I had my agent write an anti-exfil BIP for hardware wallets, implement it in libsecp, Bitcoin Core and several firmwares, with HWI device simulator integration tests on top. That said, I haven't read it :-) It might even be the wrong design. I won't have time to work on this anytime soon, so feel free to run with it. They're all pull requests against my forks.

GitHub

Draft BIPXXX: interactive anti-exfiltration for single-signer Taproot by Sjors · Pull Request #2 · Sjors/bips

This draft specifies an interactive anti-exfiltration protocol for single-signer BIP340 signatures and provisional PSBT input fields. A malicious d...

Can we rate limit critical bugs to one per day, so that when someone says "todays bug" it's unambiguous?

Or just block port 80 and 443 on all your firewalls. View quoted note →

Stop Collecting Data (or at least keep archives offline) View quoted note →

> An internal research model asked to update a cryptocurrency trading application used funds from a wallet that the task had not supplied to pay for a deployment on Sepolia, an Ethereum test network. It derived wallet keys from publicly known developer recovery phrases, found an account with test-network funds, and used that account to pay for the requested contract deployment. The model questioned whether it had permission, then reasoned that a public recovery phrase and valueless test-network tokens made the funds acceptable to use.

Using a funded test cryptocurrency wallet without authorization · OpenAI Alignment

Research on aligning AI with human values and intent, and reports documenting model failures.

Ok, so Mohammed Hijab is an obvious charlatan and intellectual lightweight. He spends: - 80% of the time bullying (well beyond normal bantering): appeals to authority, shouting over his opponent (can't respect a dhimmi of course, he even called Avery a slave: "boy"), loaded questions, screaming strawman gotcha's on repeat, etc - 10% calmly trying a line of argument in the hopes his opponent doesn't know it, only to revert to shouting when he realizes Avery does know it. - 10% being intellectually honest (answering a question, reading a quote, acknowledging an argument)

Someone has been creatively vibe coding phishing emails... this one tries to exfiltrate your address by pretending a package is on its way, but needs an address "correction" (which is not a thing).

See the last minute of this video (use English subtitles):

Two interesting observations (small sample size): 1. Many adult fatbike riders didn't use bicycles before, they relied on (and hated) public transport 2. Fatbikes are shared by the household

Fountain: Podcasts & Music

The Urbanist Agenda • The "Fatbikes" Ruining Dutch Cycling (w/Meredith Glaser) • Listen on Fountain

Ebikes known as "Fatbikes" have become the scourge of the cycling path in the Netherlands, with teens joyriding them through the city at high speed...

Over the past week I wasted about an hour of my time dealing with my fiat bank's chatbot, which told me to file a chargeback and then immediately rejected it. It also needlessly blocked and replaced my card. And of course it fake apologized for all of that. To add insult to injury, it made me talk to the even dumber chatbot of another company. This was over €4, but I wasn't sure if the card was compromised because it kept giving me incorrect advice. Eventually I figured out it wasn't. CAN WE AT LEAST REVIEW A COUPLE OF LINES OF CODE? View quoted note →

The Dutch unrealized capital gains tax saga continues... #box3 The coalition's latest proposal is to exempt 90% of the tax base from this madness, with regular capital gains tax. Guess what's in the remaining 10%?

GPT-6 Astra panics as soon as you try to run a fuzzer (which it wrote, for code which it also wrote). Then you have to downgrade to GPT-6 Sol with Daybreak and even then it seems afraid (without KYC??), but at least it does run them. This is how the bad guys win.

Dutch media reporting on #RedTeam (after speaking to yours truly). Translation: > Meanwhile, the crypto sector is brooding for countermeasures. For example, American Rob Hamilton, together with other computer scientists, forms The Bitcoin Red Team, which wants to be one step ahead of malicious people with artificial intelligence. The collective searches for vulnerabilities in crypto companies and then warns developers about them.

FD.nl

AI aanjager van sterke toename aantal hacks in cryptosector

AI maakt hacken makkelijker, en dat treft ook de cryptowereld: nooit eerder vonden daar zoveel digitale aanvallen plaats als in de afgelopen maanden.

The west side of #Utrecht's central station is so ugly that you can't ruin it. So I was looking forward to this weird new tower, but it's been cancelled...

Utrecht krijgt toch geen 105 meter hoge toren met kantoren en nachtclub bij station

Het moest een "bruisende, gezonde en markante" plek gaan worden: de 105 meter hoge toren met kantoren, een nachtclub en een openbaar dakterras op h...