Sign in

sudo rm -rf --no-preserve-root /

@pcaversaccio.com
484 followers 111 following 449 posts

𝐖𝐨𝐫𝐤𝐢𝐧𝐠 𝐨𝐧 𝐰𝐡𝐚𝐭'𝐬 𝐧𝐞𝐱𝐭. ꟼGꟼ: 063E 966C 93AB 4356 492F E032 7C3B 4B4B 7725 111F 📌 w021d 🔗 github.com/pcaversaccio

PostsRepliesMedia
Reposted by sudo rm -rf --no-preserve-root /
GrapheneOS @grapheneos.org · 29/08/2026
We have a partial port of GrapheneOS to the Pixel 11 series after a week of work on it. We're unable to complete the port due to lack of support for ARM hardware memory tagging in software, firmware and near certainly hardware. It appears Google cut an important security feature to save money.
24632137
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 07/12/2025
2/ In a world this complex (and guys this complexity is our own making!), how do we even verify that we're safe? If you ask me, verification has never been more critical or more impossible.
170
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 07/12/2025
1/ so, hmm, we rely on firmware we can't inspect, compilers we don't build, closed-source LLMs, proprietary enclaves, remote updates etc. Each of these layers is a target and more will join in the coming years/decades.
172
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/11/2025
2/ Well it's pretty simple: I always take a taxi & pay in local cash. I don't like being tracked. Look people forget that physical cash is one of the last forms of everyday privacy we still have. Cash is cypherpunk. Cash is freedom.
050
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/11/2025
1/ Had a fun convo recently where some dude was talking about Uber and ride-sharing. I told him I've never used any of those services in my life (I'm being serious here). He looked confused and asked how I get around usually.
110
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 23/11/2025
I was thinking about this scenario since this morning I wanted to push something (more or less sensitive) to a private repo but ended up rolling it back purely out of paranoia. I guess the right threat model for private repos is that it can be assumed to be leaked one day.
030
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 23/11/2025
if someone ever managed to breach all _private_ GitHub repos (I mean it's insanely difficult but not impossible) it would be one of the most catastrophic events in the security history, and if I were a state-level actor that's exactly the kind of target I'd prioritise rn.
2121
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 18/11/2025
RIP Internet
042
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 12/10/2025
folks, hear me out, the best long-term trading strategy is privacy itself. Those who build and hold it are shaping the foundation of a free economy. And guess what, its yield is true sovereignty: the _only_ return that truly endures.
051
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/09/2025
3/ Look, you can go all mainstream, but we should actually celebrate it when Ethereum isn't chosen by tradfi clowns. That means we're doing something right. I won't let Ethereum be tamed, neutered, or turned into just another corporate playground. Never.
040
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/09/2025
2/ compliance as a "feature" instead of a _clear_ bug (just check the discussions around FOCIL), and having the constant urge to turn Ethereum into a business (believe me, institutions have this urge) instead of the biggest economic playground of our lives.
120
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 29/09/2025
1/ Ethereum's worst enemy is institutional adoption. Honestly, think about it guys, the more institutions get involved, the more influence they wanna have on future hard fork decisions (and thus will make a core dev's job even more complicated),...
153
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 30/08/2025
2/ Those are the projects that will outlast all the distractions, all the fleeting trends. Because principles do fucking matter. Because this is our fight, it's my personal fight, it's our soul. Cypherpunk will always rise. And in the end, Cypherpunk will win.
040
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 30/08/2025
1/ The soul of Ethereum was Cypherpunk. It _is_ Cypherpunk. It will always be Cypherpunk. You can chase your glossy, VC-driven narratives, build your fancy protocols, but the ones that will endure are the ones that preserve our privacy, defend against censorship & stand tall in the face of tyranny.
161
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/08/2025
6/ Cold storage means no connection to the internet, period. Happy Sunday and go touch some grass or sand :D.
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/08/2025
5/ And while I'm at it, please don't store assets in hot wallets. Just don't. Also, don't take pics of your seed phrase with your phone. There are malicious apps that can use OCR to scan images for seeds.
110
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/08/2025
4/ I understand that shifting most of the space to something like QubesOS isn't realistic, but we must start prioritising security-first OS choices in our ecosystem, not just UX. Honestly, fancy features won't stop your device from being compromised.
110
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/08/2025
3/ Please remember: these OSes weren't built with the strict sandboxing, strong application isolation, or zero-trust principles needed to defend against these today's threats!
110
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/08/2025
2/ However, and that's what I want to address here, is that OS design choices like weak data compartmentalisation & permissive default trust models are the _major enablers_, especially on macOS and Windows.
110
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 03/08/2025
1/ This morning I've been reviewing our last months' SEAL 911 tickets. Guys, it's clear that soon (probably sooner than you think) a large portion of our ecosystem will be running on compromised devices. I mean, man, infostealers are probably the _biggest_ ecosystem problem right now.
120
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 27/06/2025
My periodic reminder: if someone offers you a slick-looking hardware gadget at EthCC (or any other crypto event), don't plug it in, don't take it home. Just walk away. Treat it like malware wearing a shiny casing. We've got enough infostealers in the wild already.
030
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/06/2025
If it never goes mainstream, that means it stayed dangerous. It stayed free. Thus, mainstream isn't the goal. Freedom is.
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/06/2025
so I've been thinking about this for a while now and I'm more and more convinced that crypto was never meant for mainstream. The main reason being that crypto's purpose is _liberation_, not popularity. It's effectively for those who choose sovereignty over simplicity.
120
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 14/06/2025
Absolutely
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 14/06/2025
Don't listen to your friends. Listen to your gut feeling and your principles. Good friends mean it well, but won't replace principles.
100
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 14/06/2025
It could've been simple but somewhere along the way, we chose to build a fragmented, bloated mess of chains instead. A monster of our own making.
000
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 14/06/2025
you know, I'm a simple guy: I roll (mostly) with ETH, Tornado Cash, Railgun, BTC, Zcash, and XMR these days. I don't use L2s. I don't use Solana. I don't use fancy DeFi protocols (I like it KISS and trustless). Simply put: just tools that work and don't ask permission.
231
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 10/06/2025
I know guys, you're all bullish on Claude etc. but if you keep outsourcing more and more of your thinking to LLMs, you'll eventually become whatever the algorithm decides. You lose your uniqueness, your edge. Just don't.
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 27/05/2025
3/ I use them because their privacy is built-in & the UX is pretty smooth. That's exactly what I want from Ethereum. Simple, private, native payments. No extra steps. If we want to onboard people to privacy at a global scale, it must be native and easy. Full stop.
000
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 27/05/2025
2/ Long-term, I shouldn't need to interact with a smart contract just to shield a simple ETH transfer. Privacy should be native at the L1. Look, I've been using Monero & Zcash for some time already (on that note, please Ledger ship shielded addresses).
210
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 27/05/2025
1/ There is nothing I want more than for Ethereum to lead on privacy (scalability has always been a second priority for me tbh; not implying it's not important to be clear). Not conditional privacy. Unconditional.
120
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/05/2025
3/ Read the last sentence again. Now again. Ethereum's future has to be _radical_ and _bold_, not obedient.
000
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/05/2025
2/ Folks, honestly, forget the flashy business plans for Ethereum (we do not turn Ethereum into a fucking company). If we start prioritising those over the fundamentals, we're not just selling out; we're turning into muppets of the very mainstream systems we set out to disrupt.
100
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 19/05/2025
1/ Listen guys, many might disagree with me on this, but Ethereum's lasting success is all about its Cypherpunk soul. Real (IMO unconditional) privacy, security, censorship resistance; that's the core and must always remain the core.
130
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 14/05/2025
An OS that goes all-in on simplicity. There's so much virtue in simplicity. What we need is more of less. duskos.org
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 11/05/2025
3/ I personally would love to see Ethereum go privacy-first (and by that, I mean _unconditional_ privacy). This would make Ethereum a real-world use case for a high percentage of the world population (we still need to convince them of course 😉).
020
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 11/05/2025
2/ I'm here because I believe in the long game, I always have, but let's not kid ourselves: this lazy complacency, the flood of useless degen apps and rollups, and the never-ending siphoning of users' funds is not the path forward. It's a fucking distraction, not a revolution.
120
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 11/05/2025
1/ There is absolutely no valid reason why prices are pumping right now. We're still a clown-show industry, light-years away from making any _meaningful_ dent in the lives of 99.9% of people on this planet.
150
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/05/2025
6/ - devs are blindly cloning, installing and running github repos locally and get rekt we're so fucking far away of being considered a "secure" ecosystem. It's a complete shitshow right now.
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/05/2025
5/ - people cannot handle private keys & seed phrases - people devices are _constantly_ (and by constantly I mean every fucking day) compromised - people are completely naive when it comes to basic web2 security (dude, stop storing your pws & 2FAs in the same password manager you use locally)
110
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/05/2025
4/ and of course, the ever-reliable dev who commits their .env file with private keys straight to GitHub, NPM, etc.
100
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/05/2025
3/ or some skiddies calling up victims pretending to be Coinbase support (always CB, like 90% of the time and the rest is Ledger) and walking off with their funds. On top of that, there's the usual: someone falling in love with a random Tinder match & getting rinsed by a textbook Sha Zhu Pan play
100
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/05/2025
2/ hopping on Zoom calls where scammers walk them through (effectively) self-pwning (dude, believe me you don't need to patch your zoom or google meet) their own machines, teams getting nuked because they thought hiring bargain-bin devs from North Korea was a great idea,
100
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/05/2025
1/ time for a quick vibes check on where our industry's at security-wise; well, folks, guess what, 95% of last months' SEAL 911 tickets were the same shitshows on repeat: folks running sketchy code some rando DMed them (stop cloning & running GH repos u got from random dude who asks for your "help")
130
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 07/05/2025
I love how Xwitter cares about their security
020
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 06/05/2025
2/ There are legit alternatives but none with full feature parity. It's already way too late, but we as an industry must really rethink how we write, collaborate, deploy, and ship code.
010
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 06/05/2025
1/ Most crypto work (partially mine included) runs on some sort of 'hope Microsoft keeps GitHub online' mode. Git is decentralised but GitHub isn't. Shutting down key repos is one of the easiest ways to censor or disrupt upgrades and dev coordination. And yes, Microsoft can do that.
172
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 20/04/2025
found the major bottleneck for scaling Ethereum
060
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/04/2025
3/ Over the past weeks, I've written a potential path forward — a vision for Ethereum as a maximally private, self-sovereign financial system. Read it. Challenge it. Improve it. Let's co-create it. Make Ethereum Cypherpunk Again.
000
sudo rm -rf --no-preserve-root / @pcaversaccio.com · 09/04/2025
2/ Look it's very simple: Ethereum must provide privacy _unconditionally_. Today, it operates in a partial, opt-in model, forcing users to jump through hoops just to conceal their financial lives. That's not sovereignty — it's submission. Enough compromises. We need privacy by default.
110