Cassie Heart

@cassie

1745 Following

296759 Followers

Cassie Heart pfp

If you want to see a high level overview of how I perceive the industry and what I’m building towards, I gave a talk at Coinbase about it: https://youtu.be/GeuZsX6dC08?feature=shared

1 reply

0 recast

2 reactions

Cassie Heart pfp

Difference here is my POV isn't "favoring the next group of transactors", I’m building against an entirely different thesis of how crypto should work: transparent, infrastructural, cooperative with web standards instead of building a microcosm of tools people have to adopt or integrate to make functional decentralized applications. I've spoken about it at greater length, but the fact everything in crypto is so transaction focused is exactly why it fails to see adoption

1 reply

0 recast

2 reactions

Cassie Heart pfp

I don't work for Zora, and I quit Coinbase because I disagreed with the idea of Base as an OP fork L2, let alone being attached to Ethereum.

1 reply

0 recast

3 reactions

Cassie Heart pfp

A new generation of crypto protocols that deprecates the entire previous generation.

0 reply

1 recast

10 reactions

Cassie Heart pfp

Nillion doesn't really offer anonymization of data, despite the marketing — their products are more about storing encrypted data. Even their query processing is overstated: it does matching for query lookups with salted hashes, and the only aggregation supported is summation. Teams that use analytics need far more than this, and generally what they want to infer, like your above scenarios, are too complex for their offerings. It is possible, however, to meaningfully measure impact without invasive analytics, even if it is harder. As an example, if you're selling a physical product, and you're paying for hosting, if the cost of hosting is based on usage, and sales are not increasing despite usage increasing, you know your conversion is poor. This isn't necessarily the fine grained data many companies have grown accustomed to having access to, but as users, we should be asking more often why they feel the right to have it.

1 reply

0 recast

2 reactions

Cassie Heart pfp

Define anonymized tracking? It takes very little correlated data before you can pinpoint someone from it

1 reply

0 recast

1 reaction

Cassie Heart pfp

entirely depends on context

1 reply

0 recast

1 reaction

Cassie Heart pfp

Would have done nothing to save them in this scenario – the update was a contract invocation all the same. The real issue is systemic: they used a gnosis safe (a hot smart contract wallet) to manage what should be cold storage, and the multisig signers were using their regular laptops (which were compromised) with ledgers as the signing keys. Account abstraction doesn't do shit in the event of machine compromise, and EIP-7702 wouldn't stop this from happening even if the cold storage address were an EOA (and thus upgradeable to SC). The attackers would have just requested a drain tx. The UI was already compromised and showing the wrong thing so that the signers thought everything was normal.

0 reply

1 recast

1 reaction

Cassie Heart pfp

leadership influences culture – bet they'd shut the fuck up a lot more if some of their skeletons they have in their closet came out.

0 reply

0 recast

1 reaction

Cassie Heart pfp

what if my work is my meditation

1 reply

0 recast

1 reaction

Cassie Heart pfp

1 reply

0 recast

4 reactions

Cassie Heart pfp

also, consensus requires 2/3 of all ETH staked, rather than 51%, so the attack is even more expensive to perform

1 reply

0 recast

1 reaction

Cassie Heart pfp

No, etherscan is tracking execution nodes (which might be more realistic of a reflection of how many _real_ nodes exist!), rather than consensus nodes (which incurs the staking rewards). Since there's a limit of 32 ETH per staker, and approximately 33.7MM ETH staked, there's approximately 1.05MM nodes. Realistically, however, there's not actually 1.05MM nodes, they're just "logical" nodes while a process manages multiple validators

2 replies

0 recast

4 reactions

Cassie Heart pfp

fight the good fight for open web standards, use a non-chromium browser

1 reply

0 recast

3 reactions

Cassie Heart pfp

an early release of quorum used the default react emoji picker library's icon set, and I didn't realize it was using jsdeliver for the images. I got so pissed I almost removed the dependency altogether but it had an option to swap out with a local image set. It's one of the things planned to be replaced with an in-house component to derisk the possibility they may remove that option.

0 reply

0 recast

4 reactions

Cassie Heart pfp

be the change you would like to see in the world

14 replies

49 recasts

328 reactions

Cassie Heart pfp

Metaphorical (or sometimes literal) sobriety sounds like that

0 reply

0 recast

16 reactions

Cassie Heart pfp

A message service that uses TEEs to keep the privacy of messages is a message service that can be legally compelled to hand over the decrypted messages. If someone offers a service and is doing this you should rightly tell them they're lying to their customers about forward secrecy.

0 reply

1 recast

0 reaction

Cassie Heart pfp

man crypto really has lost its way in some places

1 reply

0 recast

2 reactions

Cassie Heart pfp

Really? Where have you seen this discussion?

1 reply

0 recast

0 reaction