Web3Plug (app/acc)

🔌 plug relations pay anyone 💸 @replydotcash fund anything 🫕 @POTLOCK_ prev @NEARFoundation

🕌 @ummahbuild ummaceleration

[Web3Plug (app/acc) @plugrel]

It's off-brand if I don't drop an Eid Mubarak today. Only time in the year outside Dubai where habibis pull up with the lam🐑🏎️

[Web3Plug (app/acc) @plugrel]

100+ payment companies in Nigeria, but who tackling corruption tho

[PRAYSAP @praysap]

Don't let Mosque droughts be the reason you miss out on amplified rewards for group prayers. Connect with your ummah locally to pray anywhere 📍🕌

[Web3Plug (app/acc) @plugrel]

@Cameron_Dennis_ who bootlegged mark mi tho

[Web3Plug (app/acc) @plugrel]

@LindsayPoss brain to fingers is cool, but brainin too hard might be spam

[Web3Plug (app/acc) @plugrel]

@0xNairolf https://t.co/xGmwQvz1zh

[Web3Plug (app/acc) @plugrel]

The SEC’s complaint is against Nathan Fuller of Cypress, Texas, who allegedly ran a $12.3 million crypto-asset investment scheme through an entity called Privvy Investments LLC (also using the names Privvy Investments and Gateway Digital Investments).
According to the SEC, this operation promised very high short-term returns using supposed AI-based crypto trading bots and misused investor funds in a Ponzi-like fashion.

The company acquired by Stripe is Privy (often styled just “Privy”), a crypto wallet infrastructure / account abstraction-style developer, which Stripe bought as part of its push into crypto and wallet tooling.

[Web3Plug (app/acc) @plugrel]

@dvtepalm this will fall under Islamic apps, not orgs, https://t.co/SJWlRsEupH, making it self service next week so you can sign up

[Web3Plug (app/acc) @plugrel]

@dragonisnear @Youknowhodis_ These are not my stats

[Web3Plug (app/acc) @plugrel]

@NotionHQ app dot notion from notion dot so broke all my access links and shortcuts and workflows, but outside of personal production (notion dot new no longers works because it's redirecting from notion dot so slash new_

[ummah.build @ummahbuild]

Being a #Muslim founder is more common than we know, it just hasn't been mapped yet. This is why we are proud to announce the 1st Muslim #Founder Directory. Over 200+ Muslim founders 💪 Its time we start competing on every vertical.

Check it out ⭐️ https://t.co/A7MHSUl0vr

[Web3Plug (app/acc) @plugrel]

@chronear decentralized lusion

Aka deLusion

[Web3Plug (app/acc) @plugrel]

@2ctv Yeah at the same time I don’t like building on pre series B startups is a risk outside of scale but just existing

But anything that is a dollar acquisition cost for crypto user acquisition that is not native, unit economics not adding up

[Web3Plug (app/acc) @plugrel]

privy is too expensive for any startup to actually afford if they scale past 5000 users

and u really trust stripe?

[Shaw (spirit/acc) @shawmakesmagic]

We replaced Privy with our own free open source option

https://t.co/5O6OZMslMk

The privy team have been very nice and supportive but ultimately their product cannot be integrated into open source projects without making every developer sign up, and it’s crazy expensive

[Evan Luthra @EvanLuthra]

🚨A HACKER GROUP JUST STOLE 4,000 OF GITHUB'S OWN PRIVATE REPOSITORIES.. PUT THEM UP FOR SALE FOR $50,000.. AND THE WAY THEY GOT IN IS THE SCARIEST PART..

They didn't hack GitHub's servers.. They poisoned a VS Code extension.. One GitHub employee installed it.. And the attackers walked through the front door using the employee's own credentials..

The group calls themselves TeamPCP.. They name their malware after the sandworms from Dune.. And they've been running the most sophisticated supply chain attack campaign in cybersecurity history..

Here's how the whole thing unfolded..

In March.. They poisoned Trivy.. One of the most trusted security scanners in the world.. Used by over 10,000 development workflows globally..

They injected credential-stealing malware into Trivy's official GitHub Action.. The malware ran silently BEFORE the security scan.. So every log showed "scan completed successfully" while the malware was stealing AWS keys, SSH credentials, database passwords, and Kubernetes tokens in the background..

It took Aqua Security 5 days to fully remove them..

Using the stolen credentials.. They breached Cisco Systems.. Cloned over 300 private repositories.. Including source code for unreleased AI products.. And repositories belonging to Cisco's customers.. Major banks.. Government agencies.. BPO firms..

In April.. They hit Checkmarx.. Another security vendor.. Poisoned 5 official Docker images in 83 minutes.. The scanner worked perfectly.. It just silently sent all your secrets to the attackers..

That automatically cascaded into Bitwarden.. The password manager.. Their CI/CD system pulled the poisoned Docker image.. And the attackers injected malware into Bitwarden's official CLI package published on npm..

One compromised security scanner poisoned a password manager.. Automatically.. No human involved..

In May.. They hit TanStack.. Libraries downloaded millions of times per week.. 84 malicious package versions across 42 packages..

And here's the terrifying part..

The malware scraped the raw memory of GitHub's build servers.. Extracted authentication tokens.. Used those tokens to bypass two-factor authentication.. And then published the infected packages with completely valid cryptographic signatures..

Every security verification tool on earth said the packages were legitimate.. Because they were signed by the real pipeline.. Using real keys.. The attackers just happened to be inside the pipeline when it signed..

They defeated the entire trust model of modern software supply chains..

The same week they hit the Nx Console VS Code extension.. 2.2 million installations.. The malware specifically targeted Claude Code configurations.. Hunting for AI assistant credentials..

That's a first.. Supply chain malware designed to steal your AI's access keys..

Then on May 19.. They revealed the GitHub breach.. 4,000 internal repositories.. Listed for sale at $50,000.. With a warning.. "If nobody buys it.. We leak everything for free"..

Their malware is self-propagating.. Once it infects one package.. It automatically finds every other package that developer maintains.. Steals the publish tokens.. And infects all of them.. Then those packages infect the next developer.. And the next..

It jumps between npm and PyPI automatically..
The group doesn't even do the extortion themselves.. They sell stolen credentials to ransomware gangs.. One gang used TeamPCP's data to threaten Cisco with leaking FBI and NASA personnel records..

And the scariest part of all..

They didn't break any encryption.. They didn't find any zero-days.. They exploited the fact that the entire software industry blindly trusts its own build tools..

Every security scanner.. Every Docker image.. Every VS Code extension.. Every GitHub Action.. Is a potential weapon if someone poisons it upstream..

And right now.. Nobody can tell the difference between a legitimate build and a compromised one..

Because the compromised ones have valid signatures too.

[purusha - n/eti @purusa0x6c]

Only this guy is using AI in a meaningful way.

[Leandro von Werra @lvwerra]

We are releasing Carbon: a crazy fast DNA model

Carbon is 275x faster than the next best model. So fast you can process the whole human genome on a single GPU in <2 days.

Here are the tricks we used:

When modelling DNA sequences a lot of the performance comes down to tokenizing the sequences in a smart way. BPE tokenizer struggle because there are no whitespaces and character (called base in DNA) level tokenizers waste a lot of compute on too many tokens.

Carbon is built with a unique tokenizer: we split sequences in chunks of 6 bases, but during both training and inference we can work with single base resolution. That's similar to having word tokens but resolving them at the character level. All possible thanks to the DNA tokens unique structure.

The architecture combined with the tokenizer makes the model 275x faster than the previous SoTA (Evo2) at this size.

We built an interactive demo so you can explore how the model can generate DNA sequences, investigate the structure of genes, predict the effect of mutations, generate and fold proteins and even reconstruct parts of the tree of life.

https://t.co/OWEUoxAFjG

[ummah.build @ummahbuild]

The best Muslims have the best sleep. And those who follow the Sunnah have a productive schedule that is suited for world class founders

[Web3Plug (app/acc) @plugrel]

@MohammedAFaris we built this as a free open source app now live on the App Store https://t.co/7Ki3lquCyX with @ummahbuild

would love to partner on this