Looks like the guy who lost ~$2m of ape NFTs was hit by classic phishing

If you're going to hold a sizable portion of your net worth on anything relating to a blockchain you really do need deep personal information security knowledge

Avoiding phishing schemes like this is hard!
Think about the depth of knowledge needed to spot the trick in this URL

You need to understand that URLs go https:// then hostname then / then path - so you also need to understand what URLs are, and what they do, and how they can mislead

This is professional web engineer stuff https://www.nfttrader.io-trading Oxc310e760778cebca4c6c55687
Another example of why my second biggest criticism of this proposed golden blockchain future - after the horrific environmental impact - is that it's just completely unsafe for regular people to use for anything valuable at all
Extremely relevant to this topic, this reminder from @NNgroup that only 5% of the population in this research had "high" computer skills, which are still massively less sophisticated than the skills needed to stay safe in an adversarial world that wants to steal your crypto

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Simon Willison

Simon Willison Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @simonw

29 Dec 21
I just spent a few minutes trying to figure out if I could use WebAuthn on my iPhone and came to the conclusion that... I can't figure out the answer to that question after a few of minutes of research! This seems bad
This article suggests that support was added in Safari 14 - I'm on Safari 15 now (I think? Figuring out your version of Mobile Safari is surprising non-obvious) theverge.com/2020/6/24/2130…
The top search results on Google for "iOS webauthn" are all implementation guides, not "here is how to use this on your phone" tutorials
Read 11 tweets
30 Nov 21
A public librarian on why two-factor authentication is a huge barrier to people with limited technology access
Why would you even own a phone if you live in a rural county with no cell coverage?
Read 7 tweets
28 Nov 21
Built my first Web Component and released it to npm! It lets you embed a basic Datasette table on any page:

<datasette table url="..."></datasette-table>

It's super early, mainly an exercise to learn how to write Web Components and release npm packages: github.com/simonw/dataset…
I learned a whole bunch while putting this together - first Web Component, first time using Vite, first time publishing to npm - here's my TIL write-up til.simonwillison.net/npm/publish-we…
How to Publish Web Components to NPM by @justinfagnani was incredibly useful here: justinfagnani.com/2019/11/01/how…
Read 4 tweets
26 Nov 21
The feature I most want from iOS is a search bar in the photo selection dialog that comes up when an app prompts me to pick one of my photos to share
My process for sharing a specific non-recent photo in a reply to a tweet right now is to go to the Photos app, find it with search, add it to an album called "Tweet", then navigate to that album from the "pick photo" dialog. It's really annoying!
Apparently this feature does exist for some people! Normally I'd suspect an A/B test but I thought Apple had more respect for us than that
Read 9 tweets
24 Nov 21
I want the ability to "pause" HTTP traffic at a load balancer - so if you send a request it will look like it took a few extra seconds to respond, but actually the load balancer is holding it until the backend has been swapped out for a new version (for example) - what can I use?
Here's Braintree describing how they did that back in 2011 (original link is broken now but I have a quote on my blog) simonwillison.net/2011/Jun/30/br… We can deploy new versions of our software, make database sc
Presumably this is possible today using HAProxy or Traefik or some kind of nginx module... is there terminology for this that I should be searching for? "Pause traffic" doesn't appear to be a commonly used term
Read 7 tweets
20 Nov 21
Trying to run two processes in a single Docker container on Cloud Run (Apache 2 and Datasette, to explore some reported bugs with mod_proxy) - urgh, this is so hard!

Found several recipes that work on my laptop but fail when I deploy them to Cloud Run github.com/simonw/dataset…
I'd love to figure this out because running two processes in the same container feels like a really useful trick to have in my pocket, but I may have to give up and run two separate containers instead - annoying when I'm just trying to provide a tiny interactive demo
I did get a new TIL out of this exercise - I figured out how to use the equivalent of "docker build --build-arg" with Google Cloud Build (you have to generate a cloudbuild.yml file and pass it to "gcloud builds submit --config") til.simonwillison.net/cloudrun/using…
Read 5 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(