patrick.algo

6.3K posts

patrick.algo banner
patrick.algo

patrick.algo

@patrickbennett

CEO/Co-Founder of @txnlab Inc, creators of Haystack @haydotapp, NFDs @nfdomains, use-wallet, and Réti open pooling for #Algorand

Katılım Kasım 2008
2K Takip Edilen3.7K Takipçiler
patrick.algo
patrick.algo@patrickbennett·
No it’s a damn package manager that will run any executable code attached to a dependency. Should be hard blocked. Disabled by default. Allow list only. Explicit hash. GitHub protection defaults that block changes except by owners. No clue why it hasn’t already been locked down. Start with using pnpm at least.
English
1
0
14
1.7K
Armin Ronacher ⇌
Armin Ronacher ⇌@mitsuhiko·
Published via OIDC trusted publishing btw. I hope this ends this absurd idea that OIDC is the silver bullet to supply chain issues.
TANSTACK@tan_stack

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.

English
15
41
574
68.3K
patrick.algo retweetledi
Algorand Foundation
Algorand Foundation@AlgoFoundation·
Algorand has 2,800+ total nodes distributed across 81 countries worldwide. With 1,500+ actively participating in consensus, @Algorand is among the most globally distributed Layer 1 blockchains. This is what decentralized global infrastructure looks like.
Algorand Foundation tweet media
English
16
105
477
17.9K
yabadabadoo
yabadabadoo@yabadoa·
@bryanrbeal I call BS on this, post the talks if they exist. AWS well architected guidance highlights multi-region in detail. Your saying AWS specifically said this was unnecessary in talks they gave? They are very strict about staying on message. docs.aws.amazon.com/prescriptive-g…
English
4
0
27
4.5K
Bryan Beal 🎧
Bryan Beal 🎧@bryanrbeal·
In reality, Coinbase had been an AWS use case for years about how you supposedly don’t need multi-region or fail over with AWS because AWS is just so stable. Coinbase and AWS literally bragged about it in slides and on stages. AWS would show the Coinbase architecture to customers and say “see if you go with us and architect like Coinbase you’ll save money because you don’t need multi region like you do with other cloud providers.” Of course, that was all a crock.
Brian Armstrong@brian_armstrong

We experienced an outage at Coinbase last night, which is never acceptable. The root cause was a room overheating in an AWS datacenter when multiple chillers failed. We design our services to be redundant to downtime in any one AWS Availability Zone (AZ), and most of our systems worked this way last night, but not all. Our centralized exchange did not. Exchanges have unique architectures that optimize for latency and co-location of clients. It is possible to make exchanges resistant to AZ failures, but this can introduce latency delays that are not desirable along with breaking customer co-location. Given this incident, we'll revisit these tradeoffs to ensure we're giving you the best possible venue to trade. At a minimum, the duration of an outage should be able to be reduced considerably when an AZ move is needed. Thank you to the AWS and Coinbase teams for working through the night to mitigate the issue. We’ll share the detailed technical summary once it's ready.

English
25
24
743
76K
MJ.algo 🇺🇸
MJ.algo 🇺🇸@AlgoFamily·
Hypothetically, if the Algorand community were to organize a IRL meetup, would you go? Trying to see what location more people could attend. Many of us miss the face to face interaction. This space is all about relationships. I miss seeing JHole rile up Patrick (TxnLabs), or chatting with FrugalBC, or getting wild w Andrew, or dancing with SJ, or hugging D13. Shall we start planning something for like a year or more out?
English
28
4
103
2.9K
Whole Mars Catalog
Whole Mars Catalog@wholemars·
the new immersive sound max mode in the Tesla spring update sounds great! You can really hear the song come to life as you slide the slider up.
Whole Mars Catalog tweet media
English
63
23
481
364.5K
patrick.algo retweetledi
Algorand
Algorand@Algorand·
Failed transactions aren't an option on Algorand. If a transaction is invalid, it's rejected before reaching the chain. No on-chain failures. No wasted fees. At scale, that can mean millions of dollars saved. That's what better blockchain infrastructure looks like.
Algorand tweet media
English
26
180
689
15.8K
patrick.algo
patrick.algo@patrickbennett·
@realBigBrainAI All BD ever shows is tiny, scripted, tidy little sequences and it’s all they’ve shown for YEARS. Show them actually doing something that isn’t a canned trick or ‘dancing video’ and for a real amount of time - all autonomous.
English
2
0
13
684
Big Brain AI
Big Brain AI@realBigBrainAI·
Years of reinforcement learning in one clip: Atlas pulls off a cartwheel-to-backflip combo with perfect balance.
English
58
125
800
90.9K
Rene Faurskov
Rene Faurskov@renefaurskov·
@JamesSurowiecki But why? Do you read this and think that its the non-tech teams connecting the money and accounts etc? If so thats just so wrong to think that, quite the opposite.
English
7
0
1
1.7K
James Surowiecki
James Surowiecki@JamesSurowiecki·
The last thing you want to hear the CEO of a financial-services firm say is "Non-technical teams are now shipping production code."
James Surowiecki tweet media
English
153
265
4K
154.1K
patrick.algo retweetledi
Haystack
Haystack@haydotapp·
The pools screener is now live on hay.app! 🏊 Scan for LP opportunities, add/remove liquidity, and farm rewards, all in one place. @tinymanorg pools and farming available now. @pact_fi support coming soon. 🌾
Haystack tweet media
English
4
25
86
3.2K
patrick.algo
patrick.algo@patrickbennett·
We're sorry about that security 'incident' and you losing everything. Joe from accounting is new at all this technical stuff but the AI let us down here. Janice from finance will be taking over and we'll do better in the future as we work to rebuild your trust in our world-class security.
English
0
0
1
117
Brian Armstrong
Brian Armstrong@brian_armstrong·
This is an email I sent earlier today to all employees at Coinbase: Team, Today I’ve made the difficult decision to reduce the size of Coinbase by ~14%. I want to walk you through why we're doing this now, what it means for those affected, and how this positions us for the future. Why now Two forces are converging at the same time. We need to be front footed to respond to both. First, the market. Coinbase is well-capitalized, has diversified revenue streams, and is well-positioned to weather any storm. Crypto is also on the verge of the next wave of adoption, with stablecoins, prediction markets, tokenization, and more taking off. However, our business is still volatile from quarter to quarter. While we've managed through that cyclicality many times before and come out stronger on the other side, we’re currently in a down market and need to adjust our cost structure now so that we emerge from this period leaner, faster, and more efficient for our next phase of growth. Second, AI is changing how we work. Over the past year, I’ve watched engineers use AI to ship in days what used to take a team weeks. Non-technical teams are now shipping production code and many of our workflows are being automated. The pace of what's possible with a small, focused team has changed dramatically, and it's accelerating every day. All of this has led us to an inflection point, not just for Coinbase, but for every company. The biggest risk now is not taking action. We are adjusting early and deliberately to rebuild Coinbase to be lean, fast, and AI-native. We need to return to the speed and focus of our startup founding, with AI at our core. What this means To get there, we are not just reducing headcount and cutting costs, we’re fundamentally changing how we operate: rebuilding Coinbase as an intelligence, with humans around the edge aligning it. What does this mean in practice? - Fewer layers, faster decisions: We are flattening our org structure to 5 layers max below CEO/COO. Layers slow things down and create coordination tax. The future is small, high context teams that can move quickly. Leaders will own much more, with as many as 15+ direct reports. Fewer layers also means a leaner cost structure that is built to perform through all market cycles. - No pure managers: Every leader at Coinbase must also be a strong and active individual contributor. Managers should be like player-coaches, getting their hands dirty alongside their teams. - AI-native pods: We’ll be concentrating around AI-native talent who can manage fleets of agents to drive outsized impact. We’ll also be experimenting with reduced pod sizes, including “one person teams” with engineers, designers, and product managers all in one role. In short: AI is bringing a profound shift in how companies operate, and we’re reshaping Coinbase to lead in this new era. This is a new way of working, and we need to leverage AI across every facet of our jobs. To those who are affected I know there are real people behind these decisions — talented colleagues who have poured themselves into this company and our mission. To those of you who will be leaving: thank you. You’ve helped build Coinbase into what it is today, and I am sincerely grateful for everything you've done. All impacted team members will receive an email to their personal account in the next hour with more information, and an invitation to meet with an HRBP and a senior leader in your organization. Coinbase system access has been removed today. I know this feels sudden and harsh, but it is the only responsible choice given our duty to protect customer information. To those affected, we will be providing a comprehensive package to support you through this transition. US employees will receive a minimum of 16 weeks base pay (plus 2 weeks per year worked), their next equity vest, and 6 months of COBRA. Employees on a work visa will get extra transition support. Those outside of the US will receive similar support, based on local factors and subject to any consultation requirements. Coinbase prides itself on talent density. Our employees are among the most talented people in the world, and I have no doubt that your skills and experience will be highly sought after as you pursue your next chapters. How we move forward To the team that is staying, I know this is a difficult day. We’re saying goodbye to colleagues and friends you've been in the trenches with. But here’s what I want you to know as we move forward together: Over the past 13 years, we have weathered four crypto winters, gone public, and built the most trusted platform in our industry. We’ve made it this far by making hard decisions and by always staying focused on our mission. This time will be no different – nothing has changed about the long term outlook of our company or industry. And most importantly, our mission has never been more important for the world. Increasing economic freedom requires a new financial system, and we’re building it. The Coinbase that emerges from this will be more capable than ever to achieve our mission. Brian
English
5.3K
2.4K
19.9K
23.1M
patrick.algo retweetledi
Algorand Foundation
Algorand Foundation@AlgoFoundation·
Calling all xGovs! There are currently 11 live proposals on the xGov portal, with 10 ending in less than a week. Don't miss your chance to cast your vote. Help shape what gets built on Algorand! 🗳️
Algorand Foundation tweet media
English
11
43
205
5.3K
patrick.algo
patrick.algo@patrickbennett·
@yupi_asa I assume that’s @pact_fi Humble merged into it and payment may have been under humble name ?
English
2
0
17
576
yupi
yupi@yupi_asa·
Am I reading this right? Humble? Chris after boi and scamming millions already still getting checks when no one is using it. I thought it shut down
yupi tweet media
English
3
2
16
6.1K
patrick.algo retweetledi
Algorand Foundation
Algorand Foundation@AlgoFoundation·
Algorand has been on fire lately: • @Google and @Coinbase both highlighted Algorand's post-quantum capabilities already live on mainnet • Millions of EVM users can now access Algorand dApps via their existing wallets, starting with @alphaarcade • Algorand now supported across the full x402 stack • SEC confirmed ALGO is a digital commodity • @Algorand protocol development and ecosystem growth are now unified under one roof • Algorand featured in @UNDP's latest report on real-world blockchain use cases • ALGO was added to Japan's JVCEA Green List for fast tracked exchange listings • @PeraAlgoWallet launched Shared Accounts • @FolksFinance brought cross-chain $WBTC & $WETH on Algorand • Algorand staking is now available on @Revolut@Allbridge_io surpassed $1M+ stablecoins bridged to and from Algorand • @AlgoBharat surpassed 100 blockchain clubs across 100 universities in India
Algorand Foundation tweet media
English
17
125
565
17.3K
patrick.algo retweetledi
Algorand
Algorand@Algorand·
"If quantum computers start breaking cryptography a few years from now, don't you dare come to this blog and tell me that I failed to warn you. This post is your warning." Newly elected member of the US National Academy of Sciences and quantum computing professor Scott Aaronson, writing on his blog today. Google and Coinbase, amongst many others, have recognised Algorand's leading post-quantum work. Our Chief Scientific Officer @ChrisPeikert helped create Falcon, a cryptographic algorithm selected by NIST as a global standard for quantum resistance, which we run in production on Algorand today. Quantum-secure chain history since 2022. Quantum-secure transactions and accounts since 2025. We heard the warning years ago.
English
17
153
628
26.6K
patrick.algo
patrick.algo@patrickbennett·
@universal_node Yeah - it's just another algorand account ultimately. Once we get it added to use-wallet[-ui] more formally then I'd expect we'll roll it out across haystack, nfd's, and reti.
English
1
2
13
267
Rhys
Rhys@RhysSullivan·
@skeptrune same reason bluesky / mastadon aren't
English
6
0
65
4.5K
Nick Khami
Nick Khami@skeptrune·
serious question: why is gitlab not mogging right now?
Nick Khami tweet media
English
81
4
347
86.2K
patrick.algo retweetledi
marcvl.algo🇺🇦
marcvl.algo🇺🇦@marcvl·
Made my first prediction on @alphaarcade using my @ethereum account on @MetaMask. Transferred 10 @USDC to @Algorand using @Allbridge_io. Picked a market, signed the transaction with my EVM keys. Done. No need to buy $ALGO. No need to download an Algorand wallet. Just me, Alpha Arcade, and MetaMask. Sweet!
marcvl.algo🇺🇦 tweet media
Algorand Foundation@AlgoFoundation

The EVM ecosystem has over 30 million monthly active wallet users. Until today, none of them could access Algorand dApps without creating a new wallet. That changes now with xChain Accounts. xChain Accounts launches today with @alphaarcade, one of the top prediction markets in crypto by transaction volume. Connect with supported EVM-compatible wallets like MetaMask, Rabby, Coinbase Wallet, or any other EVM wallet. No new wallet or seed phrase required.

English
18
73
332
13.1K
patrick.algo retweetledi
Bruno
Bruno@bmartins_·
Good news! Falcon doesn't need a large CPU or even a FPU, and even runs (experimentally) on Trezor HW Wallet!
Bruno tweet mediaBruno tweet media
Charles Guillemet@P3b7_

@toly @TrustlessState If I need a large CPU with several cores and an FPU to compute a signature, I'm not sure I can make this secure... Actually, I know I can't ;)

English
12
51
165
14.3K