home.social

Search

1000 results for “ARE”

  1. 🌙 Lunar eclipses are safe to watch with the naked eye find the exact timing for your US time zone here Full details…

    Unlock the universe with this amazing telescope - https://is.gd/Jxhj6L
    #TelescopeAdvisor #Astronomy #Stargazing #Space #Telescope #NightSky #Science #Paidlink #ad #amazonaffiliate

  2. Smart TV makers are pushing 'always-on' microphones as a "non-negotiable" part of the connected home, claiming it helps them "de…

    hambry.com/article/smart-tv-ma

  3. 🎷✨ The club lights are dimming, but the VIP lounge is just opening!

    Welcome to the L8 Nite Ultra Lounge—blending swanky Las Vegas show-bar vibes, plush velvet aesthetics, and smooth jazz fusion until sunrise. Grab a craft drink and settle in. Get your fix via #Live365! 🍸

    🎧🔗 retrorockradio.com
    #L8Nite #UltraLounge #SundayMorning #VegasVibes #RetroRock #CNYsNewBrew #Live365

  4. CW: Adult Content - No under 18s

    All subjects and actors are found freely on the internet in open fora. None of this is my own content. May contain any/all of the following:

  5. Oracle Java SE & GraalVM are vulnerable (CVE-2026-114820, CRITICAL, CVSS 9.1). Remote attackers can access & modify critical data via multiple network protocols. Update to the latest versions now. Details: radar.offseq.com/threat/cve-20

  6. You look like you are in need of a trash panda!

    #raccoon #trashpanda

  7. Rising NAND prices are reshaping the used enterprise SSD market, but not all drives benefit equally. BuySellRam examines resale price trends, showing how model, capacity, drive health, and market supply affect used SSD values. For data center operators, understanding these factors is key to making smarter decisions when retiring surplus storage hardware.

    buysellram.com/blog/what-is-a-

    #EnterpriseSSD #NAND #SSD #DataCenter #DataStorage #FlashMemory #ITAssetManagement #ServerHardware #StorageSolutions

  8. Rising NAND prices are reshaping the used enterprise SSD market, but not all drives benefit equally. BuySellRam examines resale price trends, showing how model, capacity, drive health, and market supply affect used SSD values. For data center operators, understanding these factors is key to making smarter decisions when retiring surplus storage hardware.

    buysellram.com/blog/what-is-a-

    #EnterpriseSSD #NAND #SSD #DataCenter #DataStorage #FlashMemory #ITAssetManagement #ServerHardware #StorageSolutions

  9. Rising NAND prices are reshaping the used enterprise SSD market, but not all drives benefit equally. BuySellRam examines resale price trends, showing how model, capacity, drive health, and market supply affect used SSD values. For data center operators, understanding these factors is key to making smarter decisions when retiring surplus storage hardware.

    buysellram.com/blog/what-is-a-

    #EnterpriseSSD #NAND #SSD #DataCenter #DataStorage #FlashMemory #ServerHardware #StorageSolutions

  10. CW: Adult Content - No under 18s

    All subjects and actors are found freely on the internet in open fora. None of this is my own content. May contain any/all of the following:

  11. AI models are becoming so mathematically capable. They can prove that today's date forms the Pythagorean triple (10, 24, 26) and that there will be no more until 2103 when the numbers in the triples can appear in any order.

  12. You look like you are in need of a trash panda!

    #raccoon #trashpanda

  13. Report: Mass UK protests are planned for Oct 31 against the ban on Palestine Action.

    Outside the US embassy in London & the consulate in Edinburgh, protestors will be asking if Trump pressured the UK to outlaw the group.

    Days later, the UK Supreme Court will hear an appeal by Palestine Action's Huda Ammori against the ban.

    More than 3,850 have been arrested since the ban.

    aljazeera.com/features/2026/10

    #UKPol #EUPol #USPol #palestine #PalestineAction #Gaza #GazaGenocide #news .

  14. Battery-Powered Teeth are in the studio for tonight's session

    #johnpeel #johnpeelbandnames

  15. CW: Adult Content - No under 18s

    All subjects and actors are found freely on the internet in open fora. None of this is my own content. May contain any/all of the following:

  16. Privacy stories are easy to dismiss until the data gets personal. Location, search history, device logs, and account activity can reveal more than people think. Good tech coverage should slow down enough to ask what changes next. See what is really at risk. #Privacy #TechNews

  17. People say their area has the worse drivers, state your case for area.
    resetera.com/threads/1669568
    #resetera

  18. You look like you are in need of a trash panda!

    #raccoon #trashpanda

  19. What movie are you watching with Papa tonight? :)

    onlyfans.com/papagummyworm

    #dadbod #gaydaddy #daddy #gay #nsfw #nsfwmen #onlyfans

  20. Uniswap V4 hooks are the most powerful primitive ever shipped in AMM design — and the most dangerous. One misconfigured hook can drain an entire pool in a single transaction, and with over $1B in TVL migrated from V3 within weeks of launch, there's a lot of money sitting behind code most people haven't audited.

    I've gone through the V4 architecture, the PoolManager contract, and a stack of early hook implementations. The vulnerability surface isn't just new — it's fundamentally different from anything that came before.

    How Hooks Change the V4 Security Model


    Uniswap V4 moves all pools into a single singleton contract called PoolManager. Instead of deploying a new pair contract per token pair (V2/V3 style), every pool lives in one contract and is identified by a PoolKey struct. Lower gas, but a bug in one pool's hook now has implications for shared singleton state.

    Hooks are external contracts that PoolManager calls at defined lifecycle points:

    • beforeInitialize / afterInitialize
    • beforeAddLiquidity / afterAddLiquidity
    • beforeRemoveLiquidity / afterRemoveLiquidity
    • beforeSwap / afterSwap
    • beforeDonate / afterDonate

    The hook's address determines which callbacks it implements — encoded in the address via CREATE2 mining. Clever design. But it introduces a critical trust assumption: the hook is trusted by the pool unconditionally. PoolManager calls your hook contract and expects it to behave. There is no sandbox.

    The Four Real Attack Vectors


    Everyone focuses on reentrancy because it's the classic AMM boogeyman. Fair — but the real killers in V4 are subtler.

    1. Hook-Level Reentrancy via Delta Accounting


    V4 uses a flash accounting model — balances are tracked as deltas, settled by end of transaction. The lock mechanism in PoolManager is meant to prevent reentrant calls. But if your hook calls back into PoolManager through a different code path during a callback, you can manipulate intermediate state before deltas settle.

    Reentrancy-adjacent vulnerabilities have drained over $2.3B from DeFi protocols since 2020 (Rekt News). V4's accounting model doesn't eliminate this class — it reshapes it.

    2. Malicious Hooks as Backdoors


    This one targets traders and LPs directly. If you're interacting with a V4 pool, you are implicitly trusting its hook. A malicious afterSwap hook can redirect funds, inflate prices, or call back into your wallet if approvals exist. Venom Protocol used exactly this social engineering pattern against NFT traders in 2022 — embedding malicious logic in what looked like a standard marketplace contract, draining $1.8M. V4 hooks create the same attack surface with a technical wrapper that looks legitimate.

    3. Missing Access Control on Admin Functions


    Access control failures account for 3x more total DeFi losses than reentrancy — and almost nobody builds their hook audit checklist around it. Most hook developers add admin functions for fee updates, oracle configs, or whitelist management. If those aren't properly gated, you've shipped a god-mode backdoor.

    4. Price Oracle Manipulation Through Hook Logic


    Hooks that read or write price data mid-swap create new TWAP manipulation surfaces. If your hook reads slot0 (spot price, not TWAP) during a beforeSwap callback — say, for a dynamic fee calculation — an attacker can sandwich that logic with a flash loan. Mango Markets lost $117M to oracle price manipulation. V4 hooks give attackers a new insertion point for the same playbook.

    What a Vulnerable Hook Looks Like


    Here's a realistic dynamic fee hook with two critical vulnerabilities. This pattern shows up constantly in early implementations.

    // ❌ VULNERABLE PATTERN
    contract VulnerableFeeHook is BaseHook {
    uint24 public dynamicFee;

    // ❌ No access control — anyone can call this
    function setFee(uint24 newFee) external {
    dynamicFee = newFee;
    }

    // ❌ Reads slot0 (spot price) — flash loan bait
    function beforeSwap(
    address,
    PoolKey calldata key,
    IPoolManager.SwapParams calldata params,
    bytes calldata
    ) external override returns (bytes4, BeforeSwapDelta, uint24) {
    (uint160 sqrtPriceX96,,,) = poolManager.getSlot0(key.toId());
    uint24 fee = sqrtPriceX96 > 1e18 ? 500 : dynamicFee;
    return (BaseHook.beforeSwap.selector, BeforeSwapDeltaLibrary.ZERO_DELTA, fee);
    }
    }

    Two problems: setFee has zero access control — any wallet can set the fee to the maximum, bricking the pool or extracting value from traders. And reading slot0 in beforeSwap to drive fee logic means a flash loan attacker can manipulate that price in the same block.

    The fix requires two changes: gate admin functions behind ownership, and replace spot price reads with TWAP data that can't be manipulated within a single block.

    // ✅ SECURE PATTERN
    contract SecureFeeHook is BaseHook, Ownable {
    uint24 public dynamicFee;

    // ✅ Only owner can update fee
    function setFee(uint24 newFee) external onlyOwner {
    require(newFee <= 100_000, "Fee too high");
    dynamicFee = newFee;
    emit FeeUpdated(newFee);
    }

    // ✅ Use TWAP — not spot price — for fee decisions
    function beforeSwap(
    address,
    PoolKey calldata key,
    IPoolManager.SwapParams calldata params,
    bytes calldata
    ) external override returns (bytes4, BeforeSwapDelta, uint24) {
    // Reference TWAP oracle instead of slot0
    uint24 fee = _getTWAPBasedFee(key);
    return (BaseHook.beforeSwap.selector, BeforeSwapDeltaLibrary.ZERO_DELTA, fee);
    }
    }

    Pre-Deployment Checklist


    Before you touch a V4 pool — as a developer or an LP — run through this:

    • Access control: Every admin function gated. No unprotected setFee, setOracle, or whitelist functions
    • Oracle source: TWAP over multiple blocks, never slot0 for decision logic
    • Reentrancy: Trace every external call inside hook callbacks; check for cross-function reentrance paths through the delta accounting system
    • Hook trust model: If you're an LP or trader, verify the hook's source code is published and audited — the pool's safety is entirely dependent on it
    • Singleton implications: Understand that any hook interacting with shared PoolManager state can have cross-pool effects
    • Delta settlement: Ensure all currency deltas are properly settled before transaction end; unsettled deltas are a vector for fund extraction

    The V4 architecture is a genuine leap forward in AMM design. The hooks primitive enables things that simply weren't possible before — dynamic fees, custom order types, on-chain limit orders, protocol-owned liquidity management. But every one of#uniswap #security #web3 #software #coding #development #engineering #inclusive #community
    Uniswap V4 Security Guide: Hooks, Pools, and New Attack Vectors You Need to Know Before Deploying

  21. CW: Adult Content - No under 18s

    All subjects and actors are found freely on the internet in open fora. None of this is my own content. May contain any/all of the following:

  22. The BBC are "very compliant to Israel" about Gaza & won't allow the word "genocide".

    In Francesca Albanese's report on western media's pro-Israel reporting, the BBC was the worst, camouflaging Israeli ­responsibility in 83% of headlines.

    "BBC presenters dismissed assertions that Israel was committing genocide while not reporting Israeli leaders’ genocidal statements”.

    israelpalestinenews.org/bbc-se

    #BBC #UKPol #USPol #EUPol #palestine #gazaGenocide #gaza #news .

  23. You look like you are in need of a trash panda!

    #raccoon #trashpanda

  24. The Cleveland Cavaliers are the first NBA team to permanently install a virtual camera and use mixed reality on every local broadcast, bringing the in-arena experience to the screen. Fans will see it during every home game broadcast this season on DAZN and over the air.

    @[email protected] | #LetEmKnow

  25. If you are an #ARRL member in the Atlantic, Great Lakes, and Delta Divisions, look for a mailing from the ARRL about the current board of directors' election. If you're in the Great Lakes Division, please vote for Michael Kalter, W8CI. Thank you for your attention to this matter. #hamradio

  26. Why the charts are full of old songs - and so are your playlists

    The chart is full is full of old music and classic songs are dominating streaming services. But why?

    bbc.co.uk/news/articles/c6kg50

    (c) #BBC #News

Share on Mastodon

Enter the server where you have an account.