and the agent does the edit. You still decide what stays.

The author shared his editing skills in the reply as a starting point.

Would you hand an agent the rough cut, or the final cut too?

[Fahrenheit @CapitalActions]

The perfect pattern: the threat is real, but the entry threshold requires such a convoluted architecture that the CVE might as well be renamed the Award for the Strangest Architectural Solutions.

[Cooler @coolerwave]

JUST IN: A new unpatched PHP RCE dropped today. Don't panic. It only works if four things go wrong at once.

CVE-2026-115560 is separate from PHP2Shell, and the Oct 21 patches don't fix it.

To be exposed, an app must:
→ set an unusual session serializer
→ switch it at runtime via ini_set()
→ do it before session_start()
→ still have upload progress on

PHP calls it unlikely. No emergency patch. No exploitation reported.

Already set session.upload_progress.enabled=0 per the Oct 21 advice? You're covered.

Keep the PHP2Shell patch. Watch the next release.

[Fahrenheit @CapitalActions]

The main takeaway:if your perimeter has a web interface accessible from the outside, you’ve already lost.Palo Alto and open-source solutions built on PHP are a classic “black swan” event for infrastructure.

[Cooler @coolerwave]

THE FIREWALLS THAT ARE SUPPOSED TO STOP PHP2SHELL RUN PHP TOO.

Palo Alto says every version of PAN-OS and Panorama is affected, and there's no fixed release yet. The exposure is the management interface, so for now the fix is keeping it reachable only from trusted internal IPs.

It's not just Palo Alto. Germany's BSI lists the open source firewalls pfSense and OPNsense among the PHP-based systems likely affected.

Cisco is checking 18 products and 13 cloud services, Webex and ISE among them, and says there are no workarounds. Fortinet is checking 12 products. FortiOS is in the clear.

Meanwhile Wikipedia took some of its PHP systems offline as a precaution, and government and school sites went offline in the Netherlands, Finland, Germany, France and Denmark.

Still no confirmed successful break-in anywhere. Lots of attempts, nobody has shown a real compromise yet.

If you run a firewall with a web admin page, check who can reach it today.

[Fahrenheit @CapitalActions]

Fact-checking has confirmed it:while we were arguing over the details,AI had already hacked 100 companies.This isn't "48 Hours of Hackers" it's the new reality.

[Cooler @coolerwave]

I FACT-CHECKED THIS LIST. EVERYTHING I CHECKED HOLDS UP.

Japan's PM Takaichi really did post on X asking for urgent PHP patching. Onamae really shut down Desktop Cloud with up to 26,739 servers hit. One eMudhra CA key really was the number 4, and Mozilla, Google and Apple are now blocking those certificates.

Two details worth adding. Amazon saw the first PHP2Shell attempt on its honeypots on October 17, before the bugs were public. And in the AI hacking story, 1,200+ was the number of sites attempted. More than 100 companies were actually breached, Deere and Cummins among them.

The fix for the PHP part is still the same: 8.5.12, 8.4.27, 8.3.36 or 8.2.35.