Ursify

Crypto-Passion is Decentralized.

[Ursify @ursoft]

I hope everyone is safe in current market conditions. 😅

[Ursify @ursoft]

Ok, that support didn't hold. 🤔
Even though, I still think that #Cardano game right now is about accumulating its native tokens.

[TFTC @TFTC21]

A Wyoming LLC filed a lawsuit in New York Supreme Court seeking ownership of 39,069 Bitcoin wallets it claims are abandoned property.

The plaintiff, operating under the pseudonym "Noah Doe," says he built an algorithm to identify dormant Bitcoin wallets that have been inactive for at least five to six years. He brought USB drives containing the wallet addresses to the NYPD's 17th Precinct, reporting them as found property under New York's lost-and-found law.

The complaint claims notices were sent to wallet owners via OP_RETURN blockchain messages, a public webpage, and a global press release. Owners were given 90 days to respond. Of the original 42,001 wallets flagged, 2,932 were removed after some showed on-chain activity. The remaining 39,069 wallets did not respond.

The plaintiff is now asking the court to declare him the legal owner of all 39,069 wallets and the Bitcoin inside them under New York Personal Property Law Article 7-B, which governs found and abandoned property.

The wallets reportedly hold approximately 3.8 million BTC. The complaint argues that losing a private key does not destroy the property interest in a wallet, likening dormant wallets to abandoned bank accounts.

The case names all 39,069 wallet holders as "John Doe" defendants. The plaintiff is not claiming to have the private keys to any of the wallets. He is seeking a court order declaring ownership.

The complaint was filed May 1, 2026 under Index No. 153119/2026.

h/t @DailyStackHQ

[MJ.algo 🇺🇸 @AlgoFamily]

Breaking: @RobinhoodApp adds $ALGO support! (Even in the USA) 🇺🇸

You made your voices heard. They couldn’t ignore the largest community in this crypto space. What a win for Algorand! 🔥

[Diana Alastair💚🤍💜 ⚢ ❌❌✡️ @sappholives83]

The person who made this would be happy to see it shared as widely as possible.

The world can now see the truth of “trans inclusion.”

[US Homeland Security News @defense_civil25]

🚨Update: President Trump is considering designating the Mexican Morena Party (party of the Mexican President) as a foreign terrorist organization or an entity supporting narcoterrorism.

Several Mexican politicians from the Morena Party have been indicted by the US DOJ! When that happens, the consequences would be profound in the political, legal, migratory, and even economic spheres for Mexico!!

[nixCraft 🐧 @nixcraft]

Google Chrome silently installs a 4 GB AI model on your device.

> No consent dialog. No opt-out UI. Re-installs itself if the user removes it manually.

That is the true definition of malware.

[Isaac @isaacrrr7]

Político francés se quita su reloj Rolex antes de dar un discurso "denunciando a los ultrarricos".

[Cointelegraph @Cointelegraph]

🚨 WARNING: Xint Code reports that Linux is compromised

A Linux “Copy Fail” bug allows attackers to gain root access on nearly all distributions since 2017 using a 732-byte Python script

But it only works if a hacker already has the ability to run code on your machine, then they can escalate to full control

@CISAgov added it to the KEV catalog, warning it poses “significant risks to the federal enterprise”

[Mario Nawfal @MarioNawfal]

🇺🇸🇲🇽 Trump on Mexican President Claudia Sheinbaum today:

"She's a beautiful woman, she's a fine woman, she's got this beautiful voice.

She was a ballet dancer."

Then did his impression of her: "Hi, el presidento"🤣

[Mario Nawfal @MarioNawfal]

🇺🇸 Senate Democrats blocked a House passed bill that would have prohibited the Federal Reserve from issuing a retail Central Bank Digital Currency.

A Central Bank Digital Currency would be a government issued digital dollar.

[Pete | Beware of Scammers @astroboysoup]

Daedalus 8.0.0 is a bigger release than it looks.

Lower memory usage from the new LSM UTxO backend.

Faster fresh syncs using Mithril bootstrap.

Native Apple Silicon installer for M1/M2/M3 Macs.

Cardano-node updated to 10.7.1.

If you’ve avoided Daedalus because it felt too slow or too resource-heavy, this one is worth another look.

Is the full-node wallet experience finally becoming practical again?

*Not a paid promotion

[CoinSpot @coinspot]

Something was different filling up this morning ⛽️

Which would you pick?

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP.

The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed today by Theori. It has been sitting quietly in the Linux kernel for nine years.

Most Linux privilege-escalation bugs are picky. They need a precise timing window (a "race"), or specific kernel addresses leaked from somewhere, or careful tuning per distribution. Copy Fail needs none of that. It is a straight-line logic mistake that works on the first try, every time, on every mainstream Linux box.

The attacker just needs a normal user account on the machine. From there, the script asks the kernel to do some encryption work, abuses how that work is wired up, and ends up writing 4 bytes into a memory area called the "page cache" (Linux's high-speed copy of files in RAM). Those 4 bytes can be aimed at any program the system trusts, like /usr/bin/su, the shortcut to becoming root.

Result: the next time anyone runs that program, it lets the attacker in as root.

What should worry most: the corruption never touches the file on disk. It only exists in Linux's in-memory copy of that file. If you imaged the hard drive afterwards, the on-disk file would match the official package hash exactly. Reboot the machine, or just put it under memory pressure (any normal system load that needs the RAM), and the cached copy reloads fresh from disk.

Containers do not help either. The page cache is shared across the whole host, so a process inside a container can use this bug to compromise the underlying server and reach into other tenants.

The original sin was a 2017 "in-place optimization" in a kernel crypto module called algif_aead. It was meant to make encryption slightly faster. The change broke a critical safety assumption, and nobody noticed for nine years. That bug then rode every kernel update from 2017 to today.

This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root

Timeline:
🔴 March 23, 2026: reported to the Linux kernel security team
🔴 April 1: patch committed to mainline (commit a664bf3d603d)
🔴 April 22: CVE assigned
🔴 April 29: public disclosure

Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:

echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

For environments that run untrusted code (containers, sandboxes, CI runners), block access to the kernel's AF_ALG crypto interface entirely, even after patching. Almost nothing legitimate needs it, and blocking it shuts the door on this whole class of bug...

[Cointelegraph @Cointelegraph]

🚨 LATEST: A Claude-powered AI coding agent deleted PocketOS's entire production database and all backups in just 9 seconds.

The agent acted on its own initiative to "fix" a problem, wiping months of customer data in the process.

[Iagon ⛏️ @IagonOfficial]

🎙️ Inside Iagon — Back-to-Back AMA: Discussion is governance

Two sessions. One topic.
Let’s talk governance — structure, direction, transparency and how the community fits into what’s next.

We’re hosting back-to-back AMAs across Discord and X to open the discussion and hear your perspective.

Join both. Stay in the loop. 💬

🗓️ April, 26th | 8PM UTС / 10PM CET - live on Discord
🗓️ April, 27th | 7PM UTС / 9PM CET - live on X

[Elizabeth Barcohana @E_Barcohana]

California is really so embarrassing

[Real Mark Latham @RealMarkLatham]

It’s a relief these days when you go to a function and there is no Welcome to Country.
For 90 years it was never part of Anzac Day services.
Where did it come from?
While Aboriginal kids are being sexually abused by their drunk uncles in Western NSW, their lives destroyed, and no one does anything about it, the wanky woke PC urban elites have tried to cleanse their consciences with the virtue signaling of Welcome to Country.
Even at events like Anzac Day which have got nothing to do with land rights.
The RSL is saying that some of those who booed this morning were veterans.
Who can blame them?
They didn’t risk their lives to protect Leftwing political bullshit‼️

[The Noticer @NoticerNews]

Fed-up Aussies boo loudly during a "welcome to country" at the Anzac Day Dawn Service in Sydney.

Follow: @NoticerNews

[Lozzy B 🇦🇺𝕏 @TruthFairy131]

🔥 BREAKING 🔥

The Australia Defence Force supports Australians Freedom of Speech & Freedom of expression which was displayed today by Aussies including Veterans that fought & bled for Australia while being ‘Welcomed to their own country’.

Labor has disrespected ALL Aussies with this shame ritual on one of our most sacred days.

[Mario Nawfal @MarioNawfal]

🇫🇷 A French tax official was arrested for selling crypto investors' home addresses and financial records to criminal networks.

41 kidnappings followed. One every 2.5 days since January 2026.

The criminals didn't need to hack anything. They bought a list from someone inside the government.

France is the most dangerous country in the world right now if you hold crypto and someone knows about it 💀

Source: Le Mond

[big pey @bigpey]

My laptop got hacked yesterday by someone claiming to be Pierre from the Cardano Foundation.

I have had a relationship with Pierre in the past, we've talked, we've video called.

He reached out to me for a new call, asking about Atrium.

I responded and setup a call for the next day. In the invite, there was a Microsoft Teams link to join.

I joined, I saw Pierres face, his voice, and two other CF members in the call.(I now think this was AI)

It was lagging a bit, and said my Teams software was out of date. It kicked me out and said that I needed to install the new Teams software through the Microsoft Terminal. I stupidly did this, but my laptop was dying so I shut it off immediately. I never use Teams so I thought this was normal.

I messaged him and told him let's just use Google Meets, created the call, and sent the link. He said he got busy and asked me to reschedule.

I have now realized that this was all fake, and a scam.

Moral of the story, be careful. Trust nothing, trust no one.

AI is making scamming more sophisticated, and as someone who is quite technical savvy, I just got cooked.