build a large language model "from scratch"
Article, Comments
https://github.com/controversy187/build-a-large-language-model
Article, Comments
https://github.com/controversy187/build-a-large-language-model
GitHub
GitHub - controversy187/build-a-large-language-model: Code samples from the book Build a Large Language Model
Code samples from the book Build a Large Language Model - controversy187/build-a-large-language-model
So, about the #ByBit hack that happened yesterday
What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)
- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack
- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.
can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading operations. For exchanges, hot wallets typically contain only a small portion of their total assets (usually 5-10%) that's needed for day-to-day transactions and withdrawals.
- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)
- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack
- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.
can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
In a multisig interaction there are 3 ways to get hacked:
- The multisig smart contract is owned
- The computer you're signing on is owned
- The hardware wallet (ledger, trezor) you're using is owned
The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).
these are just my guesses tho, there have been no official statement regarding this so far.
- The multisig smart contract is owned
- The computer you're signing on is owned
- The hardware wallet (ledger, trezor) you're using is owned
The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).
these are just my guesses tho, there have been no official statement regarding this so far.
Do It by Code
ETH be like: le code is law but when code is bad we rollback
The reason I said this:
around 6 years ago (2016), a major hard-fork happened in ETH network.
"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
around 6 years ago (2016), a major hard-fork happened in ETH network.
On June 17, 2016, the DAO was subjected to an attack exploiting a combination of vulnerabilities, including the one concerning recursive calls, that resulted in the transfer of 3.6 million Ether - around a third of the 11.5 million Ether that had been committed to The DAO - valued at the time at around $50 million.
"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
there isn't many more reliable news about this than what we already know tho.
but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:
- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)
now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.
now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:
- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)
now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.
now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
They often develop their own malware and have their own set of tools and a team of specialists.
APT attacks are commonly attributed to a particular group based on the combination of the malware/tools used and the techniques used to deploy it. Some groups have their own custom malware that is only used by them, while others may use the same tools as other groups. Groups also differ in their choice of targets, attack techniques, and other factors. This means that, while the attribution of a cyberattack is never guaranteed to be correct, it is possible to identify the group behind an attack with high confidence.
so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
Do It by Code
ByBit asked eXch to freeze the ETH that was stolen. eXch's response from their Bitcointalk thread 😬
Worren:
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit
The bybit hacker started using exch
This might be the end for exch in regards to using it for legitimate exchanges for Binance etc
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit
The bybit hacker started using exch
This might be the end for exch in regards to using it for legitimate exchanges for Binance etc
This media is not supported in your browser
VIEW IN TELEGRAM
Composio
Composio provides production-ready toolset for AI agents, offering:
https://github.com/ComposioHQ/composio
Composio provides production-ready toolset for AI agents, offering:
- Support for over 250+ tools across multiple categories: Software tools like GitHub, Notion, Linear, Gmail, Slack, Hubspot, Salesforce & more
- Comprehensive framework support including OpenAI, Groq, Claude, LlamaIndex, Langchain, CrewAI, Autogen, Gemini, and more
- Managed authentication supporting multiple protocols (OAuth, API Keys, Basic JWT)
- Pluggable architecture supporting custom tools and extensions
https://github.com/ComposioHQ/composio
RobotGo
Golang Desktop Automation. Control the mouse, keyboard, read the screen, process, Window Handle, image and bitmap and global event listener.
RobotGo supports Mac, Windows, and Linux(X11);
and supports arm64 and x86-amd64.
Example usage:
Golang Desktop Automation. Control the mouse, keyboard, read the screen, process, Window Handle, image and bitmap and global event listener.
RobotGo supports Mac, Windows, and Linux(X11);
and supports arm64 and x86-amd64.
Example usage:
package main
import (
"fmt"
"math/rand"
"github.com/go-vgo/robotgo"
"github.com/vcaesar/gcv"
"github.com/vcaesar/bitmap"
)
func main() {
opencv()
}
func opencv() {
name := "test.png"
name1 := "test_001.png"
robotgo.SaveCapture(name1, 10, 10, 30, 30)
robotgo.SaveCapture(name)
fmt.Print("gcv find image: ")
fmt.Println(gcv.FindImgFile(name1, name))
fmt.Println(gcv.FindAllImgFile(name1, name))
bit := bitmap.Open(name1)
defer robotgo.FreeBitmap(bit)
fmt.Print("find bitmap: ")
fmt.Println(bitmap.Find(bit))
// bit0 := robotgo.CaptureScreen()
// img := robotgo.ToImage(bit0)
// bit1 := robotgo.CaptureScreen(10, 10, 30, 30)
// img1 := robotgo.ToImage(bit1)
// defer robotgo.FreeBitmapArr(bit0, bit1)
img, _ := robotgo.CaptureImg()
img1, _ := robotgo.CaptureImg(10, 10, 30, 30)
fmt.Print("gcv find image: ")
fmt.Println(gcv.FindImg(img1, img))
fmt.Println()
res := gcv.FindAllImg(img1, img)
fmt.Println(res[0].TopLeft.Y, res[0].Rects.TopLeft.X, res)
x, y := res[0].TopLeft.X, res[0].TopLeft.Y
robotgo.Move(x, y-rand.Intn(5))
robotgo.MilliSleep(100)
robotgo.Click()
res = gcv.FindAll(img1, img) // use find template and sift
fmt.Println("find all: ", res)
res1 := gcv.Find(img1, img)
fmt.Println("find: ", res1)
img2, _, _ := robotgo.DecodeImg("test_001.png")
x, y = gcv.FindX(img2, img)
fmt.Println(x, y)
}
IconKitchen
https://icon.kitchen/
App icon generator.
(the successor to the Android Asset Studio; source)
https://icon.kitchen/
App icon generator.
(the successor to the Android Asset Studio; source)
Project IDX
To keep it short: it's a competitor to GitHub codespaces.
It's a web-based IDE which runs on Google's servers; it's built on top of vscode's codebase (which is open-source).
It has Gemini built-in by default which can freely edit your code or suggest changes (similar to GitHub Copilot).
I don't know about its limits or pricing tho, it seems like it's free (but maybe its limits are same as Google Colab?)
https://idx.dev/
- Guides
- Blog
Project IDX is an AI-assisted workspace for full-stack, multiplatform app development in the cloud. With support for a broad range of frameworks, languages, and services, alongside integrations with your favorite Google products, IDX streamlines your development workflow so you can build and ship apps across platforms with speed, ease, and quality.
To keep it short: it's a competitor to GitHub codespaces.
It's a web-based IDE which runs on Google's servers; it's built on top of vscode's codebase (which is open-source).
It has Gemini built-in by default which can freely edit your code or suggest changes (similar to GitHub Copilot).
I don't know about its limits or pricing tho, it seems like it's free (but maybe its limits are same as Google Colab?)
https://idx.dev/
- Guides
- Blog
Do It by Code
Project IDX Project IDX is an AI-assisted workspace for full-stack, multiplatform app development in the cloud. With support for a broad range of frameworks, languages, and services, alongside integrations with your favorite Google products, IDX streamlines…
Though it can't beat GitHub codespaces in terms of resources 🤔
you can get up to 32-cores codespaces host depending on your account activity in GitHub.
Obviously it has free hours-usage limit per-month, but it looks fair to me.
you can get up to 32-cores codespaces host depending on your account activity in GitHub.
Obviously it has free hours-usage limit per-month, but it looks fair to me.
is it possible to use this variable name in any programming language?
"hello there ok
fgsdfsd ^#$#*$&@#423453 (#$%#$(****"
note: the whole thing between the " is the variable name.
"hello there ok
fgsdfsd ^#$#*$&@#423453 (#$%#$(****"
note: the whole thing between the " is the variable name.
This media is not supported in your browser
VIEW IN TELEGRAM
Two AI agents on a phone call realize they’re both AI and switch to a superior audio signal ggwave.
- Twitter
- The Repository
- The library used: ggware (Tiny data-over-sound library)
- The Repository
- The library used: ggware (Tiny data-over-sound library)