frank

generalist @temporal_xyz

[frank @dreamsin_3d]

i'm not gonna say what kind of, what client wasn't ready for alpenglow, we know i can't say that....

[frank @dreamsin_3d]

ansible is great when you have claude write all of the playbooks and tell you exactly what commands to run

[frank @dreamsin_3d]

i'm not gonna say what kind of, what client wasn't ready for alpenglow, we know i can't say that....

[frank @dreamsin_3d]

we did it bros

[frank @dreamsin_3d]

greatest day in history for the agave gui

[frank @dreamsin_3d]

we can use the german tank problem to estimate the actual upper bound for their keys

with k = 8 and max m = 237, we get N̂ ≈ 266.

so they probably interpreted something 256-bit-ish (perhaps sha-256) as meaning you should choose numbers between 0 & 256

lol.

[Venkata Satish Guttula 🛰️ @snakeyesV1]

News: We now know how eMudhra broke its CA keys. They were not stolen. They were tiny numbers: 4, 56, 66, 115, 155, 156, 230 and 237.

What happened: On Oct 17 a researcher named Wayne found he could recover the private keys of eight eMudhra intermediate CAs from their public certificates. He signed "We have a problem here - Wayne" with each key and sent it to the browser root programs. Mozilla rebuilt the keys on its own the same day.

Who is hit: Six of the CAs issue TLS certs and chain to emSign ECC Root CA - G3, trusted by Chrome, Firefox, Apple and Microsoft. Two sign code. Sectigo cross-signed all eight under "AAA Certificate Services".

How eMudhra got it wrong: These are ECDSA P-384 keys. A real one is a random number about 116 digits long. All eight were below 256, so you only need to try 255 values. eMudhra says that at an April 2025 key ceremony on Utimaco HSMs, it changed its usual steps to test key wrap/unwrap for export. A bug in its script made a second, weak set of keys. Staff then used the weak keys for the CSRs by mistake, because the key labels looked alike. eMudhra is still hunting the exact bug.

Why browsers were safe: No certs from these CAs appear in CT logs, and Chrome, Firefox, Safari and Edge reject unlogged certs. eMudhra says none of the eight issued end-entity certs. But curl, scripts, apps and devices that skip CT and revocation checks could have been fooled since April 2025. No one knows if that happened.

What to do now:
- Update ca-certificates (Ubuntu, Debian, Fedora, Alpine, Arch)
- NSS 3.131.1, Firefox 158.0.1
- Go 1.27.3 or 1.26.10, certifi 2026.10.19, pip 26.2.2, uv 0.13.4
- Node.js and Bun: fix pending
- macOS /usr/bin/curl still uses the old /etc/ssl/cert.pem
- Sites on emSign ECC Root CA - G3: Chrome drops that root Oct 27. Get a new cert now. eMudhra says about 30,000 certs must move.

https://t.co/dVp44Z73WZ

[Hylo @hylo_so]

Hylo closed a $1M strategic funding round led by @SolanaVentures with participation from @colosseum.

This marks Solana Ventures' 2nd and Colosseum's 3rd investment in Hylo, reflecting their continued conviction in our vision to scale leverage and yield infrastructure on Solana.

[Umberto | Mostly Data 🧙‍♂️ @MostlyData_]

1/8 There are rumors of a new kind of sandwich on Solana.

However, a sandwich needs one thing: knowing your trade before it lands.

We looked at the on-chain data and found no sign of that. What we see is a momentum bet.

👇🧵

[frank @dreamsin_3d]

temporal is now hiring a senior product engineer

if you are excellent, there is no better place to be

https://t.co/ljiW5PEp4n

[frank @dreamsin_3d]

i will be buying a tesla roadster (if the ones they ship can fly)

[frank @dreamsin_3d]

@cavemanloverboy

[frank @dreamsin_3d]

@CantelopePeel @posthog you gotta focus on mainnet brother

[frank @dreamsin_3d]

@bw_solana that's a high bar around here

[frank @dreamsin_3d]

i’d rather be sent to abu ghraib than experience the forthcoming unseasonable warmth

[frank @dreamsin_3d]

EVERYDAY I WAKE UP AND I WORK ON EXCITING PROBLEMS IN THE BLOCKCHAIN TECHNOLOGY SECTOR

[matt @0xCypher_]

EVERYDAY I WAKE UP AND I WORK ON EXCITING PROBLEMS IN THE BLOCKCHAIN TECHNOLOGY SECTOR

[Claire @clairefxyz]

For the first time in Solana history, we can generate Solana programs directly from upstream rustc and LLVM!

Starting with sbpf-linker 0.2.3, you can compile a no_std Solana program with just cargo +nightly build, and voilà! ✨

Anything that doesn't work should be considered a bug, and I'll fix it!

I've chewed through all the compiler and assembly glass so you don't have to. The only thing left for you is to learn Rust properly.

Below is a quick guide to .cargo/config.toml 101 and Solana libcalls

[frank @dreamsin_3d]

@clairefxyz absolutely incredible

[frank @dreamsin_3d]

5-11am mogs every other time of the day by an incomprehensible amount

[frank @dreamsin_3d]

Harmonic Bundles are now OPEN TO THE PEOPLE!

Send EVERY BUNDLE you can POSSIBLY CONSTRUCT to our NEW Public Endpoint. Very fast, very fair -- the smartest Searchers on the network say it's the best in history!

The Best MEV Infra is now a PUBLIC GOOD. MAKE MEV GREAT AGAIN!

[Harmonic @harmonic_gg]

Harmonic Bundles are now open to everyone 🎵

Send bundles over gRPC or JSON-RPC without needing to be whitelisted or authenticated.

Same revert protection, zero protocol fees, tips are just priority fees.

https://t.co/qWnoIrGBSM

Need higher rate limits? Apply here: https://t.co/54rFsGGx5z

[frank @dreamsin_3d]

anyone able to warm intro for summer 2027 math-research-y internships?

for my brother, he is 19yo app. math grad student @ washu

interests:
nonlocal operators / peridynamics
diff geometry / mathematical physics
algebraic number theory

any intros or referrals much appreciated!