All tiktok code is written by ByteDance engineers in china.

Context for the non-beleivers. I work on the TikTok USDS team.

And I actually use crypto for payments more than most people. I used some just last week to buy a replica rolex from a chinese dealer because they gave a better price than credit cards.

Just as an aside but I would never say this, this is why people hate security teams. I'm a security 'expert' with 15+ years in the industry including speaking at DEFCON, Blackhat, and all that.

I had no idea about these issues and have never heard of PASETO until now! I'm actually a few months in into my startup and we are using JWT for a lot of stuff so this is very relevant. Thanks for sharing! But if I can't keep up with everything then devs who don't do this all day simply cannot.

I am not a software dev I am a security researcher. LLM's are great for my security research! It is so much easier and faster to iterate on code like fuzzers to do security testing. Writing code to do a padding oracle attack would have taken me a week+ in the past. Now I can work with an LLM to write code and learn and break within the day.

It has accelerated my security research 10 fold, just because I am able to write code and parse and interpret logs at a level above what I was able to a few years ago.

I don't understand this mindset. We should all support our working class brothers to get better wages. Just because the custodian, accountant, and jr HR person are also paid crap doesn't mean we should all grin and bear because at least we're not the day laborers outside.

I was a part of the bitcointalk forums in 2010 when the dev team created a soft fork that modified the blockchain to change consensus rules. THink about it, devs changed the consensus mechanism, that goes against everything bitcoin is supposed to be. They can do it again

https://en.bitcoin.it/wiki/Value_overflow_incident

Did you read a single article. Bitcoin miners ARE raising prices for Texas citizens.

Not to mention the noise issues: https://www.wsj.com/articles/bitcoin-mining-noise-drives-nei...

I gave up caring about bitcoin around 2014 after growing out of libertarian brain rot. And sold my last 5btc in 2021 after the superbowl commercial gave me the feeling the jig was up and the last suckers were in. The sooner you come to this realization the soon you can dedicate your time better uses. Good luck.

Whether they want to work for your wages is the real issues.

https://www.texastribune.org/2022/07/15/crypto-energy-texas-... https://www.govtech.com/computing/bitcoin-mining-threatens-t... https://www.utilitydive.com/news/warren-bitcoin-texas-power-... https://fortune.com/2022/07/12/texas-bitcoin-miners-paid-shu...

I'm just a 'regular security guy' but in that link you posted they detail that after the initial phishing compromise "The attacker managed to leverage that access to penetrate Sky Mavis IT infrastructure and gain access to the validator nodes." They don't detail the bugs that got them access to the nodes but this didn't give them control of the network so "the attacker found a backdoor through our gas-free RPC node, which they abused to get the signature for the Axie DAO validator. ...Sky Mavis requested help from the Axie DAO to distribute free transactions ... Axie DAO allowlisted Sky Mavis to sign various transactions on its behalf. This was discontinued in December 2021, but the allowlist access was not revoked."

Sounds like a pretty classic hack to me. They got into the network, got access to some important servers (how? they should be totally segregated from the corporate network). Then found a depreciated endpoint that allowed them blindly sign transactions. This is bread and butter for any pentesting work, makes me wonder if any of these web3 orgs are hiring security firms to test their systems and not just smart-contracts.

Since we've started printing we seen a huge rise in wealth inequality and more billionaires than ever, but we don't fight the inflation with high taxes on them so assets they use (high end real estate, art, crypto, yachts) have blown up as have things they invest the extra money into (middle class housing). We should be getting ride of the extra cash floating around with higher taxes.