iiinova — where your digital self keeps evolving

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 14/05/2025

An OS that goes all-in on simplicity. There's so much virtue in simplicity. What we need is more of less. duskos.org

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 07/05/2025

I love how Xwitter cares about their security

020

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 20/04/2025

found the major bottleneck for scaling Ethereum

060

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/04/2025

1/ "Make Ethereum Cypherpunk Again" isn't simply a slogan for me — it's a statement of intent. This isn't branding. It's resistance. This isn't about playing nice. It's about reclaiming Ethereum's soul! hackmd.io/@pcaversacci...

140

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 23/01/2025

2/ Example: Fucking stop blindly running those _malicious_ PowerShell commands just because some fake Safeguard bot told you to. The number of RATed devices (many just normal users) in this space has never been higher.

020

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 25/12/2024

Looks like there was a pretty ugly deanonymisation vulnerability present in Wasabi wallets until recently (specifically related to CoinJoins). Such disclosures always remind me how hard it is to implement true privacy into your applications. But it's def worth the battle. github.com/GingerPrivac...

030

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 13/12/2024

Rust devs after their 101th rewrite-in-rust

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/12/2024

1/ This is such a retarded take. A VPN is your digital armour. People might use a public Wi-Fi or want to prevent government/ISP tracking when logging into Coinbase. I'm not sure if this a personal view or a Coinbase view, but if it's a company-wide opinion you're fucking anti-privacy clowns!

130

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/11/2024

It amazes me how L2s think that it's a great idea to modify the source code of one of the most successful smart contracts to date. If you ask me this is just insane. What can go wrong? hint: insufficient approval to self. Can we fucking stop this fragmentation, it only hurts. Welcome to Blast's WETH

040

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 23/11/2024

So we have an "official" (i.e. NIST-based) deadline now: ECDSA should be deprecated by 2030 (for 112 bits only) and completely disallowed by 2035. Thx for the crazy ride secp256k1 (and secp256r1). nvlpubs.nist.gov/nistpubs/ir/...

051

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 21/11/2024

Vitalik is back writing Vyper code - what a beautiful day github.com/ethereum/res...

130

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 18/11/2024

today I was looking again into BLAKE3 and I'm getting more convinced that we should add it to the EVM. Thoughts? Like, it's way more efficient than SHA-256 and - maybe this is just my paranoia - SHA-256 was designed by the NSA... interesting fact, the Beacon deposit contract uses SHA-256 12 times.

230

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 06/06/2024

This is what EVM fragmentation looks like in practice. Each day, as I read the docs of various L1s/L2s, I realise just how balkanised we've already become within the Ethereum ecosystem and am not sure I like it as it makes cross-chain development extremely hard. docs.moonbeam.network/learn/core-c...

020

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 04/06/2024

Time to use your brain again. Issue is that most are already brain dead.

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/05/2024

Hmm, a bug in iOS 17.5 is apparently causing photos that have been deleted to reappear, and the issue seems to impact even iPhones and iPads that have been erased and sold off to other people... macrumors.com/2024/05/17/i...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 16/05/2024

The NSA didn't approve the SHA-3 (!= keccak256, which doesn't follow the FIPS-202-based standard) hash algorithm: media.defense.gov/2022/Sep/07/.... This means that it probably has no backdoor😉.

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 16/04/2024

2/ Unfortunately, it hasn't been maintained since 2018. BUT, iirc, they were the first to build a built-in reentrancy guard into the language. It was easy how it worked: every time you called an external address, u had to specify what would happen if u were called back via the keyword "reentrance".

100

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 04/04/2024

fuck, I'm an influencer now on Twitter

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 30/03/2024

So, a 1Password employee opens a PR to a dormant repo (Go-based xz compression) that bumps the xz dependency to the latest vulnerable version, 6 days before discovered compromised. Very sus if you ask me... github.com/jamespfennel...

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 16/03/2024

This manifesto was immortalised on-chain: etherscan.io/tx/0x7181be7...

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 16/03/2024

31 years ago the Cypherpunk manifesto was published. I wrote this manifesto with great concern that we are losing the principles that brought us here. This is an attempt to reunite. To refocus on what is really important. Let's get back to the roots. hackmd.io/@pcaversacci...

100

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 13/03/2024

🫧Ethereum just got blobby and ships a 2-dimensional fee market for the first time🫧 Note that blobs are pruned after ~18 days (that's actually why blobs are priced cheaper than calldata which is stored in history forever). You can search for them here: blobscan.com.

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 07/03/2024

Please note that this release ships the `src` layout for the repository to properly implement `snekmate`-namespaced distribution package building:

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 07/03/2024

Guys, I just shipped 🐍 snekmate's latest 0.0.5 release. This is the last version targeting Vyper 0.3.10, featuring not only minor code refactorings & optimisations, but also a multi-role-based timelock controller reference implementation (h/t @cairoeth)! github.com/pcaversaccio...

100

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 04/03/2024

gm to another round of GitHub spam. Have a great week and don't let scammers, phishers, grifters, black hats etc. dim your shine!

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 26/02/2024

Another weekend, another win with SEAL 911. No live bounty program, but a small reward was fully paid to the reporter. I want to let everyone know that we don't take your trust for granted & try to get the best outcome for every ticket. Often we fail, but sometimes we succeed :)

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 22/02/2024

So Kroma upgraded to Canyon (they are powered by the OP stack), but since they misconfigured the exact upgrade time (which is asserted in the execution layer), my `Create2Deployer` predeploy is not available (I deployed it manually after). We've so much to fix in this space!

100

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 21/02/2024

Suppose u have accidentally pushed a `.env` file into ur repo. You immediately hit `git reset --hard HEAD^ && git push origin -f`. Now u feel safe again. WRONG! GitHub DOES NOT DELETE FORCED-PUSHED COMMITS! All dangling commits can be retrieved via GH's API endpoint `PushEvents`.

100

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/02/2024

Proud to finally announce `createXcrunch` built by @HrikBho (on X): github.com/HrikB/create.... An OpenCL-based program designed to efficiently find zero-leading, zero-containing, or pattern-matching addresses for the CreateX factory. Example: etherscan.io/tx/0x92be51e.... Happy crunching🫡

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 01/02/2024

cairoeth & I just shipped a multi-role-based timelock controller Vyper contract for snekmate! It leverages the access control pattern you know from OZ contracts, can handle batch of transactions, and can also receive and send ERC721 & ERC1155 tokens. github.com/pcaversaccio...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 25/01/2024

For some hours in the early days, Bitcoin had more supply than 21m 🙃 en.bitcoin.it/wiki/Value_o...

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 21/01/2024

Zero-size types (ZST) (e.g. empty array) are currently supported by the ABI specs (the Vyper & Solidity compilers do not support them). This can lead to DoS issues with ABI parsers (see blog.trailofbits.com/2023/12/29/b...). Can someone explain to me why they were included in the first place?

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 18/01/2024

I thought Rust is memory-safe blog.polybdenum.com/2024/01/17/i...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 10/01/2024

On a serious note: in a few years, any government body will hire crypto security professionals to learn how to secure their own systems. There are a lot of issues we have to deal with, but the competitive edge having to survive in such an adversarial environment is invaluable.

020

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/01/2024

GitHub Actions down? Time to touch again some grass (or snow in my case lol)

111

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 02/01/2024

my mornings currently... GitHub platform is out of control. I'm fine with paying for this premium feature, but let me have fine-grained moderation settings where I can generally disallow people to tag me and specify _who_ can interact with my repos.

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 01/01/2024

The amount of spam on GitHub becomes unbearable. I've been tagged over the last 12 hours in 20+ scam airdrop comments & in my own issues, I get spammed (example from a CreateX issue in the screenshot). X failed in fixing spam, GH is failing in fixing spam. Can someone please fix!

020

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 16/12/2023

MongoDB got apparently hacked, including unauthorised access to corporate systems (i.e. customer account metadata and contact information are leaked). mongodb.com/alerts

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 12/12/2023

🐍🔥 - anyone who doesn't like Vyper, please try it and tell me what is missing. Will make sure feedback is circulated accordingly.

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 10/12/2023

Yesterday, I renounced ownership on +60 EVM chains 😅, AMA github.com/pcaversaccio...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 30/11/2023

Kyber exploiter just issued demands to take over the operations and assets of Kyber. I would say this is an unprecedented case in the world of black hats. etherscan.io/tx/0x0479da9...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/11/2023

A hidden gem of Discord is that every time anyone wants to redact a user on discord, they're forced into drawing a dick.

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 16/11/2023

First-ever physical Vyper day happening, and you know what, I will be talking (remotely) about my personal passion project:🐍 snekmate! I'm full of energy! Thanks, @apeworx.io for making this a reality! vyperlang.github.io/devconnect2023

020

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 11/11/2023

gm - getting currently spammed with airdrop/phishing issues on GitHub. I'm forced now to limit interactions from new users for all my repos.

010

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 10/11/2023

I'm honestly pretty proud of this move. 🐍 snekmate tests becoming part of the external integration tests of Foundry. We already use them as sanity checks for new Vyper compiler releases. Good written tests can not only help you but also your surroundings. github.com/foundry-rs/f...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 01/11/2023

TIL that garbage collection in C++ has never been implemented properly and thus is completely removed from the language www.sandordargo.com/blog/2023/11...

000

sudo rm -rf --no-preserve-root / @pcaversaccio.com · 28/10/2023

If u think about it, the largest consumers of the EVM are compilers. Now, the two largest compilers, Solidity and Vyper, have started to drop support for old EVM versions, which in some sense, could be interpreted as censoring through compilers. How problematic is this long-term?

110