vibe coding?
be careful what you paste into terminal
really sorry this happened to gomtu
sharing the breakdown so others don’t repeat it
he was setting up homebrew on a new mac
ran what looked like a normal install command
that command installed nova stealer
it grabs sessions, credentials, wallet data
anything the computer can already reach
if the keys live on that same machine
owning the machine means owning the wallet
hardware changes that
the laptop can get infected
the keys stay off it
malware can’t just extract them
it still doesn’t save you from signing a bad tx
you still have to check the screen
same rule for agents
let software do the work
keep the last key somewhere it can’t reach
Somnia, Kite AI and Gate402 are building the rails, while Coinbase, Stripe and Circle are pushing stablecoin payments for autonomous agents
So apparently the future is:
Let the AI handle the payment
Sure but I’m keeping the keys 🔑😏