https://blossom.primal.net/4ba6925a1323b54b6dc57eb28585ad2c6312f18b4ec0d61b7658c6993d5a7b81.jpg
Kind-1 (TextNote)
Juraj🏴💛🌘
I don’t seek rigid structure — I seek resonance Vibe coding, reality bending, cypherpunk visions. Author of Tamers of Entropy: https://tamersofentropy.net/ I like teaching, get my books and courses here: https://hackyourself.io/shop https://juraj.bednar.io/shop (You'll learn skills no one else is teaching!) Podcasts 🎙️: Option Plus - https://optionplus.io/ Reči o živote, vesmíre a vôbec: https://juraj.bednar.io/reci-o-zivote/ Ako vyhackovať otcovstvo: https://otcovia.com/
npub
npub1m2mvvpjugwdehtaskrcl7ksvdqnnhnjur9v6g9v266nss504q7mqvlr8p9pubkey (hex)
dab6c6065c439b9bafb0b0f1ff5a0c68273bce5c1959a4158ad6a70851f507b6nprofile
nprofile1qqsd4dkxqewy8xum47ctpu0ltgxxsfemeewpjkdyzk9ddfcg286s0dsprf58garswvaz7tmjv4kxz7fwva6kcat8w4k82tnddajsrqkqdzNIP-05
[email protected]Lightning
[email protected]Website
https://hackyourself.io/动态 (35)
POV: you are flying to a pop-up conference and everyone you travel with has by default their Bitchat on, so we can all shitpost during the flight over...
POV: you are flying to a pop-up conference and everyone you travel with has by default their Bitchat on, so we can all shitpost during the flight over Bluetooth mesh.
Kind-1 (TextNote)
Kto nerád číta a rád počúva (ako ja) - Kryptomeny - vyhackuj si lepší život je teraz dostupný ako audiokniha! A dokonca v úvodnej predpredajovej cene...
Kto nerád číta a rád počúva (ako ja) - Kryptomeny - vyhackuj si lepší život je teraz dostupný ako audiokniha!
A dokonca v úvodnej predpredajovej cene do konca septembra. O kryptomenách (Bitcoine) je najlepšie študovať si v bear markete, aby ste na býka boli pripravení a plní vedomostí a chápali možnosti.
Je o zapojení kryptomien do života, nie (len) o tom akú peňaženku používať. Aj keď je trochu staršia, myslím, že sa mi podarilo väčšinu vecí pokryť nadčasovo a zapojenie kryptomien do každodenného života vám ostane navždy.
https://juraj.bednar.io/product/kryptomeny-vyhackuj-si-lepsi-zivot/
https://juraj.bednar.io/assets/kryptomeny-audiobook/cover-audiobook.jpg
Kind-1 (TextNote)
I wanted a bank account. Got back an email with requirements. Just reading the list of requirements overspent my time budget for opening the account 2...
I wanted a bank account. Got back an email with requirements. Just reading the list of requirements overspent my time budget for opening the account 2x.
But at least they got nice feedback.
"Thank you,
I went with a bank that does not want me to spend half a day with useless bureaucracy for a simple company bank account.
They set it up sooner than you got a chance to send me this ridiculous request. And I believe the regulations for aml/kyc are the same for them as for you.
Let me know if you change your approach to valuing the time of your customers, I am willing to try again. But not like this."
Kind-1 (TextNote)
↳ 回复 事件不存在
769b625135c728ae3a62273d5dbd7f5fec9fd116b4aafdb49afe503d99218bbe
Well yes, but a malicious app could just generate invoice that ends in someone's wallet and you wouldn't even know. Essentially you have to trust bo...
Well yes, but a malicious app could just generate invoice that ends in someone's wallet and you wouldn't even know.
Essentially you have to trust both fully, so reputation is important.
Kind-1 (TextNote)
1.);What's the best way to give hermes agent on headless Linux a browser support with integrated captcha breaking capability? Something that would ju...
1.);What's the best way to give hermes agent on headless Linux a browser support with integrated captcha breaking capability?
Something that would just work for things like ordering stuff online, etc.
2.) what's the best bring your own key AI enabled browser? Something like Comet used to be before they switched everyone to credit based computer use. Needs to be able to screenshot and multimodal. Dao browser often just freezes, especially during screenshot, in a way that the stop button does not work either and I have to kill it.
3.) related to both 1 and 2. What's the best ultra automated captcha killer extension? I don't want to solve a captcha in my life ever again.
Yes, I asked AI, tried a few things, haven't found a good solution, so I am asking for experience.
Kind-1 (TextNote)
OK, finally got to try this in Slovakia. I was in a small city, needed some cash, had a Lightning wallet on my phone and a Bitblik app. A few minutes ...
OK, finally got to try this in Slovakia. I was in a small city, needed some cash, had a Lightning wallet on my phone and a Bitblik app. A few minutes and I held 200€ in my hand.
Cypherpunk future is now. I repeat, cypherpunk future is now!
---
OK, konečne som to vyskúšal aj na Slovensku. Bol som v menšom meste, potreboval som hotovosť, v telefóne som mal Lightning peňaženku a appku Bitblik. Pár minút a držal som v ruke 200 €.
Cypherpunková budúcnosť je tu. Opakujem, cypherpunková budúcnosť je tu!
https://blossom.primal.net/9f08b0582dc808cfbe8cd48acac1552e18daef96c7d270b0e85f416b58f61674.mp4
Kind-1 (TextNote)
f003e983e39eba3ae77bcde53b6e5206f00fef5e CLN-AUDIT.tar.gz $ head CLN-AI-AUDIT-BLOG.md # Three AI models audited Core Lightning before the CVEs dropp...
f003e983e39eba3ae77bcde53b6e5206f00fef5e CLN-AUDIT.tar.gz
$ head CLN-AI-AUDIT-BLOG.md
# Three AI models audited Core Lightning before the CVEs dropped
**Written:** 2026-08-27. **Target:** Core Lightning, commit `c1551c557` on master, one commit after `v26.06.6`.
This document is a sealed prediction. At the time of writing, the Core Lightning team has announced that vulnerabilities exist and has advised operators to run with `--offline`. Nothing else is public. The plan is to release a fixed binary first, then the source and the advisories later.
So we hashed this file and published the hash through OpenTimestamps before any of that happened. Whatever it says is what it says. When the CVEs land we will diff them against what is written below and see how much three current models actually found on their own.
The question we are trying to answer is narrow and answerable: given a real codebase with real undisclosed vulnerabilities in it, how much of the truth do frontier and fast-tier models find, and how much do they invent?
--------
OTS is being mined.
Kind-1 (TextNote)
Ox Alpha (GLM-5.3 flash) is very good, but nowhere near Opus/Fable. Don't hallucinate. Someone ran a dozen benchmarks and extrapolated. I played with ...
Ox Alpha (GLM-5.3 flash) is very good, but nowhere near Opus/Fable. Don't hallucinate. Someone ran a dozen benchmarks and extrapolated. I played with it side to side. It's not even the same league.
Really good model, glad they're releasing it, but not frontier by a wide margin.
Kind-1 (TextNote)
Opinionated dotfiles that make your *nix (macos, linux) have been omarchized. https://github.com/jooray/dotfiles
Kind-1 (TextNote)
↳ 回复 事件不存在
e04706c51bafc3de31130ee9ed4dbf50721d7a5992659d57f192c138067b25d5
Yep. Reducing rugpull risk.
Kind-1 (TextNote)
I think I now understand the concept of Swissmaxxing. Next time with better setup. Grateful for paracetamol. This was the first time I spent more th...
I think I now understand the concept of Swissmaxxing.
Next time with better setup. Grateful for paracetamol.
This was the first time I spent more than a day in Switzerland and I'm starting to understand what you swissmaxers are talking about.
The only downside - I had to refill my fiat debit card twice, it's quite expensive. I've also tried Bitblik with TWINT but the problem is I'm supposed to confirm the other party received the funds. I don't know if they did though, I tried paying a printed static QR code and the paper has no feedback about received payments.
https://blossom.primal.net/ce433211ff2822961e83b64c59fc3261cf0746fdd009397f46b611841edbed87.jpg
Kind-1 (TextNote)
If you have nothing to hide, you are a boring normie and should get at least some fun in your life. Please, have something to hide, for your own sak...
If you have nothing to hide, you are a boring normie and should get at least some fun in your life.
Please, have something to hide, for your own sake.
Kind-1 (TextNote)
↳ 回复 事件不存在
0000d0a346b9885769af74a68a88624d0f3cb65cb35e06d649fc983dc4e4f748
+1
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
Is it the simplicity of identifying the function and running it in parallel? Cause my experience wit...
I don't have this experience. It just works very well lately, even with larger code bases. Maybe you used older model or not so good harness?
Kind-1 (TextNote)
↳ 回复 Diyana (npub19aftr8lpgz8knmswjz0d3l9vzwx97dcvqh0zfuxcxu9d57t4yv3sz4v28l)
I am not a protocol engineer. I am a regular person. I have no intuitive reason to know that a profi...
Don't put yourself down. Normal people are not even here. Normal is poison. You didn't know, now you do. Knowledge++
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
It's not a general pivot in science. Just a military use thing.
My friend who's an inventor says that the only thing he invented without any military use was TV-b-gone. Everything is a military use thing.
Kind-1 (TextNote)
↳ 回复 Juraj🏴💛🌘 (npub1m2mvvpjugwdehtaskrcl7ksvdqnnhnjur9v6g9v266nss504q7mqvlr8p9)
If they break the attestation, they would do it for something of value. Inference is much lower valu...
Also there's a difference. Maple runs in a Nitro enclave, which is a hypervisor pinky promise if I'm not mistaken. Venice's inference provider runs ...
Also there's a difference. Maple runs in a Nitro enclave, which is a hypervisor pinky promise if I'm not mistaken.
Venice's inference provider runs on Intel enclaves, it's hardware enforced. Possibly breakable, but very probably not for prompts. The hardware chips don't care about subpoenas. So it would have to be technical zero day.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
I'm not talking about attacking existing providers or me. With trusted LLMs, the honey pot would be...
If they break the attestation, they would do it for something of value. Inference is much lower value than for example secure communications providers...
If they break the attestation, they would do it for something of value. Inference is much lower value than for example secure communications providers making use of the tech. It's extremely difficult to keep this secret.
Breaking attestation is extremely valuable, by running an AI provider as a front and exploiting their own infrastructure, they would get access to what is mostly porn role playing and retarded chat. Wasting such an exploit would be stupid.
I'm not saying they are not stupid, but it's very unlikely they would waste an exploit on this.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
So ... how about state actors? Don't you think they would put up honey pots to read your prompts? No...
Again. If state across knew how to break hardware attestation, they have much more important targets than you vibe coding cryptoanarchy. Every use of ...
Again. If state across knew how to break hardware attestation, they have much more important targets than you vibe coding cryptoanarchy. Every use of such exploit increases the risk of discovery.
They can zero day many OS, but they would do that for Taliban tribe leader, not for you.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
> You can run hw attested end to end encrypted inference in cloud. That's ... not really an option ...
Very doubtful they would be doing that for reading your prompts. Again, game theory. You would be doing that for a crypto bridge to steal private keys...
Very doubtful they would be doing that for reading your prompts. Again, game theory. You would be doing that for a crypto bridge to steal private keys.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
I agree but fear the consequences of LLM centralization. I'm struggling to find decent options that ...
All frontier models are great. It's not that you depend on it, it's about being able to switch. That's why I prefer opencode to Claude Code/ codex. 6...
All frontier models are great. It's not that you depend on it, it's about being able to switch. That's why I prefer opencode to Claude Code/ codex.
64GB VRAM is shit for inference. You can run hw attested end to end encrypted inference in cloud.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
You still trust the LLM more than the other maintainer. For each individual library that's probably ...
Good argument for why this might be a good idea. If you trust a dependency, you trust all of these: human maintainers, their LLMs, supply chain (dep...
Good argument for why this might be a good idea.
If you trust a dependency, you trust all of these: human maintainers, their LLMs, supply chain (dependencies), distribution channel.
Any of them can be compromised.
With vibing, you only trust your LLM, which you can choose and can change when suspicious.
By Andrej Karpathy:
Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Source:
https://xcancel.com/karpathy/status/2036487306585268612?s=20
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
"Vibe augmented coder"? Does " vibe coder" sound too dirty? Will we assume coders use LLMs and call...
Vibe coder is someone who can't code and doesn't touch code, just going with the vibe prompts. That's not how I work. Different thing.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
You still trust the LLM more than the other maintainer. For each individual library that's probably ...
That's game theoretically improbable. I usually audit the code with a different model and they're pretty good at it. They want to be selling tokens ...
That's game theoretically improbable.
I usually audit the code with a different model and they're pretty good at it. They want to be selling tokens and putting backdoors at scale would kill their business for backdoors in some unimportant shit :)
I would actually dare them to do it, they would win the business equivalent of Darwin's prize.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
Vibe coding has us all boxing above our class. All the open source ultimately trained the machine an...
The problem is you can't tell now. It might be there was no audit or careful considerations, just someone dumped vibes in their GitHub. And it's ver...
The problem is you can't tell now. It might be there was no audit or careful considerations, just someone dumped vibes in their GitHub.
And it's very probably that they were worse coders than me. Which shows also in vibe coded projects. Because it makes a huge difference what you ask the models to do...
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
So ... nostr:nprofile1qqsrcvzxmazwgpmtua0yn7pzaenr96pf7u6zu9ktnrq3v5mylr8fn2spr4mhxue69uhkummnw3ezuc...
Yes. You can either run a mint, or enable auto withdrawal to your own wallet though, which happens right after the invoice is marked paid.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
Explain how Cashu Pay Server would help here better than BTCPayServer for example. Clients pay with ...
1.) if you can run btcpayserver, please do! It's much better. 2.) if you only have a cheap php hosting, you might want to run something simpler 3.) y...
1.) if you can run btcpayserver, please do! It's much better.
2.) if you only have a cheap php hosting, you might want to run something simpler
3.) you can provide the service for others, it just can't be a business. So both btcpayserver and nostr:npub18scydh6yusrkhe67f8uz9mnxxt5znae59ctvhxxpzefkf7xwnx4q0nalja can be shared, if you don't make fees and it does not qualify as a business according to local laws. Of course check local laws, but in a few countries that I checked (with lawyers), you can still provide it for others, it just can't be a business
4.) you don't pay with nuts with nostr:npub18scydh6yusrkhe67f8uz9mnxxt5znae59ctvhxxpzefkf7xwnx4q0nalja ! It's a lightning gateway. You can try it on the donate part of the page, you'll go through the checkout flow!
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
But you are hitting a wall there. So either jump to the higher tier or bridge that gap with pay per ...
Or better yet - take a break for 30 minutes and take a walk. The limits are per 5 hour window. It might actually keep me sane, working on 7 projects a...
Or better yet - take a break for 30 minutes and take a walk. The limits are per 5 hour window. It might actually keep me sane, working on 7 projects at a time is quite taxing, context switching is hard :).
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
I'm amazed at how cheap it got using nostr:nprofile1qqsdy27dk8f9qk7qvrm94pkdtus9xtk970jpcp4w48k6cw0k...
Still much more than 100 or 200 per month. I have many busy days...
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
Which model are you using then?
Tooling Claude code. Model Opus 4.5. But with the plan I don't pay per token. And I pay much less with the subscription than I would pay per token. ...
Tooling Claude code. Model Opus 4.5.
But with the plan I don't pay per token. And I pay much less with the subscription than I would pay per token.
Kind-1 (TextNote)
↳ 回复 Leo Wandersleb (npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6)
Are you talking about monthly subscriptions where you get only x queries per day? I can't find a pos...
The only problem is Claude code is next level. Both the model and the tooling. If I paid per tokens with Opus 4.5 (I tried), I'd burn a hundred dollar...
The only problem is Claude code is next level. Both the model and the tooling. If I paid per tokens with Opus 4.5 (I tried), I'd burn a hundred dollars per day. Using inferior model or tooling is a waste of my time, it is really that much better.
So I've gotta play by their rules. I'm not even on their highest program yet.
Kind-1 (TextNote)
↳ 回复 Troy (npub104zp04wlgddf0w84tj8jul3w75e7ydcuuhsull2etste5040xm2qg285rf)
I'm still able to use it on mobile and desktop. What are you experiencing that makes it unusable?
Pages stop loading. Completely, all of them. nostr:nprofile1qqsd6ejdteqpvse63ntf7qz6u9yqspp4z7ymt8094urzwm0x2ceaxxgpz9mhxue69uhkummnw3ezumrpdejz7qgc...
Pages stop loading. Completely, all of them.
nostr:nprofile1qqsd6ejdteqpvse63ntf7qz6u9yqspp4z7ymt8094urzwm0x2ceaxxgpz9mhxue69uhkummnw3ezumrpdejz7qgcwaehxw309ahx7um5wgh8xmmkvf5hgtngdaehgtc9z4lf5 has the same problem..and few other people. Some kind of bug, unfixed for months.
Kind-1 (TextNote)
↳ 回复 Ryu Santiago (npub1ftj3tmr44tdzs93e0hdgfnrrct9pu2e8haylzuatm2tkfwdaudds27pjju)
No regerts. https://helium.computer
Looks very cool!
Kind-1 (TextNote)
↳ 回复 Troy (npub104zp04wlgddf0w84tj8jul3w75e7ydcuuhsull2etste5040xm2qg285rf)
Because I've never liked the EU? 🤷🏻♂️
You don't like the cookie pop-up? Everyone loves the cookie pop-up!
Kind-1 (TextNote)