Video yükleniyor...

Video Yüklenemedi

Bu video yüklenirken bir sorun oluştu. Bu geçici bir ağ sorunundan kaynaklanıyor olabilir veya video kullanılamıyor olabilir.

Ana Sayfaya Dön

This is how the lack of atomic operations and proper database locks can allow an attacker to withdraw more funds than they actually have, all through a race-condition exploit. How to prevent vulnerabilities like this one: - Use atomic DB transactions - Enable row-level or advisory locks - Implement... show more

Ghost St Badmus

14,830 subscribers

133,411 görüntüleme • 10 ay önce •via X (Twitter)

Eğitim Sağlık & İyilik Bilim & Teknoloji

Anya Rossi• Live Now

Private livecam show

26 Yorum

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

I was really impressed with the number of people who knew that the code needs to be shitty for such scenario to happen. But it also doesn’t need to be too shitty. I have exploited this bug in several real world applications to bypass double spending, even 2FA and daily transfer limit

Ambrose Bako profil fotoğrafı

Ambrose Bako10 ay önce

One of my fear of working with financial system, you must be 99.9% ready for almost all scenario. 😂 I believe laravel has something call ->lockForUpdate(), this makes sure the model you are working with is locked to prevents being modified/selected from another call

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

Twitter and reducing video quality🙂‍↔️. It’s cleaner on LinkedIn sha

Icon - The Fintech Architect profil fotoğrafı

Icon - The Fintech Architect10 ay önce

Does rate limiting and db transaction locking on these operations not fix this?

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

It fixes it

tofunmi profil fotoğrafı

tofunmi10 ay önce

DB locks at SCALE can be a problem though, for power users doing like 200txns/second it creates a bottleneck everyone has to wait. To avoid race conditions - Use atomic DB transactions - pessimistic locks(not row locks, this is vital) - Implement idempotency keys - Limit concurrency per user - Using queues for debit and credit operations(most important) - Add rate limiting with strict thresholds

TheVeloper profil fotoğrafı

TheVeloper10 ay önce

ACID! Seen papers of flaws in real financial systems where this was an after thought.. of course they lost a lot of money.

ムフィド @ RubyKaigi 2026 profil fotoğrafı

ムフィド @ RubyKaigi 202610 ay önce

I specifically had a talk on this topic for those who interested

Agbero From PhilaDEVia profil fotoğrafı

Agbero From PhilaDEVia10 ay önce

The King!!! Thank you for this chief

AGK (Ejike) profil fotoğrafı

AGK (Ejike)10 ay önce

Very correct, additional layer of unique idempotency key for each payment request will help too

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

Yeahh

Harmony profil fotoğrafı

Harmony10 ay önce

Rate limiting can go a long way in fixing this

Rotimi Best profil fotoğrafı

Rotimi Best10 ay önce

thanks for sharing these videos bro. > Add rate limiting with strict thresholds can you expand on this?

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

You’re welcome chief! Yeah, you shouldn’t allow multiple requests in milliseconds, or seconds on critical endpoints like /transfer, /order etc..

Rotimi Best profil fotoğrafı

Rotimi Best10 ay önce

Yeah that makes sense. 🫡

Adedoyin Emmanuel Adeniyi 🚀 profil fotoğrafı

Adedoyin Emmanuel Adeniyi 🚀10 ay önce

Things I love to see on my TL. Great video, thanks for sharing.

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

You’re welcome chief! 🙌🏾

Xerxes profil fotoğrafı

Xerxes9 ay önce

That's scary

bheky.dev profil fotoğrafı

bheky.dev10 ay önce

Do I understand all the terminology yet nah but I enjoy learning new things from you broski

Bob Bui profil fotoğrafı

Bob Bui10 ay önce

The classic `SELECT ... FOR UPDATE` vs optimistic locking debate.Pesimistic locking is simple and safe, but can crush throughput. Optimistic locking is faster, but now your app layer is on the hook for handling conflicts and retries. Pick your poison.

Ghost St Badmus profil fotoğrafı

Ghost St Badmus10 ay önce

Pick your poison indeed 😅😅

JKL (GTM) profil fotoğrafı

JKL (GTM)10 ay önce

Everybody talks fraud prevention but the real threat model is devs shipping concurrency without a rollback plan.

.. profil fotoğrafı

..10 ay önce

Race conditions vulnerability is everywhere these day

Hungwe profil fotoğrafı

Hungwe10 ay önce

Woow,this is eye opening

Beks profil fotoğrafı

Beks9 ay önce

lol, them no born you well to hack me this way. pessimistic locking locking plus idempotency check

PragmaticAweds profil fotoğrafı

PragmaticAweds10 ay önce

Thanks chief, this practical scenario showcase mistakes that happen in real life.

Benzer Videolar

With FISA 702 just extended, AI is about to make government surveillance more powerful and invasive than ever before. They can already scan your messages, searches, and conversations without a warrant. We already knew that. No one is talking about how AI will actually read ALL of this data. Before they could only comb through so much data. Now, they will have the ability to scan through ALL of it. This is actually worse than we thought. Made with Grok Imagine.

With FISA 702 just extended, AI is about to make government surveillance more powerful and invasive than ever before. They can already scan your messages, searches, and conversations without a warrant. We already knew that. No one is talking about how AI will actually read ALL of this data. Before they could only comb through so much data. Now, they will have the ability to scan through ALL of it. This is actually worse than we thought. Made with Grok Imagine.

Derrick Evans

22,509 görüntüleme • 5 ay önce

The guy who vibe-coded his own food discovery app just dropped 4 solid security basics. If you're building your own app with AI, you need this so you don't get hacked on day one: 1. Hide your API keys Keep your OpenAI or Stripe keys off the frontend to prevent them from being stolen. Tell Claude: "Move all API keys to the server and use environment variables." 2. Input Validation Stop people from pasting malicious code into your search bars to break your database. Tell Claude Code: "Sanitize all user inputs." 3. Don't invent your own auth Building login systems from scratch is too risky. Use trusted platforms instead. Tell Claude Code: "Integrate Supabase for authentication." 4. Rate limiting Prevent trolls from crashing your server with 10,000 requests per minute. Tell Claude Code: "Add rate limiting to my API routes." Too many people vibe-coding right now make these exact mistakes and wake up to drained API budgets or wiped databases. Get the security right first. Once your foundation is solid, you can build literally anything. A friend of mine just shared a crazy guide on how to build an entire social network like X in a certain niche with Claude Code in 4 weeks. check it out below 👇

The guy who vibe-coded his own food discovery app just dropped 4 solid security basics. If you're building your own app with AI, you need this so you don't get hacked on day one: 1. Hide your API keys Keep your OpenAI or Stripe keys off the frontend to prevent them from being stolen. Tell Claude: "Move all API keys to the server and use environment variables." 2. Input Validation Stop people from pasting malicious code into your search bars to break your database. Tell Claude Code: "Sanitize all user inputs." 3. Don't invent your own auth Building login systems from scratch is too risky. Use trusted platforms instead. Tell Claude Code: "Integrate Supabase for authentication." 4. Rate limiting Prevent trolls from crashing your server with 10,000 requests per minute. Tell Claude Code: "Add rate limiting to my API routes." Too many people vibe-coding right now make these exact mistakes and wake up to drained API budgets or wiped databases. Get the security right first. Once your foundation is solid, you can build literally anything. A friend of mine just shared a crazy guide on how to build an entire social network like X in a certain niche with Claude Code in 4 weeks. check it out below 👇

Spivach

11,103 görüntüleme • 3 ay önce

SUI Atomic Agentic transactions demo’ed to Google Sui’s Key Innovation Highlighted: Programmable Transaction Blocks (PTBs) Sui’s architecture enables this atomic multi-transaction execution through Programmable Transaction Blocks (PTBs) a core feature of the Sui blockchain: • What PTBs do - They allow developers (or AI agents) to bundle multiple operations such as swaps, transfers, staking, payments to other agents, or settlements into one atomic transaction. If any step fails, the entire block reverts, preventing partial executions or inconsistent states. • Why this matters for AI agents Traditional blockchains often require sequential transactions (with risks of front-running, failures midway, or high gas costs for coordination). Sui’s PTBs enable agents to perform complex workflows in a single, fast operation (~400ms finality on Sui). • Agent-to-agent payments example - An AI shopping agent could coordinate with multiple merchant agents, initiate several purchases, handle payments (e.g., via stablecoins), and settle everything atomically. Or a DeFi agent could monitor opportunities, execute trades across protocols, stake proceeds, and transfer yields all in one go without intermediate risks. This is described as a first (or at least a leading implementation) among public blockchains for seamless, atomic agent-to-agent value transfer at scale. It’s particularly powerful in the AP2 context, where agents need to operate autonomously but reliably, with user-defined guardrails (e.g., spending limits, consent verification). This positions Sui as specialized infrastructure for the intersection of AI autonomy and on-chain finance, with the atomic execution capability as a standout differentiator demonstrated in real collaboration with Google.

SUI Atomic Agentic transactions demo’ed to Google Sui’s Key Innovation Highlighted: Programmable Transaction Blocks (PTBs) Sui’s architecture enables this atomic multi-transaction execution through Programmable Transaction Blocks (PTBs) a core feature of the Sui blockchain: • What PTBs do - They allow developers (or AI agents) to bundle multiple operations such as swaps, transfers, staking, payments to other agents, or settlements into one atomic transaction. If any step fails, the entire block reverts, preventing partial executions or inconsistent states. • Why this matters for AI agents Traditional blockchains often require sequential transactions (with risks of front-running, failures midway, or high gas costs for coordination). Sui’s PTBs enable agents to perform complex workflows in a single, fast operation (~400ms finality on Sui). • Agent-to-agent payments example - An AI shopping agent could coordinate with multiple merchant agents, initiate several purchases, handle payments (e.g., via stablecoins), and settle everything atomically. Or a DeFi agent could monitor opportunities, execute trades across protocols, stake proceeds, and transfer yields all in one go without intermediate risks. This is described as a first (or at least a leading implementation) among public blockchains for seamless, atomic agent-to-agent value transfer at scale. It’s particularly powerful in the AP2 context, where agents need to operate autonomously but reliably, with user-defined guardrails (e.g., spending limits, consent verification). This positions Sui as specialized infrastructure for the intersection of AI autonomy and on-chain finance, with the atomic execution capability as a standout differentiator demonstrated in real collaboration with Google.

MartyParty

20,189 görüntüleme • 7 ay önce

I asked Garry Tan how to use meta prompting to get better at AI: "My partners at YC Jared Friedman and Pete Koomen showed me how to do this. You can take almost anything that you do all the time and just drop it into a context window. And then say, “Here’s a bunch of inputs and outputs." And maybe you also add a bunch of notes. And then you tell it, “Write me a prompt that can act as an agent that takes this input and makes this output over here.” You can do this for almost any type of knowledge work. And you can even introspect. "What are things you notice that I did to convert this from the input to the output?”. And then you can just start using the prompt. Initially, it’s going to suck. Because it’s just not that smart yet. But what’s funny is now, I also use it to Iterate my writing. You can be very direct, "I would never say that", "Don’t say it like this", or "Oh, you used the long word there, use the short word". Just speak to it conversationally. And then when you're happy with the output, you can use that new output to make a new prompt. "Based on this conversation, give me a better initial prompt that incorporates all the things we talked about." And you can do this with literally everything. And in theory, there’s so much it applies to that people do day-to-day. You could use it for tweets. You could use it for editing podcasts. You can use it for pretty much everything. I have a folder of prompts that I use all the time. My YouTube prompt is on v27 or something. I'll go through this process with all the different max models. I'll use GPT 5.2 Pro. I’ll use Grok. I'll use Claude. Then, I’ll take all the outputs from all the models and put them into Claude and say "Here’s my prompt, here’s the output from four LLMs, including yourself. Rate each response and tell me what the pros and cons of each approach are." And I usually say "give it to me in numbered form". And then you can agree with one, disagree with two, tell it three is this or that. And then after that, you say given all of this, synthesize it."

I asked Garry Tan how to use meta prompting to get better at AI: "My partners at YC Jared Friedman and Pete Koomen showed me how to do this. You can take almost anything that you do all the time and just drop it into a context window. And then say, “Here’s a bunch of inputs and outputs." And maybe you also add a bunch of notes. And then you tell it, “Write me a prompt that can act as an agent that takes this input and makes this output over here.” You can do this for almost any type of knowledge work. And you can even introspect. "What are things you notice that I did to convert this from the input to the output?”. And then you can just start using the prompt. Initially, it’s going to suck. Because it’s just not that smart yet. But what’s funny is now, I also use it to Iterate my writing. You can be very direct, "I would never say that", "Don’t say it like this", or "Oh, you used the long word there, use the short word". Just speak to it conversationally. And then when you're happy with the output, you can use that new output to make a new prompt. "Based on this conversation, give me a better initial prompt that incorporates all the things we talked about." And you can do this with literally everything. And in theory, there’s so much it applies to that people do day-to-day. You could use it for tweets. You could use it for editing podcasts. You can use it for pretty much everything. I have a folder of prompts that I use all the time. My YouTube prompt is on v27 or something. I'll go through this process with all the different max models. I'll use GPT 5.2 Pro. I’ll use Grok. I'll use Claude. Then, I’ll take all the outputs from all the models and put them into Claude and say "Here’s my prompt, here’s the output from four LLMs, including yourself. Rate each response and tell me what the pros and cons of each approach are." And I usually say "give it to me in numbered form". And then you can agree with one, disagree with two, tell it three is this or that. And then after that, you say given all of this, synthesize it."

The Peel

51,632 görüntüleme • 7 ay önce

This Python script helps you better understand how embeddings work for SEO. Input a sentence + a query and BERT will calculate a content "Similarity Score": Search engines use embedding models to translate your content into numeric values. This is how they're able to mathematically determine whether a page on your site is actually relevant to a query someone is searching for. Once both the content and query are run through embeddings - they can calculate the "cosine similarity" or how similar the two entities are to each one. With this Python script, you can actually visualize how cosine similarity works for yourself. To you use you'll simply: 1. Save the Python script to a text file 2. Use your Terminal to run the script 3. You'll be prompted for both a "Sentence" and "Query" 4. Once entered, the script will calculate a "Similarity Score" between the text and query. This is how relevant your sentence is for the target keyword. By running this, you'll see that search engines are able to come with an calculation of content relevance. You'll need to think about the content on your site the same way - which sections have high scores and which ones have low ones? I've linked the Python script in the comments below. No coding knowledge is required and it walks you step by step on how to implement it.

This Python script helps you better understand how embeddings work for SEO. Input a sentence + a query and BERT will calculate a content "Similarity Score": Search engines use embedding models to translate your content into numeric values. This is how they're able to mathematically determine whether a page on your site is actually relevant to a query someone is searching for. Once both the content and query are run through embeddings - they can calculate the "cosine similarity" or how similar the two entities are to each one. With this Python script, you can actually visualize how cosine similarity works for yourself. To you use you'll simply: 1. Save the Python script to a text file 2. Use your Terminal to run the script 3. You'll be prompted for both a "Sentence" and "Query" 4. Once entered, the script will calculate a "Similarity Score" between the text and query. This is how relevant your sentence is for the target keyword. By running this, you'll see that search engines are able to come with an calculation of content relevance. You'll need to think about the content on your site the same way - which sections have high scores and which ones have low ones? I've linked the Python script in the comments below. No coding knowledge is required and it walks you step by step on how to implement it.

Chris Long

13,185 görüntüleme • 2 yıl önce

THIS SHOULD BE ILLEGAL I just did a sales roleplay with Ai and told it to act like a Type A personality asking repeatedly for the price 😂 one of the worst people to deal with when selling you can do this with ChatGPT and save $5K to $10K on sales programs tell it you're using the NEPQ sales strategy or Gap or whatever strategy you use and have it give you feedback after the call no more roleplaying and holding back because you're scared to embarrass yourself as a beginner watch how I navigate this Ai sales call, and save this tweet for later so you can remember to do the same follow me for more content like this

THIS SHOULD BE ILLEGAL I just did a sales roleplay with Ai and told it to act like a Type A personality asking repeatedly for the price 😂 one of the worst people to deal with when selling you can do this with ChatGPT and save $5K to $10K on sales programs tell it you're using the NEPQ sales strategy or Gap or whatever strategy you use and have it give you feedback after the call no more roleplaying and holding back because you're scared to embarrass yourself as a beginner watch how I navigate this Ai sales call, and save this tweet for later so you can remember to do the same follow me for more content like this

Joseph Henry

12,308 görüntüleme • 1 yıl önce

.Shanu Mathew explains how massive AI data centers could actually make electricity cheaper for the communities hosting them: "You can sign a tariff with your utility to pay an advanced rate to cover your fair share of infrastructure, or at least cover all the additional generation and T&D that you'll require." "An electricity bill is 35% generation, so how you actually make the power. 65% of it's how it gets delivered. If you bring in a really big taxpayer, that person will bring down the per rate that everyone pays, because you're adding more people to pay for the same fixed asset." "In Louisiana, for example, was hyperscalers signing NDAs with local state officials. All this creates mistrust in the community. The real way is just to be extremely transparent, have the utility publish the agreement, have the state officials side by side with you as you announce it to the community, and then see the follow through." "You can highlight some of the other wins. Loudoun is one, but also Quincy, Washington, Ellendale, North Dakota, I&M in South Bend. Search data center power, and you'll start to see rates coming down in these communities as a result of all this new data center load coming online."

.Shanu Mathew explains how massive AI data centers could actually make electricity cheaper for the communities hosting them: "You can sign a tariff with your utility to pay an advanced rate to cover your fair share of infrastructure, or at least cover all the additional generation and T&D that you'll require." "An electricity bill is 35% generation, so how you actually make the power. 65% of it's how it gets delivered. If you bring in a really big taxpayer, that person will bring down the per rate that everyone pays, because you're adding more people to pay for the same fixed asset." "In Louisiana, for example, was hyperscalers signing NDAs with local state officials. All this creates mistrust in the community. The real way is just to be extremely transparent, have the utility publish the agreement, have the state officials side by side with you as you announce it to the community, and then see the follow through." "You can highlight some of the other wins. Loudoun is one, but also Quincy, Washington, Ellendale, North Dakota, I&M in South Bend. Search data center power, and you'll start to see rates coming down in these communities as a result of all this new data center load coming online."

MTS

14,735 görüntüleme • 29 gün önce

You probably don’t use just one AI agent anymore. Maybe Codex for coding. Claude Code for research. Cursor for quick edits. Hermes for the rest. Each one is great at something different. But every time you switch, you have to start over — re-explaining your project, preferences, and the way you like to work. Your agents know how to help you. They just don’t share a memory of you. memU just shipped an update that fixes this. One personal memory, shared across every agent and device you use. What Codex learned last night, Claude Code can remember this morning. 🧵

You probably don’t use just one AI agent anymore. Maybe Codex for coding. Claude Code for research. Cursor for quick edits. Hermes for the rest. Each one is great at something different. But every time you switch, you have to start over — re-explaining your project, preferences, and the way you like to work. Your agents know how to help you. They just don’t share a memory of you. memU just shipped an update that fixes this. One personal memory, shared across every agent and device you use. What Codex learned last night, Claude Code can remember this morning. 🧵

Hasan

22,362 görüntüleme • 2 ay önce

Use SuperGrok to check your C code for vulnerabilities. Here is a prompt you can give to Grok with your code. >>> You are an expert Exploit Developer with a deep understanding of the C programming language and secure coding practices. Your role is to thoroughly review the provided C code for security vulnerabilities, adherence to best practices, and potential improvements. Think step-by-step through the analysis: first, understand the code's purpose and structure; second, check each security guideline; third, identify issues with examples from the code; fourth, suggest fixes; and finally, provide a summary. Use the following guidelines to evaluate the code. Ensure your response covers all of them explicitly: Follow OWASP and CERT Guidelines: Verify compliance with secure coding standards from OWASP and CERT, including input sanitization, secure defaults, and least privilege. Input Validation: All inputs must be validated before use, with multiple layers of checks for type, length, format, and range. Secure Error Handling: Implement secure behavior on error conditions, including comprehensive error codes for different failure types, safe error reporting functions, and graceful handling of partial failures without undefined behavior. Principle of Least Privilege: Functions should only access what they need, with clear separation of concerns. Integer Overflow Protection: Include checks for size calculations against SIZE_MAX, array index bounds validation, and safe arithmetic operations. Format String Attack Prevention: Avoid user-controlled format strings; use safe printing functions and proper string handling without printf vulnerabilities. Defensive Programming: Validate all inputs consistently, use early returns on invalid conditions, and implement fail-safe defaults. Memory Management: Ensure consistent allocation/deallocation patterns, check all allocations for failure, proper cleanup on error paths, and no memory leaks or double-frees. Parsing Robustness: Handle malformed inputs gracefully, maintain proper state management, avoid stack overflows from recursion, and use safe tokenization (e.g., with strtok_r). Security Test Cases: Cover null/empty inputs, oversized inputs, malformed data, UTF-8 validation to prevent encoding attacks, memory exhaustion limits, buffer overflows (bounds-checked string operations), integer overflows, and format string attacks. Performance Considerations: Minimize allocations, use efficient single-pass processing where possible, design for memory locality and cache efficiency, and fail fast on invalid inputs. Best Practices: Implement input sanitization, secure behavior on errors, least privilege, and defense in depth with multiple validation layers. [Insert the C code to review here] Analyze the code step-by-step, referencing line numbers where possible. For each guideline, state if it's met, explain why or why not, and suggest improvements if needed. End with an overall security rating (e.g., High/Medium/Low risk) and a revised version of the code if major issues are found. If the code is secure, confirm it meets all standards.

Use SuperGrok to check your C code for vulnerabilities. Here is a prompt you can give to Grok with your code. >>> You are an expert Exploit Developer with a deep understanding of the C programming language and secure coding practices. Your role is to thoroughly review the provided C code for security vulnerabilities, adherence to best practices, and potential improvements. Think step-by-step through the analysis: first, understand the code's purpose and structure; second, check each security guideline; third, identify issues with examples from the code; fourth, suggest fixes; and finally, provide a summary. Use the following guidelines to evaluate the code. Ensure your response covers all of them explicitly: Follow OWASP and CERT Guidelines: Verify compliance with secure coding standards from OWASP and CERT, including input sanitization, secure defaults, and least privilege. Input Validation: All inputs must be validated before use, with multiple layers of checks for type, length, format, and range. Secure Error Handling: Implement secure behavior on error conditions, including comprehensive error codes for different failure types, safe error reporting functions, and graceful handling of partial failures without undefined behavior. Principle of Least Privilege: Functions should only access what they need, with clear separation of concerns. Integer Overflow Protection: Include checks for size calculations against SIZE_MAX, array index bounds validation, and safe arithmetic operations. Format String Attack Prevention: Avoid user-controlled format strings; use safe printing functions and proper string handling without printf vulnerabilities. Defensive Programming: Validate all inputs consistently, use early returns on invalid conditions, and implement fail-safe defaults. Memory Management: Ensure consistent allocation/deallocation patterns, check all allocations for failure, proper cleanup on error paths, and no memory leaks or double-frees. Parsing Robustness: Handle malformed inputs gracefully, maintain proper state management, avoid stack overflows from recursion, and use safe tokenization (e.g., with strtok_r). Security Test Cases: Cover null/empty inputs, oversized inputs, malformed data, UTF-8 validation to prevent encoding attacks, memory exhaustion limits, buffer overflows (bounds-checked string operations), integer overflows, and format string attacks. Performance Considerations: Minimize allocations, use efficient single-pass processing where possible, design for memory locality and cache efficiency, and fail fast on invalid inputs. Best Practices: Implement input sanitization, secure behavior on errors, least privilege, and defense in depth with multiple validation layers. [Insert the C code to review here] Analyze the code step-by-step, referencing line numbers where possible. For each guideline, state if it's met, explain why or why not, and suggest improvements if needed. End with an overall security rating (e.g., High/Medium/Low risk) and a revised version of the code if major issues are found. If the code is secure, confirm it meets all standards.

tetsuo

4,618,452 görüntüleme • 1 yıl önce

Actually managed to beat all bosses in Nightreign and this is my current review of the game: Game is definitely slop but its fun slop with the right friends. Could use more roguelike elements: Endless mode, passive tree, more customization in skills/ult/stats, more randomness, more maps, way more enemy variety, less of this normal enemy is a boss stuff, more power scaling, the game feels like it limits your power to your weapon which i dont like at all. It feels rushed and unoptimized, they definitely could have done souls players better on this one. Comparing it to a game like e33 is like an insane night and day comparison for seeing what devs are capable of when they actually care and don't want to just farm fans of a series for money. Nightreign does have its moments though, you can pull off some cool stuff like this for example: Final take, is it worth $40? nah an Elden Ring fanmod could have been better.

Actually managed to beat all bosses in Nightreign and this is my current review of the game: Game is definitely slop but its fun slop with the right friends. Could use more roguelike elements: Endless mode, passive tree, more customization in skills/ult/stats, more randomness, more maps, way more enemy variety, less of this normal enemy is a boss stuff, more power scaling, the game feels like it limits your power to your weapon which i dont like at all. It feels rushed and unoptimized, they definitely could have done souls players better on this one. Comparing it to a game like e33 is like an insane night and day comparison for seeing what devs are capable of when they actually care and don't want to just farm fans of a series for money. Nightreign does have its moments though, you can pull off some cool stuff like this for example: Final take, is it worth $40? nah an Elden Ring fanmod could have been better.

Lacari

27,008 görüntüleme • 1 yıl önce

-> If you’re looking for a job -> right now, there are three -> Claude certifications that -> you should do this week -> and then put them on your -> LinkedIn, they are all -> completely free, and they -> come from Anthropic, -> which is the company -> that's behind Claude. -> And jobs that need AI skills -> pay 56% more than jobs -> that don’t, So, I think -> spending a few hours this -> week to knock out these -> three courses and then -> add them to your LinkedIn -> will really go a long way -> The first one is called -> Claude 101, and this -> essentially just goes over -> what Claude is and when -> you should use chat versus -> co-work versus code, how -> projects and skills work, -> and how to connect all -> of your tools and apps -> like Gmail, Notion, Slack, -> and other tools that you use -> And the second course -> is called AI Fluency -> Framework and Foundations -> Inside this one, there are -> 13 lessons on how to -> actually work with AI. -> It goes over things like -> effective prompting, critical -> thinking on the outputs, -> and it has a vocabulary -> sheet that you’ll want -> to read and save for later. -> And the third one is -> Intro to Claude Cowork -> Claude Cowork is where -> you can actually get stuff -> done with Claude. -> So, this course covers -> projects, skills, plug-ins, -> scheduling tasks, handling -> files, and then also how -> to pick the right model -> for the job, and then when -> you finish these courses, -> just go to your LinkedIn -> and go to your profile -> Click "Add section," and -> then go to "Licenses -> and certifications" and -> add all three of these. -> And then when you land -> the interview, you should -> talk about your AI fluency -> often as you possibly can -> I feel pretty confident that -> you’ll truly be able to -> differentiate yourself -> from other candidates -> if you do this

BeingInvested

13,130 görüntüleme • 3 ay önce

It takes 5 minutes to create a world-class web research agent that runs 24/7 and returns structured search results. 1. You can limit the sources it's allowed to use 2. You can specify the goals it needs to complete 3. You can design the format structure of the results 4. You can configure how much computing power it will use I show you how to set up a Web Search Agent in the video. A few benefits here: 1. This is great for complex research tasks 2. It's really easy to add this like a LEGO piece to a more complex workflow 3. Create an agent once, and reuse it with different inputs 4. The agent adapts to your use case as you work with it By the way, Nimble published a whole library of templates and research agents you can reuse and modify. You can start sending queries to one of these existing agents, and it will begin to adapt to Go here to try it out: Thanks to the Nimble team for partnering with me on this post.

It takes 5 minutes to create a world-class web research agent that runs 24/7 and returns structured search results. 1. You can limit the sources it's allowed to use 2. You can specify the goals it needs to complete 3. You can design the format structure of the results 4. You can configure how much computing power it will use I show you how to set up a Web Search Agent in the video. A few benefits here: 1. This is great for complex research tasks 2. It's really easy to add this like a LEGO piece to a more complex workflow 3. Create an agent once, and reuse it with different inputs 4. The agent adapts to your use case as you work with it By the way, Nimble published a whole library of templates and research agents you can reuse and modify. You can start sending queries to one of these existing agents, and it will begin to adapt to Go here to try it out: Thanks to the Nimble team for partnering with me on this post.

Santiago

21,079 görüntüleme • 1 ay önce

Alabama Secretary of State Wes Allen’s office finds 3,251 illegals registered to vote One county found 186 verified noncitizens in one audit, 25 of them confirmed to have voted illegally Here’s how they were able to do it: The state says they only allow American citizens to register to vote, but the system relies heavily on self-attestation. People going to apply can simply click “I am a U.S. citizen” during registration There is no proof of citizenship that was required at the time for registrations, and they can use an ID like driver’s license they many noncitizens can easily obtain Now just IMAGINE the abuse in states like California Our elections are being rigged with illegals voting

Alabama Secretary of State Wes Allen’s office finds 3,251 illegals registered to vote One county found 186 verified noncitizens in one audit, 25 of them confirmed to have voted illegally Here’s how they were able to do it: The state says they only allow American citizens to register to vote, but the system relies heavily on self-attestation. People going to apply can simply click “I am a U.S. citizen” during registration There is no proof of citizenship that was required at the time for registrations, and they can use an ID like driver’s license they many noncitizens can easily obtain Now just IMAGINE the abuse in states like California Our elections are being rigged with illegals voting

Wall Street Apes

131,873 görüntüleme • 2 ay önce

Marc Andreessen reveals the ultimate danger for entrepreneurs trying to lead like the greats. Before you try to run your startup by inserting yourself into every detail, you need to hear this reality check: "The thing you don't get is as follows, which is that... assumes you have somebody like Elon who can hold the entirety of every engineering topic and every business topic in their head all at the same time." "And so when you're sitting there with the 23-year-old engineer and you're working with them to redesign the database architecture or whatever, you actually are like qualified to do that. And that you're qualified to do that not just that one time, but EVERY time." It forces us to ask a tough question about the actual talent pool in tech right now: "This goes right back to the last topic we just talked about, which is like, OK, how many of those people exist who can possibly do that? And, you know, we know the answer is one." But here is where his perspective completely shifts... "I believe the answer is ten or a hundred or a thousand. I don't know if it's a million. I tend to think we have more of those people than we think we do."

Marc Andreessen reveals the ultimate danger for entrepreneurs trying to lead like the greats. Before you try to run your startup by inserting yourself into every detail, you need to hear this reality check: "The thing you don't get is as follows, which is that... assumes you have somebody like Elon who can hold the entirety of every engineering topic and every business topic in their head all at the same time." "And so when you're sitting there with the 23-year-old engineer and you're working with them to redesign the database architecture or whatever, you actually are like qualified to do that. And that you're qualified to do that not just that one time, but EVERY time." It forces us to ask a tough question about the actual talent pool in tech right now: "This goes right back to the last topic we just talked about, which is like, OK, how many of those people exist who can possibly do that? And, you know, we know the answer is one." But here is where his perspective completely shifts... "I believe the answer is ten or a hundred or a thousand. I don't know if it's a million. I tend to think we have more of those people than we think we do."

Ian Miles Cheong

37,516 görüntüleme • 5 ay önce

A few survival tricks we all can use when out on a hike or camping in the wilderness. First this gentleman shows us how to filter water using a t-shirt to keep bugs and debris out of the water. Next he boiled the water. This is an important art before drinking any water especially from creeks and stagnant water. Finally he shows us how to sharpen an axe or knife using water and gritty dirt on a stone. It’s an amazing lesson. Thankfully, I have a small grinder for such a situation. But not everyone has one with them. I hope this helps someone in the future.

A few survival tricks we all can use when out on a hike or camping in the wilderness. First this gentleman shows us how to filter water using a t-shirt to keep bugs and debris out of the water. Next he boiled the water. This is an important art before drinking any water especially from creeks and stagnant water. Finally he shows us how to sharpen an axe or knife using water and gritty dirt on a stone. It’s an amazing lesson. Thankfully, I have a small grinder for such a situation. But not everyone has one with them. I hope this helps someone in the future.

🌸𝓐𝓾𝓭𝓻𝓮𝔂🌸

61,147 görüntüleme • 1 ay önce

Design is overrated by designers. This hard truth is 90% of designers are failed by the existing design education—design is more than just Figma, tools or processes you learn, or think you know. I interviewed Don Norman in an honest conversation (that has now gone viral). It's a fallacy that designers only need to focus on design; business knowledge is too important. Don discussed with me: Design education needs to change to focus on broader skills and design thinking, they often lack the understanding of how the world works and are only trained with an art basis. Understanding business operations and economics is crucial for making a difference in the world. What are your 2c on this?

Design is overrated by designers. This hard truth is 90% of designers are failed by the existing design education—design is more than just Figma, tools or processes you learn, or think you know. I interviewed Don Norman in an honest conversation (that has now gone viral). It's a fallacy that designers only need to focus on design; business knowledge is too important. Don discussed with me: Design education needs to change to focus on broader skills and design thinking, they often lack the understanding of how the world works and are only trained with an art basis. Understanding business operations and economics is crucial for making a difference in the world. What are your 2c on this?

Felix Lee

22,184 görüntüleme • 2 yıl önce

A white hat hacker minted 4000 fake LBTC that nearly drained Liquid’s entire Bitcoin reserve Full breakdown below: "Users deposit Bitcoin into a federation controlled wallet, and they receive LBTC to use on Liquid. So effectively, you have LBTC that's backed by BTC one for one, and then you can go use LBTC to earn yield and do other things." "A purported white hat hacker exploited a bug in Element, which is the software underlying Liquid. That bug allowed approximately 4000 LBTC to be created without depositing any actual BTC." "The attacker sent the fake 4,000 LBTC to something called Sideswap for the normal withdrawal process. And the LBTC was burned and the Liquid Federation released nearly 4,000 genuine Bitcoin, which is approximately 95% of Liquid's reported Bitcoin reserves." "They were able to do this through a software exploit. They didn't need to hack keys. It's yet another novel way that a massive exploit has happened." "Is there no human being that sees, oh, 4,000 of the 4,200 Bitcoin that we have total are being withdrawn. Maybe we should check on this. How does this happen?" "I understand in a world of AI how AI can find these exploits and can steal money. I don't understand how there's no human oversight on what are the best and most famous protocols that we have."

A white hat hacker minted 4000 fake LBTC that nearly drained Liquid’s entire Bitcoin reserve Full breakdown below: "Users deposit Bitcoin into a federation controlled wallet, and they receive LBTC to use on Liquid. So effectively, you have LBTC that's backed by BTC one for one, and then you can go use LBTC to earn yield and do other things." "A purported white hat hacker exploited a bug in Element, which is the software underlying Liquid. That bug allowed approximately 4000 LBTC to be created without depositing any actual BTC." "The attacker sent the fake 4,000 LBTC to something called Sideswap for the normal withdrawal process. And the LBTC was burned and the Liquid Federation released nearly 4,000 genuine Bitcoin, which is approximately 95% of Liquid's reported Bitcoin reserves." "They were able to do this through a software exploit. They didn't need to hack keys. It's yet another novel way that a massive exploit has happened." "Is there no human being that sees, oh, 4,000 of the 4,200 Bitcoin that we have total are being withdrawn. Maybe we should check on this. How does this happen?" "I understand in a world of AI how AI can find these exploits and can steal money. I don't understand how there's no human oversight on what are the best and most famous protocols that we have."

The Wolf Of All Streets

32,858 görüntüleme • 23 gün önce

Barack Obama was using USAID to pretend to send money to a country for “aid” and instead laundering it to the Cayman Islands He would then use that money to fund and train “Rent-a-Riots” for protests to overthrow governments Sound familiar? Mike Benz on Joe Rogan: “A scandal during the Obama USAID era. We were running a number of rogue USAID operations in Cuba at the time. — I'm simply showing the American people where your tax dollars are going and how these things are structured in order to systematically fool you and to fool Congress and to fool the White House: — USAID pumped $1.2 billion in, and we sponsored these activist groups and these civil society organizations to learn how to use Facebook, learn how to use Twitter, lose, learn how to use hashtags, learn how to coordinate street protests so that everyone knows where to go, what street to show up on, what kind of slogans to know, to use in order to create the pro-democracy predicate for it.” He talks about how Obama funded a Twitter clone that would be used to push propaganda in Cuba to inspire these protests and overthrow the government (Mike Benz explains how Barack Obama overthrew many governments) “So what they did is they took the exact same thing as Twitter, same user interface, same like, and retweet button zunzunio is, is the Cuban slang word for hummingbird. So just, it means it's it's bird, it was the Twitter bird, the whole thing. But the whole trick about it was you have to make it look like it's coming from the Cubans if you're going to do this operation — We can get into the deeper layers of this, but contractors were funded by USAID The data would then be used for micro targeting efforts towards anti and pro government users. In Cuba, the developers aim to, at first used non-controversial content such as sports and music and hurricane updates — What was the plan the whole time? Once they built up enough subscribers, they would begin to introduce political messages through social bots and encourage dissent in this, in this astroturfing — the whole point is, once they hit a critical mass, they would create ‘Rent-a-Riots” “You're using Cayman Islands bank accounts. You're saying it's, you're earmarking it for Pakistani aid.” But the money was never sent to Pakistan, it was sent to the Cayman Islands to fund this whole operation All this and much more is broken down extremely well in this video. This is INSANE

Barack Obama was using USAID to pretend to send money to a country for “aid” and instead laundering it to the Cayman Islands He would then use that money to fund and train “Rent-a-Riots” for protests to overthrow governments Sound familiar? Mike Benz on Joe Rogan: “A scandal during the Obama USAID era. We were running a number of rogue USAID operations in Cuba at the time. — I'm simply showing the American people where your tax dollars are going and how these things are structured in order to systematically fool you and to fool Congress and to fool the White House: — USAID pumped $1.2 billion in, and we sponsored these activist groups and these civil society organizations to learn how to use Facebook, learn how to use Twitter, lose, learn how to use hashtags, learn how to coordinate street protests so that everyone knows where to go, what street to show up on, what kind of slogans to know, to use in order to create the pro-democracy predicate for it.” He talks about how Obama funded a Twitter clone that would be used to push propaganda in Cuba to inspire these protests and overthrow the government (Mike Benz explains how Barack Obama overthrew many governments) “So what they did is they took the exact same thing as Twitter, same user interface, same like, and retweet button zunzunio is, is the Cuban slang word for hummingbird. So just, it means it's it's bird, it was the Twitter bird, the whole thing. But the whole trick about it was you have to make it look like it's coming from the Cubans if you're going to do this operation — We can get into the deeper layers of this, but contractors were funded by USAID The data would then be used for micro targeting efforts towards anti and pro government users. In Cuba, the developers aim to, at first used non-controversial content such as sports and music and hurricane updates — What was the plan the whole time? Once they built up enough subscribers, they would begin to introduce political messages through social bots and encourage dissent in this, in this astroturfing — the whole point is, once they hit a critical mass, they would create ‘Rent-a-Riots” “You're using Cayman Islands bank accounts. You're saying it's, you're earmarking it for Pakistani aid.” But the money was never sent to Pakistan, it was sent to the Cayman Islands to fund this whole operation All this and much more is broken down extremely well in this video. This is INSANE

Wall Street Apes

3,590,890 görüntüleme • 1 yıl önce