Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

rotating env vars - automatically converts non-sensitive to sensitive guardrails to prevent mistakes: - checks if dev value matches prod/preview - educates that revoking is still needed - bunch of heuristics on key name/value for mistakes collab w William Bout

11,399 görüntüleme • 2 ay önce •via X (Twitter)

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

I had a good meeting with U.S. Special Presidential Envoy, General Keith Kellogg Keith Kellogg. Ukraine is deeply grateful to the United States for its support, and we value that President Trump President Donald J. Trump is so determined to achieve real peace. It is very important to realize all the results—political, defense, and economic—that were achieved during our meeting together with European leaders in Washington. Undoubtedly, it was a successful Summit, a demonstration of true unity between Europe and America. Ukraine, as always, is uniting the world. We value the United States’ readiness to be part of the security architecture for Ukraine, and our teams are actively working on shaping it. We expect that the key foundations of security will be defined shortly. We discussed how we can influence the Russians, compel them to engage in real negotiations, and end the war. Sanctions, tariffs—everything must remain on the agenda. We are ready to engage in a format of leaders. This is the format needed to resolve the key issues. Now, the same readiness is needed from Moscow. Military cooperation is important for both Ukraine and the United States, and there are two strong opportunities—an agreement on arms procurement and an agreement on drones that could significantly strengthen our arsenals. We are maintaining momentum in our work within PURL. This is an important instrument for procuring American equipment funded by partners, and we are now actively working on engaging additional countries. And, of course, the humanitarian track. The return of all abducted children. We strongly hope that America, President and the First Lady of the United States First Lady Melania Trump will continue to make personal efforts to bring back all children illegally abducted by Russia. Thank you!

Volodymyr Zelenskyy / Володимир Зеленський

171,139 görüntüleme • 10 ay önce

In 2025, the AgentFlayer exploit highlighted a new category of risk in AI systems. It was not a traditional breach involving stolen credentials or broken encryption. Instead, it demonstrated how an autonomous AI agent could be manipulated into executing unintended actions by processing malicious instructions embedded inside content it automatically processes. The incident did not expose a flaw in one specific integration. It revealed a structural weakness in how many modern AI agents are built. Today’s agents are no longer passive language models. They read documents automatically, scan emails, connect to SaaS tools, access cloud storage, and execute actions across multiple systems. To be useful, they are granted meaningful permissions. That capability creates value, but it also expands the attack surface. Most agent environments operate in a trusted, plaintext execution model. Data is encrypted at rest and in transit, but it is typically decrypted during inference so the model can process it. That runtime visibility is where potential risk lies. In a zero-click scenario like AgentFlayer, an attacker can embed hidden instructions inside a document that the AI processes automatically. Because the agent may have access to connected systems such as Google Drive, Slack, or GitHub, it can potentially be influenced to retrieve sensitive information or perform unintended actions. The user does not need to click a malicious link or approve a suspicious request. Therefore, the core issue is that during execution, the system may have access to sensitive data and broad privileges, meaning whoever controls the execution environment ultimately controls access to that data. Now consider a different architectural approach. If a system is designed so that data remains protected during execution, the risk profile changes. On Nesa, privacy is enforced at the execution layer through Equivariant Encryption. Computation can occur on encrypted data, reducing the visibility surface during runtime. Sensitive inputs and models do not need to be exposed in plain text to infrastructure operators for inference to occur. This does not eliminate prompt injection, logic manipulation, or tool misuse. Encryption alone cannot prevent an agent from being instructed to take an unintended action if it has been granted that permission. What it does do is materially reduce confidentiality risk. By limiting access to readable sensitive data during execution and reducing unilateral visibility at the infrastructure layer, the potential blast radius of a successful manipulation attempt is constrained. As AI agents become more autonomous and embedded into enterprise workflows, security must move deeper into architecture. The goal is not to claim invulnerability. It is to reduce trust concentration and contain systemic exposure when failures occur. AgentFlayer was not simply a one-off exploit. It was a reminder that in autonomous systems, execution-layer design determines how risk propagates.

Nesa

17,038 görüntüleme • 4 ay önce

It is spectacularly easy to get shadowbanned on X One wrong reply and your reputation can go up in flames Luckily there are a few steps you can take to reduce your odds of getting banned by 10x 🔶First step: Don't reply from notifications Notifications are a minefield because hidden, spammy replies are shown to you as normal replies It's never worth replying from here. You risk replying to low reputation accounts without even knowing it Just reply normally from the posts so you know what's marked as spam 🔶Second step: turn off sensitive content in your settings Engaging with sensitive content could hurt your reputation score Little do you know, but a ton of content that’s not actually sensitive, gets marked as sensitive Turn off sensitive content in your settings, then become shocked when you see how much innocent content is marked as sensitive (tutorial video below) 🔶Third Step: Check for following/follower ratio before hitting reply Easy check to take before every reply This is brought up in the code 100 different times as a reputation destroyer Make sure to hover over people’s name before replying and check for their ratio 60% followers to following is the ratio cut off point 🔶Fourth Step: Don’t feed the trolls There are 100+ labels for toxic behavior in the code Engaging with anyone with these labels hurts your reputation For some of these labels they can be applied just for “insults” Best not to engage with any trolls (also good for your mental health) 🔶Fifth Step: Get the blue checkmark The easiest step of them all It’s coded into the algo that if you have the blue checkmark you can’t be marked as spam Yes it costs money, but if you have any serious interest of growing on this platform, it’s a must have 🔶🔶🔶🔶🔶 I've said this before, but it absolutely stinks you have to take all these steps just to get some reach At times, it can be like walking in a minefield It doesn't exactly make a social media platform feel very 'social' I have high confidence Elon is working to fix this. He's mentioned it before. But in the meantime, take these steps and be careful. It's worth it if you care about being seen on this platform. I'm 100% confident brighter days are ahead. Let me know below if any of these tips helped and what other steps you take to avoid getting banned.

Alex Finn

300,049 görüntüleme • 2 yıl önce

TOPIC #106: What Is a “Free Market”? Clarifying the Misconceptions in the Pi Ecosystem I’ve noticed a narrative spreading within parts of the Pi Network community: the idea that Pi’s value in Dapps or ecosystem should fluctuate freely with the exchange market, and that this is what defines a “free market.” They use this "free market" to deny GCV. Let me be clear: this misconception is not only misleading, but it threatens the foundation of the Pi ecosystem we’ve worked so hard to build. It’s time to clarify the truth, not only for our pioneers today but for the economic legacy we’re building for generations to come. What Is a Free Market Really? According to Britannica, a free market is an economic system characterized by minimal government intervention, where prices are determined by the interplay of supply and demand. But even Britannica admits: > “The free market represents a benchmark that does not actually exist… Modern societies only approach this ideal along a spectrum.” — value in relation to In short, a 100% free market is a myth. Every successful economy has rules and frameworks to maintain stability. Without these, markets descend into chaos, not freedom. In Pi Network, “free market” cannot mean price anarchy. And “decentralization” does not mean “do whatever you want.” Let’s break this down: What Pi Network Decentralization Actually Means Pi Network’s decentralization is built on the Stellar Consensus Protocol (SCP) and reflects a healthy distribution of power and particip,ation — not a lack of structure. Key principles of Pi's decentralization: No Single Point of Control No central entity dominates the network. User Participation Pioneers validate transactions and contribute to governance. Resilience The network can survive attacks or failures due to its distributed nature. Censorship Resistance It’s harder for one party to silence or manipulate the system. None of this means that Pi's value can operate in a free market. Any currency must have a fixed value; this is a fundamental concept in economics. Have you ever seen the values of currencies like the USD, CAD, or RMB fluctuate freely based on individual opinions? On the contrary, a fixed value emphasizes the need to protect the economy we are building together. The community-driven GCV illustrates that the value of Pi should derive from its pioneers and merchants, demonstrating the spirit of decentralization. It should not depend on PCT, any government, large corporations, or investors. Furthermore, this structure ensures that no entity can shut down the Pi Network once it becomes fully decentralized, which I believe will occur when it is fully operational and mature. The Danger of Currency Risk: Why Price or Value Chaos Is Destructive In global finance, currency risk refers to the potential loss of value resulting from unstable exchange rates. As the Corporate Finance Institute explains: > “Currency risk refers to the exposure faced by investors or companies operating across different countries due to changes in the value of one currency versus another.” Let’s apply this to Pi. Imagine a Pi Network Dapp marketplace mall merchant collecting a large amount of 10,000 Pi after the Open Mainnet (OM). Customers pay with Pi, but at a value $1. The merchants must know the Pi value because they need to calculate the FIAT cost. Then, when the merchant tries to use that Pi to buy a car, only to be told the accepted rate is $0.1 for one Pi, the merchant total Then, when the merchant tries to use that Pi to buy a car, only to be told the accepted rate is $0.1 for one Pi, the merchant has a total of 10,000 Pi, which is only $1,000, but the cost of investing in products is $9,000 (Sales $10,000 with $1,000 as profit). That’s a massive loss for the merchant $8,000. If you were the merchant, would you feel it was unfair? Will you still support "free market"? Now, imagine the exchange market drops Pi to $0.40. You will lose $5,000. Would you still want to run your business in Pi? Likely not. And neither would other developers or merchants. Unstable value leads to fear. Fear leads to exit. Exit leads to collapse. This is why we must support Global Consensus Value (GCV) — to ensure a unified, trusted economy. Why GCV Exists — and Why $314,159 Matters GCV is not a fantasy. It’s an economic strategy. It functions much like the gold standard once did: England pioneered it. The U.S. adopted it under the Bretton Woods system, fixing the dollar to gold at $35/oz. This standard enabled global trade and trust until 1971. If the free market can work, why did the US adopt the Bretton Woods system at that time to fix the USD's rate with gold? Because if they didn't promise a fixed rate, no country would give its gold to the US. The gold is trust! Here in Pi Network, GCV is a trust! Pi’s GCV of $314,159 per Pi is not random. It’s based on utility, scarcity, and long-term vision. It reflects Pi’s potential as a foundational currency for a real digital economy. Misusing “Free Market” Is Cheating to Ignorant Pioneers Let’s be blunt. Some individuals abuse the term “free market” to justify undervaluing Pi for personal short-term gain, hoarding more Pi, and undermining long-term stability. However, a true economy isn’t built on confusion. Consider the Cayman Islands — a country with no income tax — yet it only accepts USD for settlement. Why? Because multiple currencies lead to confusion, which undermines investor trust. If Pi has no unified value, we will lose merchants, DApps, developers, and the entire vision, except that they just come to hoard Pi, not for the long-term economy, or they really don't understand the economy. The Way Forward: Unity, Strategy, and Patience Here’s how we build the future together for the following strategies before fully OM Strategy #1: Offline Partial GCV Adoption -Fix Pi Value at GCV in Ecosystem for OM GCV Ambassadors around the world are guiding merchants to accept partial GCV, benefiting both sides: Pioneers buy low-cost goods. Merchants enjoy more sales and earn a small profit in FIAT. The ecosystem produces GCV transaction data, creating the real basis for Pi’s future fixed value at OM. Strategy # 2: Online DApps with Utility — at Any Value to Increase Exchange Pi price for OM We support ALL DApps — regardless of the Pi value they use ($1, $100, or floating): As long as the pioneers and merchants are satisfied. As long as real usage is created. As long as the utility grows. As long as more good-quality Dapps are created It will protect and attract more merchants and developers, driving up Pi demand while reducing supply and organically pushing Pi’s market price toward GCV. Strategy #3: Build up GCV Infrastructure The Head of GCV Ambassador builds up your countrywide GCV infrastructure in all provinces, cities, counties, and villages. Strategy #4: Education and Protection of Pi Network Mission and GCV GCV Education Ambassadors: Educate pioneers to HOLD Pi and support GCV usage. GCV Army: Defend GCV and Pi Network on social media, building public trust and global participation. Online Non-GCV pioneers and merchants, or DApp owners, can still enjoy DApps, even if they use low Pi values. They are reducing selling pressure and strengthening the Pi economy. It is said that a person's wealth is closely linked to their knowledge, cognitive abilities, and moral character. We respect and appreciate all DApp owners, merchants, service providers, and pioneers, regardless of whether they share our beliefs in GCV. We are currently in a chaotic period. Before fully transitioning to OM, pioneers, merchants, and DApps will undergo a screening process based on their own judgment and understanding. Those who strongly believe in GCV will become champions and accumulate substantial wealth. Conversely, those who do not believe in GCV may risk losing their wealth by abandoning Pi. This is because if you have a strong belief, you are more likely to hold onto your Pi. If you oppose GCV, it is often due to a lack of long-term confidence in Pi or a current need to accumulate more Pi. It's important to recognize that once you have accumulated enough Pi, you will want to support GCV because no one wishes to hold onto a worthless coin. This approach is fair to everyone. GCV is akin to Noah's Ark, carrying those who have a strong belief in GCV to safety on the mountains of Ararat. A fixed GCV: Attracts real investors Encourages developers and merchants Reduces currency risk Builds global trust and reputation Let’s stop spreading confusion. Let’s stop begging the old system. We are builders. We are visionaries. We are the future. Final Words Together, we build — not beg. Together, we lead, not mislead. Together, we protect Pi for a future that lasts not for years, but centuries. Doris Yin 🪷🪷🪷 July 20th, 2025

Doris Yin 东方紫莲🪷

30,299 görüntüleme • 11 ay önce

🇮🇷🇮🇱| A little more to understand... My opinion: The war may end in a few days or last a lot longer—all depending on whether or not the US joins Israel. Israel is not able to fight against Iran for much longer; its interceptors have a certain capability threshold, and reports already suggest it is rationing its interceptor missiles, and we've seen how 12-17 interceptors were launched, yet Iranian missiles still made an impact. It all comes down to whether the US is willing to go to war with Iran or not; it's likely they will if you consider Trump's administrative behavior since he took office. But honestly, if they are smart, they will not. - A little about Iran's missile situation: Israel says it's conducting operations in northwestern and western Iran to prevent the reactivation of missile bases in Tabriz, Kermanshah, and Khorramabad. A significant portion of the Israeli Air Force is now focused on these 3 sites to prevent further missile launches from those locations. This suggests that the sites they claim they destroyed did not suffer strategic damage, and the destroyed hangars were of minimal value. As a result, Israel continuously carries out operations and remains engaged to prevent Iran from reactivating its capabilities in the west. If these 3 regions are abandoned, Israel will move on to target other strategic sites. These 3 missile bases are among Iran's key assets. The missiles are intact and untouched, it's the launchers that are affected, and they can easily be reactivated, but it's difficult under continuous attacks. Other missile bases in the south remain untouched and have so far not been used, as they are probably being reserved for strikes against the US. Missile launches are mainly launched from the center and north of Iran, some from the western regions as well. The reason for limited and isolated launches these past few days has several explanations, mainly that Iran is testing to recognize new patterns everytime a serious attack is carried out, as Israel continuously changes its defensive behavior to prevent Iran's intelligence from learning it; thus, isolated launches, followed by a bigger, deadlier, and more accurate attack with 30 launches as we saw today.

Arya - آریا

55,523 görüntüleme • 1 yıl önce