BTC $80,000.12 +3.20%
ETH $2,409.75 +5.35%
BNB $714.92 +2.70%
XRP $1.30 +2.09%
SOL $95.10 +2.10%
TRX $0.3195 -1.30%
DOGE $0.0766 +2.22%
ADA $0.1954 +2.87%
BCH $280.51 +2.45%
LINK $11.43 +3.44%
HYPE $83.97 -1.41%
AAVE $131.02 +3.03%
SUI $0.9244 +3.46%
XLM $0.1661 +1.85%
ZEC $1,284.04 +6.42%
AAPL $353.03 +6.40%
AMZN $268.70 +6.78%
GOOGL $291.83 +4.46%
MSFT $557.69 +6.78%
META $629.29 +1.31%
NVDA $203.27 -1.77%
TSLA $389.99 -2.15%
SNDK $1,031.08 -7.16%
INTC $58.09 -3.50%
SPCX $134.00 -5.25%
MU $800.96 -5.70%
AMD $482.50 -0.86%
BTC $80,000.12 +3.20%
ETH $2,409.75 +5.35%
BNB $714.92 +2.70%
XRP $1.30 +2.09%
SOL $95.10 +2.10%
TRX $0.3195 -1.30%
DOGE $0.0766 +2.22%
ADA $0.1954 +2.87%
BCH $280.51 +2.45%
LINK $11.43 +3.44%
HYPE $83.97 -1.41%
AAVE $131.02 +3.03%
SUI $0.9244 +3.46%
XLM $0.1661 +1.85%
ZEC $1,284.04 +6.42%
AAPL $353.03 +6.40%
AMZN $268.70 +6.78%
GOOGL $291.83 +4.46%
MSFT $557.69 +6.78%
META $629.29 +1.31%
NVDA $203.27 -1.77%
TSLA $389.99 -2.15%
SNDK $1,031.08 -7.16%
INTC $58.09 -3.50%
SPCX $134.00 -5.25%
MU $800.96 -5.70%
AMD $482.50 -0.86%

engineer

All
Article
Flash

first_img Binance Chinese Community Head Sisi: Binance takes responsibility for the stolen platform, not shifting blame to engineers and technical standards

On November 4, the head of the Binance Chinese community, Sisi, responded to the security incident at the end of October, stating that approximately $6.3 billion was transferred out of the Binance system, and the responsibility lies with Binance, not with any individual engineer or technical standard. She stated that the related losses would be compensated by the platform, and users could verify themselves on the reserve proof page; the frozen and intercepted portions would be recovered one by one in cooperation with law enforcement and on-chain institutions.Sisi mentioned that after the withdrawal was reopened, the platform focused on ensuring that every withdrawal was processed. She stated that the scale of withdrawals in the past two days was on the same level as the stolen amount, and every transaction had been fulfilled, with user assets remaining intact; the platform did not misappropriate user assets. She also stated that the company's decision-making body requested that the investigation report be unembellished and truthfully disclosed, with timelines, attack paths, malicious script operations, and internal shortcomings all included in the report.Sisi cited an FBI report stating that the adversary was a nation-state actor, and since the beginning of this year, Binance had intercepted 57 suspected attacks from the same source. She indicated that all intrusion points mentioned in the report had been blocked; as of November 3, the affected wallet system had been rebuilt in a new environment, internal AI tools had been rebuilt and permissions tightened, affected devices had been replaced, relevant credentials and tokens had been invalidated, and a comprehensive device security scan and wallet risk control upgrade had been completed. She also mentioned that some defensive lines would not be made public and that an independent third-party security agency had been hired for review, with the conclusions to be announced externally. Binance's preliminary investigation previously indicated that the incident involved assets of approximately $6.34 billion, with about $2.85 billion frozen or intercepted, and the losses would be borne by the platform.
14 часов назад

first_img Proton CTO: Programming is dead, engineers should help models write code

The privacy email and VPN service provider Proton publicly shared an internal memo titled "AI @ Proton, Engineering Manifesto," written by Chief Technology Officer Bart Butler about a month ago. The memo states that software engineering has undergone irreversible changes this year, as large language models and their tools can now write code. A senior Proton engineer indicated that no one in their business unit is writing code by hand anymore. Butler believes that the era of manually writing excellent code is over; time-consuming tasks such as documentation, testing, and boilerplate code can be handled by models, which can also participate in architecture and system design discussions.Butler pointed out that although engineers are widely using large language models, Proton's productivity has not significantly improved for three reasons. First, the engineering culture needs to shift; the work of engineers is no longer to write code but to help models write better code faster. Each engineer should become a team leader for models and agents, promoting their autonomous and continuous work, and reducing repetitive failures through repository-level context, shared skills, and prompts. Second, the company is still in the first phase of using models to accelerate existing processes and needs to enter the second phase, which involves eliminating bottlenecks across continuous integration, design, approval, specifications, and code review, with the expectation that most manual code reviews will come to an end. Third, there is a collective action problem between individual use of models and the overall transformation of company processes, as the organization has not invested enough resources.The memo emphasizes that this is not the end of expertise or good engineering practices; maintainability, documentation, and testing remain critical, but best practices will adjust with changes in cost and capability. Butler wrote, "Programming is dead," but engineering and professional skills have not vanished. The new responsibility of engineers is to continuously optimize and maximize automation as builders, and Proton will organize and allocate resources to complete this transformation. Proton stated that the memo is not an in-depth discussion of engineering documents related to security, reliability, or infrastructure. It also mentioned that technology companies have laid off over one million people in recent years, and Microsoft proposed 60,000 buyout offers last week.

hot_img Binance: Security incident possibly involving an engineer's laptop being hacked, affecting approximately 6.3 billion USD

Binance released preliminary investigation results on its official X account, stating that the security incident may involve the laptop of a DevOps engineer being compromised. The attacker used this to access the service container and submitted unauthorized withdrawal transactions. Binance stated that there is currently no evidence of wallet private key leakage and will publish a detailed technical review after the investigation is complete and the facts are fully verified.Binance estimated the total impact of the incident to be approximately $6.3 billion. The platform has frozen related assets in collaboration with blockchain partners, with about $3 billion currently frozen on-chain. Binance stated that it will cover all losses through the SAFU fund and company funds, ensuring user fund safety, and will release updated proof of reserves after the resolution is complete.As an immediate measure, Binance has suspended deposits and withdrawals until security checks are completed, revoked the authorization of affected addresses, and has contacted law enforcement and blockchain intelligence partners to track and recover funds. Binance stated that the team is working with law enforcement partners to confirm the identities of the relevant individuals and reminds users to obtain updates only through official channels.

first_img Lido engineer warns of Glamsterdam staking deposit hijacking risk

Dmitry Gusakov, the engineering lead of the Ethereum liquid staking protocol Lido, warned at the developer conference ACDC #189 that the one-time builder access mechanism introduced by the Glamsterdam upgrade could interfere with the existing deposit protection logic of the staking protocol, leading to the hijacking of staking deposits. This issue involves multiple deposits sharing the same validator public key.According to Ethereum's current deposit rules, the first valid deposit determines the withdrawal credential, and staking protocols typically leverage this feature to prevent credential manipulation, such as initially depositing a small amount of ETH and then topping up the remaining funds once the expected credential appears. However, the special access mechanism introduced for builders by Glamsterdam may change the interpretation of subsequent pending deposits under the same public key during the fork transition period, putting the staking protocol at risk of a third outcome: the validator does not appear, and the deposited ETH is credited to the builder.Lido's proposed fix is to maintain the distinction between validator deposits and builder deposits during the one-time access process. However, core developers rejected this modification on the grounds of timing, mainly because the Sepolia testnet has already been activated according to existing specifications, and the Hoodi client version is also in preparation. Changing the behavior at this point could require redeploying Sepolia and conducting additional testing. The issue affects the access process during the fork transition period, rather than the ongoing deposit processing rules, but its consequences could impact deposits waiting in the queue.

first_img An OpenAI engineer was arrested for allegedly installing hidden recording devices in the office, and the company stated that AI assisted in the identification

According to Decrypt, the Federal Bureau of Investigation (FBI) arrested OpenAI engineer Abdulrahman Alfozan on October 9. The suspect, 35 years old and of Saudi nationality, has been employed at OpenAI since July 2025 and is accused of using or attempting to use devices to intercept oral communications. He made his first appearance in federal court this Tuesday. OpenAI stated that it has referred the matter to the FBI and thanked the relevant agents and prosecutors for their swift action, while the FBI's investigation is ongoing.OpenAI released a statement on X, stating that the company discovered a sophisticated recording device hidden in the office and used its own model to analyze the device and its origin, ultimately identifying that an employee placed it there a few days prior. According to the criminal complaint, the device was discovered around September 30, plugged into a USB port on the back of a television, wrapped in paper towels, with its contents encrypted, and was installed around September 28. Surveillance footage showed that Alfozan was seen near the conference room multiple times before the device was discovered, but he had neither the authority to enter that room nor to attend the related meetings, which typically involved confidential technical and strategic information.The complaint states that before the device was installed, Alfozan used internal productivity tools to inquire about OpenAI's office building address, conference rooms, room capacities, schedules, and locations of meetings between executives and external partners. A chatbot account associated with his spouse asked between September 24 and 30 how to create a continuous recording device, add Wi-Fi connectivity, enhance real-time listening capabilities, and encrypt the device's SD card.

first_img Open source AI reverse engineering tool REA surpasses 100,000 stars on GitHub in one week

The free and open-source tool REA (Reverse Engineer Anything) saw its star count on GitHub rise from less than 10,000 on October 6 to over 100,000 by October 12, with more than 30,000 added in a single day on October 11. This tool integrates AI programming assistants like Claude Code and OpenAI Codex with professional reverse engineering suites like Ghidra, bridging the model context protocol MCP launched by Anthropic. Since its creation in April of this year, REA had long gone unnoticed; its readme file states that the tool does not claim to restore original source code or automatically clone applications, nor does it come with a decompiler.REA has been used for various reverse engineering attempts on software and games: players have made Spider-Man swing through Gotham City in "Batman: Arkham City," someone stuffed about 1,600 items from "Minecraft" into "Elden Ring" to battle Boss Malenia, and mod authors have brought firearms and menus from "Escape from Tarkov" into "The Elder Scrolls V: Skyrim." Old console exclusives are also breaking free from their platforms; in September, enthusiasts used open-source AI models and recompilation tools to bring "Fable 2," which had never been released on PC, to Windows, with AI completing the startup in about an hour, followed by a long manual fix; another developer has made "GTA 5" run natively and smoothly on iOS.

first_img American engineer attacked employer's network for ransom of 20 bitcoins, sentenced to 32 months in prison

A former core infrastructure engineer, Daniel Rhyne, from an industrial company in New Jersey, was sentenced to 32 months in prison for attacking his employer's computer network and demanding a ransom in Bitcoin. The 59-year-old Rhyne, who is from Kansas City, Missouri, was sentenced on September 28 by U.S. District Judge Michael A. Shipp in Trenton. He pleaded guilty in April this year to charges including extortion by threatening to damage a protected computer and intentionally damaging a protected computer. The prosecution did not disclose the name of the company, which is headquartered in Somerset County, New Jersey, serving clients in industries ranging from biopharmaceuticals to oil and gas.According to the FBI's criminal complaint, around 4 PM on November 25, 2023, the company's network administrator began receiving hundreds of password reset notifications for accounts, and subsequently discovered that all other domain administrator accounts had been deleted. Forty-four minutes later, employees received an email titled "Your Network Has Been Penetrated," claiming that the company's IT administrator had been locked out, backups had been deleted, and warning that unless 20 Bitcoins (approximately $750,000 at the time) were paid by December 2, an additional 40 servers would be shut down daily for 10 days. The ransom was set at 700,000 euros, to be paid in Bitcoin.Investigators traced the attack back to an unauthorized virtual machine created on the company network on November 9, 2023, with the password "TheFr0zenCrew!", which was subsequently set for the administrator account, 301 user accounts, and the email used to send the ransom note.

first_img TSMC and others' expansion has driven the top five semiconductor foundries' engineering orders to exceed 880 billion yuan

Taiwan Semiconductor Manufacturing Company, Micron, and other companies are increasing capital expenditures to expand production, driving the combined orders of the top five semiconductor engineering firms—HanTang, Axiom, FanXuan, Yankee, and ShengHui—to exceed 880 billion yuan, a record high. Taiwan Semiconductor Manufacturing Company recently stated at a semiconductor exhibition that it is building up to 20 wafer fabs, with the overall capacity expansion scale increasing multiple times compared to the past, but it still cannot meet customer demand. The U.S. tariff policy has driven the demand for manufacturing plants in the United States. Axiom has the largest order amount of 440.73 billion yuan, and Chairman Yao ZuXiang pointed out that the cumulative amount of turnkey projects undertaken in Singapore over the past four years has reached 600 billion yuan, with expectations for new projects to follow. HanTang's order amount is approximately 193.937 billion yuan, setting a new record, benefiting from continued plant construction by major clients like Taiwan Semiconductor Manufacturing Company and Micron.FanXuan's order amount reached a new high of 135.1 billion yuan, and Chairman Gao XinMing revealed that order visibility extends at least to 2028, with related projects for clients planned for 2029 and 2030. FanXuan has deployed materials, manpower, and local construction teams to support clients in Taiwan, Arizona in the United States, Japan, and Germany in synchronizing production expansion needs, and is investing in the development of technologies such as CoPoS. ShengHui's order amount exceeds 60 billion yuan, with Taiwan accounting for 68% and semiconductor orders accounting for 63%. In the first half of the year, the after-tax net profit was 2.944 billion yuan, with earnings per share of 23.73 yuan, setting a new high for the same period. Yankee's after-tax net profit in the first half of the year was 2.317 billion yuan, with earnings per share of 17.46 yuan, and the order amount is approximately 51.77 billion yuan, with order visibility reaching the end of 2027.
app_icon
ChainCatcher Building the Web3 world with innovations.