"1" + 1 = 11
- Tweets 6,853
- Following 1,426
- Followers 6,139
- Likes 12,513
Pinned Tweet
Exactly 8 years ago, I discovered a security flaw in Gaana, and reported it to @satyan, and they were kind enough to reward me with a bounty.
That motivated me and I reported security flaws in 40+ companies after that including Telegram, Redbus and many more
Gaana's parent company Times Internet put me on a retainer for a few months, they're India's largest digital products company, I reported security flaws in their subsidiary companies, which formally kickstarted my security career and there was no looking back.
I was 17 and knew nothing about how the world of finance works.
With all the money I made I started trading Ethereum, arbitraging and invested in altcoins.
I mined bitcoins on my school computers in 2013, so was always fascinated about crypto.
I've always been a security maximalist, but haven't been much active in it lately, I aim to focus more on security in the coming months.
I stumbled upon security by clicking on a random youtube video titled "How to code a virus" and then here I am today.
The quote tweet below is what changed my life
@satyangajwani I have discovered a major vulnerability in Gaana And I would like to get in touch with you to disclose it.
34
23
378
129,405
movement has such a calm community; they -
• charged $50 per airdrop claim
• team wallet sent $200M to bybit
• disabled airdrop claims contract
• reduced airdrop amounts
• emptied airdrop contract
no blacklash from community
everyone deserves such a clam community, gmove.
50
980
834
545,628
2400 likes, 10000 bookmarks, 455K views, but only 20 comments.
obviously this is not organic, movement bots misunderstood it for an appreciation post and liked from multiple accounts and this will fuck my organic reach now.
organic likes are around 300-400.
movement has such a calm community; they -
• charged $50 per airdrop claim
• team wallet sent $200M to bybit
• disabled airdrop claims contract
• reduced airdrop amounts
• emptied airdrop contract
no blacklash from community
everyone deserves such a clam community, gmove.
530
404
168
182,745
Contrary to their claim there is no Private Ai in venice.ai
All Inference requests go to their Central Server in plain text, zero encryption or privacy.
All the received buffers are in plain text as well.
Verify it yourself by checking the Network Tab in chrome.
99
75
1,086
179,842
That's how it works while bargaining for anything.
If you're the seller, disagree for the first 5 mins and then give a small discount, they'll think they somehow convinced/manipulated you to reduce the price and settle for it.
1
7
871
103,628
even this quote tweet got 1200 likes, 6600 bookmarks, 1100 retweets in 20 mins
At this point I'm 100% sure movement's entire community is just bots.
2400 likes, 10000 bookmarks, 455K views, but only 20 comments.
obviously this is not organic, movement bots misunderstood it for an appreciation post and liked from multiple accounts and this will fuck my organic reach now.
organic likes are around 300-400.
140
177
81
217,763
Are you going to Devcon?
I geocoded all the side-events and marked it on a map to find out optimal location to book a hotel and filter by dates
try it at - devcon.0xSmit.com , you can check relative location and distance of your hotel/address with respect to side events.
97
66
712
68,491
Crypto is all fun and games until you have to understand the mathematics behind zero knowledge proofs.
74
53
641
52,477
Why 1% TDS on crypto is restrictive-
Let's say you have 1 lakh and trade full amount on every trade, you pay 1% of the remainder capital as tds.
By the 100th trade-
TDS paid - 63396
Capital left - 36603
By 300th Trade -
TDS paid - 95095
Capital left - 4904
66
184
555
There is zero auth, IP checks or checks for manipulation
Just wrote a script and submitted 2000 votes to a VC which was in F tier and it jumped to S tier
code - github.com/0xSmit/vcversus_c…
61
15
539
94,010
with all due respect, if IIT wasn't opening doors for you you wouldn't have added it to your twitter bio.
With sectors like Tech, where you can prove your worth with a coding assessment surely degree might not matter much.
But for non tech sectors, degrees act as a filter point
4
11
486
43,913
You will understand the reason as you age, there is nothing wrong with this email.
Folks receive 100 such emails everyday, it is important to establish credibility in the opening statement itself for someone take you seriously.
2
454
23,094
Are you going to token2049?
I geocoded all the side-events and marked it on a map to find out optimal location to book a hotel and filter by dates
try it at - token2049.0xsmit.com, you can check relative location and distance of your hotel/address with respect to side events
73
37
482
79,138
5 years ago built an agent that scraped binance's website every 30 seconds and whenever there was a new article that they're delisting a token, the bot would short the token and make an instant profit, no LLMs but regex, switch case, loops.
build such agents that make money, not the agents that tweet weird stuff on twitter.
31
6
372
30,360
Are you going to ETHDenver?
I geocoded all the side-events and marked it on a map to find out optimal location to book a hotel and filter by dates
try it at - ethdenver.0xSmit.com, you can check relative location and distance of your hotel/address with respect to side events
37
34
367
36,711
europen tech:
we're still working with regulators to see if it is even legal to build any tech here.
5
3
327
7,523
fixed it for you, as a chess website i assumed you know a thing or two about chess colours
7
4
274
18,270
i recommend everyone to surprise their mom and loved ones with a car, surreal experience
i told my mom i'm taking her to meet my girlfriend ( i don't have one ) and then landed at the dealership, she couldn't believe it
41
2
275
32,317
In Web3, the CEOs, CTOs, GPs, CoFounders would reply you in a couple hours.
But most of the time, the devrels, interns, absolute nobodies and the guys responsible for replying will ghost you, coz there is no accountability.
Most of y'all should work in a Web2 environment first
46
18
270
23,155
lots of contracts have harder coded the value of a year in blocks based on 12 second block times, it might break things if this passes, would be interesting to see how it is managed by contracts with no upgrade mechanism.
8
95
214
2,892
this is oversimplification, they aren't technically C wrappers, the languages use LIBC in linux and MSVCRT in windows to do foreign function invocation for sys functions, because the OS only provides that, you can build an OS with rust libs.
next what, C is an assembly wrapper?
6
2
223
6,514
So @rushimanche is paying bot farms to nerf the accounts of people calling out movement
How do I know that?
All the spam accounts that replied on my tweet also did that on the another negative tweet on movement by @gtx360ti
all the same accounts, sending thousands of likes and inorganic comments by porn accounts to get our accounts suspended, well played @rushimanche and this time don't wash your hands off it claiming that your marketing agency did it without asking you, like you said to @0xSisyphus last time.
All these bots are interacting with "Movement" related tweets, stop your social media manipulation rushi.
15
5
212
23,053
12 unordered, jumbled words. 479 million permutations.
The story of how I recovered a wallet with $30k worth of BTC for a friend👇
(1/n)
34
32
214
44,206
I'm sure someone will figure out the payload that is sent to unity server on new install and just replay it on a for loop, they could obfuscate and all.
3
4
182
51,789
if they implement auth right now, it will break apps of all restaurants as the apps they've coded doesn't handle authentication right now, so probably working on fixing that first and then authenticating the api, this is a shit show but adding auth without fixing apps would be an even bigger shit show
10
7
200
21,209
30% Crypto tax and 1% TDS will discourage Indian institutional investors, Family offices and HNIs to invest in crypto within India, they'd transfer funds out of India to third party crypto funds to gain crypto exposure.
#reducecryptotax
11
78
181
i know some VCs who'd invest $100K at even $50tn valuation just for the bragging rights that they are on the cap table of openai
1
2
178
28,732
coded a chrome extension that auto fills luma forms as soon as a luma link is opened, filed over 200 forms in 30 mins
handles composite fields as well.
This is whom you're up against 💀
23
5
183
14,414
A garbage collected languages in aviation?
Discord was using Go in a large system and the backend would hang for a few seconds every 2 mins for garbage collection, if a flight hangs mid air, it could be a problem.
discord.com/blog/why-discord…
6
3
155
10,925
If you talk about engineering, mostly the CS folks make that package at 22, and these aren't the ones who took a traditional path of going to college and learning everything there.
These are the folks who've been hacking and building since they're 12
7
2
154
have reverse engineered numerous apis, this won't last much.
Native Apps will start having certificate pinning so you won't be able to decrypt the api calls.
Apps will start obfuscating and encrypting data with hidden keys before sending to server, bank apps already do that.
4
2
158
9,861
You obviously can claim the TDS back but in the next financial year, in the meanwhile you lose funds to trade, no capital market has TDS, be it stocks, debt market, MCX.
6
12
150
Yep, tired of explaining this to people, almost every website has SSL, though others can snoop the ip of websites you're visiting, but not much otherwise.
1
129
23,986
"#Dubai is not expensive, you just don't have a job in Web3 yet"
- Unknown
9
4
138
you forgot to mention that you have a CS degree in cybersecurity and yet the last protocol you worked for got hacked.
21
136
2,453
“remember that in the real world, markets are mostly efficient and ur race mostly doesn't matter.”
ohh boy you still haven't stepped in the real world, your career just started so lets revisit your quote in a couple years.
dw everyone makes mistakes with some assumptions
6
1
119
21,274
if you are raising capital and vcs are not taking you seriously, add such inflated math formulas to your whitepaper, they'll think you are math genius.
i've seen such baseless formulas being added by professors of ivy league uni.
if the vc has a math guy, you're cooked.
14
15
122
9,558
Yesterday was fun at @socllyhq X Lens first IRL meetup with @sandeepnailwal @fabriguespe @harshrajat @aniket_jindal08
1
14
113
you aren't underpaid, you are paid that much bcoz someone out there is willing to accept such low of an offer
the day all of you folks realise that you're being taken advantage of and refuse to take such a low offer, they'll increase the offer.
4
1
102
12,126
We found a vulnerability in Telegram and reported to their security team.
They acknowledged and are deploying a fix, they're paying a bounty.
But they think few hours of my time is worth less than a trip to Paris 😂
4
5
100
17,283
So many boys replied with their image, and you didn't reply to any of them, this is the reason boys don't send it 😆
4
1
102
This figure is based on the official reported income, actual undisclosed grey income is way more and the amount is way off.
3
1
99
15,288
5 years ago, Modi sir said, "If you want Investors to empty their pockets, tell them you are using Blockchain".
7
11
104
11,409
I'll take a very basic example.
Let's assume every alphabet represents a unique number.
A= 1, B= 2, C= 3, D=4 and so on...
So we need to take a hash of word "SMIT"
We multiply their representing numbers -
19*13*9*20 = 44460
Now how are you going to find the original numbers if I give you "44460"? You can't unmultiply a number 😅
This is a very basic example of hashing and hashing is much more than that to make it truly irreversible.
5
4
102
5,767
A year ago Tech bros were debating about 4 day work week, now everybody is working hard to not get laid off
Life turns around quickly
3
8
101
5,719
Stablecoins are the new NFTs; everyone is launching one, not realising that it is a distribution and integration game.
Circle paid billions to coinbase and millions to binance to be relevant.
Even PayPal's stablecoin doesn't have $1bn mcap in 19 months of existence.
6
6
101
7,239
launching stablecoins is like teenage sex:
everyone talks about it, nobody really knows how to do it; everyone thinks everyone else is doing it and having fun, so everyone else wants to do it.
16
7
102
6,634
Just living is not enough, one must have some BTC, freedom and of course, skydiving in their life 🪂
10
95
9,845
the m o v e ment bots have nerfed my account with 71K likes on this tweet, does anyone have any contact at twitter support to report this inorganic inflow, if my account gets suspended due to this childish stuff by movement it won't end well.
movement has such a calm community; they -
• charged $50 per airdrop claim
• team wallet sent $200M to bybit
• disabled airdrop claims contract
• reduced airdrop amounts
• emptied airdrop contract
no blacklash from community
everyone deserves such a clam community, gmove.
73
1,113
It's Bitcoin Pizza day.
I'll send Pizza to 3 random folks who like and reply to this tweet 👇🏻
53
5
87
11,907
looking back the biggest mistake of my life was selling ETH at $12 (₹800) in june 2016 to buy gifts for my then girlfriend
still haunts me that i missed on generational wealth.
gonna frame my trading history.
🫠
29
5
86
10,640
Even a $12 xiaomi router has ROM partition to recover from a failed firmware update and a $100K vehicle doesn't have it? 🤣
1
1
82
5,382
i've never seen oxygen, but i'm still breathing it, am i not?
i've never actually manually done the diffie hellman key exchange for SSL handshake for the websites i visit, but chrome does for me
i've never written a kernel or hardware drivers, but my computer still boots
I’ve never used ZK in my life or FHE
The problem is that we keep talking about all these amazing things, but no one is actually using them. We’ve had teams building ZK Identity apps for years, but how many people are actually using those solutions?
12
2
89
7,349
jawbone wasn't killed by apple, they were on the path to suicide themselves, they barely had 5% market share of the wearable market when apple watch launched, it was a bullshit product and even new entrants like Xiaomi Band 1 captured the market with a device that was 90% cheaper
1
2
87
11,385
lol, do you know that the chief justice of india gogoi judged a case where he was accused of molestation 😂 and gave himself a clean chit
scroll.in/latest/1012404/i-s…
2
83
7,291
distribution and marketing is the key, used a project similar to @_kaitoai in 2022
they actually had a lot more data than kaito as back in 2022 rate limits on twitter apis weren't that much and they had unlimited academic api access, but they didn't go viral like kaito did.
5
1
68
1,510
> raises $17M
> scams $2M
> wait a sec
> math doesn’t quite add up does it
> no it doesn’t
> team is locked for 12 months followed by 24 month linear vest
> rumor team dumped was literally started by a competitor and being circulated by a) evil MMs who dump $50M on retail’s face every CEX launch b) CEX bots c) retarded influencers that don’t know what they’re talking about and didn’t even buy the token
> concentrated liquidity MM strategy buys and sells within price ranges
> insane buy pressure means presently there are more sells than buys
> go ahead and sell and watch what happens
> price is stable
> liquidity is deep
> no CEXs
> everything is transparent & fully onchain
> it’s still day 1
> bookmark this tweet
> a precedent will be set here
> the future is limitless
2
86
9,394
Looks like the Solana wallets were hacked because -
Slope wallet was using a logging Library "Sentry" which sent local state data to Log servers, which by mistake included Seed phrases.
1/n
7
19
74
how much of that was network latency vs processing time?
if a service is making a db call that is not something a language can help speed up right
2
78
8,503
Magic Eden the largest NFT marketplace on Solana upgraded it's contracts and is no longer permission-less, hence - centralised
A thread 🧵
1/n
16
11
78
Yap early, yap only, yap often.
@_kaitoai is connecting AI, attention and capital with Yaps.
Just claimed my social card and I'm accumulating Yap points in real-time.
Claim yours 👉 yaps.kaito.ai/referral/93160…
2
57
636
Can folks please stop decentralising everything?
We don't need decentralised {youtube, github, tinder, google, uber, etc etc}
25
4
77
9,139
liquidated for 6 figures and going to sleep.
have some longs open, don't dump the market more or i might legit have to work at mcdonalds.
16
5
74
15,164
Only in India, one has to justify their personal expenses to their friends, neighbours, bosses, society.
Oh, you bought a watch, why? wasn't the old one working fine few days ago?
19
75
8,646
if you think any due diligence was done during this deal i have a bridge to sell you; besides indian venture funds don't have good technical folks for technical due diligence, they mostly outsource to third parties which do an equally terrible job.
2
78
6,265
it has 1.5 star rating on tripadvisor?
Literally every review on google says that there are cockroaches and bugs in the hotel, you did zero due diligence before booking?
2
78
3,969
coded a telegram bot that scraps the election commision's website and sends me updates after every 10K additional votes are counted, monitoring multiple constituencies.
10
3
79
5,529
Just met someone who made fuck you money with arbitrage in the last 6 months.
Haven't filed for ITR, haven't paid advance tax, no accounting.
On top of that bought exotic bikes and cars.
Tax deadline in 21 days, he got no clue.
Young money is truly dumb.
17
1
76
13,458
Ever heard about arbitrage? People make hundreds of trades for 0.2% margin, my bots have made 6000+ trades in the last year for a mere margin of 0.1-0.2%
5
3
70