zeno 🏔

cypherpunks write code.

[zeno 🏔 @zenoconstruct]

at this point you should not install any dependencies that is not live for 7 days, solves all the supply chain attack problems

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[zeno 🏔 @zenoconstruct]

now that cost of building is trending towards 0, talent for marketing is probably going to get more expensive

[zeno 🏔 @zenoconstruct]

instead of decentralised finance i think we want permissioned but transparent finance.

[zeno 🏔 @zenoconstruct]

yep, this is may 19th

[:) @smileycapital]

"Covid crash" - wrong

this is May 19th 2021

I know because that day I lost my sanity, years of work & over the course of next 12 months I've developed mental & physical damage that I still carry to this day

today, I'm okay. most of you likely are not

it gets better, I promise

[zeno 🏔 @zenoconstruct]

things not running in the trenches is actually good for established memes

[zeno 🏔 @zenoconstruct]

@dcinvestor look it took a lot of crime to get us up in Oct - Dec 2021

[zeno 🏔 @zenoconstruct]

lmao looking at some charts, how do any of us still have money is impressive

[zeno 🏔 @zenoconstruct]

ok thought a bit about XRP & ADA in the SBR.

it’s basically which coins are american in the top 10.

doesn’t matter how much is bought, more of a signal to founders that left usa to middle east / asia to come back home to build.

[zeno 🏔 @zenoconstruct]

extremely good

[Felipe Montealegre @TheiaResearch]

https://t.co/nSe5i0OqLS

[zeno 🏔 @zenoconstruct]

gut says not macro top

[zeno 🏔 @zenoconstruct]

good read

[Matti @mattigags]

https://t.co/FJtyvHYyti

[zeno 🏔 @zenoconstruct]

funniest outcome would be trump selling and we all got rugged by the potus

[zeno 🏔 @zenoconstruct]

effective mcap of trump is fdv*0.2, ~1.5b now?

comp it with other memecoins, it is cheap

[zeno 🏔 @zenoconstruct]

bringing back duelling will unironically make society more polite

[zeno 🏔 @zenoconstruct]

pigeon not wrong

[zeno 🏔 @zenoconstruct]

ok what if elon banned all ai agents because they are producing so much slop?

911 for crypto ai

[zeno 🏔 @zenoconstruct]

@kenchangh luigi coded

[zeno 🏔 @zenoconstruct]

@arthur0x honestly surprised how many malaysian founders hit it big in crypto, wonder why is that the case

[zeno 🏔 @zenoconstruct]

been trying to use all the ai tools to work on a new thing…

somehow this feels like brainrot for devs

[zeno 🏔 @zenoconstruct]

users did not lose money to racer, users lost money to speculation. this is not a case of consumers buying products that did not deliver on its promise, ft launched fully featured, users knew what they were getting themselves into.

[Adam Cochran (adamscochran.eth) @adamscochran]

If you make $40m on a product with a skeleton crew, you’ve got a moral obligation to at least try and deliver on that product.

FriendTech made bank, and then basically never even tried to ship another upgrade.

That’s pathetic.

Funders probably got their 1x liquidation preference, and bagholders couldn’t even get a new feature.

We’ll talk a lot about how there hasn’t been a bigger “fumble” in the space - but I also don’t think there has been a bigger tell of someone’s character than this.