John Naulty
@JohnNaulty
Followers
1K
Following
4K
Media
55
Statuses
1K
I :heart: FOSS Crypto Security @mysten_labs // formerly with: @Coinbase, @meta, and @BitGo PGP: 25A615969C12D11B8CA36162C5F2FA4ABCCC41EB
Joined August 2012
Excited to share, with the help of @Eason_C13 , @kostascrypto , @gdMystenlabs, and @joyqvq , my Bugdar paper was accepted to IEEE Conference on Artificial Intelligence!.Looking forwarding to seeing the @ComputerSociety folks at the IEEE CAI conference in May!
9
17
90
People have asked me my thoughts on @LastPass, and how I manage passwords. My answer is simple, git + gpg.- (And my gpg setup: .
3
14
53
@SuiNetwork -- you've been plugged in 🔌🤖⚡. Let's Build!!!.
Here's an update on changes to @ai16zdao's Eliza framework from v0.1.5 to v0.1.6 alpha v4:. - EVM multichain plugin.-@StoryProtocol plugin.- @SuiNetwork plugin .- @ton_blockchain plugin.- @NEARProtocol plugin.- @MultiversX plugin.-@zksync plugin.- @flow_blockchain plugin.-.
3
6
37
@moxie I'm trying to get people to use more opensource tools for communicating, like Jitsi and @matrixdotorg .Basically, I'm following this "best gift for loved ones" from @lrvick . Because I want the future to be safe, secure, and decentralized.
The best gifts to loved ones or yourself are security and privacy. • Setup Yubikeys and hardware wallets.• Install QubesOS or AOSP.• Try apps from F-Droid.• Ditch VPNs for Tor.• Move contacts to Riot.• Migrate to password-store or Mooltipass.• Buy with cash or Bitcoin.
0
4
25
@shiwanibiradar > secrets are base64 encoded, so they are quite secure. This contradicts k8s official documentation. > Caution: K8s Secrets are, by default, stored as unencrypted base64-encoded strings. they can be retrieved-as plain text-by anyone with API access.
1
2
20
For the last few weeks, I've spent my nights + weekends working with a group of researchers, documenting the damage from a vulnerability in libbitcoin (CVE-2023-39910). The technical analysis and lookup tool (to help victims) are now public!.Details in 🧵
2
7
21
Project Armed:. Thesis Paper: It's one of the 20 2019 @hackaday Prize Finalist.And it's using @OpenBCI 😍.@NeuroTechX should interview this guy!.
0
10
22
CEO of @OpenBCI, @russomanno15 sharing with the audience at #BCIMeeting2018 about BCI education and outreach. Short story: open and accessible tech helps you teach the full stack of any BCI application. #opensource #science
0
3
18
Congratulations to the winners of Sui's 1st AI hackathon!. Sui AI Agents are expanding and improving experiences across Gaming, Defi, Security and more. So much decentralized freedom when building with @WalrusProtocol , @SuiNetwork , @elizaOS , and @Atoma_Network!.
👏 Congrats are in order! Check out the winners of Sui’s AI Agent Typhoon hackathon 🌪️ ⬇️. Built on @Atoma_Network:. 🥇 Apocalyptic World: A turn-based card game that combines AI-driven agents and random elements to create a dynamic and immersive experience. Demo:.
0
3
17
@signalapp @kushaldas Why not work on an already successful, opensource project and just incorporate it into Signal? (@jitsinews). Decentralized, open, and secure messaging platforms like @RiotChat built on top of @matrixdotorg already integrated jitsi into their platform.
0
2
13
Getting Clarity about Stacks 2.0 in @muneeb's talk on "Programmable BTC: Using The Reserve Cryptocurrency In Predictable Smart Contracts" at the virtual #FuturePROOF conference. Thanks for hosting + organizing @blockstack and @DystopiaLabs!
0
3
15
Great opportunity for those interested in the BCI space!.@andrewjaykeller @NeuroTechX @OpenBCI @_yroy_ @syswsi.
0
8
15
@cryptodavidw > truly unbelievable coincidence, I was recently out for a walk when I saw a small package fall off a truck ahead of me. Truly unbelievable.
2
0
14
In Paris it's possible to live a very Sui-eet life ;).Thanks @PaulFidika for being so awesome!.Thanks @SuiFoundation and @Mysten_Labs for manifesting such wonderful events!.
Sui Paris Builder house boat party 🛥️. It was great spending two evenings with the @Mysten_Labs crew in the most beautiful city in Europe! They’re an earnest team of builders and a rowdy crew 😆
2
0
13
Sui-eet graph!. @SuiNetwork showing the impact of games on Blockchain usage (read: fun games; moar transactions). Thanks @Artemis__xyz for the explainer and verification of the data!.And ofc @EthosWalletXYZ for making such a fun game :).
1
2
12
Alpha Revealed:.New Mysten Product, Seal, just got unsealed .🎁💝.
Web3 needs better data security 😤 . Seal, a decentralized secrets management (DSM) service, is now live on Sui Testnet!. Think of it as onchain access control + threshold encryption for sensitive data. Let’s break it down 🧵
1
1
9
This is the kind of stuff @NeuroTechX is all about! And thanks to projects like @OpenBCI opensource solutions (and all the before that entails) can be more easily distributed and shared
Our #7 most-read story of 2017 told the tale of paralyzed patients using a mind-reading device to communicate.
0
4
11
Looking forward to @lopp's talk today (and others!) at the #FuturePROOF conference hosted by @DystopiaLabs and @blockstack.
0
4
11
Great article from @bascule and @shella at @iqlusioninc. In the Proof of Stake game, and the crypto 'scene' in general, I really do feel like a "rising tide lifts all boats". So, thanks for sharing this resilient validator setup for others to learn from.
4
4
11
💧 Hack the Planet! 🌎
Sui and Mysten Labs are introducing an official brand new A* team: The Hacker Team, a special forces group innovating on the most cool ideas you've ever heard in crypto and in your life in general. Expect some magic, even more unique than the SMS internet-less payments, zkLogin
0
0
7
Every Eliza needs her Walrus.And Every Walrus their Sui!. Love to see all the projects built from the Sui Agent Hackathon!.
1
0
10
New Projects on a New Decentralized Storage System 😍 -- Learn more about what people built and vote!.
🗳️Today is the last day of community voting for the Breaking the Ice hackathon. Show your favorite project(s) some love.
0
0
5
Sui AI Builders, time to start cooking! 🧑🍳.
Welcome to the Sui Agent Typhoon Hackathon. The frontier of autonomous systems is standing before us! We're thrilled to be hosting this hackathon in collaboration with @SuiNetwork and @ElizaOS_ai to build intelligent agents leveraging Atoma's infrastructure!. $100,000 in prizes,
2
4
10
No seed phrase, no problem!. Sui slipping in a groundbreaking service to help onboard the next wave of crypto adopters. Love the building that happens during a bear market.
📣Introducing zkLogin, Sui's new native support for Web2 authentication services!. zkLogin eliminates the need to remember private keys by allowing users to log into Web3 dApps with their Google, Twitch, and Facebook credentials.
0
1
9
oh ya! Looking forward to this one :).WS 21: From the lab into the wild: shaping methods and technologies for large-scale BCI research #moabb #bci2018 #neurotechx.@pushtheworld_aj @OpenBCI @russomanno15.
0
2
9
Took a quick dive into analyzing @solana Validator Node distribution--can you guess which country has the most Solana Validators? .Curious about ISP distribution as well? . See the stats, and the code that produced it here:.
1
1
9
Hey Twittersphere, feel free to share/contribute to the awesome-tezos repo I created:. :).
1
2
7
@hacks4pancakes I feel like there are allies and alignment with the @EFF organization :).Also, "California Consumer Privacy Act" (CCPA) is a thing that took effect in 2020, and it gives Californian's some basic rights for controlling their personal information. Def a step in the right direction.
0
0
8
I'm looking forward to @OWASPBayArea hosting "Hacker Days: Attacking & Defending Kubernetes - A brief overview" courtesy of @bondijois .
0
3
8
Wake up. Go to work. Do Everything. 💪.
🧑🍳 Everything of Things by Sui for a modern intra and inter connected world between humans, devices and AI.
1
1
9
Interested in Brain Computer Interfaces?.Check out @gtec_BCI 's BCI & NEUROTECHNOLOGY SPRING SCHOOL 2020. @NeuroTechX @centeropenneuro @openscience @OpenBCI @neuralink @NeuroTinker.
0
1
8
> Let’s beat this thing. The ultimate medical hackathon begins. @russomanno15 @jeantoul @OpenBCI @SoloKeysSec @NeuroTechX .The call has been made: Who will help answer?.#openVENT #CoronaVirusChallenge #FlattenTheCurve #opensourceventilator.
1
0
8
Privacy is a right. This is why I'm thankful for the people out there doing work to protect our right to digital privacy. Thx @lrvick and @drgrove92 for working on the hashbang phone project. More people like the @nytimes and @WIRED should know about it
1
5
7
long-lasting computational scheme for neurons gets flipped 🧐🤔🧐.@Numenta @NeuroTechX this might interest you ;).
0
2
7
The utility of AI agents grows each and every day.
One of YC's largest consumer startups was paying an ad consultant 310k/yr to monitor competitor ad strategies . Gemini + o1 completely replaced them. -gemini consumes all active ads (video + image).-o1 writes thoughtful strategic analysis.-leadership is emailed full reports
0
3
7
AI x Sui is truly the place to be 🔮.
For our next X Space, we're discussing AI on Sui with:.🎙️ Hisham Khan, CEO of @Atoma_Network.🎙️ @Lileo728 of @alibaba_cloud.🎙️ @prashan_agarwal of @FanTV_official. Deets:.📆 Thursday, February 6.🕕 6pm PT. ⏰ And don't forget to set those reminders ↓.
0
1
7
@deraleek @jerame30 @AdrianKari @blackqueentech it's anonymous, but it has such a low transaction volume that analysis of tumbling 'large funds' through it is not theoretically impossible.
0
0
5
@ViktorBunin @coinbase @dannydiekroeger and @murchandamus 👋.If you yourselves, or friends you know, would like to help Coinbase 'get lit' with Lightning ⚡️, let me have the pleasure of introducing you to @ViktorBunin 🤩💫. When this man is on a mission, that mission gets done 🫡.
3
0
4
Who else is super excited for the #neurotechgaming2020 hackathon this weekend?.I remember participating 5 years ago! Time Flies!. Can't wait to hear the speakers from @valvesoftware @neurable and all the other people . Thanks @NeuroTechX for organizing!.
1
2
7
Thanks @TezosCommons for making this "1 Millionth Block" commemorative video. It was a great surprise to see my face in it :). I ❤️ the #tezos community!.
0
0
5
Be careful crypto citizens--Supply chain attacks are here to stay!. The best defense at this point is having multisig crypto accounts using independent wallet software for signing transactions). An alternative approach is to at least have two independent services verify tx hash.
FINAL TIMELINE AND UPDATE TO CUSTOMERS:. 4:49pm CET:. Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again. The investigation continues, here is the timeline of what we know about.
0
0
5
@dannydiekroeger It's funny how people think the BTC-USD price matters. Bitcoin became a 'legit' currency for me when I saw millions of BTC flow through silk road. If it's good enough to survive a dark web 'anything goes' kind of market, it's good enough for my 'vanilla' use cases. #freedom #coin.
1
0
3
@anchor_drops @Ledger Hmm, could be something like
For the last few weeks, I've spent my nights + weekends working with a group of researchers, documenting the damage from a vulnerability in libbitcoin (CVE-2023-39910). The technical analysis and lookup tool (to help victims) are now public!.Details in 🧵
1
1
5
@0rcan0mic @FiloSottile I wonder if Canonical sends info by default? (My feeling is that not all Linux distros respect privacy equally).
1
0
5
@uttam_singhk @ayrastarr @ETHGlobal @blockchainox @DoraHacks @monad_xyz @a16zcrypto @eigenlayer @SuiNetwork has an agent hackathon currently happening, ends Feb 10th:.
0
1
5
@adamogardner @murchandamus is my go-to, but everyone is going to have their own particular preference. Here's a tweet with two resources on features + security for various messaging platforms in case that's helpful in this thread ;)
Two resources for measuring security and features of messaging apps: .The second document comes from the #! (hashbang) community. I think it's time we add this content to
1
0
4
🙏please let me get a seat. Cc @NeuroTechX @OpenBCI.
We're having an event next Tuesday in San Francisco to share a bit about what we've been working on the last two years, and we’ve reserved a few seats for the internet. Apply here:
0
0
5
@arungupta @ChickfilA @intel This has always been a fun trivia question for my DevOps friends (What company has the largest baremetal k8s deployment).
1
0
5
@IanColdwater @TinkerFairy_Net @jessica_schalz @MayaKaczorowski @TabbySable @mauilion I think this is the kubecon workshop you're referencing, yeah?. I'm trying to organize a CTF using this in the SF Bay area. if anyone's interested, ping me :).
0
1
4
From first-hand perspective, crazy to see the effort Libra put in to be regulated only to be 'shot down' time and time again by 'behind-the-scenes' regulators. Thankfully, the effort to build a safe, secure, and accessible money/info system lives on with Sui, Lightspark + others.
0
0
3
Thanks @CloudNativeFdn for helping organize a public #bugbounty program with @Hacker0x01 for #kubernetes!. More opensource projects need this kind of financial 'love'.
1
2
4
@tophee @IanColdwater No. They haven't responded quickly. These issues have been reported by security researchers for years. It's just more shenanigans are happening due to the pandemic and Zoom now has to handle the bad PR.
1
0
4
Radically free press, built on technology to guarantee your freedom to access, contribute, and share?.Heck yeah!.
The current media environment is unacceptable. All the largest and wealthiest media companies are pulling hard for the left and consolidating opinions, drowning out conservatives and people who simply don't agree with the left's narratives. It's time to change all that. In
0
0
3
@IanColdwater @signalapp @matrixdotorg + @element_hq .This would be a great feature (being able to switch between different identities easily in the desktop + web + mobile apps).
2
0
4
@elonmusk Use @element_hq built on top of @matrixdotorg .Secure, decentralized, open source. and doesn't require attaching your messaging identity to you phone number. Research the pros/cons for privacy + security for messaging apps. Here's a decent resource:
0
0
4
@dpc_pw @dannydiekroeger "A Type II civilization, also called a stellar civilization—can use and control energy at the scale of its planetary system.". Looks like we're a long ways off to Layer 2 🌎🚫👽🛸👽.
0
0
4
Going to be organizing a workshop at #36c3 this year with @drgrove92 and @lrvick . Share with your friends :).
0
1
3
@LabosNomades @tezos @fintechbe Anyone from @LabosNomades going to #blockchance in Hamburg at the end of the week?.There will be discussions about 'clean' NFTs and other topics that might be of interest to the #tezos community!.
1
0
4
Sui Ecosystem is a heavenly haven for AI Angels 👼.
Ideal AI agent stack built on @SuiNetwork 👾. > LLMs/Execution: @Atoma_Network LLMs & TEEs.> Data Layer: @insidex_trade structured, real-time data.> Storage: @WalrusProtocol AI built PTBs & generated content as blobs.> Communication: @SuiNetwork objects, leveraging fast path.
0
1
4
Assembled and ready for action!.Thanks @card10badge! I look forward to building on top of this awesome piece of hardware and software.
1
0
4
@nassyweazy @zachxbt @bluegwei @HyperliquidX Just You'll be a black belt security guru in no time, Nass. Trust me! 😜.
1
0
3
@beauwoods @DC_BHV @iamthecavalry @defcon @ICS_Village Hey,.I'd like to see a biohacking space/group at CCC this year. Would you be interested in helping?.Cc @NeuroTechX @OpenBCI @jeantoul @syswsi @_yroy_.
0
0
4
Sui Builders working on AI: What did you get done this week?. Set a reminder for my upcoming Space!
3
0
4
@gamithra_marga This is wonderful!.Although my friends and I from @NeuroTechX don't have any physical spaceships, we meet on the internets. We could show you and your space crew how to read brainwaves with opensource hardware!.Feel free to join our weekly meetings :).
1
0
3
@hasheddan @mhausenblas For those who feel like exploring that threat more, I have this little demo, where curl/wget return something much different than `kubectl apply`:
0
0
4
I hope the appreciation for the proliferation of reproducible builds grows with the increase in reproducible builds across the software ecosystems ❤️🕵️❤️.Thanks @chainguard_dev for protecting the ecosystem one (deterministic) build at a time.
Is a reproducible build reproducible, if no one reproduces it?. We just made it even easier to reproduce our container builds, and @mattomata explains how here:
0
1
4
Set a reminder to see what's been cooking in the ai16z corner of the open source AI Agent revolution! .
0
0
4
👀. Can't wait for the crypto mining energy use dataset!.I wonder how it will compare to centralized financial system energy usage. I've always wondered how much electricity a big centralized bank uses to secure and transfer all those 1's and 0's.
2
0
1
@TrustWallet Should you be worried?.If you used `bx` to generate your seed, you probably should check the hash of your mnemonic against the milksad lookup tool: If you are impacted you should immediately sweep all assets across all chains to a new wallet.
2
0
3
@jack @elonmusk @zerohedge New open source device?.Check out the betrusted platform from @bunniestudios and @xobs .Get your hands on one from crowdsupply and FIDO around with it .It's as if a Y2K @BlackBerry had sex with OSS-version of @NSAGov and gave birth to forbidden fruit 🐍.
1
0
4
@ggreenwald Hey, I'm a fan of your work. I think this video has more insight into what the real attack vector could be: .the optogenetic toolchain is ripe for weaponization. Viral vectors and specific neuron targeting are powerful tools. .
0
0
2
@twobitidiot Took me a second to understand the Silvergate reference. I guess you're referring to:
1
1
3
@mosayeri @WrappedBTC Let's throw a party at 4.20% and 6.9%*. * parties can only be thrown in countries that recognize cryptocurrencies as _legal tender_ (e.g., 🇸🇻).
1
0
4
@MitsuiProtocol @SuiNetwork @Atoma_Network @suilendprotocol @bluefinapp community cookout!.Love to see it 🔥🤖.
0
0
3
Pro tips in this thread from OG @LukeYoungblood. Love the reference for signing commits 😍. Web3 is all about signing stuff to attest identity, yet few web3 projects sign commits to attest the identity of the developers writing the code 🤦.
Some more tips for web3 teams that want to build fast with high security:.use @Cloudflare pages and connect it to @github - you get a preview build for every pull request. Put strict branch protection rules on your main branch and require PGP signed commits to prevent attacks.
0
2
3
1
0
3
Schrödinger's code:.Third-Party libraries that are used but not reviewed exist in a superposition of maliciousness and innocence. The collapse to a single state happens when you either review the code (open the box). or get pwnd (the box opens you).
1
0
3
1 Million TPS demo AND each attendee got a Ledger Nano S. Great job Tezos!.
Showcasing 1 million TPS demo on #Tezos, exclusively at #TezDev2023!. We are proud to be part of making this demo a reality, in cooperation with @trilitech and with support by Elevate Labs.
0
0
3
@dannydiekroeger Bitcoin won't die as long as there are people who desire a money controlled not by "state governments" but by "state machines".
0
0
1
A rising tide lifts all boats!. Sad to see some knowledge-gating and community-gatekeeping happening in the Move ecosystem 😿.
Hey @Aptos_Network, I’m disappointed to learn that you pressured @PontemNetwork into removing @tnowacki + @damirka + Shayan Sanjideh as speakers at as well eliminating Sui Foundation from the organizations participating in this community-organized event.
0
0
3
I was going through @WIRED's article on the latest @intel SGX flop This blog post from 2013 really put it all in perspective and helped my understanding:. Thank you for creating such great content, @rootkovska!!!.
1
1
2
@defcon201nj @NicoAGrant I've been in calls with 20 people on jitsi for @neurotechsf meetups.It works fine, has screen sharing, plugins for etherpad, etc.
1
0
3
Another reason to keep important keys on a Yubikey or other personal hardware security module. .
I recently disclosed vulnerabilities in Thunderbird that would have allowed an attacker to decrypt and leak arbitrary messages encrypted to a loaded PGP key. Now that these bugs have been fixed in Thunderbird 91 & 102, here is a write up.
1
0
3
Currently, California has 74,000 hospital beds at 416 hospitals:.o 9,000 surge capacity beds;.o 11,500 ICU beds for pediatric and adults patients;.o 7,587 ventilators in California hospitals;.o California has its own cache of 900 ventilators.
1
0
3