Mark Karpelès (@MagicalTux) header
Mark Karpelès (@MagicalTux) profile picture

Mark Karpelès

@MagicalTux

Tech first / https://xitter.twitterapi.xyz/t.co/OCOYnDfJSY / Press inquiries: contact@magicaltux.net / Opinions are my own

 Tokyo, Japan
Joined February 2009
  • Tweets6K
  • Following159
  • Followers42.1K
530Media
Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)Photo by Mark Karpelès (@MagicalTux)
Mark Karpelès retweeted
Nicolas Bacca (@BTChip) profile picture
Nicolas Bacca
@BTChip8h
This is very well done, congrats. One thing that might be missing (if it still works) is Ledger self endorsement github.com/LedgerHQ/blue-loa…
blue-loader-python/ledgerblue/endorsementSetupLedger2.py at master · LedgerHQ/blue-loader-python

blue-loader-python/ledgerblue/endorsementSetupLedger2.py at master · LedgerHQ/blue-loader-python

Python Loader for all Ledger devices. Contribute to LedgerHQ/blue-loader-python development by creating an account on GitHub.

github.com
Mark Karpelès (@MagicalTux) profile pictureMark Karpelès
@MagicalTux22h
Update your Ledger and install apps without using Ledger's wallet software? It's possible now. * The app will never ask for your seed phrase. Advanced tab is meant for developers and can read your seed if you allow it to. karpeleslab.github.io/lsdk/ youtu.be/pQlaoKt4oR0
3
5
29
2,965
For some time I had wanted a simple board that would take usb-c and deliver 1.2V~5V as I needed on either rail. And here it is, made by Claude and working perfectly. Interested? It's on PCBWay: pcbway.com/project/shareproj…
Image from Mark Karpelès (@MagicalTux)
8
7
81
3,967
Update your Ledger and install apps without using Ledger's wallet software? It's possible now. * The app will never ask for your seed phrase. Advanced tab is meant for developers and can read your seed if you allow it to. karpeleslab.github.io/lsdk/ youtu.be/pQlaoKt4oR0
18
27
6
216
26,776
Mark Karpelès retweeted
Nicolas Bacca (@BTChip) profile picture
Nicolas Bacca
@BTChipNov 10
Replying to @BTChip @MagicalTux @EFDevcon
and yes, apologies for forgetting CatCard, I knew about it of course then skipped it while vibe sliding. Sorry :( Didn't forget to mention you in implants research though (consolation prize)
Image from Nicolas Bacca (@BTChip)
1
2
1
9
963
Day 1 vs day 10 of using AI to design PCBs
Image from Mark Karpelès (@MagicalTux)
Image from Mark Karpelès (@MagicalTux)
5
11
3
106
7,411
What's inside the @OneKeyHQ Neo? The same as in the Pro 2, less the camera and two secure elements. Following the Pro 2, I've went ahead and did a teardown of the Neo (and briefly put the Pro 2 board in the Neo - it works, but has no camera). youtube.com/watch?v=ef_oVNjm…
Onekey Neo teardown

Onekey Neo teardown

A follow-up to my OneKey Pro 2 teardown: this time I open the OneKe...

youtube.com
4
7
3
49
8,049
Tibane Labs - Weekly Update - Sat Nov 6th xitter.twitterapi.xyz/i/broadcasts/2LPXMYOQd…
Video
0:00

Mark Karpelès

Tibane Labs - Weekly Update - Sat Nov 6th

5
3
14
2,749
Comment fonctionne réellement un implant espion ? Découvrez la technologie étonnamment avancée utilisée pour voler plus de 100 millions de dollars aux clients de CryptoBilis.
2
10
1
57
5,448
Not news, unfortunately. Japanese companies used to be safe, due to the difficulty of access for hackers caused by the Japanese language. AI excels at language, opening the door to an ecosystem that had no need to worry about advanced attacks before. xitter.twitterapi.xyz/NHKWORLD_News/status/2…
NHK WORLD News (@NHKWORLD_News) profile pictureNHK WORLD News@NHKWORLD_NewsNov 6
An international hacker group that has carried out cyberattacks on companies in and outside Japan has told NHK that it targets Japanese firms because they tend to leave system vulnerabilities unaddressed. www3.nhk.or.jp/nhkworld/news…
Hacker group: Japan firms leave vulnerabilities unfixed | NHK WORLD-JAPAN News

Hacker group: Japan firms leave vulnerabilities unfixed | NHK WORLD-JAPAN News

An international hacker group that has carried out cyberattacks on companies in and outside Japan has told NHK that it targets Japanese firms because they tend to leave system vulnerabilities...

nhk.or.jp
4
6
3
65
6,377
스파이 임플란트는 실제로 어떻게 작동할까요? CryptoBilis 고객들로부터 1억 달러 이상을 훔치는 데 사용된, 놀라울 만큼 정교한 기술을 알아봅니다.
1
16
2,552
スパイ用インプラントは、実際にどうやって動いているのか？ CryptoBilisの顧客から1億ドル以上を盗み出した、驚くほど高度な技術を解説します。
4
14
4
50
4,571
How do a spy implant actually work? Learn about the surprisingly advanced technology used to steal over 100 million USD from CryptoBilis customers.
9
39
7
129
9,383
Teardown of the @OneKeyHQ Pro 2 I'm going through the setup (quickly), then have a look inside, checking every component's datasheet youtube.com/watch?v=STdDTqRi…
Onekey Pro 2 teardown

Onekey Pro 2 teardown

I open up the OneKey Pro 2 hardware wallet to see how it's built an...

youtube.com
1
7
1
42
5,693
New bug in OpenSSH. Security researchers: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Anyone with a SSH server accepting password on alpine/etc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Details: sshhole.com
45
107
41
800
165,699
And a note: the bug is in musl, which has a "feature" where crypt() does not return null if password is too long, but instead return * which happens to be the contents of the shadow file for accounts without a password, hence the exploit named *sshole
2
4
4
54
7,353
Image from Mark Karpelès (@MagicalTux)
8
1
224
10,151
Spent 4 days fighting Claude to finally be told: "Your instinct was exactly right the whole way: four clean signals leave no room for error, and there wasn't any in the signals."
12
23
4,334
Binance：数日前に詳細な報告書を公開。偽の採用面接に招待され、課題として渡されたコードにマルウェアが仕込まれていた経緯まで明確に説明。 フランスの銀行（クレディ・ミュチュエル・アルケア）：翌日には銀行自身が公式に、攻撃者が銀行の自口座を悪用し、任意の名義で振込を行ったことを確認・公表。 一方GMO：8月5日に顧客のデスクトップVPSが侵入されたことは公表したが、具体的な侵入経路や攻撃手法の技術的詳細は、今日時点でもほとんど明らかにされていない。 侵入経路や攻撃手法の技術的詳細を公開することは、いまや極めて重要だ。社会への情報提供にとどまらず、同業他社が必要な対策を講じ、被害を未然に防ぐことにもつながる。
5
14
96
9,275
Load more