sudo rm -rf --no-preserve-root /

6/ Cold storage means no connection to the internet, period. Happy Sunday and go touch some grass or sand :D.

5/ And while I'm at it, please don't store assets in hot wallets. Just don't. Also, don't take pics of your seed phrase with your phone. There are malicious apps that can use OCR to scan images for seeds.

4/ I understand that shifting most of the space to something like QubesOS isn't realistic, but we must start prioritising security-first OS choices in our ecosystem, not just UX. Honestly, fancy features won't stop your device from being compromised.

3/ Please remember: these OSes weren't built with the strict sandboxing, strong application isolation, or zero-trust principles needed to defend against these today's threats!

2/ However, and that's what I want to address here, is that OS design choices like weak data compartmentalisation & permissive default trust models are the _major enablers_, especially on macOS and Windows.

1/ This morning I've been reviewing our last months' SEAL 911 tickets. Guys, it's clear that soon (probably sooner than you think) a large portion of our ecosystem will be running on compromised devices. I mean, man, infostealers are probably the _biggest_ ecosystem problem right now.

My periodic reminder: if someone offers you a slick-looking hardware gadget at EthCC (or any other crypto event), don't plug it in, don't take it home. Just walk away. Treat it like malware wearing a shiny casing. We've got enough infostealers in the wild already.

If it never goes mainstream, that means it stayed dangerous. It stayed free. Thus, mainstream isn't the goal. Freedom is.

so I've been thinking about this for a while now and I'm more and more convinced that crypto was never meant for mainstream. The main reason being that crypto's purpose is _liberation_, not popularity. It's effectively for those who choose sovereignty over simplicity.

Absolutely

Don't listen to your friends. Listen to your gut feeling and your principles. Good friends mean it well, but won't replace principles.

It could've been simple but somewhere along the way, we chose to build a fragmented, bloated mess of chains instead. A monster of our own making.

you know, I'm a simple guy: I roll (mostly) with ETH, Tornado Cash, Railgun, BTC, Zcash, and XMR these days. I don't use L2s. I don't use Solana. I don't use fancy DeFi protocols (I like it KISS and trustless). Simply put: just tools that work and don't ask permission.

I know guys, you're all bullish on Claude etc. but if you keep outsourcing more and more of your thinking to LLMs, you'll eventually become whatever the algorithm decides. You lose your uniqueness, your edge. Just don't.

3/ I use them because their privacy is built-in & the UX is pretty smooth. That's exactly what I want from Ethereum. Simple, private, native payments. No extra steps. If we want to onboard people to privacy at a global scale, it must be native and easy. Full stop.

2/ Long-term, I shouldn't need to interact with a smart contract just to shield a simple ETH transfer. Privacy should be native at the L1. Look, I've been using Monero & Zcash for some time already (on that note, please Ledger ship shielded addresses).

1/ There is nothing I want more than for Ethereum to lead on privacy (scalability has always been a second priority for me tbh; not implying it's not important to be clear). Not conditional privacy. Unconditional.

3/ Read the last sentence again. Now again. Ethereum's future has to be _radical_ and _bold_, not obedient.

2/ Folks, honestly, forget the flashy business plans for Ethereum (we do not turn Ethereum into a fucking company). If we start prioritising those over the fundamentals, we're not just selling out; we're turning into muppets of the very mainstream systems we set out to disrupt.

1/ Listen guys, many might disagree with me on this, but Ethereum's lasting success is all about its Cypherpunk soul. Real (IMO unconditional) privacy, security, censorship resistance; that's the core and must always remain the core.

An OS that goes all-in on simplicity. There's so much virtue in simplicity. What we need is more of less. duskos.org

3/ I personally would love to see Ethereum go privacy-first (and by that, I mean _unconditional_ privacy). This would make Ethereum a real-world use case for a high percentage of the world population (we still need to convince them of course 😉).

2/ I'm here because I believe in the long game, I always have, but let's not kid ourselves: this lazy complacency, the flood of useless degen apps and rollups, and the never-ending siphoning of users' funds is not the path forward. It's a fucking distraction, not a revolution.

1/ There is absolutely no valid reason why prices are pumping right now. We're still a clown-show industry, light-years away from making any _meaningful_ dent in the lives of 99.9% of people on this planet.

6/ - devs are blindly cloning, installing and running github repos locally and get rekt

we're so fucking far away of being considered a "secure" ecosystem. It's a complete shitshow right now.

5/ - people cannot handle private keys & seed phrases
- people devices are _constantly_ (and by constantly I mean every fucking day) compromised
- people are completely naive when it comes to basic web2 security (dude, stop storing your pws & 2FAs in the same password manager you use locally)

4/ and of course, the ever-reliable dev who commits their .env file with private keys straight to GitHub, NPM, etc.

3/ or some skiddies calling up victims pretending to be Coinbase support (always CB, like 90% of the time and the rest is Ledger) and walking off with their funds. On top of that, there's the usual: someone falling in love with a random Tinder match & getting rinsed by a textbook Sha Zhu Pan play

2/ hopping on Zoom calls where scammers walk them through (effectively) self-pwning (dude, believe me you don't need to patch your zoom or google meet) their own machines, teams getting nuked because they thought hiring bargain-bin devs from North Korea was a great idea,

1/ time for a quick vibes check on where our industry's at security-wise; well, folks, guess what, 95% of last months' SEAL 911 tickets were the same shitshows on repeat: folks running sketchy code some rando DMed them (stop cloning & running GH repos u got from random dude who asks for your "help")