PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
I met @pastorbolaji when I was attending the Daystar Leadership Academy in 2009.
He was taking the Finance course. I remember during one of his classes, folks were in tears from being touched. Note that this was not a church service. It was a class. There were sessions on Personal Transformation, Branding et al. Dope as ever!
Rev. Sam Adeyemi did a thing with DLA mahn. Magical and transformative.
Big congratulations to the @zksync airbender team for this milestone.
At this point, I consider the battle for speed to be definitively won, and the top priority for zkEVMs should shift fully to security.
To me that means formally verifying
(i) equivalence of the arithmetization to the ethereum spec
(ii) a hard maximum bound on (prover cost) / (amount of gas in block)
(iii) security of the proof system itself
https://t.co/cgtFXBpicf
Cheeky Pint is back! Mark Zuckerberg @finkd and Alexandr Wang @alexandr_wang came to the pub to discuss their new frontier model, Muse Wonder.
00:00:24 Muse’s breakout use cases
00:07:28 The model is the product
00:14:35 Muse Wonder
00:24:56 How frontier models are built
00:48:26 Betting $100B
01:07:21 Agentic commerce
01:19:34 OpenRouter
01:20:06 Beyond the smartphone
01:27:00 Funding
01:34:06 Why AI won’t be winner-take-all
01:40:46 Meta Superintelligence Labs (MSL)
02:08:11 Working for Mark Zuckerberg
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: https://t.co/4p918UH8yb
Correction: for multisigs the ideal "safe" rule is that you want each signer to change their key after each operation.
(This is making an implicit assumption that ECDSA might become weak, but not to the point where any crack of it would be literally instant so you would literally have to worry about eg. in-mempool frontrunning)
You definitely still want to gather sigs offchain if possible, to minimize the number of hours between "sig revealed" and "key no longer active"
But again: it's very easy to lose funds from a misconfigured rushed upgrade, so ... don't rush anything.