I'm really worried that foreign media might misunderstand the context of Chinese and roughly quote my tweets as evidence in some debate...😅

😶‍🌫️ Let's take a look at what files cryptocurrency theft scripts like to collect from your computer (Windows/macOS/Linux, etc.): const searchKey = [ "*.env*", "*metamask*", "*phantom*", "*bitcoin*", "*btc*", "*Trust*", "*phrase*", "*secret*", "*phase*", "*credential*", "*profile*", "*account*", "*mnemonic*", "*seed*", "*recovery*", "*backup*", "*address*", "*keypair*", "*wallet*", "*my*", "*screenshot*", "*.doc", "*.docx", "*.pdf", "*.md", "*.rtf", "*.odt", "*.xls", "*.xlsx", "*.txt", "*.ini", "*.secret", "*.json", "*.ts", "*.js", "*.csv", ]; In addition to these, there are 25 popular wallet extensions on mainstream browsers that you are likely using, which are also within the scope of collection. There is even more information. There are traps everywhere; the best defense is not to fall for them. Do not run commands or programs that you do not understand...

Unfortunately, the "privacy-first" strategy is niche and cannot become popular or the first choice for humanity. This is because tools that do not prioritize strong privacy can provide a better user experience. People tend to choose the option with a better experience first, and only then consider the one that feels safer in terms of privacy. Safety and privacy require more self-management capabilities, which are too cumbersome for the vast majority of people.

This article is very interesting; it really created a laptop farm... This is quite an impressive "engineering" capability... I recommend reading it and be wary that there aren't such "people" in your team... (It's indeed quite common)

🌟 New Unphishable Challenge: Fake Extension Phishing! Think all extensions from the store are safe? Think again. Challenge contributor: @kavehtehrani If you haven’t verified it yourself, this is your chance to test and learn!🔍 #Unphishable

Security Reminder #1001: If you have some free time, take a good look at the abnormal authorization status of your wallet addresses. High-value token abnormal authorizations should be canceled... You can easily complete these security operations using @RevokeCash, @Rabby_io, @wallet, etc... The user below did not cancel their abnormal authorization from 458 days ago, and this time $908,551 USDC was transferred away...🫠

The smallest amount was stolen 😬

Yes, the Telegram account theft process is becoming more and more convenient for users to have their numbers stolen... 😂 Pay special attention to Figure 3 below, if you don't enable Two-Step Verification, once you enter the Login code as a verification code, your number will be gone...

🚨 Be aware of the risks of phishing MistTrack Recently, some users reported that phishers targeted our @MistTrack_io tracking platform for Google ad phishing, deceiving users into authorizing signatures@realScamSniffer. cc @evilcos

Recently, I have often recommended Brother Yu's "Blockchain Dark Forest Self-Help Manual" to those confident and scolding Fang Qiu's three-week quick stablecoin experts. If we, geeks who have been on the chain for ten years, have a nearly 100% probability of being stolen and deceived, and you promote stablecoin applications on a large scale, attract a billion people, but don't understand security issues, then you just wait to die.