Marek Mikuliszyn

[Megatron @Megatron_ron]

BREAKING: 🇺🇸🇻🇪 The US is confiscating Venezuela’s gold from the UK bank

All of Venezuela's gold reserves, totaling 31 tons, which are held at the Bank of England, will be transferred to the United States, per EL Nacional.

The value amounts to $4 billion, resulting in the loss of Venezuelan sovereignty over the resources.

[Erin Elizabeth Health Nut News🥜 @unhealthytruth]

Charlie Kirk says he’s much more concerned about those in close proximity who could murder him, but not some random guy on campus doing it.

What are your thoughts? 👇

[Dylan K @MightyDylanK]

Spain just went dark in the middle of the day.

Total solar eclipse. Absolutely unreal. 🌑🇪🇸

Tarragona, Spain 🇪🇸

[Medusa @MedusaOnchain]

this is insane

claude code found the COLDCARD wallet vulnerability with a single prompt, in just 8 minutes of thinking

we're not ready for what's coming

[calle 🟥 @callebtc]

This is worse than any previous Bitcoin exchange hack. It is arguably one of the worst things that could happen.

The popular hardware wallet COLDCARD has a faulty random number generator (RNG). Funds are being drained from ordinary users’ hardware wallets as you read this.

Users first reported to Block less than 24 hours ago that funds were moving out of their wallets. The exploit was most likely discovered with the help of AI. Block has confirmed that the RNG is broken. You know what that means.

There are likely already multiple attackers competing for the affected BTC. Many more will join very soon.

Nobody knows how much BTC is affected.

Nobody knows how many users are affected.

This attack has only just begun, and it will continue until all affected BTC has been drained unless users secure their funds first. Inevitably, many Bitcoiners will not hear about the incident early enough to respond in time.

I am truly saddened for everyone affected, especially those who may have just lost their life savings.

The worst part is that they did everything right.

[Imágenes Históricas @HistorieEnFotos]

La desgarradora historia de Tahlequah (J35), la madre orca que cargó a su cría fallecida por 17 días y más de 1.600 km en el Pacífico Norte. Cuando se agotaba, su manada la ayudaba a empujar el cuerpo.
Los biólogos lo tienen claro: no fue instinto, fue duelo.

[Rado 🎈 @thee_ovie]

VAR hasn’t reviewed a single incident involving Argentina throughout the entire World Cup btw.

[RS Archer @archer_rs]

We went to the Monaco GP this year and frankly expected to be charged a fortune for everything (and we were) but to see fans being ripped off like this by @SilverstoneUK is simply disgusting. This is not what motorsport in the UK should be.

[Kylian's Kompany @someballfacts]

So, I have been asked to comment as to HOW match-fixing/"rigging" occurs at this level of the game. It's via an accumulation of attritional factors against the disfavored team, and an accumulation of positive factors for the favored teams. Here's how:

1. One of the single biggest predictors of success in the world cup is RECOVERY. Physical gap in the game is the biggest determinant of success in the KOs.
- Favorable match schedule (giving enough time for rest).
- Favorable travel schedule (some teams barely travel, no circadian rhythm disruption)
These have HUGE compounding effects later in the competition because they reduce accumulation of fatigue.

2. Favorable refereeing. How? Well, the referees are carefully selected for a match and there are powerful incentives for refs to tow the "company (FIFA) line". Their promotion, payout (which games they get to officiate), and future career rests entirely in the hand of FIFA's selection. Don't expect a ref that gives a red card to Messi at the 10th minute to ever get the chance of refereeing later KOs/final - which means he might be missing out on nearly 500k in total earning depending on number of matches - and that is not to speak of his future in the sport.
Secondly, every ref is vetted and their historical profile in terms of how they dish out decisions and cards is known beforehand - and they are SELECTED accordingly with the foreknowledge that they will favor the team of choice.
Thirdly, referees receive a pre-match report that details how to judge every player - they are told that a certain player needs protection because they're a target, or such a player is a diver in the pre-match preparation - this introduces biases before they even step onto the pitch! But few people even know this!

3. VAR. VAR is an extremely opaque process that effectively amounts to : "trust me bro". What people do not understand is there are dozens upon dozens of contact situations in the box. Football IS A CONTACT SPORT. Any such contact on video could potentially be interpreted by the VAR as a potential penalty offense. This provides an added layer of CONTROL and influence that was not available previously.

4. The Bracket. The Bracket is fixed/rigged beforehand to ensue certain teams can only meet late in the game. There is no guarantee of anything - but probability wise, you can ensure that the preferred teams can reach at least the QF which guarantees a payout for FIFA.

[Infiltrado Blanco @InfiltradoRM]

ESTÁ ES LA IMAGEN DEL MUNDIAL.

[kira 👾 @kirawontmiss]

We literally witnessed corruption in broad daylight and there’s nothing we can do about it

[Marek Mikuliszyn @yezooz]

@itsolelehmann Is this something to be celebrated - war technology? We're so much better than that!

[Josip @l3d1c]

🇭🇷 Croatia got eliminated from the World Cup by a closed-source sensor.

FIFA says the Kinexon chip in the Trionda "proved" Matanović touched the ball. Absolute disgrace. What actually happened: they ran signal processing over 500Hz IMU data from a 14-gram sensor and isolated a supposed contact spike from thousands of noisy samples dominated by bladder harmonics, panel flex, spin wobble and stadium micro-tremors, then nullified one of the most dramatic World Cup equalizers in history via spectral analysis of what is essentially glorified noise.

Oh, and it gets better. They moved the chip this year. Back in 2022, it used to hang suspended in the center of the ball. Now it's glued into the sidewall of ONE panel, with counterweights stuffed into the other three so the ball doesn't fly like a shopping cart. So sensitivity now depends on which side of the ball the "contact" happens relative to the sensor. Totally fine basis for ending a nation's tournament.

An IMU measures acceleration. Somewhere in a proprietary pipeline, a threshold decides which acceleration counts as "touch." That threshold is unpublished. The false positive rate is unpublished. The calibration data is unpublished. The patents are literally still in their secrecy window. And FIFA owns the raw data, so nobody can independently audit the trace that ended Modrić's last World Cup.

And we're all supposed to accept a "heartbeat graphic" on the broadcast as if that settles anything.

Since we sadly all know you won't ever admit your crimes or remove this technology for good, at least open source the detection pipeline, @FIFAcom!

Publish the thresholds, the error rates, the raw IMU trace from last night. If the tech is right, transparency costs nothing, right?

[Alexander @alexanderrX_]

london housing has two paths. social housing or your parents gifting you a £300k deposit for a 2 bed in clapham. there is no in between. the middle class doesn’t own property here it just pays someone else’s mortgage

[Jiang Xueqin @xueqinjiang]

My lecture on why economic collapse is coming: https://t.co/Qwnn4iQeO0

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Andrej Karpathy @karpathy]

Software horror: litellm PyPI supply chain attack.

Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.

LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.

Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.

Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.

Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

[Jeff Park @dgt10011]

heres the real reason why regulators/banks dont want to let stablecoins pass yield-

it destroys fractional reserve banking as a system

consider the unspoken truth that "narrow banking" is practically illegal in the US. no entrants who wanted to run a 100% deposit only business has been successfully able to get a fed master account. what this really means is that the US financial system is entirely built on the backbone of credit --> "if you dont originate credit, you dont get to become a deposit institution"

take that one step further where "productive" credit can only be originated without 1:1 coverage ratio, the ultimate business of banking is always the same: maturity transformation between savers and borrowers. for this is the only way the fractional reserve system can ever exist, which means the fatal flaw of is built into the very system of yield mechanism

put simply, the idea of having a stablecoin that passes yield is by definition completely contradictory to the banking model. you obviously can't simultaneously do fractional reserve stuff and also be 1:1 "stable"

so the yield question isnt really about customer rewards and affiliate marketing, thats just convenient gaslighting. its really about the endless cycle of credit on an semi-unstable yet regulatorily captive deposit base that capitalism must perpetuate at all cost.

its always liquidity transformation: create more duration so that the day of reckoning gets forever postponed. until one day it fantastically implodes.

[Adam Cochran (adamscochran.eth) @adamscochran]

5 minutes before Trump’s announcement:

* $1.5B notional worth of S&P500 (ES) futures are bought in a single clip.

* $192M notional of oil futures (CL) sold.

More than 4x-6x any other trade size during the market close.

Insiders profited from his lies in broad daylight!

[Hamel Husain @HamelHusain]

They pulled off the impossible: made a real human video look 100% AI generated 🤣