Víctor Pérez

tech yapper, sometimes hacker • building • solutions engineer @mongodb • prev @revenuecat @newrelic • gdg organizer • noob polyglot

[Víctor Pérez @vpx_tech]

China has a massive sideloading app economy.

My friend bought a “WeChat theme” on Taobao for $2. Behind it: Apple Developer identities, app signing... Yet the vendor automated the whole process.

I spent the last week breaking down how it works.

Enjoy!🫡 https://t.co/iOWd7g5mPB

[Víctor Pérez @vpx_tech]

@MKBHD This wouldn't have happened with web-based phone apps. But here we are, in 2026.

[Víctor Pérez @vpx_tech]

As terrifying as it may sound, getting access to these brochures feels incredibly cool. The movies are (mostly) real.

[International Cyber Digest @IntCyberDigest]

‼️ A leaked Cellebrite flyer shows forensic labs a remote iPhone unlock appliance with a range of about 8 metres.

It covers the iPhone 11 to 16, even with Stolen Device Protection on. The blogger who got it suspects a Bluetooth bug Apple quietly patched.

[Víctor Pérez @vpx_tech]

@shujishcn @brutoshi_ 厉害，谢谢您！

[Víctor Pérez @vpx_tech]

We have a Xiaomi VP showing his *MODDED* Xiaomi phone to dhh, the main impulsor of the Omarchy project.

Read that again.

Instead of the usual corporate dogfooding, he drives a modded unit AND open-sourced his own build.

Insanely based.

[brutoshi @brutoshi_]

Omarchy on a Xiaomi 18 Fold.

Liqiang Wang (@shujishcn), VP of Xiaomi XRING, showed @dhh his setup at our install party. Later, he shared his Omarchy experience on stage.

[Víctor Pérez @vpx_tech]

@brutoshi_ @shujishcn This is the kind of setup I'd like to test. Do you happen to have any slides or repo about it?

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Mario Kart 8 Deluxe is running natively on iPhone.

60 FPS + multiplayer
Not an emulator, Not a cloud stream.

The original Switch ARM code is executing directly on Apple Silicon Open-sourced a native port.

CSDev - https://t.co/W2AineYKPO

[Víctor Pérez @vpx_tech]

@Xiaomi Python-miIO: Python library & console tool for controlling Xiaomi smart appliances.

https://t.co/gTqZRxKjpw

[Víctor Pérez @vpx_tech]

You can use (I guess most) @Xiaomi Mijia Chinese products anywhere in the world!

Here's how you can do it:

1. Go to the Xiaomi Home app.
2. At this point, pairing won't work because the device is tied to the China region.
3. Profile > Additional Settings > Region > Chinese mainland
4. Ignore the pop-up.
5. Sign in with your usual Xiaomi Account
6. Pair the device!

The "drawback" is you'll have to switch back to your region and re-sign in if you want to use your country's devices.

But still, you get access to China exclusive smart gadgets with most of its features available.

When I have time, I'm going to take a look at python-miio and see if I can control any of my devices from outside the app, without any region limitations (repo in first reply).

Knowing this, what are you buying next?

[Víctor Pérez @vpx_tech]

You can use (I guess most) @Xiaomi Mijia Chinese products anywhere in the world!

Here's how you can do it:

1. Go to the Xiaomi Home app.
2. At this point, pairing won't work because the device is tied to the China region.
3. Profile > Additional Settings > Region > Chinese mainland
4. Ignore the pop-up.
5. Sign in with your usual Xiaomi Account
6. Pair the device!

The "drawback" is you'll have to switch back to your region and re-sign in if you want to use your country's devices.

But still, you get access to China exclusive smart gadgets with most of its features available.

When I have time, I'm going to take a look at python-miio and see if I can control any of my devices from outside the app, without any region limitations (repo in first reply).

Knowing this, what are you buying next?

[Víctor Pérez @vpx_tech]

@Obamanyan @Pirat_Nation Manda dm si tienes dudas!

[Víctor Pérez @vpx_tech]

@Pirat_Nation Oops wrong live location link

https://t.co/Mv0FyfxnQ2

[Víctor Pérez @vpx_tech]

@Pirat_Nation *boat fan hat on:*

If you're around Barcelona, you can take a look at Leviathan right now!

Get to the balcony of World Trade Center (yellow), or just book any boat tour (from €1.95! check ALSA Sea Bus) if you want a closer look.

https://t.co/td7JGxo45i…

*boat fan hat off*

[Víctor Pérez @vpx_tech]

Linus Torvalds said the obvious thing (again): banning AI coding tools from repos is "idiotic".

It's fairly simple to understand, but since the Internet is blowing up, I want to give my two cents.

To me, the debate around the use of AI tools resembles the one about using calculators in math lectures.

At school, you're initially barred from using them "so you can understand what the math is all about".

The thing is, "the math" is a bottomless pit of knowledge. Often, going down certain levels in order to perform a task is either not required or even discouraged.

Once you reach a certain level of understanding, the teacher lets you speed your problem solving with a calculator.

What you decide to speed up, the correctness of the procedure (and hence the result) and the implications around it are essentially your full responsibility. With AI-generated content, it's exactly the same.

You don't need to be able to prove a theorem so you can apply it. You don't need to learn a formula by heart so you can benefit from it. You could know how to do all that, and still choose to use a calculator.

Depth of knowledge may give you the judgment to know when and how to use a tool. That's great, but also, the whole point of using a tool is to save you time and effort.

Whether it does or not is what you should focus on.

[chasm @chasmmmmmmmmmmm]

NOT EVEN THE PLAYSTATION 5 IS SAFE 🚨

Someone jailbroke a PS5 and got Qwen 3.8 27B running on its GPU at 20 tok/s. That's a real 27B AI model running locally on a games console.

The same model on the PS5's CPU did about one token a minute.

Meanwhile, DDR4 prices are up 24% in 3 months, AMD just raised GPU memory prices, and 5090s are basically gone.

PS5 coming to a datacenter near you.

[Víctor Pérez @vpx_tech]

So the Spanish government has decided to censor https://t.co/pQbhkZJDIS, a Wayback Machine like website.

Interesting times…

[Víctor Pérez @vpx_tech]

https://t.co/pUxqk6xbVo

[Derek Ross @derekmross]

Smartphones (pocket computers) will never be the same again. This is wild and I love it. My mind is racing at the possibilities.

[Víctor Pérez @vpx_tech]

Remember this is what most people consider the "premium" option in the market.

Apple remains the undisputed trendsetter in terms of design, but has completely abandoned the polishing that made them really enjoyable devices.

I really liked iOS 16 smoothness, until everything went down for me with iOS 26.

The situation has reached a stage in which Oppo and Vivo, for instance, "copied" iOS 26 design. Yet, their animations are expressive, smooth and, above all, feel stable.

[Adan @itsdurreadan]

It’s honestly fascinating how Apple managed to completely ruin its software quality within a few years.

In iOS 15, Apple was the gold standard for UI design, smoothness, and attention to detail.

And now, we have issues like these lingering around for years and Apple still doesn’t fix them.

[Víctor Pérez @vpx_tech]

@itsdurreadan Remember this is what most people consider the "premium" option in the market.

[Víctor Pérez @vpx_tech]

Whoever fixed the algorithm, thank you. This is exactly the definition of relevant content to me.

[exsiway @exsiway_]

so about the $86m ledger drain. everyone’s screaming “ledger got hacked” again. i spent the evening digging and it’s dumber and scarier than that

there’s a shop in malaysia called cryptobilis that sells hardware wallets. ledger has it listed as an official authorized reseller since at least 2022, for malaysia, indonesia and the philippines. legit shop, real devices, years of normal customers

this spring the founders sell it. the deal comes with an NDA: they can’t tell anyone about the sale until october 19

by august the company registry shows one owner with 100%. some guy from heilongjiang, china

the shop keeps running like nothing happened. the site, the name and the “authorized by ledger” badge all stay up

then on oct 8 @MagicalTux posts photos of a ledger he cracked open. hidden under the screen there’s an extra little board with an LTE modem and an eSIM. it just watches the display. you set up your wallet, your 24 words show up, and they get sent out over mobile data. ledger’s genuine check doesn’t catch it because the actual ledger chip is real. his device came from malaysia

https://t.co/vRuBM0xIfR

that post does 120k views

22 hours later someone sweeps everything. 203 BTC hits two addresses in literally one block. ~$58m USDT moves on tron in the same hour. i added up all the wallets: ~$91m

about 7 hours after that ledger says “we’re investigating” and asks cryptobilis to pause sales

cryptobilis is still on ledger’s site as an authorized reseller

to be fair, nobody has officially tied the new owner to the bugged devices yet, and ledger hasn’t confirmed how it happened. but read it as a business plan:

get authorized, sell real stuff for years, quietly sell the company under an NDA, keep the badge, ship devices that phone home, then drain everything the second someone notices

and was ledger even told the shop got sold? nobody’s said so

“authorized reseller” means ledger trusted whoever ran the shop back in 2022. says nothing about who runs it today

bought your hardware wallet anywhere but the manufacturer? open it up today, ledger literally has a guide for that. then move to a fresh seed on a device bought direct

wonder who’s going to answer for this: the chinese frontman from heilongjiang, the shop’s previous owners, or ledger itself

@Ledger clearly needs to keep a much closer eye on who they call official resellers, and take way more responsibility for who sells their devices and how