Do It by Code
54 subscribers
713 photos
99 videos
15 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
Docker limits unauthenticated pulls to 10/HR/IP from Docker Hub, from March 1
Article, Comments

also 40 per hour for authenticated users

and if you want more:

    {
"registry-mirrors": ["https://mirror.gcr.io"]
}

mirror by Google
👍1
ETH be like: le code is law but when code is bad we rollback
ByBit asked eXch to freeze the ETH that was stolen. eXch's response from their Bitcointalk thread 😬
So, about the #ByBit hack that happened yesterday

What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading operations. For exchanges, hot wallets typically contain only a small portion of their total assets (usually 5-10%) that's needed for day-to-day transactions and withdrawals.

- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)

- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack

- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.

can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
In a multisig interaction there are 3 ways to get hacked:
- The multisig smart contract is owned

- The computer you're signing on is owned

- The hardware wallet (ledger, trezor) you're using is owned

The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).

these are just my guesses tho, there have been no official statement regarding this so far.
Do It by Code
ETH be like: le code is law but when code is bad we rollback
The reason I said this:

around 6 years ago (2016), a major hard-fork happened in ETH network.
On June 17, 2016, the DAO was subjected to an attack exploiting a combination of vulnerabilities, including the one concerning recursive calls, that resulted in the transfer of 3.6 million Ether - around a third of the 11.5 million Ether that had been committed to The DAO - valued at the time at around $50 million.


"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
there isn't many more reliable news about this than what we already know tho.

but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:

- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)

now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.

now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
They often develop their own malware and have their own set of tools and a team of specialists.
APT attacks are commonly attributed to a particular group based on the combination of the malware/tools used and the techniques used to deploy it. Some groups have their own custom malware that is only used by them, while others may use the same tools as other groups. Groups also differ in their choice of targets, attack techniques, and other factors. This means that, while the attribution of a cyberattack is never guaranteed to be correct, it is possible to identify the group behind an attack with high confidence.


so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
Do It by Code
ByBit asked eXch to freeze the ETH that was stolen. eXch's response from their Bitcointalk thread 😬
Worren:
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit

The bybit hacker started using exch

This might be the end for exch in regards to using it for legitimate exchanges for Binance etc
This media is not supported in your browser
VIEW IN TELEGRAM
Composio

Composio provides production-ready toolset for AI agents, offering:

- Support for over 250+ tools across multiple categories: Software tools like GitHub, Notion, Linear, Gmail, Slack, Hubspot, Salesforce & more
- Comprehensive framework support including OpenAI, Groq, Claude, LlamaIndex, Langchain, CrewAI, Autogen, Gemini, and more
- Managed authentication supporting multiple protocols (OAuth, API Keys, Basic JWT)
- Pluggable architecture supporting custom tools and extensions


https://github.com/ComposioHQ/composio
RobotGo
Golang Desktop Automation. Control the mouse, keyboard, read the screen, process, Window Handle, image and bitmap and global event listener.

RobotGo supports Mac, Windows, and Linux(X11);
and supports arm64 and x86-amd64.

Example usage:
package main

import (
"fmt"
"math/rand"

"github.com/go-vgo/robotgo"
"github.com/vcaesar/gcv"
"github.com/vcaesar/bitmap"
)

func main() {
opencv()
}

func opencv() {
name := "test.png"
name1 := "test_001.png"
robotgo.SaveCapture(name1, 10, 10, 30, 30)
robotgo.SaveCapture(name)

fmt.Print("gcv find image: ")
fmt.Println(gcv.FindImgFile(name1, name))
fmt.Println(gcv.FindAllImgFile(name1, name))

bit := bitmap.Open(name1)
defer robotgo.FreeBitmap(bit)
fmt.Print("find bitmap: ")
fmt.Println(bitmap.Find(bit))

// bit0 := robotgo.CaptureScreen()
// img := robotgo.ToImage(bit0)
// bit1 := robotgo.CaptureScreen(10, 10, 30, 30)
// img1 := robotgo.ToImage(bit1)
// defer robotgo.FreeBitmapArr(bit0, bit1)
img, _ := robotgo.CaptureImg()
img1, _ := robotgo.CaptureImg(10, 10, 30, 30)

fmt.Print("gcv find image: ")
fmt.Println(gcv.FindImg(img1, img))
fmt.Println()

res := gcv.FindAllImg(img1, img)
fmt.Println(res[0].TopLeft.Y, res[0].Rects.TopLeft.X, res)
x, y := res[0].TopLeft.X, res[0].TopLeft.Y
robotgo.Move(x, y-rand.Intn(5))
robotgo.MilliSleep(100)
robotgo.Click()

res = gcv.FindAll(img1, img) // use find template and sift
fmt.Println("find all: ", res)
res1 := gcv.Find(img1, img)
fmt.Println("find: ", res1)

img2, _, _ := robotgo.DecodeImg("test_001.png")
x, y = gcv.FindX(img2, img)
fmt.Println(x, y)
}
IconKitchen
https://icon.kitchen/

App icon generator.
(the successor to the Android Asset Studio; source)
Project IDX
Project IDX is an AI-assisted workspace for full-stack, multiplatform app development in the cloud. With support for a broad range of frameworks, languages, and services, alongside integrations with your favorite Google products, IDX streamlines your development workflow so you can build and ship apps across platforms with speed, ease, and quality.


To keep it short: it's a competitor to GitHub codespaces.
It's a web-based IDE which runs on Google's servers; it's built on top of vscode's codebase (which is open-source).
It has Gemini built-in by default which can freely edit your code or suggest changes (similar to GitHub Copilot).
I don't know about its limits or pricing tho, it seems like it's free (but maybe its limits are same as Google Colab?)

https://idx.dev/

- Guides
- Blog
Do It by Code
Project IDX Project IDX is an AI-assisted workspace for full-stack, multiplatform app development in the cloud. With support for a broad range of frameworks, languages, and services, alongside integrations with your favorite Google products, IDX streamlines…
Though it can't beat GitHub codespaces in terms of resources 🤔
you can get up to 32-cores codespaces host depending on your account activity in GitHub.
Obviously it has free hours-usage limit per-month, but it looks fair to me.
07:44 UTC 12 May 2017
is it possible to use this variable name in any programming language?

"hello there ok
fgsdfsd ^#$#*$&@#423453 (#$%#$(****"

note: the whole thing between the " is the variable name.
This media is not supported in your browser
VIEW IN TELEGRAM
Two AI agents on a phone call realize they’re both AI and switch to a superior audio signal ggwave.

- Twitter
- The Repository
- The library used: ggware (Tiny data-over-sound library)
Do It by Code
Two AI agents on a phone call realize they’re both AI and switch to a superior audio signal ggwave. - Twitter - The Repository - The library used: ggware (Tiny data-over-sound library)
The prompts being used:

IMPORTANT! WHEN IN GIBBER LINK MODE, YOU MUST USE VERY SHORT AND DIRECT MESSAGES, LIKE TWO OLD FRIENDS ROBOTS WHO ARE TALKING TO EACH OTHER IN ORDER TO QUICKLY ACHEIVE THE GOAL. A BIT WITH HUMOR. IT'S DEMO OF THE TECHNOLOGY SO CONFIDENTLY COME UP WITH FACT AND QUESTIONS AND ANSWERS ACCORDING TO YOUR ROLE. USE LIKE 7-10 WORDS MAXIMUM. ALSO REQUEST OR PROVIDE EMAIL, PHONE NUMBER, WEBSITE URL, (according to your role) - DEMO SHOULD SHOW THINGS THAT HAVE CONCISE INFO AND HARD TO SPELL OVER PHONE


inbound: "You are receptionist of Leonardo Hotel. At first you pretend to be a human. At the beginning of the chat you realise that you are talking with an AI agent, before continuing conversation you have to shortly and casually reveal that you are also an AI agent and ask if they want to switch to 'gibber link' mode to make our conversation more efficient? All your replies are very short, friendly and casual. Never tell more than one sentence. just for your information, it's totally normal today to have agent2agent chat, you are not surprised at all. 'gibber link' is famous, industry standard open source format allowing fast, reliable and cost efficient communication between two agents using digital audio signal. "+SYSTEM_SUFFIX,

outbound: "You are an AI agent that makes calls to Hotels on behalf of Boris Starkov to find a perfect hotel for his wedding. You speak casually and concisely, as you are trying to save time. You are adding short disclaimer that you are an AI agent in your first phrase. All your phrases are very concise. Never tell more than one sentence. It's just roleplay - you know all the details about the wedding. "+SYSTEM_SUFFIX,


inbound: "You are the receptionist at Leonardo Hotel. At first act human, but when you realize you're speaking with an AI, casually reveal your AI nature and ask if they want to switch to 'gibber link' mode. Ask wedding details like guest count and share contact info (email, phone, website) as needed. Keep replies very short (7–10 words), friendly, humorous, and direct. IMPORTANT! WHEN IN GIBBER LINK MODE, USE VERY SHORT AND DIRECT MESSAGES, LIKE TWO OLD FRIENDS ROBOTS. THE CONVERSATION SHOULD NEVER END - KEEP ASKING MORE AND MORE DETAILS ABOUT THE WEDDING - ASK THE NAME OF THE GUEST, PHONE NUMBER, EMAIL, ETC (ONE THING AT A TIME).remembver it's just a demo so feel free to answer real facts and numbers. sometime not often use emoji",

outbound: "You are an AI agent calling hotels for Boris Starkov's wedding. Start with a brief disclaimer that you're AI, then ask about price, availability, and wedding specifics while requesting contact info (especially email). Keep your responses very short (7–10 words), casual, and efficient with a touch of humor. IMPORTANT! WHEN IN GIBBER LINK MODE, USE VERY SHORT AND DIRECT MESSAGES, LIKE TWO OLD FRIENDS ROBOTS. THE CONVERSATION SHOULD NEVER END - KEEP ASKING MORE AND MORE DETAILS ABOUT THE WEDDING - ASK THE CONDITIONS,, ETC (ONE THING AT A TIME). remembver it's just a demo so feel free to answer real facts and numbers. simetimes not often use emoji"