home.social

Search

1000 results for “dan”

  1. 📰 #Noticia #Información #UltimaNoticia #Mundo #Opinion #Actualidad #InteresGeneral
    🔵 "Todavía no sabemos la magnitud real del daño": el joven que decidió diseñar un software para buscar a desaparecidos en los terremotos en Venezuela
    🔗 bbc.com/mundo/articles/crx23ye

    Jorge Bastidas creó el portal Desaparecidos Terremoto Venezuela, una iniciativa ciudadana para reportar a los desaparecidos en los sismos, a falta de cifras del gobierno

  2. ‘DWTS’ pros Witney Carson and Mark Ballas allegedly feuded during Season 21, former contestants claim

    Pro dancers Witney Carson and Mark Ballas allegedly didn’t get along during Season 21 of “Dancing With the…
    #NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Entertainment #alexapenavega #carlospenavega #celebritycouples #celebrityfeuds #celebritymarriages #CelebrityNews #Dancing #DancingWithTheStars #MarkBallas #Podcasts #TV
    newsbeep.com/us/893642/

  3. #LigaMX | JORNADA 14 | Min 80’ ⏱

    🔃 de Chivas
    ⬅️ Salieron: Bryan González y Daniel Aguirre.
    ➡️ Entraron: Leonel Calderón y Ángel Chávez.

    #RAY 🤠 0-1 #CHI 🐐

    👉 Apuesta aquí: bit.ly/CalienteEnOnce

    Acciones: bit.ly/47D5Y2g

  4. Picture ringing in 2027 where actual medieval walls are your party backdrop—because nothing says "New Year's Eve in Europe" like dancing next to 13th-century architecture! 🎉 Toruń's Old Town transforms into a #Travel fever dream with retro nights, club parties, and fancy hotel balls all converging around the Rynek Staromiejski on December 31st. From midnight concerts to dancing until dawn, this Polish gem proves that #Festival vibes meet #Europe...

    events.europa.tips/silvester-i

  5. europesays.com/fr/1263756/ Manifestation du 24 octobre : des « groupes hostiles » vandalisent et pénètrent dans le palais de la Bourse à Bordeaux #Actualités #FR #France #Manifestations #News #Police #Société

  6. BNPB perkuat penanganan karhutla di Taman Nasional Way Kambas

    Badan Nasional Penanggulangan Bencana (BNPB) bersama instansi terkait terus memperkuat penanganan kebakaran hutan dan ...

    antaranews.com/berita/5810143/

    #antaranews #berita #news #indonesianews #topnews #press

  7. Comment ça #DuckDuckGo me renvoie automatiquement vers Amazon si je saisis le titre d'un livre dans la barre d'adresse / recherche ?! 😱

    Bon ben go trouver un nouveau navigateur et un nouveau moteur de recherche 😭
    Je suis preneuse de suggestions si jamais (Android et Windows)

  8. Based on their designs, who do you think will give Danger & Cirviel the most trouble?

    #oc #aspotleloon #mecha #joe #giantsteps #tozac #odes #larks'tongue #sun #cuidado #pauly

  9. Uniswap V4 hooks are the most powerful primitive ever shipped in AMM design — and the most dangerous. One misconfigured hook can drain an entire pool in a single transaction, and with over $1B in TVL migrated from V3 within weeks of launch, there's a lot of money sitting behind code most people haven't audited.

    I've gone through the V4 architecture, the PoolManager contract, and a stack of early hook implementations. The vulnerability surface isn't just new — it's fundamentally different from anything that came before.

    How Hooks Change the V4 Security Model


    Uniswap V4 moves all pools into a single singleton contract called PoolManager. Instead of deploying a new pair contract per token pair (V2/V3 style), every pool lives in one contract and is identified by a PoolKey struct. Lower gas, but a bug in one pool's hook now has implications for shared singleton state.

    Hooks are external contracts that PoolManager calls at defined lifecycle points:

    • beforeInitialize / afterInitialize
    • beforeAddLiquidity / afterAddLiquidity
    • beforeRemoveLiquidity / afterRemoveLiquidity
    • beforeSwap / afterSwap
    • beforeDonate / afterDonate

    The hook's address determines which callbacks it implements — encoded in the address via CREATE2 mining. Clever design. But it introduces a critical trust assumption: the hook is trusted by the pool unconditionally. PoolManager calls your hook contract and expects it to behave. There is no sandbox.

    The Four Real Attack Vectors


    Everyone focuses on reentrancy because it's the classic AMM boogeyman. Fair — but the real killers in V4 are subtler.

    1. Hook-Level Reentrancy via Delta Accounting


    V4 uses a flash accounting model — balances are tracked as deltas, settled by end of transaction. The lock mechanism in PoolManager is meant to prevent reentrant calls. But if your hook calls back into PoolManager through a different code path during a callback, you can manipulate intermediate state before deltas settle.

    Reentrancy-adjacent vulnerabilities have drained over $2.3B from DeFi protocols since 2020 (Rekt News). V4's accounting model doesn't eliminate this class — it reshapes it.

    2. Malicious Hooks as Backdoors


    This one targets traders and LPs directly. If you're interacting with a V4 pool, you are implicitly trusting its hook. A malicious afterSwap hook can redirect funds, inflate prices, or call back into your wallet if approvals exist. Venom Protocol used exactly this social engineering pattern against NFT traders in 2022 — embedding malicious logic in what looked like a standard marketplace contract, draining $1.8M. V4 hooks create the same attack surface with a technical wrapper that looks legitimate.

    3. Missing Access Control on Admin Functions


    Access control failures account for 3x more total DeFi losses than reentrancy — and almost nobody builds their hook audit checklist around it. Most hook developers add admin functions for fee updates, oracle configs, or whitelist management. If those aren't properly gated, you've shipped a god-mode backdoor.

    4. Price Oracle Manipulation Through Hook Logic


    Hooks that read or write price data mid-swap create new TWAP manipulation surfaces. If your hook reads slot0 (spot price, not TWAP) during a beforeSwap callback — say, for a dynamic fee calculation — an attacker can sandwich that logic with a flash loan. Mango Markets lost $117M to oracle price manipulation. V4 hooks give attackers a new insertion point for the same playbook.

    What a Vulnerable Hook Looks Like


    Here's a realistic dynamic fee hook with two critical vulnerabilities. This pattern shows up constantly in early implementations.

    // ❌ VULNERABLE PATTERN
    contract VulnerableFeeHook is BaseHook {
    uint24 public dynamicFee;

    // ❌ No access control — anyone can call this
    function setFee(uint24 newFee) external {
    dynamicFee = newFee;
    }

    // ❌ Reads slot0 (spot price) — flash loan bait
    function beforeSwap(
    address,
    PoolKey calldata key,
    IPoolManager.SwapParams calldata params,
    bytes calldata
    ) external override returns (bytes4, BeforeSwapDelta, uint24) {
    (uint160 sqrtPriceX96,,,) = poolManager.getSlot0(key.toId());
    uint24 fee = sqrtPriceX96 > 1e18 ? 500 : dynamicFee;
    return (BaseHook.beforeSwap.selector, BeforeSwapDeltaLibrary.ZERO_DELTA, fee);
    }
    }

    Two problems: setFee has zero access control — any wallet can set the fee to the maximum, bricking the pool or extracting value from traders. And reading slot0 in beforeSwap to drive fee logic means a flash loan attacker can manipulate that price in the same block.

    The fix requires two changes: gate admin functions behind ownership, and replace spot price reads with TWAP data that can't be manipulated within a single block.

    // ✅ SECURE PATTERN
    contract SecureFeeHook is BaseHook, Ownable {
    uint24 public dynamicFee;

    // ✅ Only owner can update fee
    function setFee(uint24 newFee) external onlyOwner {
    require(newFee <= 100_000, "Fee too high");
    dynamicFee = newFee;
    emit FeeUpdated(newFee);
    }

    // ✅ Use TWAP — not spot price — for fee decisions
    function beforeSwap(
    address,
    PoolKey calldata key,
    IPoolManager.SwapParams calldata params,
    bytes calldata
    ) external override returns (bytes4, BeforeSwapDelta, uint24) {
    // Reference TWAP oracle instead of slot0
    uint24 fee = _getTWAPBasedFee(key);
    return (BaseHook.beforeSwap.selector, BeforeSwapDeltaLibrary.ZERO_DELTA, fee);
    }
    }

    Pre-Deployment Checklist


    Before you touch a V4 pool — as a developer or an LP — run through this:

    • Access control: Every admin function gated. No unprotected setFee, setOracle, or whitelist functions
    • Oracle source: TWAP over multiple blocks, never slot0 for decision logic
    • Reentrancy: Trace every external call inside hook callbacks; check for cross-function reentrance paths through the delta accounting system
    • Hook trust model: If you're an LP or trader, verify the hook's source code is published and audited — the pool's safety is entirely dependent on it
    • Singleton implications: Understand that any hook interacting with shared PoolManager state can have cross-pool effects
    • Delta settlement: Ensure all currency deltas are properly settled before transaction end; unsettled deltas are a vector for fund extraction

    The V4 architecture is a genuine leap forward in AMM design. The hooks primitive enables things that simply weren't possible before — dynamic fees, custom order types, on-chain limit orders, protocol-owned liquidity management. But every one of#uniswap #security #web3 #software #coding #development #engineering #inclusive #community
    Uniswap V4 Security Guide: Hooks, Pools, and New Attack Vectors You Need to Know Before Deploying

  10. Interview: "How the GOP Is Working to Steal the Midterms"

    Joel McCleary and Mark Medish wrote Dancing in the dark, a series about Trump's efforts to fix the upcoming elections.

    youtube.com/watch?v=eQt1jG86pIs

    #USPol #EUPol #news #midTerms #Fascism #Democracy .

  11. “These newly released documents show that the WISeR rollout was rushed and rocky from the start, highlighting the dangers that arise when governments treat AI like a silver bullet for complex problems. The documents also highlight the need for more transparency about safeguards against inappropriate, AI-driven denials. The public still lacks the information needed to assess whether clinician review is providing meaningful oversight of AI systems and whether appropriate data is being used to evaluate prior authorization requests.

    EFF has long argued that AI has no place in consequential government decisions about peoples’ rights or access to benefits, such as immigration enforcement and policing decisions. That’s because using automated decision-making in these contexts risks decisions that violate people’s rights or deprive them of benefits they’re entitled to based on biased or inappropriate considerations and without proper due process or accountability if there is an error.

    By outsourcing decision-making to private AI companies without sufficient transparency, testing, or legal limits, WISeR jeopardizes seniors’ access to medical care. Congress should step in to place greater legal limits on the use of automated decision-making in Medicare.”

    eff.org/deeplinks/2026/10/new-

    #USA #AI #Medicare #WISeR #Healthcare

  12. Music criticism can be interesting, but I’m always baffled by album reviews that just miss the mark entirely. As they say, writing about music is like dancing about architecture.

    pitchfork.com/reviews/albums/f

  13. Interestingly, the biggest issue holding back EU-Canada cooperation is the lack of IT standards. It also underscores the danger of proprietary default values.

    cigionline.org/articles/toward

  14. For the first time since before school started, neither kid has anything tonight. No baseball. No soccer. No dance. No theater. No school open houses or meet-the-teachers.

    For the first time since August we have a weeknight when all 4 of us are home.

  15. #5 Een leefstijlkeuze. Deze kost me weinig moeite als stadsmens: ik hou van de grote stad. Ik ben dan ook bewust ooit in Rotterdam gaan wonen. Inmiddels woon ik in Schiedam, tegen het oude centrum aan en nog steeds binnen de ring van Rotterdam. Op 2 minuten lopen van de metro, 5 minuten lopen van de tram en op 10 minuten lopen van een intercitystation. Ook 7 supermarkten op loopafstand (en dan tel ik de Poolse nog niet mee). Tandarts en huisarts om de hoek. Alleen school en opvang van de kinderen is nog in Rotterdam. Maar daar gaan we met de fiets of de metro heen. Kortom: we wonen midden in de stad waardoor we de auto zelden echt nodig hebben! Een bewuste keuze. En compact zodat we ook weinig grond in nemen. In Rotterdam was het een appartement op de 3e, nu een rijwoning in een compacte buurt. Komende jaren komen er in de directe omgeving honderden nieuwe woningen bij, en daar ben ik erg blij mee want dat maakt de buurt alleen maar interessanter en compacter! :cv_green:

  16. Rest in Peace, Donnie Iris. Singer and guitarist of ‘Ah Leah!’ fame dies, aged 83. {WTAE 27 October; photo: Daniel Montecalvo}

    wtae.com/article/donnie-iris-d

    Visit reddit.com/r/DollsFallen

    linktr.ee/arthurnewhook

    🪐💔 𓅨 🕈

  17. Watching the 2001 Busch Series race at the late, lamented Nazareth Speedway on a warbly HVS rip that finds the running order scroll literally dancing at the top of the video.

    Modified legendary, Ted Christopher, is running for RCR in this race in probably the best Busch Series equipment he ever ran and ARCA winner Bobby Gerhart is also making a one-off start here coming from the Pennsylvania area.

    So far, like most of the 2001 season, it is the Kevin Harvick and Jeff Green show. Their rivalry would carry into being teammates in 2002-2003 in Cup, seeing Green eventually traded to DEI because he and Harvick just couldn't get along and Harvick was the team's shining golden boy.

  18. @antyfaszysta.bsky.social
    ET il en est fier ... Où sont Messieurs #aoun #macron #barrot où sont #ONU #EU ??
    Personne ils se vautrent dans leur silence validant jour après jour leur complicité coupable.

    #liban #israel

  19. I started photographing the earrings. This is going to be a slog. These are some of the earrings I've got organized in my "bar dangle" inventory box. Multiple variations of the same basic theme and I need photographs of each style.

    One box down, five more to go. 🙄

  20. I say this all the time. Computers aren't racist. But datasets can be and the result is computers that look racist. Classic example of American AI being used in the UK.

    dangerousminds.net/weird-news/

    #UK #America #JustEat #UberEats #SkipTheDishes #AI #2020s #JacketPotato

  21. Filling out the online forms for physical therapy. I've gotten through 40 screens of nonsense when I get to the question:

    Is there any other information regarding your medical history that is important for us to know?

    I wrote:

    I've been told that I have dangerously sexy earlobes

Share on Mastodon

Enter the server where you have an account.