It is going to be a really short thread, the #DeFi historian promises.
Also, any reader will also become a prolific #javascript developer after reading this.
Storytime.
๐๐๐
2/ Web3 originally meant three different APIs injected to web context. This was circa 2015-2016.
Web = web context
3 = three different APIs
Web + 3 = web3.
But what does this mean?
3/ API stands for Application Programming Interface. It tells how applications (developed by a software developer) can communicate with other applications that they have not developed themselves.
For example, how your wallet can communicate with #Ethereum is defined by API.
4/ "Context" in this case means simply "within a web page."
Any web page could access these APIs and build applications on the top of them. These applications become known as decentralised apps, or Dapps.
APIs are provided by a browser plugin (usually MetaMask).
5/ For the #javascript developers, it means that you had window.web3 object which then gave you access to these APIs and you could build applications on the top of them.
6/ And the three APIs were...
๐๐๐
7/ - eth = Access #Ethereum blockchain data and make transactions
- bzz = Swarm. Decentralised storage. Now @ethswarm
- shh = Whisper. Peer-to-peer encrypted messaging.
8/ eth API you all know very well. It is what makes your MetaMask and web page to work together. Every time there is a MetaMask pop up, a developer has developed on web3.eth and you are using it.
9/ @ethswarm has been out from the spotlight many years. But this blog post is promising the year 2022 to be the comeback of Swarm.
11/ Only one of three Web3 APIs was mega successful... #Ethereum. Because we needed peer-to-peer transactions and smart contracts more than anything else.
Also solving decentralised storage and p2p messaging is more difficult and has less money in them.
12/ Then the future happened
๐๐๐
13/ Of course, the term Web3 was later hijacked by venture capital firms to promote their investments.
14/ For consumers Web3 now means
- NFTs
- Dapps
- Any random low quality project that wants to raise money on questionable product market fit
In the light of the recent event of a prop trading firm losing big monies in an old-fashioned Microsoft Word attachment attack, let me sip my tea and try to remember what kind of hacks I have seen over the years.
๐๐๐
2/ I will skip all retail-focused attacks, like fake websites and weak passwords and only focus on serious cases where tanotable business pitself was a victim.
3/ Also no talk about SIM swapping etc. as it is the US only problem and only possible because the US does not have strong ids issued by the government (don't live in a crap nation plz.)
So you pulled off a successful blackhat hack, or you just happen to run a profitable ransomware operation. How to convert your profits to Lambos?
Let the daddy godfather @moo9000 to tell you, a thread.
๐๐๐
2/ This is in the light of the the recent OFAC notice against Suex (on paper in Prague, in practice in Russia) money-laundering front. They laundered BTC for the ransomware gangs.
3/ Read this excellent fresh post by @trmlabs on the topic
1/ Climate activist arrested after ProtonMail discloses the IP address.
An interesting case for privacy and why this is significant: A decentralisation and #infosec thread.
Put on your Guy Fawkes masks now.
๐๐๐
2/ "@ProtonMail received a legal request from Europol through Swiss authorities to provide information about Youth for Climate action in Paris, they provided the IP address and information on the type of device used to the police"
1/ The GoEthereum 1.10.8 "hot fix" patch just went out. This is a critical patch, seems like it is an EVM level exploit, so it affects the whole #Ethereum network.
What's the bug? This is the question of many billion dollars.
Keep reading
๐๐๐
2/ The bug was originally discovered during Telos EVM, an EVM as-a-smart contract implementation on the to of EOS, audit.
Never heard of Telos? It's your VC free grass root effort, based on the EOS codebase.