Jameson Lopp (@lopp) header
Jameson Lopp (@lopp) profile picture

Insights on security, privacy, technology, money · Co-founder & Chief Security Officer @CasaHODL · creator of https://xitter.twitterapi.xyz/t.co/q2pgFGTJZh, https://xitter.twitterapi.xyz/t.co/xUkNreXj20

Cyberspace
Joined March 2009
Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)Photo by Jameson Lopp (@lopp)
Pinned Tweet
Today I'm releasing the first major upgrade to statoshi.info/ in ~8 years. Dozens of new metrics and charts added! Statoshi is now based off Bitcoin Core v32.1
21
13
67
5,906
Jameson Lopp retweeted
BREAKING: The Constitutionality Index has now scored every law in the history of the United States. 48,000 laws dating back to 1789. So far as I'm aware, I'm the first one to ever attempt such a thing. And we've now ranked every president based on the percentage of laws they enacted were constitutional. The results largely track the overall historical trend: As we move from the founding to the modern era, the percentage of unconstitutional legislation increases. In fact, 1937 is the tipping point. Pre-FDR's New Deal, every president — Federalist, Whig, Republican, Democrat — scores 98 to 100%. After the New Deal, the average percentage of constitutional laws (by page) drops to 31 percent. As a result, presidents of the last few decades find themselves at the bottom of the rankings. @JoeBiden is officially the least constitutional president, although Trump isn't far behind. Only Thomas Jefferson scored a perfect 100 percent. I've also scored congresses, & @SpeakerJohnson's current Congress is, from the perspective of the Constitution, the worst Congress in American history. Constitutional legislation stands at 56.3 by total count, & just 4.3% by total legislative pages. Another important finding: The largest laws in American history are, every one of them, unconstitutional. Check it out & let me know what you think. (Links below)
286
1,138
185
5,430
265,432
We had another AI incident at Casa. GPT-6 Astra completely wiped the databases and docker volumes on a machine. This is why it's best to run agents on disposable development servers rather than employee laptops. Don't trust the clankers.
59
30
9
508
37,449
No, we don't use any LLMs in our production environment at Casa. Only for development. AI safety has a long ways to go before I'd ever consider allowing a clanker touch sensitive stuff.
2
1
42
3,698
Jameson Lopp retweeted
> be El Salvador > send nerds to Haiti for UN thingie > gang kidnaps Salvadorian nerds > bukele says "give back" > gang "nah" > bukele says "ok we take back" > gang "nah, also you're a bitch" > bukele comes to take back > gang "wtf that's illegal, UN tell them something" > UN says "idk bro thats crazy" > bukele goes on social media > "does anyone know this houses coordinates? we will bomb it" > crowdsources OSINT nerds > OSINT nerds deliver exact coordinates in like, 30 minutes > bombs it exactly as promised > goes on social media > calls them pussies tl;dr OSINT nerds on Twitter called in Airstrike like it's Call of Duty, never been seen before on social media
Nou kenbe pwomès nou… Nou detwi kay Lanmò San Jou ak katye jeneral gang 400 Mawozo a. Pifò ladan yo kouri ale san yo pa menm eseye goumen. Ala lach yo lach! 🥲
409
4,655
290
46,537
1,781,257
"Hack yourself with AI before somebody else does." @lopp joins @theBTCmentor on why Bitcoin was only the first target, how AI swarms change the threat model, why his record of wrench attacks has doubled, and how to keep yourself safe. Watch Now: youtu.be/Irt0jKj7ISw
10
5
30
5,084
The social engineers who keep calling me are getting upset that I actually pick up the phone. I can only assume that their autodialer software is so crappy, they can't figure out how to remove or blacklist my number from their list. The game is afoot!
15
3
1
108
17,067
I love Chinese models. They're hard working and affordably priced.
23
17
2
318
28,836
🚨 CRITICAL - Unauthenticated RCE in React Server Components (GHSA-xqc2-xf4c-x3h3) A critical vulnerability in React Server Components packages (react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel) allows unauthenticated remote attackers to execute arbitrary code via crafted RSC Flight payload responses transporting multiple typed arrays and attacker-controlled values. 👉 Affected: Versions 19.0.0–19.0.8, 19.1.0–19.1.9, 19.2.0–19.2.8, 19.3.0 | Upgrade immediately to 19.0.9, 19.1.10, 19.2.9, or 19.3.1 (or Next.js 16.4.1 / 15.5.28) github.com/react/react/secur…
4
5
57
9,887
A cursory scan of my wrench attack repository shows that at least 4% of attacks are criminals attacking criminals, or victims of scams seeking retribution against the scammer. The real number is likely higher. Don't do crime, it doesn't pay!
15
1
2
80
14,850
Lightning Network capacity peaked at the beginning of 2026 and has dropped 45% in BTC terms year to date. xitter.twitterapi.xyz/lnbits/status/21194288…
⚠️⚠️ All LNbits users should stop their LNbits servers IMMEDIATELY. ⚠️⚠️ Please forward this announcement. Following a wave of attacks, we have a number of security patches to push. Until then, it's better to err on the side of caution. 🙏 Updates to follow soon.
33
21
7
234
26,165
Received nearly 1,000 emails today resulting from bots checking for account existence at various services. Smells like another breach.
19
10
1
215
20,103
This French wrench attack has some unique twists. The victim had already been kidnapped before in 2022. This time, the victim managed to fire a Glock at the attackers and scare them off. The victim received 2.5 years in prison for using the gun. cryptoast.fr/tentative-enlev…
41
43
12
617
36,787
To be clear: the victim in this case is a criminal who has previous assaulted people. He recklessly endangered the public by firing into the street and deserves punishment. A non-negligible number of victims make poor decisions that lead to them ending up in a bad situation.
3
2
66
5,194
Third security incident in 2 weeks by Keystone... cryptopolitan.com/keystone-n…
15
9
1
97
17,190
How it feels to be a cybersecurity defender:
12
1
71
10,179
honey badger DGAF
35
28
6
359
45,387